Detroit · Grand Rapids · Lansing · Flint
IT support, security and compliance for Michigan companies.
Remote help desk, security monitoring, compliance and vCIO for Michigan businesses and the people who work for them, from Detroit to Ann Arbor.
Photo: Venti Views / Unsplash Michigan's economy
The industries that drive Michigan, and how we help them.
Michigan produces nearly 19% of U.S. autos, more than any other state, and accounts for 58% of U.S. automotive and mobility R&D spending; 96 of the top 100 North American auto suppliers have a presence there.
How we help: Office and plant-floor networks, careful OT and SCADA support, and backups for the systems that run production.
How we help →Corewell Health, a 21-hospital system formed from Beaumont and Spectrum Health, is Michigan's largest employer with more than 60,000 team members.
How we help: EHR support, HIPAA compliance, telehealth and help desk for practices without IT staff.
Healthcare →According to MDARD, the food and agriculture sector adds $125.8 billion a year to Michigan's economy and supports about 805,000 jobs (roughly 17% of state employment) across more than 200 commodities.
How we help: Connectivity for remote sites, and the office IT, security and backups behind the operation.
How we help →Michigan has the nation's highest concentration of mechanical, commercial and electrical engineers, more than three times the national average, which supports a large engineering-services and advanced-manufacturing base.
How we help: CAD workstations, drawing digitization, jobsite connectivity and project cost reporting.
Engineering & construction →Michigan rules
The Michigan laws that affect your IT.
A breach, a privacy request or an auditor's question lands differently in every state. Here is what Michigan asks of businesses that hold its residents' data.
Data-breach notification
- The law
- Mich. Comp. Laws § 445.72 (Identity Theft Protection Act; added 2006 PA 566, amended 2010 PA 315)
- Telling affected people
- "A person or agency shall provide any notice required under this section without unreasonable delay" (delay allowed for law enforcement and for measures needed to determine the scope of the breach and restore system integrity)
- Regulators
- None. There is no requirement to notify the Attorney General. The AG or a prosecuting attorney may sue for civil fines over knowing failures to notify.
- Credit bureaus
- Required unless 1,000 or fewer Michigan residents must be notified (that is, more than 1,000 triggers notice to each nationwide consumer reporting agency without unreasonable delay). Entities subject to GLBA (15 USC 6801-6809) are exempt from the CRA notice.
- Encrypted data
- Encrypted data is generally exempt (a safe harbor), unless the key was also compromised.
Consumer privacy law
Michigan has no comprehensive consumer privacy law. The Personal Data Privacy Act (SB 359, introduced June 5, 2025) is pending in the Senate and had not been enacted as of October 2026.
Other Michigan rules worth knowing
Who: Insurers, producers and other DIFS licensees. Licensees with fewer than 25 employees (including independent contractors) and HIPAA-compliant licensees are exempt from the written-program requirement, but not from the breach notice duties.
Licensees must keep a comprehensive written information security program based on a risk assessment, with incident response and third-party service provider oversight, and must notify the DIFS Director "promptly, but no later than 10 business days" after determining that a qualifying cybersecurity event occurred (Form FIS 2359). Michigan-domiciled insurers must file an annual certification by February 15.
SourceWho: Any person, including employers, that obtains one or more Social Security numbers in the ordinary course of business (FCRA- and GLBA-compliant uses exempt)
Covered persons must create a privacy policy, published in an employee handbook, procedures manual or similar document, that keeps SSNs confidential, prohibits unlawful disclosure, limits access, sets proper disposal methods and sets penalties for violations.
SourceCurrent as of November 2026. This is general information, not legal advice. Laws change, so confirm the details with counsel before relying on them. We help you put the controls in place and keep the evidence; we are not a law firm.
Supporting Michigan teams
Remote by design, wherever your people work.
Our standard hours, 8am to 6pm Central, are 9am to 7pm Eastern. Critical problems are covered nights and weekends.
Eastern · Central (four Upper Peninsula counties bordering Wisconsin: Gogebic, Iron, Dickinson, Menominee)Laptops shipped ready to work, accounts set up on day one, and the same help desk whether someone is in Detroit or working from home.
Help desk & managed ITMFA, managed endpoint protection and monitoring on every device, so a laptop on home Wi-Fi is held to the same standard as the office.
CybersecurityCustomers and staff in several states means several sets of rules. We map which apply and build one program that satisfies them.
SOC 2 · HIPAA · vCISOMichigan questions we get asked
How quickly must a Michigan business notify people after a data breach?
Under Mich. Comp. Laws § 445.72 (Identity Theft Protection Act; added 2006 PA 566, amended 2010 PA 315): "A person or agency shall provide any notice required under this section without unreasonable delay" (delay allowed for law enforcement and for measures needed to determine the scope of the breach and restore system integrity). None. There is no requirement to notify the Attorney General. The AG or a prosecuting attorney may sue for civil fines over knowing failures to notify.
Does Michigan have a consumer privacy law?
Michigan has no comprehensive consumer privacy law. The Personal Data Privacy Act (SB 359, introduced June 5, 2025) is pending in the Senate and had not been enacted as of October 2026. That does not make you exempt from other states' laws: if you serve customers elsewhere, their states' rules can still apply.
Can you support our employees who work remotely in Michigan?
Yes. Help desk, device management, security monitoring and compliance all run remotely, and many of our clients have staff spread across the country. Our standard hours, 8am to 6pm Central, are 9am to 7pm Eastern for your Michigan team, and critical problems are covered nights and weekends.
Do you come on site in Michigan?
Our on-site visits are in Texas. In Michigan, our work is remote, which covers most of what companies need. When something needs hands on hardware, we arrange local help and coordinate it for you.
Thirty minutes, and you will know where you stand.
Thirty minutes, no obligation. Tell us about your Michigan team and we will tell you what we would do and what the ceiling would be.