The businesses we know · Healthcare
Healthcare: managed IT services for practices and clinics
The front desk is never left wondering. Your practice has a team that knows your people, your systems, and your schedule.
Already have an IT person? Keep them as the first call; we carry security, backups, nights and vacations. How we work with your IT person →
- $155
- per person, per month: Complete with Security + Compliance.
- Required
- for patient information. HIPAA asks for the written proof, not only the protection.
- 15 min
- usual answer, from someone who knows your setup. Our night team takes anything urgent.
★★★★★ 5.0 on Google · SOC 2 Type II · Founded in Florida in 1995
Thirty minutes, no pitch.
With Pedro, Bill or Leah, who look after new clients. You leave with a plan, and you meet your own team before you decide.
Pedro, Bill and Leah
Pick a time to talk- ✓ Our business associate agreement, in force when your quote names HIPAA.
- ✓ Policies, training on HIPAA and a year of records, kept current.
- ✓ 10 people: $1,550 a month, plus $370 in Microsoft licenses and security suites: $1,920 a month.
“When you call, message or email- you are met with a kind, professional who fixes any issue in no time.”
Managed IT services for healthcare and healthcare IT services in Winter Haven, Orlando, Tampa, St. Petersburg, and Miami.
What the day is like
When something stops working, someone who already knows the office takes it on. When a laptop is lost, we wipe it and hand you the next one. When your EHR vendor needs a change on your side, we make the call and you are not the go-between. When a new provider starts Monday, their computer, their mailbox, and their access are ready Friday.
An insurer or an auditor asking for HIPAA proof by a date? Someone wants proof.
Encrypted email for anything that has to leave the practice, built and run by us.
Your plan
Complete with Security + Compliance: the same team, plus the records and the proof your auditors ask for. Patient information labeled and protected wherever it goes, records kept as long as HIPAA requires, risky sign-ins stopped even with the right password, and an audit trail you can hand over. Encrypted email for anything that has to leave the practice, built and run by us. Complete is $125 per person, per month, and Security + Compliance is $30 per person on top of it; every line is on the pricing page.
When someone asks for the proof
A patient complains, a laptop goes missing, or the insurer reviews a claim. The first questions are the same every time: where is your risk analysis, who could reach the records, and who was trained. With Security + Compliance the answers are on file: a year of who-did-what records, your policies reviewed this year, your staff's HIPAA training with the dates they finished it, and an evidence report your practice manager can hand over. Your own yearly risk analysis stays the practice's to do, and we can do it for you as a quoted project.
Why it matters
What the proof is worth.
The first question after a breach
Where is your risk analysis, and where are your records? Federal investigators have settled at least a dozen HIPAA cases on that question since 2024. In February 2026, a small treatment center paid $103,000 and took on two years of monitoring after one phishing email reached 1,980 patients’ records.
A year of good practice can lower a penalty
Since 2021, the law asks regulators to weigh twelve months of recognized security practices when they set a HIPAA penalty. The year of records Security + Compliance keeps helps you show it.
The insurance claim
The application you signed is a promise. After an incident, the insurer asks for evidence that the controls were running. A year of records is where that evidence comes from.
Peace of mind
The day an auditor, an insurer or a large client asks, the answer is already on file. Nothing is assembled the week before, and nothing depends on one person remembering.
Complete protects. Security + Compliance proves.
Your plan: Complete, with Security + Compliance.
Everything in Complete stays. Security + Compliance adds four things, for everyone on your plan, at $30 more per person, plus Microsoft’s suites at Microsoft’s price.
| Complete$125 per person | With Security + Compliance+$30 per person, for everyone | |
|---|---|---|
| Deeper protectionMicrosoft’s security and compliance suites, set up and run by your team. | ||
| Sign-ins | Multifactor sign-in, with rules by device and location | Plus risky sign-ins stopped or challenged, even with the right password: a leaked password, an anonymous network, a guessing attack |
| Admin rights | Kept to the people who need them | Given only when needed, for a set time, and taken away after |
| Sensitive information | Labels your people apply; email with sensitive details encrypted or stopped | Found and labeled automatically, and stopped from leaving by a Teams chat, a USB drive or an upload |
| Someone quietly taking data | – | An early warning, and tighter controls for that person |
| An investigation months later | What the security center needs to act today | Six months of every computer’s history, searchable |
| Email attacks | A bad email pulled from every mailbox at once | Plus a campaign seen as one attack, traced and cleaned up across every mailbox |
| Microsoft reaching your data | Microsoft’s standard controls | Only with your approval |
| The proof, kept currentWhat an auditor, an insurer or a partner asks for, already on file. | ||
| Who did what in Microsoft 365 | Kept 180 days | Kept one year |
| Records | Email archived and kept | Email, files and chats kept as long as your rule says, locked when they must not change, then deleted after a review |
| Legal hold | Email, files and chats, with a case and a review | |
| Your rule’s checklist | – | Kept for you, scored, with the evidence in one place |
| An evidence report | – | For any audit period, when you or your auditor asks: training finished, practice phishing, policies signed, sign-ins |
| Your program, kept upThe work people do, so the rules never pile up. | ||
| Policies | – | A policy set from our templates, fitted to your business, reviewed with you every year, and signed by your people |
| Who can reach what | Changed when people join and leave | Plus accounts and settings reviewed as Microsoft changes its systems, and you kept current on what changed and why it matters |
| Training | Short, regular security training with practice phishing | Plus your rule assigned to your training: the courses, the practice phishing and the policy sign-offs mapped to it, and the evidence built as your people finish |
| When a rule changes | – | We tell you what changed and what it means for you, and what we changed |
| Once a year | Planning for next year | Plus a compliance review: what your rule asks, what we run, and what is still yours to do |
| When someone asks, or something goes wrong | ||
| Your insurance application | True answers about the controls we run | Plus the underwriter’s calls, the extra forms, and the evidence if you ever file a claim |
| An auditor, a regulator or a partner | – | We answer the technical questions with you, from the records and timelines in our systems |
| A security incident | You hear from us fast, and it is fixed | Plus your insurer’s claims line called first, the logs pulled, the timeline built with you, and the decision you make about who must be told recorded. That decision stays yours, with your attorney |
Part of your plan when you hold
- Patient information, under HIPAA
- Clients’ financial information, under the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission (FTC) Safeguards Rule: CPA firms, tax preparers, lenders and advisers
- Criminal justice information, under the FBI’s Criminal Justice Information Services (CJIS) Security Policy
- Defense contracts, under the Cybersecurity Maturity Model Certification (CMMC)
The rules ask for the written proof, not only the protection.
Recommended in writing when
- An insurer asking for more than the application
- A client’s or a partner’s security questionnaire
- Card payments, under the card industry’s standard (PCI DSS)
- Personal information, under the Florida Information Protection Act (FIPA)
For these, the choice is yours. Answering your cyber insurance application truthfully is in every plan.
Quoted separately, as projects: a formal risk analysis, a security program written from scratch, a penetration test, data kept in another region, readiness for a CMMC Level 2 assessment, and acting as your FTC Qualified Individual.
Under the proof, everything in Complete
Your team and everything we do, in the $125.
Who you will know by name
Florida businesses have trusted us since 1995.
We know what it is like when the one person who knows your IT is out. So you get a team, and you know every one of them.
Protected Trust has been fantastic to work with! We've been clients for over 10 years, and the team, especially Chris, has always gone above and beyond to help with our IT needs. They're quick to respond and have even called back immediately to troubleshoot issues for us.
Chris Bridges
Concierge Lead
I keep your business running so you never have to think about technology.
Javier Pereira
Concierge Lead
I take on the projects and the stubborn problems, and explain them in plain English.
Jonathan Jones
Concierge Specialist
I handle the big moves: migrations, mergers, new devices, and everything Microsoft 365.
Chris Munoz
Service Engineer, on site
I set up new machines, sort out the network, and come on site when it needs a person.
Your team, from the first call. This is who you will know by name: Chris Bridges and Javier Pereira as your Concierge Leads, with Jonathan Jones and Chris Munoz, the people who know your setup. The whole company is behind them.
Clients join us, and they stay. Our longest relationships go back more than twenty years.
Let's talk
And the whole company behind them.
Your leads know your setup. When something needs more hands, the rest of the company is right there, and every person on our side is named on the team page, with the year they joined.
Meet everyone →How it works
Three steps, and the team is yours.
A 30-minute call
Tell us what is working and what is not. We will tell you honestly if we fit.
Your first month
Day one, you meet your team by name. Most offices are set up within a few weeks; larger ones within 30 days.
Your team takes it from here
You reach out, and someone who knows you takes it on, usually within 15 minutes.
Your plan
Complete, with Security + Compliance.
$125 for Complete plus $30 for Security + Compliance, per person, per month.
For patient information
Complete + Security + Compliance
$155per person, per month
Everyone starts here
Complete
$125per person, per month
Your own IT team, security in every plan, Microsoft licenses as their own lines.
For the people who use it
Copilot, AI for work
+$30per person, per month
Microsoft Copilot set up safely, only for the people who need it.
Not ready to talk yet?
Do you have the keys to your own IT? Or does someone else?
Most owners think they know, until the one person who does is out on a Friday.
Leah writes to you once, by name. Nobody adds you to a list.
Questions people ask
Plain answers.
Do we need Security + Compliance?
Yes, if you hold patient information. HIPAA asks every practice for a risk analysis, written policies, training and records kept for six years, so Security + Compliance is part of your plan. Complete protects; Security + Compliance proves. Answering your cyber insurance application truthfully is in every plan.
What do managed IT services for healthcare include?
Everything a practice runs on, by the same people every time: the computers, Microsoft 365, the EHR vendor calls, the security in every plan, the backups, and the records HIPAA asks for under Security + Compliance. Healthcare IT support is the day-to-day part; the planning for next year comes with it.
Will you sign a business associate agreement?
Yes. A signed business associate agreement is part of starting with any practice that handles patient information. Behind it is our own written HIPAA program, with a yearly risk assessment, background checks and yearly HIPAA training for everyone at Protected Trust, tested every year by an independent SOC 2 auditor.
Do you work with our EHR vendor?
Yes. When the EHR vendor needs a change on your side, Protected Trust makes the call, and you are not the go-between.
What happens when a laptop with patient information is lost?
It is wiped before anyone can open it, and a loaner is at the office while the replacement is on its way.
What does IT support cost for a healthcare practice?
$125 per person, per month, plus Security + Compliance at $30 per person for the records and the proof HIPAA asks for, plus your Microsoft licenses. The pricing page has every line.
Everything we do, in one place.
Managed IT
Security + Compliance
Industries Medical practices, Law firms, Accounting firms, Financial services, Professional services, Construction, Government, Real estate.
Thirty minutes with a real person.
Pick a time that suits you. We will tell you honestly if we fit.
Pick a time Or call 863-594-1141
Opens our booking calendar in a window.