Small and mid-sized business
Professional services, non-profits and growing teams
- Flat per-user pricing that scales cleanly as you hire
- Documentation and credentials held in a system you own
- Co-managed option that supports an existing internal IT lead
Below roughly two hundred staff, IT is usually held together by one capable person and a folder of passwords. That works until they take a holiday. We become the department instead: a helpdesk your team can reach directly, documentation that lives somewhere other than one person’s memory, and a per-user rate that makes headcount growth easy to budget. If you already have an internal IT lead, we take the ticket queue, the patching and the night-time monitoring off them so they can spend their week on the work that actually needs institutional knowledge.
Healthcare
Clinics, practices and allied health providers
- Technical safeguards mapped to the HIPAA Security Rule, with evidence retained
- Business associate agreements signed as standard
- Priority handling for practice management, imaging and scheduling systems
In a clinic, downtime is measured in patients sitting in a waiting room. We prioritise the systems that stop the day when they stop: the practice management platform, imaging, scheduling and the connection between them. Every device is encrypted, every access grant is reviewed, and technical safeguards are mapped against the HIPAA Security Rule with the evidence kept current, so a risk assessment or an insurer questionnaire is answered from records rather than from memory. We sign business associate agreements as a matter of course, and we will tell you plainly which parts of compliance are ours and which remain yours.
Finance and accounting
Advisory firms, accountants and registered practices
- Least-privilege access controls with quarterly reviews and retained logs
- Change windows planned around filing seasons and reporting deadlines
- Documented evidence ready for examinations and client due diligence
Financial firms carry client data that is attractive to attackers and a regulator that expects you to prove how it is protected. We run the controls that examinations and client due diligence ask about: enforced multi-factor authentication, least-privilege access to shared files, retained logs, encrypted backups and a written incident response plan that has actually been tested. We also plan around your calendar, because nobody is migrating a file server in the last week of a filing season, and we will say so before you ask.
E-commerce and retail
Online sellers, multi-site retail and fulfilment operations
- Network segmentation that keeps card data environments in a small PCI DSS scope
- Agreed change freezes and heightened monitoring across peak trading
- Resilient connectivity for stores, warehouses and fulfilment sites
Retail traffic is seasonal and outages are expensive at exactly the moment they are least affordable. We manage the infrastructure underneath the storefront rather than the storefront itself: point of sale networks, warehouse and stock systems, payment segmentation, and the connectivity that ties sites to the head office. Peak trading periods get a change freeze and additional monitoring agreed in advance, and card data environments are kept segmented so that PCI DSS scope stays small and provable.
Not on this list?
Most of what we do transfers cleanly between sectors, and the parts that do not are usually a single regulated application and a change calendar. Tell us what you run and we will say plainly whether we are the right people for it.
Get a quote shaped around your sector.
Tell us your industry, your headcount and the system you cannot afford to lose. We will come back with scope, response targets and a per-user rate in writing.
