The businesses we know · Financial services
Financial services: IT support for advisors, lenders and firms
Trust is the product you sell. Your technology has to hold to the same standard, and your clients should never have to wonder.
Already have an IT person? Keep them as the first call; we carry security, backups, nights and vacations. How we work with your IT person →
- $155
- per person, per month: Complete with Security + Compliance.
- Required
- for clients' financial information, under the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule.
- 15 min
- usual answer, from someone who knows your setup. Our night team takes anything urgent.
★★★★★ 5.0 on Google · SOC 2 Type II · Founded in Florida in 1995
Thirty minutes, no pitch.
With Pedro, Bill or Leah, who look after new clients. You leave with a plan, and you meet your own team before you decide.
Pedro, Bill and Leah
Pick a time to talk- ✓ Records kept and locked as your rule says, with an early warning if client files leave.
- ✓ Policies, training and a year of records, ready for an examiner.
- ✓ 10 people: $1,550 a month, plus $370 in Microsoft licenses and security suites: $1,920 a month.
“I have been using the services of Protected Trust since 2010. They constantly deliver on the needs of my companies from SOC audits to employee onboarding and off boarding.”
IT support for financial services, and financial services IT support that stays quiet, in Winter Haven, Orlando, Tampa, St. Petersburg, and Miami.
What the day is like
Advisors, agencies, lenders, and the firms around them handle the information people are most protective of. Your team knows your custodian and agency systems, the portals your clients use, and the compliance reviews you answer to. When a client emails a statement, it goes encrypted. When an advisor's sign-in looks wrong, it is stopped before anyone notices.
A WISP or an insurance form due, and nothing to show for it yet? Someone wants proof.
Does one person hold every password? Your IT person is leaving.
Copilot, set up safely, for the advisors who want it.
Your plan
Complete with Security + Compliance: stronger protection on every computer, sign-ins watched for impersonation and stolen credentials, records kept and findable, and the proof a compliance review asks for. Copilot, set up safely, for the advisors who want it. You get early warning when someone is quietly taking client data, such as a departing adviser downloading client files, and records can be locked so they cannot be changed. Complete is $125 per person, per month; Security + Compliance and Copilot are $30 per person each.
When an examiner asks for the proof
An examiner, an auditor or a broker-dealer's compliance team asks the same things: the written program, who can reach client records, how long they are kept, and how you would know if someone took them. With Security + Compliance, records are kept and locked as your rule says, a departing employee downloading client files raises an early warning, and the evidence report shows the training, the policies signed and the sign-ins.
Our own written program covers your clients' data too
GLBA, the Gramm-Leach-Bliley Act, and the SEC's Regulation S-P require firms and their vendors to protect clients' financial information. Our written security and privacy program, the same one an independent SOC 2 auditor tests every year, covers financial client data for advisers and brokers under both. Everyone at Protected Trust passes a security background check and is trained every year.
Why it matters
What the proof is worth.
The list an examiner brings
GLBA and the FTC Safeguards Rule ask for a written program, encryption and multifactor sign-in, and from firms with 5,000 or more clients, a written risk assessment and a yearly report. Since May 2024, a breach touching 500 or more people must be reported to the FTC within 30 days.
The insurance claim
The application you signed is a promise. After an incident, the insurer asks for evidence that the controls were running. A year of records is where that evidence comes from.
Peace of mind
The day an auditor, an insurer or a large client asks, the answer is already on file. Nothing is assembled the week before, and nothing depends on one person remembering.
Complete protects. Security + Compliance proves.
Your plan: Complete, with Security + Compliance.
Everything in Complete stays. Security + Compliance adds four things, for everyone on your plan, at $30 more per person, plus Microsoft’s suites at Microsoft’s price.
| Complete$125 per person | With Security + Compliance+$30 per person, for everyone | |
|---|---|---|
| Deeper protectionMicrosoft’s security and compliance suites, set up and run by your team. | ||
| Sign-ins | Multifactor sign-in, with rules by device and location | Plus risky sign-ins stopped or challenged, even with the right password: a leaked password, an anonymous network, a guessing attack |
| Admin rights | Kept to the people who need them | Given only when needed, for a set time, and taken away after |
| Sensitive information | Labels your people apply; email with sensitive details encrypted or stopped | Found and labeled automatically, and stopped from leaving by a Teams chat, a USB drive or an upload |
| Someone quietly taking data | – | An early warning, and tighter controls for that person |
| An investigation months later | What the security center needs to act today | Six months of every computer’s history, searchable |
| Email attacks | A bad email pulled from every mailbox at once | Plus a campaign seen as one attack, traced and cleaned up across every mailbox |
| Microsoft reaching your data | Microsoft’s standard controls | Only with your approval |
| The proof, kept currentWhat an auditor, an insurer or a partner asks for, already on file. | ||
| Who did what in Microsoft 365 | Kept 180 days | Kept one year |
| Records | Email archived and kept | Email, files and chats kept as long as your rule says, locked when they must not change, then deleted after a review |
| Legal hold | Email, files and chats, with a case and a review | |
| Your rule’s checklist | – | Kept for you, scored, with the evidence in one place |
| An evidence report | – | For any audit period, when you or your auditor asks: training finished, practice phishing, policies signed, sign-ins |
| Your program, kept upThe work people do, so the rules never pile up. | ||
| Policies | – | A policy set from our templates, fitted to your business, reviewed with you every year, and signed by your people |
| Who can reach what | Changed when people join and leave | Plus accounts and settings reviewed as Microsoft changes its systems, and you kept current on what changed and why it matters |
| Training | Short, regular security training with practice phishing | Plus your rule assigned to your training: the courses, the practice phishing and the policy sign-offs mapped to it, and the evidence built as your people finish |
| When a rule changes | – | We tell you what changed and what it means for you, and what we changed |
| Once a year | Planning for next year | Plus a compliance review: what your rule asks, what we run, and what is still yours to do |
| When someone asks, or something goes wrong | ||
| Your insurance application | True answers about the controls we run | Plus the underwriter’s calls, the extra forms, and the evidence if you ever file a claim |
| An auditor, a regulator or a partner | – | We answer the technical questions with you, from the records and timelines in our systems |
| A security incident | You hear from us fast, and it is fixed | Plus your insurer’s claims line called first, the logs pulled, the timeline built with you, and the decision you make about who must be told recorded. That decision stays yours, with your attorney |
Part of your plan when you hold
- Patient information, under HIPAA
- Clients’ financial information, under the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission (FTC) Safeguards Rule: CPA firms, tax preparers, lenders and advisers
- Criminal justice information, under the FBI’s Criminal Justice Information Services (CJIS) Security Policy
- Defense contracts, under the Cybersecurity Maturity Model Certification (CMMC)
The rules ask for the written proof, not only the protection.
Recommended in writing when
- An insurer asking for more than the application
- A client’s or a partner’s security questionnaire
- Card payments, under the card industry’s standard (PCI DSS)
- Personal information, under the Florida Information Protection Act (FIPA)
For these, the choice is yours. Answering your cyber insurance application truthfully is in every plan.
Quoted separately, as projects: a formal risk analysis, a security program written from scratch, a penetration test, data kept in another region, readiness for a CMMC Level 2 assessment, and acting as your FTC Qualified Individual.
Under the proof, everything in Complete
Your team and everything we do, in the $125.
Who you will know by name
Florida businesses have trusted us since 1995.
We know what it is like when the one person who knows your IT is out. So you get a team, and you know every one of them.
Having a partner like Protected Trust for Microsoft licenses, along with knowing we have a resource at Protected Trust like Chris Bridges provides fantastic peace of mind!
Chris Bridges
Concierge Lead
I keep your business running so you never have to think about technology.
Javier Pereira
Concierge Lead
I take on the projects and the stubborn problems, and explain them in plain English.
Jonathan Jones
Concierge Specialist
I handle the big moves: migrations, mergers, new devices, and everything Microsoft 365.
Chris Munoz
Service Engineer, on site
I set up new machines, sort out the network, and come on site when it needs a person.
Your team, from the first call. This is who you will know by name: Chris Bridges and Javier Pereira as your Concierge Leads, with Jonathan Jones and Chris Munoz, the people who know your setup. The whole company is behind them.
Clients join us, and they stay. Our longest relationships go back more than twenty years.
Let's talk
And the whole company behind them.
Your leads know your setup. When something needs more hands, the rest of the company is right there, and every person on our side is named on the team page, with the year they joined.
Meet everyone →How it works
Three steps, and the team is yours.
A 30-minute call
Tell us what is working and what is not. We will tell you honestly if we fit.
Your first month
Day one, you meet your team by name. Most offices are set up within a few weeks; larger ones within 30 days.
Your team takes it from here
You reach out, and someone who knows you takes it on, usually within 15 minutes.
Your plan
Complete, with Security + Compliance.
$125 for Complete plus $30 for Security + Compliance, per person, per month.
For clients' financial records
Complete + Security + Compliance
$155per person, per month
Everyone starts here
Complete
$125per person, per month
Your own IT team, security in every plan, Microsoft licenses as their own lines.
For the people who use it
Copilot, AI for work
+$30per person, per month
Microsoft Copilot set up safely, only for the people who need it.
Not ready to talk yet?
Do you have the keys to your own IT? Or does someone else?
Most owners think they know, until the one person who does is out on a Friday.
Leah writes to you once, by name. Nobody adds you to a list.
Questions people ask
Plain answers.
What does IT support for financial services include here?
Your custodian and agency systems supported by people who know them, encrypted email for statements, sign-ins watched for impersonation, and the records a compliance review asks for under Security + Compliance. Financial services IT support is the same plan, with the same people every time.
Do you work with our custodian and agency systems?
Yes. Your Concierge Team learns the portals and the systems your firm runs on, and the vendor calls are ours.
How do you handle a compliance review?
The records are kept and findable, the audit trail is mapped to the rules you answer to, and the proof is ready before the reviewer asks.
Can our advisors use Copilot safely?
Yes, after the readiness project makes sure Copilot cannot surface what it should not. Then it is added for the advisors who want it.
Do we need Security + Compliance?
Yes, if you hold clients' financial information. GLBA and the FTC Safeguards Rule, and Regulation S-P for SEC-registered firms, ask for the written program and the records, not only the protection, so Security + Compliance is part of your plan. Answering your cyber insurance application truthfully is in every plan.
What does IT support cost for a financial firm?
$125 per person, per month. We recommend adding Security + Compliance at $30 per person. The pricing page has every line.
Everything we do, in one place.
Managed IT
Security + Compliance
Industries Healthcare, Medical practices, Law firms, Accounting firms, Professional services, Construction, Government, Real estate.
Thirty minutes with a real person.
Pick a time that suits you. We will tell you honestly if we fit.
Pick a time Or call 863-594-1141
Opens our booking calendar in a window.