The NC Bar has published the revised version of it proposed ethics opinion entitled “Subscribing to Software as a Service While Fulfilling the Duties of Confidentiality and Preservation of Client Property”, 2011 FEO 6 on the website. It will also be published in the next issue of the NC State Bar Journal. 
You can read some of the history of this opinion in this post. After a year or more of subcommittee review and revision, this latest version will hopefully be the final one that the Ethics Committee recommends for adoption by the Council at their January meeting.
The subcommittee removed the list of minimum requirements for the selection of a technology vendor. Many of the items on the list had raised concern as detailed here by myself and others. The new version of the opinion sticks with the “reasonable care” standard requiring the attorney to do his or her due diligence in researching the technology and any third-party provider. The proposed opinion states:
…a law firm may use SaaS if reasonable care is taken to minimize the risks of inadvertent disclosure of confidential information and to protect the security of client information and client files. A lawyer must fulfill the duties to protect confidential client information and to safeguard client files by applying the same diligence and competency to manage the risks of SaaS that the lawyer is required to apply when representing clients.