DLA Piper

United Kingdom · www.dlapiper.com · 20 vendors

DLA Piper is a global law firm with offices in over 40 countries across the Americas, Europe, Middle East, Africa, and Asia Pacific. The firm provides a broad range of legal services, including corporate, litigation, regulatory, finance, and intellectual property, to multinational corporations, emerging businesses, and financial institutions worldwide.

Resilience scores

Disruption prediction

DLA Piper has an estimated 17% probability of disruption in the next 6 months.

13 of DLA Piper's 20 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-08-11 · revision 2

20 direct vendors, 263 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

DLA Piper exhibits a moderate level of migration readiness, primarily supported by its existing adoption of cloud platforms like Microsoft Azure and Microsoft 365. This foundational cloud experience suggests a degree of familiarity with cloud environments and could streamline further migration efforts. The absence of specified data residency requirements is also a potential advantage, as such mandates can significantly complicate and restrict migration strategies, though it's important to note this data might simply be missing. However, several factors present significant challenges to a comprehensive migration. The 'Total Vendors: 0' data is contradictory, but the 'Total Services: 28' implies a substantial and potentially complex vendor ecosystem. The 'Vendor Lock-in Risk' is explicitly unknown, which is a critical gap, as high vendor lock-in can severely impede migration flexibility and increase costs. The internal tech stack includes specialized legal applications (e.g., iManage, Intapp, Relativity, Thomson Reuters HighQ) and potentially traditional infrastructure components (Cisco Networking, Citrix Virtual Desktop). Migrating these specialized or legacy systems to a cloud-native architecture could require significant re-platforming, refactoring, or re-purchasing, increasing complexity and cost. Furthermore, the 'Regulatory Environment' data is missing; for a global law firm, navigating diverse and stringent legal and data privacy regulations across multiple jurisdictions (e.g., GDPR, CCPA, local legal professional privilege rules) during a cloud migration would be a substantial undertaking. Finally, the lack of financial stability data (revenue concentration, growth history) prevents an assessment of the company's capacity to fund a large-scale migration initiative.

Compliance

13 in-scope frameworks identified; showing 3.

Anti-Money Laundering — Compliant

Law firms are designated as 'relevant persons' under UK Money Laundering Regulations 2017 (MLR 2017) and EU Anti-Money Laundering Directives (AMLD5/AMLD6). DLA Piper's involvement in high-value M&A transactions, real estate, corporate finance, and cross-border deals makes it a high-risk sector for money laundering. FATF and national regulators consistently identify legal professionals as a key vulnerability in AML frameworks. Risk is High because: (1) the firm handles extremely high-value transactions; (2) AML failures can result in criminal prosecution of the firm and individuals; (3) regulatory fines and reputational damage from AML failures are severe; (4) the SRA actively supervises AML compliance at large law firms; (5) EU AMLD6 introduced criminal liability for legal entities.

Evidence: https://www.legislation.gov.uk/uksi/2017/692/contents, https://www.sra.org.uk/solicitors/guidance/anti-money-laundering/, https://www.fatf-gafi.org/en/topics/legal-professionals.html, https://www.dlapiper.com/en/global/services/regulatory-and-government-affairs/anti-money-laundering

GDPR (source) — Compliant

DLA Piper is a global law firm headquartered in the UK with extensive EU/EEA operations across Belgium, France, Germany, Netherlands, Spain, Italy, Luxembourg, Ireland, and many other EU member states. As a law firm, DLA Piper processes vast quantities of highly sensitive personal data — including client legal matters, employee records, litigation data, and third-party personal information — on a daily basis. The severity of non-compliance is extreme: GDPR fines can reach €20 million or 4% of global annual turnover (DLA Piper's global revenue exceeds $3 billion USD, making maximum fines potentially enormous). Notably, DLA Piper itself suffered a significant cyberattack (NotPetya) in 2017, which heightened regulatory scrutiny of its data protection practices. Law firms are high-value targets for data breaches due to the sensitivity of client information, making the likelihood of regulatory attention elevated. The firm also advises clients on GDPR, creating reputational risk if its own compliance is found wanting. Risk is rated High due to the volume and sensitivity of personal data processed, the scale of EU operations, and the catastrophic reputational and financial consequences of non-compliance for a firm that itself provides data protection legal advice.

Evidence: https://www.dlapiper.com/en/global/legal-notices/privacy-notice, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2017/07/statement-on-the-cyber-attack-affecting-multiple-organisations/, https://gdpr.eu/article-37-data-protection-officer/, https://www.dlapiper.com/en/global/insights/publications/2018/05/gdpr-implementation

CPRA — Compliant

DLA Piper has significant California operations (offices in Los Angeles, San Francisco, Silicon Valley) and processes personal data of California residents including clients, employees, and website visitors. CCPA/CPRA applies to businesses meeting revenue or data processing thresholds — DLA Piper clearly exceeds the $25M annual revenue threshold. Risk is Medium because: (1) CCPA/CPRA fines are up to $7,500 per intentional violation; (2) The California Privacy Protection Agency (CPPA) is actively enforcing; (3) Law firms have some exemptions for attorney-client privileged information but must comply for other personal data categories; (4) Employee data is now fully covered under CPRA.

Evidence: https://oag.ca.gov/privacy/ccpa, https://cppa.ca.gov/, https://www.dlapiper.com/en/us/legal-notices/privacy-notice

Financials

Three-year financials

Financial Resilience Score: 8/10

DLA Piper demonstrates strong financial resilience as one of the world's largest law firms, with global gross revenue approaching USD 4 billion in 2024 and a consistent upward revenue trajectory over more than a decade. The firm's scale, geographic diversification across 40+ countries, and broad practice-area footprint reduce exposure to any single market or client sector. Profit per equity partner has remained robust at around USD 2.4-2.7 million, indicating healthy underlying profitability. The partnership structure (Swiss Verein comprising multiple independent LLPs) means profits are distributed rather than retained, resulting in typically low leverage. The firm serves a blue-chip client base including many Fortune 500 and FTSE 100 companies, providing revenue stability. However, the Verein structure limits external transparency, and there are no consolidated audited accounts publicly available. Risks include cyclicality in corporate/M&A and real estate practices (visible in flat 2022-2023 revenue during the deal slowdown), intense talent competition from US Big Law pay wars pressuring margins, and operational risks such as the 2017 NotPetya cyberattack. Overall, the firm's scale, diversification, and consistent growth support a strong resilience score, tempered by limited transparency and cyclical exposure.

Key strengths: Scale as one of world's largest law firms with ~USD 4B global revenue, Geographic diversification across 40+ countries, Broad practice-area footprint reducing sector concentration, Consistent revenue growth over more than a decade (~2.5x since 2005), Blue-chip client base including Fortune 500 / FTSE 100 companies, Partnership structure with typically low leverage, Resilience through COVID with revenue growth in 2020

Risk factors: Cyclicality in Corporate/M&A and real estate practices, Verein structure limits external transparency and consolidated accounts, Each member firm bears its own liabilities, US Big Law pay wars pressuring margins, Lateral partner departures and talent competition, Cybersecurity risk (highlighted by 2017 NotPetya attack), Intensifying regulatory scrutiny (sanctions, AML, tax structuring)

Revenue by geography

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report