Six service lines, each with a defined scope
Most engagements start with a platform (Microsoft 365 or Google Workspace) and pick up security, data, and web as they come into view.
Microsoft 365
Full tenant administration, billed monthly at a fixed rate per user.
- Exchange Online: mailboxes, shared mailboxes, distribution groups, mail flow rules
- SharePoint and Teams structured so files are findable a year from now
- Entra ID groups, roles, and conditional access policy
- Intune device enrollment, compliance policy, and app deployment
- License review: right plan, right count, seats reclaimed when people leave
- Requests handled by email with a same-business-day first reply
Google Workspace
Admin console administration for teams that run on Google, on the same fixed monthly basis.
- Organizational units and groups that mirror how the team actually works
- Shared Drives set up with sane permissions, not a shared junk drawer
- Gmail routing, retention, and compliance rules
- Endpoint management and context-aware access
- Google for Nonprofits enrollment and mixed-licensing architecture
- Vault configuration for retention and eDiscovery where it applies
Security
The controls that decide who gets into what, and what happens when someone tries who shouldn't.
- Multi-factor authentication on every account, phishing-resistant where supported
- Conditional access and single sign-on for the apps used daily
- Endpoint protection: Defender for Business or the Google equivalent
- Email authentication: SPF, DKIM, and DMARC moved to enforcement
- Quarterly access reviews of admin roles, shared accounts, and third-party app grants
- Onboarding and offboarding checklists that close every door on the way out
- Password manager rollout and training
- Security posture assessment against a published hardening checklist
Data
Getting data where it belongs, keeping a copy that works, and making it answer questions.
- Migrations: Google Workspace to Microsoft 365, or the other way, or tenant to tenant
- Consolidating personal accounts into a managed domain
- Backup configured for mail, files, and sites, with restores tested monthly, not assumed
- Retention policy and legal hold set to match what you're actually required to keep
- Reporting and dashboards in Power BI or Looker Studio from data you already have
- Pre-migration inventory, test run, cutover plan, and post-migration cleanup
Web
The site and the domain underneath it, kept current and reaching inboxes.
- Site build or rebuild on static hosting: fast, cheap to run, nothing to patch
- Domain registration, DNS, and certificate management
- Email deliverability: SPF, DKIM, and DMARC configured and monitored
- Contact forms wired to a mailbox someone actually reads
- Analytics set up so the numbers mean something, without tracking sprawl
- Migrating off a page builder subscription nobody wants to keep paying for
AI enablement
ChatGPT, Claude, and Microsoft Copilot in your team's hands, with the guardrails set before anyone uploads a spreadsheet.
- ChatGPT Business or Enterprise, Claude for Work, or Copilot, picked for how your team works
- Workspace setup, seats, and admin controls
- Data handling and retention settings matched to your policies
- A one-page acceptable use policy in plain language
- Hands-on training for the first pilot group
- Nonprofit discount eligibility checked and applied where available
Fixed-scope advisory
When you need a clear recommendation rather than ongoing support. Quoted as a fixed price, delivered as a written document you own.
- Vendor and renewal reviews with a written recommendation
- Security posture assessment and a prioritized fix list
- Technology plan for a growing team or a new office
- A second opinion before you sign something
Fixed monthly, scoped in writing
Ongoing platform administration is priced per user per month with a small minimum. Projects and advisory work are quoted as a fixed price after a short discovery call. No hourly surprises.