Moving From Paper to Digital Intake: A Checklist for Immigration Nonprofits

Moving intake off paper works best in a fixed order: map what you collect today, cut what nobody uses, decide which system holds the record, pilot with one program, then retire the paper forms. If you pick software first, you usually end up with the old paper form rebuilt on a screen, duplicate questions and all.

What does paper intake really cost?

Most of what paper intake costs is staff time and errors:

• Every fact is typed twice. A volunteer writes it down, a paralegal retypes it into the case system, and either one can swap two digits in an A-Number.
• Illegible or missing pages. A name printed in a hurry, or page 3 left in another folder, sends someone back to the client.
• No search. Finding every client with a hearing next month means paging through folders.
• Funder reports by hand. Counting clients by county, language, or matter type means opening every file again.
• Files leave the office. A clipboard at a clinic and a folder taken home hold client information too, and ABA Formal Opinion 483 applies the same breach obligations "regardless of whether the breach occurs through electronic or physical means."

The intake guide compares paper, spreadsheets, and intake software and lists what to require of any tool.

Step 1: Inventory every form and question

Collect every paper form at every location, including the ones nobody calls intake forms: sign-in sheets, clinic-day packets, funder demographic sheets, consent forms, and attorneys' consultation-note templates.

Then list every question in a spreadsheet, one row each (questions only, with no client data).

Next, pull the last 20 closed files in each program and mark the fields left blank, answered "N/A," or never used after intake. Ask the people who retype paper into the case system which fields they skip or correct.

Step 2: Cut and consolidate

Go through the inventory with your supervising attorney.

• Drop questions nobody uses unless a funder or government form requires them. Some questions look unused but exist for a legal reason, such as the naturalization red-flag questions, so the attorney makes the final call.
• Collect each fact once, with one wording and one field name. Date of last entry, other names used, and household income often repeat across forms.
• Split by matter type. A DACA renewal and an asylum intake share little beyond contact details, so build a shared core plus a section for each matter type, checked against the intake guide's list of what to ask.
• Keep the screener separate. Its answers should flow into intake, and the screening article explains how to carry screening answers into intake.

In a footnote to Formal Opinion 483, the ABA ethics committee also says lawyers should "evaluate ways to limit receipt, possession and/or retention of confidential or personally identifiable information during or after an engagement."

Step 3: Choose your system of record

The system of record is where the official version of each client's information lives, usually the case management system. Intake answers should reach it field by field, so nobody retypes them or has to decide which copy is right. Decide in writing:

• How answers get there. A structured export or a direct connection fills each field; a PDF of the completed form still has to be retyped.
• How a new intake is matched to an existing client, such as by A-Number or by name and date of birth.
• Where copies are allowed. Every download, exported spreadsheet, or email alert that includes answers is a copy outside the system.

Keep client data out of loose spreadsheets and shared-drive folders. They multiply, and later nobody can say who opened them. Formal Opinion 477R treats this mapping as part of a lawyer's duties: "A lawyer should understand how their firm's electronic communications are created, where client data resides, and what avenues exist to access that information."

If you have no case management system yet, choose one before building digital forms so the fields can match.

Step 4: Set security and privacy basics

Comment 8 to ABA Model Rule 1.1 says "a lawyer should keep abreast of changes in the law and its practice, including the benefits and risks associated with relevant technology." Rule 1.6(c) requires "reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client." Both apply to every lawyer, including lawyers at nonprofits. Check your state's versions, which are the ones that apply.

Beyond the intake guide's confidentiality controls, the move to digital needs:

• Multi-factor sign-in and encryption. Formal Opinion 477R lists "encryption of data that is physically stored on a device and multi-factor authentication to access firm systems" among the available tools. Turn both on for every account that can see client data, volunteers included.
• A retention schedule. Formal Opinion 483 encourages lawyers to "adopt and follow a paper and electronic document retention schedule, which meets all applicable laws and rules." Cover people you served, people you screened out, and paper originals after scanning. Opinion 477R warns that deleted data may be recoverable, so ask vendors what deletion means.
• Vendor terms in writing. Opinion 477R's due-diligence factors include "reference checks and vendor credentials" and the "vendor's security policies and protocols." Also ask how you get all of your data out, in a structured format, if you leave.
• A breach plan. Opinion 483 concludes that "When a data breach occurs involving, or having a substantial likelihood of involving, material client information, lawyers have a duty to notify clients of the breach," and that lawyers "should consider proactively developing an incident response plan." Name the person who investigates and the person who decides whether clients must be told.

According to the National Conference of State Legislatures, "All 50 states, the District of Columbia, Guam, Puerto Rico and the Virgin Islands have laws requiring private businesses, and in most states, governmental entities as well, to notify individuals of security breaches of information involving personally identifiable information." Each law sets its own terms, such as who must comply and what counts as a breach, and some exempt encrypted information. NCSL's summary was last updated in January 2022, so have counsel check your state's current law.

Step 5: Design for phones and for every language

In the Pew Research Center's 2025 survey, 91% of U.S. adults owned a smartphone, compared with 82% in households earning less than $30,000 a year, where 13% had a cellphone that was not a smartphone. Pew counts people who "own a smartphone but do not subscribe to a home broadband service" as smartphone-only internet users: 16% of all adults, 34% of adults in households under $30,000, and 28% of Hispanic adults.

• Put one question, or a few short related ones, on each screen.
• Let people save and return after finding a passport.
• Ask for photos of documents, front and back.
• Keep pages and uploads small, because prepaid data runs out.
• Test on an older, inexpensive phone.

The language-access article covers how to build a multilingual intake flow. On a digital form, also translate the parts a document translator never sees: button labels, error messages such as "This field is required," the confirmation screen, and the texts and emails the system sends. Show dates with the month spelled out or in separate fields, because 03/04/2022 is March 4 in the United States and April 3 in countries that write the day first.

Step 6: Pilot, then retire paper

Start with one program that has steady volume and one supervising attorney, such as a naturalization workshop or DACA renewals. Before launch, write down what success means, using the intake guide's measures of whether intake is working. Measure the paper process first so you have a baseline.

For clients who cannot or will not use a phone form, staff can complete the same digital form with them by phone or in person. Clinics without internet can use a printed copy that matches the digital form, entered the same day by whoever conducted the interview. Opinion 477R recognizes that "a client's lack of technological sophistication or the limitations of technology available to the client may require alternative non-electronic forms of communication altogether."

Train people before launch. Opinion 477R says lawyers must "periodically train employees, subordinates and others assisting in the delivery of legal services, in the use of reasonably secure methods of electronic communications with clients." Give each volunteer a written guide and a practice run with a test client before a first shift.

When the pilot results hold up, retire paper for that program:

• Enter every open case's deadlines and next hearing date in the system of record, and have a second person check each one.
• Set a retirement date, then remove the old forms from binders, clinic kits, the front desk, and the shared drive.
• Use your retention schedule to decide which old paper files to scan and when to shred the originals.
• Fix the questions that caused callbacks, then move to the next program.

The checklist

• Every form from every location is collected, and each question is inventoried with where its answer goes.
• The supervising attorney approved every cut, and each fact, including screening answers, is asked once.
• One named system holds the record, and a written data map shows where client data lives and where copies are allowed.
• Multi-factor sign-in and encryption are on for every account with client data.
• A retention schedule and written vendor terms, including data export and deletion, are in place.
• A breach plan names who acts, and counsel has checked your state's breach law and bar rules.
• The form works on an older, inexpensive phone and in every client language, including buttons, error messages, and dates.
• The pilot covers one program, with written success measures, a paper baseline, and trained staff and volunteers.
• Clients without a device can complete intake by phone, in person, or on a matching printed form.
• Open deadlines are entered and double-checked before paper retires.

Where Parasource fits

Your organization can build its own questionnaires in Parasource's form builder, starting from starter templates if you want them, and translate each form language by language. Clients complete conversational intake in 11 languages.

Parasource exports each intake as structured data and hands it off to Clio. Client data is encrypted at rest.

Sources

• ABA Model Rules: Comment on Rule 1.1 (Competence)
• ABA Model Rule 1.6: Confidentiality of Information
• ABA Formal Opinion 477R: Securing Communication of Protected Client Information (PDF)
• ABA Formal Opinion 483: Lawyers' Obligations After an Electronic Data Breach or Cyberattack (PDF)
• NCSL: Security Breach Notification Laws
• Pew Research Center: Mobile Fact Sheet