Managed IT and security

Your IT, looked after by people who know it.

We're a two-person team in Minnesota. We run the networks, Microsoft 365 and security for businesses and nonprofits, from a single office to several. When your staff need help, they reach one of the two people who set up their systems.

Flat monthly pricing, with nonprofit rates. Quoted after a free assessment.

Line drawing of a lighthouse shining across a harbor toward three small buildings connected by dotted lines.

Who we serve

Built for teams without an IT department.

Most organizations with a handful to a hundred people don't need a full-time IT staff. They need someone who already knows their setup, answers when something breaks, and keeps the security work from slipping. We fit your IT around how your people actually work, whether that's one front office or staff spread across several sites.

  • Small and mid-sized businesses
  • Nonprofits, including grant-funded programs
  • Organizations with several offices on one Microsoft 365 tenant
  • Offices that handle confidential or sensitive records

Services

Everything your staff log in to, looked after.

One flat monthly agreement covers the day-to-day and the security work. We handle it together, so the person fixing a printer also knows who should have access to what.

  • Managed IT and helpdesk

    When something stops a shift, staff email us or message us in Teams, and one of us picks it up. We already know their setup, so nobody starts from scratch.

    Includes

    • Accounts and password resets
    • Onboarding and offboarding staff
    • Printers, scanners and shared drives
    • Software installs and updates
  • Cybersecurity

    Phishing usually looks like an invoice, a shared document or a password warning. We protect accounts, email and devices against it, and we're on the line if something gets through.

    Includes

    • MFA that can't be skipped
    • Email filtering and sender authentication
    • Endpoint detection on every device
    • Incident response
    • Security training sized for staff, not engineers
  • Microsoft 365 and Teams

    We set up the tenant you already pay for so it matches how your staff work, and check that you're paying for the right licenses and nothing extra. Some protections on this page, like conditional access and remote wipe, need Business Premium or an add-on. We show you that cost before we recommend it.

    Includes

    • Entra ID, with conditional access where licensed
    • Licensing review, including nonprofit discounts
    • Teams and SharePoint structure and permissions
    • Teams Phone and call routing
  • Networking and multi-site

    One office or several. Staff get the same files and the same Teams wherever they work, and every site stays locked down.

    Includes

    • Office networks and Wi-Fi
    • Site-to-site links
    • Guest Wi-Fi kept apart from staff networks
    • Firewalls and secure remote access
  • Backup and continuity

    A backup only counts if it restores, so we test yours. Your phones have to ring too, so we plan call routing so one office losing its internet doesn't take your main line down with it.

    Includes

    • Microsoft 365 and file backups kept where a hijacked account can't delete them
    • Scheduled test restores
    • A written plan for the night an office is unreachable
  • Devices

    Laptops and phones set up properly once, then kept current. If one goes missing, we can wipe it from wherever we are.

    Includes

    • Laptop and phone setup
    • Encryption and screen-lock policies
    • Remote wipe for lost devices
    • Patching
    • Work data kept separate on personal phones

Sensitive data

When your records are sensitive, we treat them that way.

Plenty of organizations hold information that would hurt someone if it got out: client files, health details, finances, home addresses. For some, a single exposed address or a forwarded email can put a person in danger. When that's the case, we design for it.

  • Locations stay private

    If any of your addresses are confidential, we keep them out of email signatures, shared calendars and device location settings. We also check what photos, Wi-Fi names and online listings give away, and help you get them taken down.

  • Your data stays yours

    We don't open client files or mailboxes. Our everyday accounts can't reach them, we use separate admin accounts only when a task needs one, and admin activity is logged in your tenant where you can see it. If a fix ever brings us near client data, we ask first. Your organization owns its data, and we put that in writing.

  • Least access, every login protected

    Staff see the records their role needs and nothing more. Every account gets MFA, admins included, and conditional access wherever your licenses include it. Nobody shares a login.

  • Support without client details

    A support request never needs a client's name or address. We train staff to describe the problem, not the person. If client information lands in a support email by mistake, we delete it and tell you.

  • Built around your rules

    Many organizations work under rules about who can see what: HIPAA for health information, confidentiality duties for legal and financial clients, and VAWA and FVPSA for survivor services. We set up your tools to fit the rules you work under and keep our own access as narrow as the work allows.

  • Staff safety counts too

    When someone on your staff is being harassed or targeted online, we help lock down their accounts and devices. Then we walk them through what was exposed and what to change.

During the assessment we check each of these against your setup and show you what we found. Questions before then? Email us.

How we work

The first ninety days, written down before we start.

It starts with a free assessment. We visit, look around, and give you a written summary whether or not you hire us. If you do, this is the plan.

  1. Days 1–30

    Listen and stabilize

    • Walk every site and meet the staff
    • Turn on MFA for every account, admins first
    • Document what exists, from routers to licenses
    • Take over admin access properly, with nothing left in a former vendor's name
    • Fix anything urgent we find along the way
  2. Days 31–60

    Secure the basics

    • Conditional access and sign-in alerts
    • Backups verified with a real test restore
    • Device encryption and remote wipe
    • Email protection and sender authentication
    • Clean up accounts for people who have left
  3. Days 61–90

    Plan the next year

    • A written roadmap in plain English
    • Costs laid out to fit your budget year
    • Your first quarterly review with leadership

Before day one

Switching from your current provider.

We do the asking. You send one email to your current provider authorizing the handover, and we collect the rest:

  • Microsoft 365 global admin and the transfer of your licenses
  • Your domain registration and DNS
  • Firewall, router and Wi-Fi logins
  • Backup accounts and any documentation they hold

We plan the switch around the notice period in your current contract and work alongside your current provider until every login is in your organization's name. Phones move last, and we test them before anything is switched off.

Every month

A report you can read in five minutes.

You shouldn't need an IT background to know what your IT provider did. Each month you get a short page you can hand to your owner, board or leadership team.

  • How we did against our response goals
  • Every change to admin access, with who and why
  • A standing check-in call at a time that suits you
  • A quarterly review that lines up with your budget year

September IT summary

Prepared for your leadership team

What we fixed

Two staff laptops were overdue for updates. Both are patched and back on schedule.

The front-desk printer at one office kept dropping off the network. It now has a fixed address and has stayed connected.

Response times

11 requests. Both urgent ones had one of us on them within our 30-minute goal. Eight of the other nine got a reply the same business day. The ninth came in late Friday and was answered Monday morning.

What we're watching

A few emails posing as a shared invoice reached staff inboxes. Nobody clicked. We tightened the filter and will report back next month.

What needs a decision from you

Three laptops are past their supported age. Replacing them this year or next is a budget call. We've listed two options with costs.

Next month

Finish separating guest Wi-Fi at the second office, and run the quarterly access review.

Example of the format. Not real client data.

The team

Two people, and you'll know both of them.

Kiowa

Founder, networking and platform

Kiowa designs the parts everything else stands on: office networks, the links between sites, and the Microsoft 365, Entra and Teams setup your staff use all day. That comes from a long stretch of hands-on work setting up, running and maintaining systems, so the plans are made by someone who has also had to keep them running.

Kiowa also writes software. Sometimes a small tool is a better fix than another subscription.

Security lead

Helpdesk and security

Our security lead runs the helpdesk and all of the security work: threat protection, incident response, security awareness training and device hardening.

When something looks wrong, like a strange email, a sign-in from somewhere odd or a phone acting up, this is who staff reach. We keep support and security together on purpose. Whoever answers the call is also watching for trouble.

You'll meet our security lead at the assessment, and we'll share their background before you sign.

Before you choose

Questions worth asking any IT partner.

When a staff member needs help, who answers?
One of the two of us. At onboarding your staff get our direct contact details, and we learn who they are and how their office runs.
Will the same person handle it next time?
It'll be one of the same two people every time, and we both know your setup, so nobody has to explain their office again.
How fast do you respond?
Our goals: when something urgent comes in during support hours, one of us is on it within 30 minutes. Everything else gets a reply the same business day. The monthly report shows how we did against both.
Can you explain last month's work without jargon?
That's what the monthly report is for. If a line in it needs a glossary, we rewrite the line.
Is managed IT new for you?
The division is new. The work isn't: we've been setting up, running and maintaining networks, Microsoft 365 and security for a long time. Offering it as a managed service means we take on a small number of clients and both of us stay closely involved. In the assessment we'll show you the exact settings we'd use for your accounts, devices and network. Every login and document sits in your tenant, in your name, from the first month.
What happens to our data if we part ways?
It stays yours. We hand back admin access, passwords and documentation cleanly, and we'll help whoever comes next get started.

Ask anyone you're considering the same questions, us included.

Software

We build software too.

When a spreadsheet, a manual step or an old intake form is slowing your staff down, we can build the tool that replaces it. Internal tools, automations and websites, from the same people who already know your systems.

Mado Digital has shipped apps and web tools, including Gomi Guide and Sourcemark.

More at madodigital.net

FAQ

Common questions.

What does the free assessment involve?

We start with a call, then visit your main office and any others where it makes sense. We look at your network, Microsoft 365 setup, devices, backups and security settings, and we talk with whoever handles IT today. You get a written summary of what we found and what we'd fix first. It's yours to keep whether or not you hire us.

How is pricing set?

Flat monthly, quoted after the assessment, with lower rates for nonprofits. The number depends on how many people and sites you have, not on how many times you contact us. The quote lists the security and backup tools we use and whether each one is included in the monthly price or billed at cost, so it can go into a budget, or a grant, line by line. It also says what would cost extra, like new hardware or a large project.

What are your hours, and what happens after hours?

Regular support runs on weekday business hours, with the exact hours set in your agreement. Outside them we keep an urgent route for a short list of emergencies: phones or internet down at an office, an account that looks compromised, a lost device with sensitive data on it, or signs of ransomware. Those reach both of us at any hour, and the callback goal goes in writing before you sign. Password resets and printer trouble wait until morning. We won't promise a round-the-clock helpdesk that two people can't honestly staff.

Do you only work in Minnesota?

We're based in Sherburne County, northwest of the Twin Cities, and most day-to-day support happens remotely. When something can't be fixed from here, one of us comes to the office. During the assessment we agree how quickly we can reach each of your locations and put it in writing.

Can you work alongside our current provider during a handover?

Yes. We work in parallel for an agreed period, collect admin access and documentation properly, and take over once nothing is left loose. Switching from your current provider covers what we collect.

Do you help with Microsoft 365 licensing?

Yes, for businesses and nonprofits alike. For nonprofits: Microsoft ended its free Business Premium and Office 365 E1 grants for nonprofits, starting at each organization's first renewal after July 1, 2025. Business Basic is still free for up to 300 users, and the paid plans carry nonprofit discounts. Some protections on this page, like conditional access and remote wipe, need Business Premium or an add-on, and we'll show you the cost before recommending it. We check what you have, what you pay for and what your staff actually use, then recommend the smallest setup that covers your security needs.

What happens if one of you is out sick?

The other one covers. We both work in your environment, keep shared documentation of your setup, and hold the access needed to step in. If one of us will be away for a planned stretch, you'll hear about it ahead of time.

Contact

Let's start with a walk-through.

Email us and we'll set up a free assessment. No pitch deck, no pressure.

  1. 1You email us. One of us writes back, usually within a business day.
  2. 2We talk on a call, then visit your offices.
  3. 3You get a written summary to keep.