IOLTA Compliance for Personal Injury Firms: The Complete Guide
IOLTA compliance is one of the highest-stakes operational requirements in PI practice. Here is what the rules actually require, what auditors look for, and how to stay compliant without a full-time bookkeeper.
Disbo Team
Published April 28, 2026

Quick Answer
IOLTA compliance is a law firm's ongoing adherence to the trust account rules set by its state bar association — covering how client funds are held, recorded, reconciled, and documented. For personal injury firms, where large settlement funds routinely flow through trust accounts, it is one of the highest-stakes operational requirements in the practice.
IOLTA compliance is a law firm's ongoing adherence to the trust account rules set by their state bar association, covering how client funds are held, how they are recorded, how often accounts are reconciled, and what documentation must be maintained. For personal injury firms, where large settlement funds routinely pass through trust accounts, IOLTA compliance is one of the highest-stakes operational requirements in the practice.
This guide explains everything a PI firm needs to know about IOLTA compliance: why it exists, what the rules actually require, how three-way reconciliation works, what state bars look for in an audit, where most firms fall short, and how to stay compliant without a dedicated bookkeeper or compliance team.
What IOLTA Is and Why It Exists
IOLTA stands for Interest on Lawyers' Trust Accounts. It is a program that mandates attorneys to hold client monies in designated trust accounts that earn interest, which is then transferred to the state's IOLTA foundation to fund civil legal aid and other services.
The underlying principle is straightforward: client money is not firm money. When a personal injury attorney receives a settlement check, those funds do not belong to the firm until the attorney fees have been earned and properly disbursed. Until that moment, the money must sit in a separate trust account, protected from commingling with the firm's operating funds.
IOLTA accounts serve two purposes simultaneously. The first is fiduciary: they safeguard client funds from being utilized for the firm's running expenditures, from being exposed to the firm's creditors, and from being lost if the firm experiences financial difficulties. The second is social: by pooling the interest from thousands of small client trust accounts that would otherwise earn little interest, IOLTA programs produce hundreds of millions of dollars each year for legal aid organizations across the country.
The risks are especially high for PI firms. At any given time, a single busy PI practice can retain millions of dollars in client settlement cash owed to clients, lienholders, and third parties — all of which must be precisely monitored, reconciled, and dispersed.
Who Is Required to Have an IOLTA Account
Any attorney who keeps client funds, even temporarily, is typically required to keep an IOLTA trust account. For PI firms, this includes any firm that accepts settlement checks on behalf of clients, collects retainers, advances case fees, or holds any funds until the outcome of a dispute.
The IOLTA account must be:
- •Maintained at a bank approved by the state bar
- •Designated as a trust account, not an operational account
- •Titled in a way that identifies it as a client trust account
- •Reported to the state bar on the firm's annual registration or licensing
Some states allow attorneys who only handle nominal or short-term client funds to use a pooled IOLTA account for all clients. Some jurisdictions mandate separate accounts for individual clients when they hold funds for an extended period or in large amounts. The specific threshold varies by jurisdiction.
For PI firms, the practical standard is a single pooled IOLTA account with individual client subledgers maintained within it. One account is held at the bank, but it is internally tracked as dozens or hundreds of separate client balances.
What IOLTA Rules Actually Require
While the particular standards differ by state, all IOLTA rules address six main categories. Understanding each one is the foundation of compliance.
Segregation of funds. Client funds must be kept entirely separate from the firm's operating funds. This means a dedicated trust account, not a general business account. It also means that attorney fees are not transferred to the operating account until they have been earned. In some jurisdictions, keeping earned fees in the trust account for longer than necessary is a violation.
Accurate recordkeeping. Every deposit and disbursement from the IOLTA account must be recorded. Records must show the client matter related to each transaction, as well as the amount, date, and payee or payor. Most state bars stipulate what records must be kept, which typically include a trust ledger, individual client sub-ledgers, bank statements, deposit records, and disbursement records.
No negative balances. At no point should any client's sub-ledger show a negative balance. A negative balance means the firm has paid out more than it holds for that client, either by calculation error or by using one client's funds to cover another's obligations. Both are serious violations. Most state bars treat a negative trust balance as presumptive evidence of misappropriation, regardless of intent.
Prompt disbursement. Funds must be disbursed to clients as soon as they are available. In some jurisdictions, keeping client monies in trust for an extended period of time, even if there is no intent to misuse them, might be considered a violation.
Regular reconciliation. The trust account must be reconciled on a regular basis, often monthly in most jurisdictions. Reconciliation entails comparing the bank statement, the trust ledger, and the individual client sub-ledgers to ensure that all three match. This is the three-way reconciliation requirement, which is explained in detail in the following section.
Record retention. Trust account records must be retained for a minimum period specified by the state bar, which is typically five to seven years. The records must be available for inspection by the state bar on request.
Three-Way Reconciliation: The Core Compliance Requirement
Three-way reconciliation is the process of matching three independent records at the same time to ensure that the trust account is balanced. It is the most frequently audited IOLTA requirement and the one that results in the most infractions.
The three records are:
- •The bank statement — the official document from the bank that shows each deposit, withdrawal, and the current balance in the IOLTA account.
- •The trust ledger — the firm's internal master record of all transactions in the trust account, kept by the firm (not the bank).
- •The client sub-ledgers — distinct entries for each client matter that show the balance retained for that particular client. The aggregate of all client sub-ledger balances must equal the trust ledger balance, which must match the bank statement balance (adjusted for outstanding items).
How to perform a three-way reconciliation
- 1. Obtain the bank statement for the period being reconciled.
- 2. Identify any pending items, such as checks written but not yet cleared or deposits recorded but not yet posted. Adjust the bank balance for these items to obtain the "adjusted bank balance."
- 3. Compare the adjusted bank balance with the trust ledger balance. They should match. If they don't, review each transaction in the period to find the discrepancy.
- 4. Add up all individual client sub-ledger balances. The sum should equal the trust ledger balance. If any sub-ledger indicates a negative balance, it is an urgent red flag that requires further study.
- 5. Document the reconciliation by dating, signing, and keeping it. Most state bars require that the reconciliation be signed by the accountable attorney, not other legal staff.
If all three match, the trust account is balanced and the reconciliation is finished. If any of the three do not match, there is either a recording error, an outstanding transaction, or — in the worst-case scenario — missing funds.
How often must three-way reconciliation be done?
Monthly, in most jurisdictions. Some states require it more frequently for firms above certain size thresholds. California's CTAPP (Client Trust Account Protection Program) has formalized monthly reconciliation as a mandatory requirement with proactive reporting obligations for participating firms.
The most typical failure mode is not performing the reconciliation at all; many smaller PI firms reconcile quarterly at best, or only when preparing for an audit. The issue with infrequent reconciliation is that errors accumulate. A $200 disparity detected on day three requires only thirty minutes to resolve. The identical mismatch identified ninety days later, after dozens of additional transactions, can take days to investigate.
How IOLTA Rules Vary by State
IOLTA compliance is not a single national standard — every state bar has its own rules, and these distinctions are particularly important for firms that operate across jurisdictions or have clients in numerous states.
The key areas where state rules diverge most significantly are:
Reconciliation frequency. Most states require monthly reconciliation. A select few allow quarterly. California now requires monthly CTAPP reporting for firms above certain levels. Verify your state's current regulations since these rules have been tightening up across the country in recent years.
Record retention period. Most states require five to seven years. New York demands a seven-year period. California mandates five years. Texas requires a five-year term. The best default for a multi-state firm is seven years for all records.
Approved financial institutions. Most state bars maintain a list of approved IOLTA depository institutions — banks that have agreed to pay a minimum interest rate on IOLTA accounts and alert the bar if an account goes into overdraft. In some states, using a bank that is not on the approved list constitutes a violation.
Overdraft notification requirements. Most states require IOLTA depository banks to notify the state bar right away if an IOLTA account is overdrawn. This means that the bar typically learns about a negative balance before the firm. Receiving an overdraft notice from your bank will likely result in a bar inquiry.
Interest remittance. All states mandate that the interest earned on pooled IOLTA accounts be returned to the state's IOLTA foundation; the firm does not retain it. The mechanics of remittance differ, but the demand remains consistent.
Client notification rules. Most states mandate that attorneys inform their clients immediately upon receiving funds. The particular rules vary depending on your jurisdiction. Some states demand written notice, others allow oral notice, and some specify a time frame.
For firms operating in multiple states, the most secure strategy is to adopt the most strict requirement across the board: reconcile monthly, retain for seven years, utilize approved institutions in every state, and maintain written notification processes for each client.
What Triggers a Trust Account Audit
Bar trust account audits are not completely random. While some jurisdictions perform random audits as part of proactive monitoring programs, the majority are prompted by specific occurrences. Understanding what causes an audit is the first step toward avoiding it — or surviving one if it occurs.
- •Overdraft notification. The most common trigger. In most states, if an IOLTA account goes into overdraft — even briefly — the bank must notify the state bar. That notification nearly always prompts an inquiry.
- •Client complaint. A client who believes their funds were misused may file a complaint with the state bar. Even if the accusation is false, it typically triggers a review of the firm's trust account records.
- •Fee dispute. A fee dispute between an attorney and a client, particularly if the client says the attorney took more than was agreed upon, may trigger the bar to investigate trust account data.
- •Malpractice claim. Certain malpractice cases, particularly those involving allegations of financial malfeasance, are referred to state bars and may result in a parallel investigation.
- •Attorney discipline in another matter. If an attorney is being investigated or reprimanded for any ethical violation, the state bar may broaden the inquiry to include a check of trust account activities.
- •Random selection. California's CTAPP program and similar proactive audit programs in other states select firms for random audit on a scheduled basis, regardless of any complaint or triggering event. As these programs expand nationally, random audits are becoming increasingly common.
- •Self-reporting. State bars impose self-reporting obligations on attorneys, requiring them to disclose any trust account problems or violations they discover. Self-reporting, when done promptly and with a clear repair plan, is generally considered significantly more favorably than a violation uncovered by the bar.
What Auditors Look For — and What Gets Firms in Trouble
When a state bar auditor reviews a firm's trust account, they are working through a standard checklist. Knowing what is on that checklist is the most practical way to prepare.
Auditors will request:
- •Bank statements for the audit period
- •The trust ledger for the audit period
- •All client sub-ledgers
- •Three-way reconciliation records for each month in the audit period
- •Copies of settlement statements for disbursements made during the period
- •Signed client authorizations for disbursements
- •Copies of any lien payoff letters or lienholder correspondence
- •The firm's retainer agreements for the matters reviewed
The distinction between an audit that results in a letter of caution and one that results in formal discipline usually comes down to documentation. Firms with complete, accurate records — even if those documents indicate a historical error — are regarded considerably differently from firms that cannot produce any records at all.
The most common findings
- •Missing or unsigned three-way reconciliation records
- •Reconciliations done infrequently (quarterly instead of monthly)
- •Client sub-ledger balances that don't add up to the trust ledger total
- •Negative client sub-ledger balances, even historical ones that were quickly corrected
- •Disbursements made without signed client authorization
- •Settlement statements that don't match the actual disbursements
- •Funds held in trust longer than necessary without explanation
- •Use of a non-approved IOLTA depository institution
- •Missing lien documentation for matters where liens existed
The most serious findings
- •Commingling of client and firm funds
- •Misappropriation or using client funds for firm operating expenses, even temporarily
- •Falsified or altered records
- •Repeated overdrafts
- •Unresolved negative balances
How to Stay Compliant Without a Full-Time Bookkeeper
The most prevalent argument against strict IOLTA compliance is a lack of capacity: a three-attorney PI firm with 60 ongoing cases does not have a specialized trust accounting team. The paralegal in charge of trust account entries is also responsible for client correspondence, case scheduling, and a variety of other tasks. As a result, reconciliation occurs when time permits — which means it often doesn't happen monthly.
The practical path to compliance without dedicated staff has three components.
Separate the recording from the reconciliation. Every trust account transaction — including deposits, disbursements, and transfers — must be recorded at the time it occurs. This demands a system, not a bookkeeper. Whether the system is a specific legal accounting platform or a strict manual ledger, the discipline of recording transactions in real time is what makes reconciliation possible. It takes 30 minutes to reconcile a ledger that has been kept current. Reconciling a ledger with transactions batched and recorded from memory takes days.
Automate the reconciliation. Real-time bank feed connections eliminate the need to manually pull and cross-reference bank statements. When the bank feed and the internal ledger are updated simultaneously, inconsistencies appear immediately instead of at the end of the month. This is the single most significant efficiency benefit accessible to small PI firms maintaining trust accounts manually.
Build the reconciliation into a monthly routine. Pick a date — the first business day of the month, the last, or the day after bank statements close — and treat it as a non-negotiable calendar event. A completed, signed reconciliation that takes 30 minutes on the first of every month is infinitely more defensible than a scrambled three-day reconciliation marathon in response to an audit notice.
For firms handling more than 20 active cases, manual trust accounting at the level of rigor that state bars now expect is genuinely difficult to sustain without either dedicated staff or purpose-built software. The cost of a trust accounting platform — which automates recording, reconciliation, and report generation — is almost always lower than the cost of staff time spent doing those tasks manually.
Common IOLTA Violations and How to Avoid Them
Most trust account violations are not the result of intentional misconduct. They are often the outcome of manual processes that fail under the demands of a busy PI practice. Here are the most common violations and specific practices that prevent them.
Commingling. Depositing earned attorney fees into the trust account and leaving them there, or transferring personal monies into the trust account for any purpose. The solution is a clear policy: whenever attorney fees are earned and documented, they are transferred to the operating account. No exceptions.
Disbursing before funds clear. Sending payments against a settlement check that has not yet cleared the bank. The solution is a firm-wide regulation that prohibits distribution until the deposit is validated as collected — not simply deposited, but collected.
Negative sub-ledger balances. These result from paying out more than the available balance for a specific client matter, either due to an error in calculation or because funds were allocated wrongly across matters. The solution is a hard block: no disbursement should be allowed for a matter that would result in a negative balance for that client's subledger.
Missing reconciliations. Failure to reconcile on a monthly basis, or reconciliation without documentation and signature. The solution is a calendar discipline combined with a template: use the same reconciliation format, completed and signed on the same day each month.
Inadequate documentation. Disbursing correctly but not having signed settlement statements, client authorizations, or lien payback letters on file. The solution is a disbursement checklist: no payment is made until all needed documents have been collected and filed.
Late client notification. Receiving settlement payments but failing to promptly tell the client. The solution is a process trigger: once a settlement check is deposited, a client notification is sent on the same day.
This guide is for informational purposes. IOLTA rules vary by jurisdiction and are updated periodically by state bar associations. Attorneys should verify the specific requirements of their state bar and consult with a bar counsel or ethics advisor for guidance on specific compliance questions.