Law firms
Client confidentiality is an ethics obligation, not a preference. We handle disk encryption, matter-level access and the bar's guidance on reasonable security, and we write it down so you can show your carrier at renewal.
What is included
Everything an IT department does, for a business that cannot hire one.
This is the job, all eight parts of it. The table below shows exactly which plan covers what, so you never have to ask.
-
Helpdesk
Phone, email and chat, 7 am to 7 pm. A person picks up. Average first response over the last twelve months: four minutes.
-
Patching
Operating systems and the third-party apps nobody remembers. Tested on our own machines first, rolled out Tuesday nights, reported Wednesday morning.
-
Endpoint security
Managed detection and response on every laptop, desktop and server, watched around the clock. A suspicious login at 3 am gets isolated before you wake up.
-
Backups
Servers and cloud mailboxes backed up nightly, kept off-site, and restored for real on the first Tuesday of every month. You get the timing by email.
-
Email security
Filtering that catches the invoice that is not from your vendor, sending records configured properly, and a quarterly phishing drill with a two-minute debrief.
-
Cloud
Microsoft 365 or Google Workspace, administered properly: licensing, sharing rules, retention, and the migration off the server in the supply closet.
-
Vendor management
We call your internet provider, your copier company and your practice software's support line. You hear back from us, once, with the answer.
-
Onboarding and offboarding
A new hire has a laptop, accounts and MFA on day one. Someone who leaves loses access within the hour, with a signed checklist to prove it.
Pricing
Per seat, per month. Published, because you were going to ask.
A seat is a person, not a device. A lawyer with a laptop, a desktop and a phone is one seat. Helpdesk time is never billed by the hour, on any plan.
Swipe sideways to compare all three plans.
| Ten things, three plans | Essentials $95 per seat, per month Helpdesk, patching, security and cloud admin for teams that already have their house in order. | Most firms Secure $140 per seat, per month Essentials plus email security, MFA enforced everywhere, and round-the-clock monitoring. | Compliance $190 per seat, per month Secure plus the reports, policies and evidence your auditor, carrier or funder will ask for. |
|---|---|---|---|
| Unlimited helpdesk, 7 am to 7 pm | Included | Included | Included |
| Patching for operating systems and third-party apps | Included | Included | Included |
| Managed endpoint security on every device | Included | Included | Included |
| Microsoft 365 or Google Workspace administration | Included | Included | Included |
| Nightly backups, restored and timed every month | Included | Included | Included |
| Vendor management, one call to us instead of four | Included | Included | Included |
| Email security and quarterly phishing drills | Not included | Included | Included |
| MFA and a password manager, rolled out and enforced | Not included | Included | Included |
| 24/7 security monitoring with a one-hour incident call | Not included | Included | Included |
| Quarterly compliance reports, written policies and an annual risk assessment | Not included | Not included | Included |
One-time onboarding: $1,500 per business, which covers the 30-day plan below. Minimum five seats. Twelve months to start, then month to month. Prices are the same whether you have five seats or ninety.
Servers and network gear are covered under the seats that use them. Work outside the plan, like a new office or a migration off an old server, is quoted flat before we start, and the quote is the invoice.
How onboarding works
Thirty days, four steps, no downtime.
Most of it happens after hours. Your staff notice exactly once, in week three, when the password manager shows up on their screen.
-
01Days 1 to 5
Discovery
We inventory every device, account, vendor and password nobody wrote down. You get a one-page map of your IT, usually the first one the business has ever had.
-
02Days 6 to 12
Foundation
Endpoint security, patching and backups go onto every machine, after hours. Nothing changes for your staff yet, and the first backup finishes before we go home.
-
03Days 13 to 21
Identity
MFA and the password manager roll out one team at a time, each with a 20-minute walkthrough. This is the week people notice, and the week phishing stops working.
-
04Days 22 to 30
Handover
Your staff get the helpdesk number on a card, the first test restore runs while you watch, and we walk through the map together. After that it is just Tuesday.
Who we serve
Ninety businesses. Three kinds of paperwork.
Every industry has a rule about data and someone who will eventually ask for proof. We know which one is coming for you. The other eleven clients are accountants, architects and one bakery with a very complicated point of sale.
Clinics
HIPAA wants a risk assessment, a business associate agreement and proof the backups work. We sign the BAA, run the assessment every year and keep the evidence in one folder your compliance officer can open.
Nonprofits
Grant audits ask about data handling a little more every year. We document controls in plain language, keep donor data where it belongs, and help you claim the nonprofit licensing you are probably not using.
Security
Boring on purpose.
Nothing here is clever. It is the same short list, done for every client, every month, with the receipts sent to you.
-
MFA on everything
Every account we manage has multi-factor authentication turned on within 30 days of onboarding. No exceptions for partners, founders or the one person who finds it annoying. It is the single control that stops most of what we see.
-
Backups tested monthly
On the first Tuesday of the month we restore a real file, a real mailbox and one full server for every client, and email you how long it took. A backup that has never been restored is a theory.
-
The incident promise
If something goes wrong, you hear it from us first, within one hour of us knowing, in plain English, with what we are doing about it. We do not wait for the full report to make the call.
- 0account takeovers on MFA-enforced accounts since 2021
- 132monthly test restores since 2015. 131 passed. One taught us something.
- 1hourfrom us knowing about an incident to you hearing about it from us
The team
Fourteen people. You will learn their names.
Seven on the helpdesk, three on security and compliance, three on cloud and projects, and Priya. Everyone sits in the Brookline Park office. There is no offshore tier one and no queue you cannot see.
- Priya NatarajanFounder and principal engineer
- Marcus OyelaranHelpdesk lead
- Hannah WhitlockSecurity and compliance
- Diego FerranteCloud and projects
We went from a guy who came by on Fridays to a desk that answers before I finish typing the problem. Our malpractice carrier noticed the MFA before I told them about it, and the premium went down.
The monthly restore email is the whole reason we switched. Every IT company we had before told us the backups were fine. Uptime shows us, with a stopwatch.
Book a call
Twenty minutes. No slide deck.
Tell us how many people you have and what keeps you up at night. You already know the price. If we are not the right fit, we will say so and point you to someone who is.
Book a 20-minute call
Service area
Brookline Park and 40 miles around it
Ashford, Milton Ferry, Kessler and Norwood Heights. On site the same day when remote will not do.
218 Commerce Way, Suite 4, Brookline Park · Open in Maps