To compare immigration CRM software, score each vendor on the work your office actually does: an immigration-specific data model (applicants, dependants, cases), government form filling, verified intake, retainers and e-signature, a client portal, WhatsApp and email, roles and branch permissions, where data is hosted, security evidence, the pricing model, and migration and support. Weight the criteria for your practice, test with a real file during a trial, and get written answers on hosting and security.
- Score vendors on your three most painful weekly tasks first; everything else is a tie-breaker.
- For Canadian practices, IRCC form filling, data residency and branch permissions are usually deal-breakers.
- Get hosting location, subprocessors, backups and audit status in writing.
- Model pricing at today’s team size and at twice that size.
- Ask every vendor what is not built yet.
Why a structured comparison beats a feature list
Every immigration software website lists features, and most lists look alike. The difference shows up when you push a real file through the system: a visitor-visa enquiry that arrives on WhatsApp, becomes a paid client, signs a retainer, uploads a passport and ends with a filled IMM 5257. A structured comparison forces each vendor to show that path, rather than a demo of their strongest screen.
This guide gives you the criteria, a scoring worksheet and the questions to ask. It is written to be useful whichever product you choose, including when the answer is not ImmiPractice.
What criteria matter most for an immigration CRM?
Twelve criteria cover almost every buying decision we see from RCICs, immigration lawyers and consultancies:
- Immigration-specific data model. Does the system understand a principal applicant, dependants, a service (study permit, visitor visa, PR) and a case with a number and status? Or will you rebuild that with custom fields?
- Government forms. If you file with IRCC, can it fill IRCC PDFs such as IMM 5257, IMM 0008, IMM 5669 and IMM 1294 from the client record? Do 2D barcodes still validate in Adobe Acrobat? Does dependant data flow across a family’s forms? How fast are forms updated after IRCC revises a PDF?
- Intake and lead capture. Where do enquiries come from (website, Meta ads, WhatsApp, walk-ins) and do they land in one pipeline without retyping? Are intake forms protected against spam and duplicates?
- Retainer agreements and e-signature. Templates with merge fields, built-in signing, reminders for unsigned agreements and an audit trail — or a separate e-signature subscription?
- Client portal. Can clients upload against a document checklist, answer questionnaires and book appointments without yet another password?
- Communication channels. Email from your own domain, and WhatsApp through Meta’s official API if your clients use it. Conversations should stay with the firm, not on a staff member’s phone.
- Roles, permissions and branches. Can a receptionist see leads but not case files? Can one branch be kept out of another’s data? Who can change permissions?
- Data residency. Where is client data stored and backed up, and which subprocessors handle it? For Canadian practices this often matters to clients and to your own privacy assessment.
- Security evidence. Encryption in transit and at rest, sign-in method, backup frequency and retention, recovery objectives, incident notification, and the status of any independent audit such as SOC 2.
- Pricing model. Per user, per case, flat, or quoted. Model your cost at today’s team size and at the size you expect in two years.
- Billing. Fees, installments and invoices tied to the case; and whether trust accounting is included or must stay in a separate accounting system.
- Migration and support. What can be imported from your current spreadsheet or system, how long setup takes, and how you reach support.
A scoring worksheet you can copy
Give each criterion a weight from 1 (nice to have) to 3 (deal-breaker), score each vendor from 0 to 5, and multiply. The weights below are an example for a five-person Canadian consultancy that gets most enquiries from Meta ads and WhatsApp; change them to fit your office.
| Criterion | Example weight (1–3) | Vendor A score (0–5) | Vendor B score (0–5) | What a 5 looks like |
|---|---|---|---|---|
| Immigration data model | 3 | Applicants, dependants, services and numbered cases out of the box | ||
| IRCC form filling | 3 | Forms filled from the record, barcodes validate, published update time | ||
| Intake and lead capture | 3 | All sources in one pipeline, verified submissions, no duplicates | ||
| Retainers and e-signature | 2 | Built-in signing, reminders, audit trail, executed PDF on the case | ||
| Client portal | 2 | Checklist uploads, questionnaires, self-booking, no client password | ||
| WhatsApp and email | 2 | Official WhatsApp API, shared inbox, your own mailbox for email | ||
| Permissions and branches | 2 | Role-based access, branch isolation, admin-only permission changes | ||
| Data residency | 3 | Hosting location stated in writing, subprocessors listed | ||
| Security evidence | 2 | Written answers on encryption, backups, RPO/RTO, audit status | ||
| Pricing model | 2 | Published price, predictable as the team grows | ||
| Billing and trust accounting | 1–3 | Matches what your regulator requires of you | ||
| Migration and support | 2 | Clear import plan, named contact, response times |
A total is only a guide. One deal-breaker — for example, no trust accounting when your regulator requires it, or no IRCC forms when IRCC is your whole practice — outweighs a high score elsewhere.
Which questions should you ask every vendor?
- Show me a lead becoming a case without retyping anything. Where does the history go?
- Generate an IMM 5257 (or the form you file most) for a family of three. Does it validate in Adobe Acrobat?
- When IRCC changes a PDF without notice, how long until your form is updated? Is that written down?
- Where exactly is our client data hosted and backed up? Which subprocessors can access it?
- How do staff sign in? What happens to access the moment we deactivate someone?
- Can a receptionist see case documents? Can one branch see another’s clients?
- Do you hold a SOC 2 report or other independent audit today? If not, what is the status?
- Is pricing per user? What will we pay with twice our current team?
- Is trust accounting included? If not, what do your customers use alongside you?
- What can you import from our spreadsheet or current system, and who does the work?
- What is not built yet that we might assume is there?
What should you read before signing with an immigration software vendor?
Vendor websites are written to sell. Before you sign, check what independent and professional sources say:
- Your regulator’s guidance on cloud services. The Law Society of British Columbia’s cloud computing checklist covers data location, who at the provider can access records, contract terms, exit and data retrieval, breach history, encryption and backups. The Law Society of Ontario’s technology resources and the Canadian Bar Association’s privacy and ethics toolkit cover similar ground. RCICs should also read the CICC’s regulations on client files.
- Practice-management surveys. The ABA TechReport publishes yearly reports on cloud and practice-management software use, and AILA’s practice-management resources are written for US immigration lawyers.
- User reviews. Capterra, G2 and Software Advice list immigration software with user reviews. Filter by firm size and country, read the negative reviews, and treat them as anecdotes, not proof.
- The vendor’s own evidence. Ask for a current SOC 2 Type 2 report (or the status of the audit), the subprocessor list, the data processing agreement and the published service levels. The AICPA explains what a SOC 2 report does and doesn’t cover.
How to run a fair trial
- Pick one real (anonymized) file. A study permit or a family PR file exercises most of the system.
- Push it end to end. Enquiry, consultation booking, retainer, document checklist, questionnaire, form generation, invoice.
- Involve two roles. Have a receptionist and a case worker try their part with their own logins.
- Ask for written answers. Hosting, backups, subprocessors and audit status should be in writing, not only said in a demo.
How ImmiPractice answers these criteria
For transparency, here is where ImmiPractice stands. It is immigration-specific; fills IRCC PDFs such as IMM 5257, IMM 0008, IMM 5669 and IMM 1294 from the client record with no limit on the Standard plan, with barcodes that validate in Adobe Acrobat and forms updated within 72 hours of an IRCC revision. It brings Meta Lead Ads, WhatsApp (official Cloud API), a verified Form Menu and a calling queue into one pipeline, and includes retainers with built-in e-signature, a client portal, seven roles with branch isolation, and invoicing. Data is hosted in Canada and encrypted in transit and at rest; staff and clients sign in with a one-time email code. The Standard plan is CA$89 per month for unlimited users.
Where it may not fit: ImmiPractice does not include trust accounting, time tracking or two-way calendar sync, does not submit applications to IRCC, and its SOC 2 Type II audit is in progress — there is no SOC 2 report yet. See the compliance checklist on immipractice.com and what an immigration CRM costs.
Sources & last checked
ImmiPractice facts: features, pricing and security on immipractice.com, checked 2026-10-08. For vendor-specific comparisons, see ImmiPractice vs Officio, ImmiPractice vs CaseEasy and the comparison pages on immipractice.com. Always confirm current details with each vendor.