How Corporations Actually Buy Legal Work Now

For decades, hiring a law firm looked like a relationship and a phone call. A general counsel trusted a name, sent the work, and sorted out the bill later. That model has not vanished, but at large companies it now sits inside a far more structured process, one that treats outside legal spend as a category to be managed rather than a courtesy to be extended. Legal services and legal technology are increasingly bought through requests for proposal, weighted evaluation matrices, security questionnaires, electronic-billing analytics, and panel performance reviews.

The stakes explain the rigor. Outside counsel absorbs the lion's share of external legal budgets, an average of 87% of total outside spend, according to the 2024 Law Department Management Benchmarking Report from the Association of Corporate Counsel and Major, Lindsey & Africa, which drew on 421 legal departments across 32 countries. When a single line item dominates the discretionary spend of a corporate function, finance, procurement, information security, and the business itself all want a seat at the table.

Procurement Stops Being the Enemy

The cultural shift is the real story. For years many lawyers viewed procurement professionals as people who bought paper clips and would inevitably commoditize judgment. That suspicion is giving way to partnership. A 2021 Buying Legal Council survey found that professional procurement saves companies an average of 15% of legal spend, and that any organization with significant external legal spend that excludes procurement is no longer following best practice.

The same body's research, as summarized by Brightflag, found that legal procurement now negotiates 57% of all legal services purchases. The savings are not purely about discounts. They come from tighter scoping, smarter staffing, predictable fees, and disciplined billing controls. Earlier surveys captured the trajectory: Feit Consulting documented average savings climbing from 11.4% in 2017 to 14.6% in 2018, while a Bloomberg Law analysis noted that tenured procurement teams pushed average savings to 23%.

The Process Starts With a Need, Not a Template

Mature buyers resist the urge to open a procurement template first. They begin by naming the problem: is this a one-off litigation matter, a recurring portfolio of employment files, a contract-review program, an enterprise software rollout, or a wholesale panel refresh? Only after defining the work, its risk profile, the stakeholders who must weigh in, and the historical data available does a sourcing route make sense.

Two instruments anchor that early phase. A request for information is the market-learning tool, useful when the buyer still needs to understand which suppliers exist, how they price, and what technology they bring. A request for proposal is the decision tool, deployed once scope is clear and the team wants comparable, decision-ready bids. Thomson Reuters notes that procurement teams typically own better systems for issuing RFPs and analyzing responses than most law departments, including portals that track bidding, deadlines, and diversity data.

The RFP Becomes a Multi-Dimensional Contest

The cheapest proposal is rarely the best value, and sophisticated RFPs are built to prove it. A strong document covers company and matter background, scope and jurisdiction, desired outcomes and service levels, the named professionals who will actually do the work, the proposed approach, the staffing leverage, the pricing model, the technology and e-billing compatibility, the diversity commitments, and, critically, the evaluation criteria themselves.

Transparency about weighting changes supplier behavior. If pricing is worth 25%, strategy 30%, and cybersecurity is a pass-fail gate, bidders calibrate accordingly and the eventual decision becomes far more defensible. The art of shortlisting follows the same logic: a long list of ten or more providers helps map a market, but a focused shortlist of three to five signals a genuine opportunity and persuades suppliers to invest senior time in a thoughtful response.

Panels Are Shrinking on Purpose

A law firm panel is a pre-approved roster that handles a company's recurring work, and the clear trend is consolidation. The 2025 ACC and Major, Lindsey & Africa report found the median number of firms used by companies fell from 14 to 10 in a single year, as departments concentrate spend with fewer, higher-performing relationships. The best panels are managed portfolios with defined roles, pricing, and review cycles, not directories of every firm a company has ever used.

Consolidation runs alongside a rise in alternative legal service providers, particularly among companies above $1 billion in revenue. Thomson Reuters now sizes the ALSP market at roughly $28 billion, a structural shift that gives procurement more levers: routine, scalable work can be routed to specialized providers while premium spend is reserved for premium judgment.

The Real Number Is Total Cost, Not the Rate

Legal departments are learning that a low hourly rate can disguise a high total cost. A firm with premium rates but disciplined project management may prove cheaper overall than a low-rate firm that requires constant supervision, generates rework, and triggers budget overruns. Total cost of ownership, the purchase price plus the cost of operating an asset across its life, as Investopedia defines it, is an unusually useful lens here, because the "asset" is often a relationship, a matter, or a software platform.

For legal technology the calculus is even broader, encompassing subscriptions, implementation, integrations, data migration, support, user adoption, upgrades, and exit costs. A tool that looks inexpensive at procurement can become expensive if it cannot integrate with single sign-on, finance systems, contract repositories, or e-billing platforms. That hidden tail is why software selection rarely turns on the demo; it turns on internal approvals.

A 15% discount on inflated rates is often worth less than a realistic fixed fee, a scoped phase budget, and a staffing model that uses the right level of seniority.

Security Has Become the Entry Ticket

For legal-tech vendors and many ALSPs, the security review is the hardest gate to clear, and increasingly the first. Legal suppliers handle privileged communications, investigation files, deal documents, intellectual property records, and litigation materials, so a weak vendor becomes an enterprise risk. Third-party attestations now do much of the screening work: the AICPA's SOC framework reports on system and organization controls, while ISO/IEC 27001 certification demonstrates that an organization can manage information securely.

This shift matters because the legal-technology category is growing fast and pulling more scrutiny with it. Grand View Research valued the global legal-tech market at $28.7 billion in 2025, projecting it to reach $69.7 billion by 2033 at a 12.2% compound annual rate. The AI sub-segment is hotter still: a separate Grand View estimate puts the legal-AI market at $1.45 billion in 2024, climbing to $3.92 billion by 2030 at a 17.3% CAGR. More AI in the stack means more questions about model use, data retention, and incident response on every questionnaire.

Who Signs Off, and Why It Slows Down

Legal procurement is cross-functional precisely because legal suppliers touch sensitive risk. Legal and legal operations define the need and own the relationship; procurement structures the event and negotiates commercial terms; finance reviews budget, ROI, and accruals; IT and the CISO assess architecture, integrations, and access controls; and privacy, compliance, and risk teams handle regulatory obligations, data transfers, and audit rights. Each gate adds protection, and friction. Leading teams reduce the drag by involving stakeholders early, running reviews in parallel, and applying risk-based approval paths so that routine, low-risk buys do not crawl through the same gauntlet as enterprise transformation projects.

That governance is increasingly underwritten by data. Electronic billing, built on open exchange formats such as those maintained by the LEDES Oversight Committee, gives operations teams visibility into who does the work, how matters are staffed, which tasks consume budget, and whether billing rules are followed. As Wolters Kluwer has emphasized in its vendor-management guidance, the discipline lies in benchmarking guidelines, reviewing historical invoices, and using scorecards to discuss compliance with firms, the difference between having a policy and operating a spend-control system.

Values Enter the Scorecard

Procurement now carries corporate values into supplier selection, though the follow-through is uneven. The ACC Foundation's 2024 DEI research found that just 22% of legal teams systematically track the diversity of their outside counsel, meaning 78% do not, even as that figure jumps to 67% among companies above $20 billion in revenue. Many departments say diversity matters; far fewer convert the value into measurable procurement criteria.

Some have gone further than measurement. HP built an outside-counsel diversity mandate under which it can withhold up to 10% of invoiced fees from firms that fail to meet specified standards. Environmental and governance expectations are following a parallel path: the Governance & Accountability Institute reported that 99% of S&P 500 companies published sustainability reports for the 2024 reporting year. As corporate ESG disclosure becomes universal, legal departments are more likely to ask firms and vendors to prove their own governance and sustainability practices, not merely describe them.

What the Winning Suppliers Do Differently

The providers who keep corporate work behave differently from those who treat procurement as an administrative hurdle. They read the evaluation criteria and tailor the response. They show the actual team rather than the brand, present a clear matter strategy and project plan, and price against explicit assumptions and outcomes. They treat e-billing and guideline compliance as normal business practice, bring proactive ideas before renewal season, and arrive at the security review already certified rather than scrambling. Above all, they understand that corporate buyers are not trying to commoditize every relationship, they are trying to reserve premium spend for premium value.

The direction of travel is unmistakable. With legal spend itself under pressure, the latest ACC benchmarking work put it at a six-year low relative to revenue, falling to 0.43% from 0.63%, the discipline of buying will only intensify. The future of legal procurement is not less human; relationships still matter. But they now sit beside data, controls, and measurable performance. For the departments that get the balance right, legal buying stops being a cost center and becomes a genuine source of strategic advantage.

Sources

1. ACC & Major, Lindsey & Africa, 2024 Law Department Management Benchmarking Survey announcement
2. ACC, 2024 Law Department Management Benchmarking Report (Executive Summary)
3. Major, Lindsey & Africa, 2025 ACC Law Department Benchmarking Report
4. ACC, 2023 Law Department Management Benchmarking Report (Executive Summary, PDF)
5. CCBJ, Buying Legal Council releases 2021 Legal Procurement Survey
6. Brightflag, The Five Elements of an Effective Legal RFP
7. Buying Legal Council / Feit Consulting, 2018 Legal Procurement Survey (PDF)
8. Spend Matters, Buying legal services and legal tech
9. Bloomberg Law, Analysis: Legal Procurement, Teamwork Makes the Dream Work Better
10. Thomson Reuters Institute, Law department procurement
11. Thomson Reuters Institute, The $28 billion rise of ALSPs
12. Grand View Research, Legal Technology Market Report
13. Grand View Research, Global Legal AI Market Size & Outlook
14. ACC Foundation, A Data-Driven Look at DEI in Legal Departments (PDF)
15. General Counsel News, HP GC diversity mandate or forfeit up to 10% of fees
16. PR Newswire, G&A Institute: S&P 500 reach 99% sustainability reporting
17. Investopedia, Total Cost of Ownership
18. LEDES Oversight Committee
19. Wolters Kluwer, CLOC recap on vendor management
20. AICPA, SOC for Service Organizations
21. ISO, ISO/IEC 27001 Information Security Management