The diagnostic stays in your browser
The ABA 512 diagnostic runs entirely in your browser. Your individual answers are never transmitted and are never stored as a site record. Scoring is deterministic and versioned, with no AI model in the loop. The result is a signal for you, not a lead we capture.
If you choose to email yourself the report, the site transmits your email address, an optional firm name, and your category-level results only: a readiness level per assessment domain and the narrative composed from those levels. The individual answers you selected are never included.
efficient.esq is not a law firm and does not provide legal advice through this website.
Transport security and headers
The site is served over HTTPS only, with HTTP Strict Transport Security set for a year and applied to subdomains. Every response carries a locked-down set of security headers: frame-ancestors and X-Frame-Options against clickjacking, nosniff content-type protection, a strict referrer policy, and a permissions policy that disables camera, microphone, and geolocation.
A full content security policy is staged in report-only mode and moves to enforcement once it has baked against production traffic.
No third-party scripts
The site loads no analytics trackers, no advertising pixels, and no external JavaScript. Fonts are compiled in at build time and served from our own domain. What you request from efficient.esq is served by efficient.esq.
The intake forms
The review-request form and the optional report form post to our intake CRM (Lawmatics) through server-side actions. Submissions pass server-side validation, length caps, a honeypot that silently drops bot traffic, and request throttling. efficient.esq does not run a separate public database of its own.
If the intake service is briefly unreachable, the form asks you to email hello@efficient.esq instead, so nothing is lost.
Where data lives
The site is hosted on Vercel. Intake submissions live in Lawmatics and are handled by MHSB Solutions, which operates efficient.esq. What is collected, how it is used, and how long it is kept are covered in the privacy policy.
Boundaries
Do not send client confidences, privileged facts, matter documents, or legal questions through the diagnostic or the intake form.
We store only what we need to decide whether a review is a fit, plus first-touch marketing attribution described in the privacy policy.
Reporting a vulnerability
If you find a security issue, email hello@efficient.esq with Security in the subject line, or use the contact published at /.well-known/security.txt. Good-faith reports are welcome and read by a person. Please do not access data that is not yours while demonstrating an issue. There is no bounty program at this time.