How the ARRT™ Intake Sequence Turns Investigation Costs Into a Profit Center for Your Firm

June 4, 2026

Share this article

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

Most law firms treat investigative costs as a line item expense. They budget for it reluctantly, approve it case by case, and measure it against what it cost rather than what it produced.


The firms that have restructured their relationship with outside investigators — particularly around intake — have found something different. Done correctly, front-loaded investigative intelligence doesn't just cost money. It makes money.



Here's how.

The Intake Problem Most Firms Don't Talk About


Every case that walks through your door carries an unknown. You don't know what's actually there until you start digging — and by the time you've committed resources, scheduled depositions, and built a litigation strategy, you may be significantly invested in a case that the facts don't support.


This is not a failure of legal skill. It's a structural problem. The information needed to evaluate a case accurately often isn't available at intake — not because it doesn't exist, but because no one has gone to get it yet.



The result is a predictable pattern: cases that looked strong at intake consume resources until the facts emerge that change the picture. Cases that looked complicated at intake get under-resourced until late-breaking intelligence forces a strategy pivot. Both scenarios cost money that proper front-loaded intelligence would have saved.

What ARRT™ Is


The Attorney Rapid Response Toolkit — ARRT™ — is Waterloo Security Intelligence's structured intake intelligence protocol designed specifically for criminal defense, family law, and civil litigation practices.


It is not a menu of investigative services. It is a defined sequence of intelligence-gathering actions executed at the front end of a new matter, before significant legal resources are committed, that produces a foundational intelligence picture within 48-72 hours of engagement.



The sequence is calibrated to the matter type. A new criminal defense case triggers a different intelligence sequence than a new family law matter or a new civil litigation file. The outputs are formatted for integration into your case management system and designed to inform — not replace — your legal judgment about how to proceed.

The Economics of Front-Loaded Intelligence


Here is the math that changes how firms think about investigative costs.



Scenario A — No front-loaded intelligence: A criminal defense matter is taken on at intake based on the client's account. Three weeks of attorney time are invested before a background investigation on the complaining witness reveals a pattern of prior similar allegations that fundamentally changes the defense strategy. The work done in those three weeks isn't wasted, but a significant portion of it has to be redone with the new intelligence framework.


Scenario B — ARRT™ at intake: The same matter triggers an immediate background investigation on the complaining witness as part of the intake sequence. The pattern of prior allegations surfaces within 48 hours. The defense strategy is built correctly from the start. No rework. The investigation cost is $150-300. The attorney time saved is multiples of that.


The pattern repeats across matter types. In family law, early asset intelligence shapes discovery strategy. In civil litigation, early background intelligence on the plaintiff informs settlement decisions. In every case, what you know at the beginning determines how efficiently you work through the middle.

How Firms Are Billing ARRT™ Back to Clients


Here is where investigative costs stop being an expense and become a revenue line.


Many firms that have adopted front-loaded investigative protocols pass those costs through to clients as a standard intake service — not as a discretionary add-on, but as a defined part of the engagement. The intake investigative package is itemized in the engagement letter. The client understands and agrees to it at signing.


When the intelligence is delivered and the case strategy benefits from it — which is most of the time — the client sees the value directly. The conversation about investigative costs shifts from "do we really need this?" to "here's what we found in the first 72 hours."


Firms that bill ARRT™ through to clients typically recover the investigative cost entirely, and in many cases mark it up modestly as a case management service. The net result is that front-loaded intelligence costs the firm nothing and produces demonstrable value for the client.



That's not an expense. That's a service.

The Retainer Structure That Makes It Seamless


The firms that get the most value from ARRT™ are the ones that operate it on a retainer basis rather than case-by-case approval.


Case-by-case approval creates friction. The attorney has to stop, evaluate, request approval from the client, wait, and then initiate the investigation — by which time the 48-72 hour front-loading window has often passed.


A retainer relationship with WSI eliminates that friction. The engagement is pre-authorized for defined intake services up to a defined dollar amount per matter. When a new case comes in that meets the criteria, the intelligence sequence begins immediately. No approval delay. No missed window.



ARRT™ retainer engagements with Waterloo Security Intelligence are structured around your firm's volume, matter types, and intake protocols. The retainer covers a defined set of intake intelligence services per matter, with clear protocols for when additional authorization is needed.

What the Sequence Produces


A standard ARRT™ intake package for a criminal defense matter typically includes:

  • Background investigation on complaining witness or key adverse party
  • Criminal and civil records search on adverse parties
  • Social media and OSINT sweep on adverse parties
  • Address verification and current location confirmation for key witnesses
  • Preliminary asset overview where financially relevant
  • Formatted intake intelligence report delivered within 48-72 hours



The exact sequence varies by matter type and is calibrated in the initial retainer discussion. Every output is formatted for your case management system and produced under Kovel privilege protection.

The Conversation Worth Having


If your firm is currently approving investigative work case by case, late in the matter lifecycle, the conversation worth having is not about whether to use outside investigators. You're already doing that.


The conversation is about moving the intelligence earlier, structuring it consistently, and capturing the economic benefit of knowing more, sooner.



That conversation takes 15 minutes.

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Notices from the Fog is a publication of Waterloo Security Intelligence. ARRT™ is a trademark of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice.

Recent Posts

Corkboard collage with map sketches, red string connections, photos, and newspaper clippings
June 4, 2026
Your client wants to help. They always do. They've already Googled the opposing party, scrolled through social media, driven past the address, asked around through mutual contacts, and assembled a folder of screenshots they're convinced will change everything.
Desk with scattered papers, magnifying glass, ashtray, and a drawer containing keys and a black object.
June 4, 2026
There is a version of private investigation that still operates the way it did in 1987. A phone call comes in. Someone writes something on a notepad. A file folder gets created. An investigator drives somewhere, takes some photographs, types up a report on a word processor, and mails it or faxes it to the client. The c
Stressed office worker reviewing scattered photos and documents at a desk under dim light
June 4, 2026
It's one of the most common questions attorneys ask when they first engage a licensed investigator: "My client believes the opposing party is hiding assets. What can you actually find?"
June 4, 2026
Most criminal defense attorneys know what a Kovel agreement is. Far fewer use one consistently — and that gap is costing their clients. If you're bringing outside investigators, forensic accountants, or technical experts into your cases without a Kovel structure in place, the work product those professionals produce is
June 4, 2026
The threat landscape for legal professionals has changed. Attorneys have always operated in an adversarial environment — that's the nature of the work. But the incidents making headlines in recent years represent something different in character and frequency. Attorneys shot in parking garages. Judges targeted at ho
Business meeting in an office, woman speaking animatedly across a laptop from a seated colleague
June 4, 2026
The pressure on Special Investigations Units has never been higher. Fraud losses continue to climb. Claim volumes aren't slowing down. Internal SIU staffing is flat or shrinking at most carriers. And the regulatory environment around how investigations are conducted — what's documented, how it's documented, and how qui
May 28, 2026
Workers' compensation fraud costs Texas insurers hundreds of millions of dollars every year. For Special Investigations Unit (SIU) directors tasked with controlling those losses, the difference between a denied claim and a paid one often comes down to a single question: did you have the right investigator in the field