Charlotte · Raleigh · Greensboro · Durham
IT support, security and compliance for North Carolina companies.
Remote help desk, security monitoring, compliance and vCIO for North Carolina businesses and the people who work for them, from Charlotte to Winston.
Photo: Wes Hicks / Unsplash North Carolina's economy
The industries that drive North Carolina, and how we help them.
The N.C. Department of Commerce ranks North Carolina third among U.S. financial centers, anchored by Charlotte, with major employers including Bank of America and Wells Fargo.
How we help: SOC 2, security questionnaires, remote teams and board-level IT guidance for firms that hold client data.
Software & professional services →North Carolina has the largest research park in the U.S. (Research Triangle Park) and three Tier 1 research universities, plus manufacturers such as Novo Nordisk, Merck and FUJIFILM Diosynth.
How we help: EHR support, HIPAA compliance, telehealth and help desk for practices without IT staff.
Healthcare →The Department of Commerce ranks North Carolina second nationally for IT industry growth, with major operations from Google, Cisco and Cary-based SAS.
How we help: SOC 2, security questionnaires, remote teams and board-level IT guidance for firms that hold client data.
Software & professional services →According to NCDA&CS, agriculture and agribusiness had a record economic impact of $111.1 billion in 2023, and the state ranks second nationally in animal processing.
How we help: Connectivity for remote sites, and the office IT, security and backups behind the operation.
How we help →North Carolina ranks 10th nationally in automotive-sector employment, with Daimler Truck/Freightliner, Caterpillar and Bridgestone among its major employers.
How we help: Office and plant-floor networks, careful OT and SCADA support, and backups for the systems that run production.
How we help →North Carolina rules
The North Carolina laws that affect your IT.
A breach, a privacy request or an auditor's question lands differently in every state. Here is what North Carolina asks of businesses that hold its residents' data.
Data-breach notification
- The law
- N.C. Gen. Stat. §§ 75-61 and 75-65 (Identity Theft Protection Act)
- Telling affected people
- "The disclosure notification shall be made without unreasonable delay" (subject to law enforcement delay and measures needed to determine the scope of the breach and restore system integrity)
- Regulators
- Yes, with no threshold. Whenever a business notifies an affected person, it "shall notify without unreasonable delay the Consumer Protection Division of the Attorney General's Office" of the nature of the breach, the number of consumers affected, steps taken to investigate and to prevent a similar breach, and the timing, distribution and content of the notice. The NC DOJ takes these reports through an online security breach reporting page.
- Credit bureaus
- More than 1,000 persons at one time: notify, without unreasonable delay, the AG's Consumer Protection Division and all nationwide consumer reporting agencies of the timing, distribution and content of the notice.
- Encrypted data
- Encrypted data is generally exempt (a safe harbor), unless the key was also compromised.
Consumer privacy law
North Carolina has no comprehensive consumer privacy law. The North Carolina Consumer Privacy Act (SB 757, 2025-2026 session) and related bills were introduced but not enacted as of October 2026.
Other North Carolina rules worth knowing
Who: Businesses (Identity Theft Protection Act)
Businesses may not make SSNs available to the public, print them on access cards or on mail (unless legally required), require them to be sent over the internet without a secure connection or encryption, require them to access a website without an additional password or PIN, or sell or disclose them to third parties without a legitimate purpose and the person's written consent.
SourceWho: Any business that does business in NC or maintains personal information of NC residents, and record-disposal vendors (exemptions for GLBA-, HIPAA- and FCRA-compliant entities)
Businesses must take reasonable measures against unauthorized access during and after disposal, including written policies requiring paper records to be burned, pulverized or shredded and electronic media to be destroyed or erased, and due diligence on any disposal vendor.
SourceWho: State agencies (including the UNC system) and local government entities (cities, counties, school administrative units, community colleges)
Covered entities may not pay a ransom or communicate with a ransomware attacker, and must consult the N.C. Department of Information Technology when they receive a ransom request.
SourceCurrent as of November 2026. This is general information, not legal advice. Laws change, so confirm the details with counsel before relying on them. We help you put the controls in place and keep the evidence; we are not a law firm.
Supporting North Carolina teams
Remote by design, wherever your people work.
Our standard hours, 8am to 6pm Central, are 9am to 7pm Eastern. Critical problems are covered nights and weekends.
EasternLaptops shipped ready to work, accounts set up on day one, and the same help desk whether someone is in Charlotte or working from home.
Help desk & managed ITMFA, managed endpoint protection and monitoring on every device, so a laptop on home Wi-Fi is held to the same standard as the office.
CybersecurityCustomers and staff in several states means several sets of rules. We map which apply and build one program that satisfies them.
SOC 2 · HIPAA · vCISONorth Carolina questions we get asked
How quickly must a North Carolina business notify people after a data breach?
Under N.C. Gen. Stat. §§ 75-61 and 75-65 (Identity Theft Protection Act): "The disclosure notification shall be made without unreasonable delay" (subject to law enforcement delay and measures needed to determine the scope of the breach and restore system integrity). Yes, with no threshold. Whenever a business notifies an affected person, it "shall notify without unreasonable delay the Consumer Protection Division of the Attorney General's Office" of the nature of the breach, the number of consumers affected, steps taken to investigate and to prevent a similar breach, and the timing, distribution and content of the notice. The NC DOJ takes these reports through an online security breach reporting page.
Does North Carolina have a consumer privacy law?
North Carolina has no comprehensive consumer privacy law. The North Carolina Consumer Privacy Act (SB 757, 2025-2026 session) and related bills were introduced but not enacted as of October 2026. That does not make you exempt from other states' laws: if you serve customers elsewhere, their states' rules can still apply.
Can you support our employees who work remotely in North Carolina?
Yes. Help desk, device management, security monitoring and compliance all run remotely, and many of our clients have staff spread across the country. Our standard hours, 8am to 6pm Central, are 9am to 7pm Eastern for your North Carolina team, and critical problems are covered nights and weekends.
Do you come on site in North Carolina?
Our on-site visits are in Texas. In North Carolina, our work is remote, which covers most of what companies need. When something needs hands on hardware, we arrange local help and coordinate it for you.
Thirty minutes, and you will know where you stand.
Thirty minutes, no obligation. Tell us about your North Carolina team and we will tell you what we would do and what the ceiling would be.