Engagements
Firms that will not say how they price are improvising. Three engagement structures, matched to the three things we do, with the fee basis for each one stated below. The number follows the scoping conversation and arrives in writing before any work begins.
Three ways to work with us, each priced in writing before any work starts.
Secure AI Integration
A defined project with a defined end: Microsoft Copilot deployed to your tenant, governed, and adopted by your staff.
- Tenant-scoped Copilot deployment with verified training opt-outs
- Data loss prevention policies built around your document types
- The agents built in your tenant, the Firm Assistant, the Morning Brief and the Return Reviewer, and live staff training
- Usage logging and a client-facing AI statement
AI Oversight & vCISO
A standing relationship. The AI environment keeps growing, identity is hardened, the coverage of the tools you already pay for is verified, questionnaires are answered, and a named advisor answers for your posture. You keep your IT provider, and we name them as control owner in the documentation.
- New agents reach your tenant in the quarter they ship, and new gallery prompts go out as they are written
- Microsoft Defender configured to a documented baseline, coverage reconciled against your staff roster
- Update status verified per device, not taken from a deployment log
- Enforced MFA, conditional access, and privileged access reviewed at each quarterly review
- Completed client and vendor security questionnaires
- Quarterly posture reviews with leadership
Compliance & WISP
Assessment and documentation: your actual posture turned into the written record the FTC Safeguards Rule and IRS expect you to produce.
- Full safeguards assessment mapped to the IRS Security Six
- A gap register ranked by exposure, with recommended owners and target dates
- A signed WISP that describes the firm as it actually operates
- Staff training with completion records
We do not bill hourly for engagement work, because hourly billing rewards slowness and makes your cost unknowable.
// Fees_01
How fees work here
Every engagement is priced before it starts. After a scoping conversation, you receive a written proposal with a fixed fee, a defined deliverable, and a timeline. If the scope changes, the fee changes in writing before the work does, never after. We do not bill hourly for engagement work, because hourly billing rewards slowness and makes your cost unknowable, and we do not believe a firm should have to guess what its security function costs.
What determines the number: your firm's size band, the systems in scope, and how much of the groundwork already exists. A ten-person practice with current tooling sits in a different band than a twenty-five-person firm starting from a template WISP nobody has opened. That is why the number follows the conversation rather than preceding it.
Every engagement begins with a conversation
Thirty minutes, no charge, no obligation. You describe what you hold and what worries you; we tell you what we would prioritise, and whether you need us at all.