Managed IT · Compliance · vCIO
Your IT department, without hiring one.
White-glove help desk, SOC 2 and HIPAA compliance, and CIO-level guidance for companies too small to employ an IT team — and too serious to go without one.
On the ground in Houston and Austin. Compliance and vCIO work wherever you are — today that includes Maryland, Colorado, Washington State, the UK and Poland.
The situation
Nobody in your company owns IT, so everybody does.
The office manager resets the passwords. The owner deals with the internet company. A contractor set up the server four years ago and has not answered an email since. It works until it does not — and then a customer asks for a SOC 2 report, or the board asks who is responsible for cyber security, and there is no one to ask.
That is the company we are built for. Not a business replacing one IT provider with a cheaper one, but a business putting a real IT function in place for the first time.
What we do
Support underneath, compliance and guidance on top.
The whole IT function for a company that has never had one. Your people call us, and we answer.
SOC 2 complianceYou started SOC 2 and stalled, or a customer just asked for a report and you do not know where to begin.
HIPAA complianceSecurity Rule risk analysis, safeguards and evidence for practices and for companies handling patient data.
vCIO & vCISOSomeone who can sit in front of your board and answer for the technology.
CybersecurityControls that hold up when a client sends you a security questionnaire.
Cloud & Microsoft 365Migrations that finish, and a tenant that stays tidy afterwards. Email, files, identity, phones.
How we price
You will know the ceiling before we start.
Every project carries a not-to-exceed number agreed in writing — if it runs long, that is our cost, not your invoice. Support comes with an itemized estimate before any work starts.
We have not found another Texas provider who prices this way. It is not generosity; it is what happens when you are confident about your estimates.
Getting started
Three steps, no obligation.
-
A free assessment
We look at what you have, what is exposed, and what is costing you. You keep the findings either way.
-
A written plan with a ceiling
What we would do, in what order, and the most it can cost. In writing, before anything starts.
-
We run it
Your staff get a help desk that knows their names. You get someone accountable for the technology.
Industries
Computers are computers. The software around them is not.
What changes from one industry to the next is the software people depend on, the rules they answer to, and what an hour of downtime costs.
SCADA, field communications, production analytics and compliance reporting, upstream to downstream.
Renewables & powerSCADA, field instrumentation, control rooms and dashboards for solar, wind, hydro and biomass.
Engineering & constructionCAD workstations, drawing digitization, jobsite connectivity and project cost reporting.
Software & professional servicesSOC 2, security questionnaires, remote teams and board-level IT guidance for firms that hold client data.
HealthcareEHR support, HIPAA compliance, telehealth and help desk for practices without IT staff.
LegalDocument management, scanning and redaction, secure remote access and confidentiality controls.
NonprofitsHelp desk, cloud, donor data protection and reporting, with nonprofit pricing.
Real estateMobile office setup, secure remote access, e-signature and help desk for brokerages and agents.
StartupsRoadmap, budget, setup and security from day one, with vCIO guidance as you grow.
Where we work
Two kinds of work, two kinds of reach.
Support is local because it has to be — someone has to touch the hardware and know your receptionist's name. Compliance and CIO work never needed to be. We do not pretend otherwise in either direction.
Help desk and managed IT, where we can put someone in front of the problem. We are headquartered in Austin, and most of our support clients are across the Houston metro.
Hands on the hardwareSOC 2, HIPAA and board-level guidance run over a call and a shared document. Our consulting clients sit in Maryland, Colorado, Washington, the UK and Poland, and the work is no different for it.
Time zone is the only constraintIf you are outside Texas and wondering whether that matters: for compliance and vCIO engagements it does not, and our longest-running consulting relationships are nowhere near Houston.
Energy Corridor, Westchase, the Med Center and the wider metro.
Most of our clients AustinOur headquarters. Downtown to the western suburbs.
Head office Bee Cave & LakewayHelp desk and on-site support across the west side of Austin.
620 & 71 corridor West Lake HillsLaw firms, wealth managers and consultancies with real confidentiality duties.
West AustinQuestions we get asked
We have no IT person at all. Is that a problem?
It is the situation we work in most. You do not need anyone internal. We become the IT function — the help desk your staff call, the people who own the network and the backups, and the ones who answer when something breaks at 4pm on a Friday.
What does "not to exceed" actually mean?
On project work we agree a ceiling in writing before we start. If the work takes longer than we estimated, that is our problem, not your invoice. It also means we are motivated to finish, because slow work costs us rather than you.
We started SOC 2 and got stuck. Can you pick it up mid-way?
Yes, and it is common. Most companies stall at the same point: the auditor has told them what is missing in language that assumes they already know how to fix it. We take the gap list and run the remediation, then stay for the evidence collection and the annual cycle.
How is a vCIO different from having you manage our IT?
Managed IT keeps the systems running. A vCIO decides what the systems should be — the three-year roadmap, the budget, what to stop paying for, and how to answer the board when they ask about AI or cyber insurance. Some clients buy one, some both.
Are you actually local, or is this a call centre?
We are headquartered in Austin, and most of our support clients are in the Houston area. The people who answer your calls are the same people who know your network. We are a remote-first company, which is how we cover both metros properly rather than pretending a branch office exists.
We are a European company and our US customers are asking for SOC 2. Where do we start?
This is work we already do. Your problem is usually not security — a company operating under GDPR is often in better shape than its US counterpart. The problem is that a US buyer will not sign without a SOC 2 report, and a US healthcare buyer will not sign without HIPAA assurances, and neither is easy to judge from outside the US. We run the readiness programme and build the evidence an American auditor expects to see. One thing worth knowing up front: there is no such thing as SOC 2 or HIPAA certification. SOC 2 is an attestation report issued by a CPA firm after an audit, and HIPAA has no certification scheme at all. We will tell you what your US customers will actually accept.
We are not in Texas. Can you still work with us?
For compliance and vCIO work, yes, and a good part of that side of the business is already outside Texas — Maryland, Colorado, Washington State, the UK and Poland. None of it needs us in the room. For day-to-day help desk we are honest about the limit: if you need someone who can walk in when a switch dies, you want a provider in your own city, and we will say so.
What does it cost?
Support is quoted after we have looked at what you have, with an itemized estimate before any work starts. Project work carries a not-to-exceed ceiling. We will give you the numbers after a 30-minute call, with no obligation and no pretending we can price it without asking anything.
Thirty minutes, and you will know where you stand.
No obligation, no pitch deck. We will tell you what we would do and what the ceiling would be. If that is not worth it, you have lost half an hour.