The businesses we know · Medical practices
Medical and dental practices: managed IT services
Dental, therapy, specialty, and primary care offices with a schedule to keep and a practice management system that has to work every morning.
Already have an IT person? Keep them as the first call; we carry security, backups, nights and vacations. How we work with your IT person →
- $155
- per person, per month: Complete with Security + Compliance.
- Required
- for patient information. HIPAA asks for the written proof, not only the protection.
- 15 min
- usual answer, from someone who knows your setup. Our night team takes anything urgent.
★★★★★ 5.0 on Google · SOC 2 Type II · Founded in Florida in 1995
Thirty minutes, no pitch.
With Pedro, Bill or Leah, who look after new clients. You leave with a plan, and you meet your own team before you decide.
Pedro, Bill and Leah
Pick a time to talk- ✓ Our business associate agreement, in force when your quote names HIPAA.
- ✓ Policies, training on HIPAA and a year of records, kept current.
- ✓ 10 people: $1,550 a month, plus $370 in Microsoft licenses and security suites: $1,920 a month.
“Every one of their techs that I've worked with have been professional, quick to respond and don't just fix the issue, but educate me on what was done and recommendations for any related issues. Personal, professional, reliable!”
Managed IT services for medical practices and healthcare managed IT services in Winter Haven, Orlando, Tampa, St. Petersburg, and Miami.
What the day is like
The schedule opens at seven and the check-in computer has to be up. Your Concierge Team knows which system your practice runs on, which vendor to call, and which workstation is the one in the hallway that always gets unplugged. When something breaks, you reach out any way you like and someone who knows the office takes it from there.
An insurer or an auditor asking for HIPAA proof by a date? Someone wants proof.
Your office manager has the policies, the training dates and the evidence report in one place.
Your plan
Complete with Security + Compliance. Everything in Complete, plus patient records kept and protected the way HIPAA requires, and the proof when the auditor or the insurer asks. People who work only from a phone or a shared tablet are on Frontline. Complete is $125 per person, per month, Security + Compliance $30 per person more, and Frontline is priced on the pricing page beside them.
When someone asks for the proof
One phishing email at the front desk is how most practices end up answering federal investigators. The first thing they ask for is the risk analysis, then the records. With Security + Compliance, the sign-in that looked wrong was stopped, the patient details could not leave by email or USB drive, and the record of who opened what is kept for a year. Your office manager has the policies, the training dates and the evidence report in one place.
Why it matters
What the proof is worth.
The first question after a breach
Where is your risk analysis, and where are your records? Federal investigators have settled at least a dozen HIPAA cases on that question since 2024. In February 2026, a small treatment center paid $103,000 and took on two years of monitoring after one phishing email reached 1,980 patients’ records.
A year of good practice can lower a penalty
Since 2021, the law asks regulators to weigh twelve months of recognized security practices when they set a HIPAA penalty. The year of records Security + Compliance keeps helps you show it.
The insurance claim
The application you signed is a promise. After an incident, the insurer asks for evidence that the controls were running. A year of records is where that evidence comes from.
Peace of mind
The day an auditor, an insurer or a large client asks, the answer is already on file. Nothing is assembled the week before, and nothing depends on one person remembering.
Complete protects. Security + Compliance proves.
Your plan: Complete, with Security + Compliance.
Everything in Complete stays. Security + Compliance adds four things, for everyone on your plan, at $30 more per person, plus Microsoft’s suites at Microsoft’s price.
| Complete$125 per person | With Security + Compliance+$30 per person, for everyone | |
|---|---|---|
| Deeper protectionMicrosoft’s security and compliance suites, set up and run by your team. | ||
| Sign-ins | Multifactor sign-in, with rules by device and location | Plus risky sign-ins stopped or challenged, even with the right password: a leaked password, an anonymous network, a guessing attack |
| Admin rights | Kept to the people who need them | Given only when needed, for a set time, and taken away after |
| Sensitive information | Labels your people apply; email with sensitive details encrypted or stopped | Found and labeled automatically, and stopped from leaving by a Teams chat, a USB drive or an upload |
| Someone quietly taking data | – | An early warning, and tighter controls for that person |
| An investigation months later | What the security center needs to act today | Six months of every computer’s history, searchable |
| Email attacks | A bad email pulled from every mailbox at once | Plus a campaign seen as one attack, traced and cleaned up across every mailbox |
| Microsoft reaching your data | Microsoft’s standard controls | Only with your approval |
| The proof, kept currentWhat an auditor, an insurer or a partner asks for, already on file. | ||
| Who did what in Microsoft 365 | Kept 180 days | Kept one year |
| Records | Email archived and kept | Email, files and chats kept as long as your rule says, locked when they must not change, then deleted after a review |
| Legal hold | Email, files and chats, with a case and a review | |
| Your rule’s checklist | – | Kept for you, scored, with the evidence in one place |
| An evidence report | – | For any audit period, when you or your auditor asks: training finished, practice phishing, policies signed, sign-ins |
| Your program, kept upThe work people do, so the rules never pile up. | ||
| Policies | – | A policy set from our templates, fitted to your business, reviewed with you every year, and signed by your people |
| Who can reach what | Changed when people join and leave | Plus accounts and settings reviewed as Microsoft changes its systems, and you kept current on what changed and why it matters |
| Training | Short, regular security training with practice phishing | Plus your rule assigned to your training: the courses, the practice phishing and the policy sign-offs mapped to it, and the evidence built as your people finish |
| When a rule changes | – | We tell you what changed and what it means for you, and what we changed |
| Once a year | Planning for next year | Plus a compliance review: what your rule asks, what we run, and what is still yours to do |
| When someone asks, or something goes wrong | ||
| Your insurance application | True answers about the controls we run | Plus the underwriter’s calls, the extra forms, and the evidence if you ever file a claim |
| An auditor, a regulator or a partner | – | We answer the technical questions with you, from the records and timelines in our systems |
| A security incident | You hear from us fast, and it is fixed | Plus your insurer’s claims line called first, the logs pulled, the timeline built with you, and the decision you make about who must be told recorded. That decision stays yours, with your attorney |
Part of your plan when you hold
- Patient information, under HIPAA
- Clients’ financial information, under the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission (FTC) Safeguards Rule: CPA firms, tax preparers, lenders and advisers
- Criminal justice information, under the FBI’s Criminal Justice Information Services (CJIS) Security Policy
- Defense contracts, under the Cybersecurity Maturity Model Certification (CMMC)
The rules ask for the written proof, not only the protection.
Recommended in writing when
- An insurer asking for more than the application
- A client’s or a partner’s security questionnaire
- Card payments, under the card industry’s standard (PCI DSS)
- Personal information, under the Florida Information Protection Act (FIPA)
For these, the choice is yours. Answering your cyber insurance application truthfully is in every plan.
Quoted separately, as projects: a formal risk analysis, a security program written from scratch, a penetration test, data kept in another region, readiness for a CMMC Level 2 assessment, and acting as your FTC Qualified Individual.
Under the proof, everything in Complete
Your team and everything we do, in the $125.
Who you will know by name
Florida businesses have trusted us since 1995.
We know what it is like when the one person who knows your IT is out. So you get a team, and you know every one of them.
We’ve worked with Protected Trust for years, and their team is always responsive, easy to reach, and quick to help. They’re knowledgeable, friendly, and make our lives easier. We value our longtime relationship and wouldn’t hesitate to recommend them!
Chris Bridges
Concierge Lead
I keep your business running so you never have to think about technology.
Javier Pereira
Concierge Lead
I take on the projects and the stubborn problems, and explain them in plain English.
Jonathan Jones
Concierge Specialist
I handle the big moves: migrations, mergers, new devices, and everything Microsoft 365.
Chris Munoz
Service Engineer, on site
I set up new machines, sort out the network, and come on site when it needs a person.
Your team, from the first call. This is who you will know by name: Chris Bridges and Javier Pereira as your Concierge Leads, with Jonathan Jones and Chris Munoz, the people who know your setup. The whole company is behind them.
Clients join us, and they stay. Our longest relationships go back more than twenty years.
Let's talk
And the whole company behind them.
Your leads know your setup. When something needs more hands, the rest of the company is right there, and every person on our side is named on the team page, with the year they joined.
Meet everyone →How it works
Three steps, and the team is yours.
A 30-minute call
Tell us what is working and what is not. We will tell you honestly if we fit.
Your first month
Day one, you meet your team by name. Most offices are set up within a few weeks; larger ones within 30 days.
Your team takes it from here
You reach out, and someone who knows you takes it on, usually within 15 minutes.
Your plan
Complete, with Security + Compliance.
$125 for Complete plus $30 for Security + Compliance, per person, per month.
For patient information
Complete + Security + Compliance
$155per person, per month
Everyone starts here
Complete
$125per person, per month
Your own IT team, security in every plan, Microsoft licenses as their own lines.
For the people who use it
Copilot, AI for work
+$30per person, per month
Microsoft Copilot set up safely, only for the people who need it.
Not ready to talk yet?
Do you have the keys to your own IT? Or does someone else?
Most owners think they know, until the one person who does is out on a Friday.
Leah writes to you once, by name. Nobody adds you to a list.
Questions people ask
Plain answers.
Do we need Security + Compliance?
Yes, if you hold patient information, as every medical and dental office does. HIPAA asks for the written proof, not only the protection, so Security + Compliance is part of your plan. Answering your cyber insurance application truthfully is in every plan.
What does IT support for medical practices cover?
The check-in computer up at seven, the practice management system and its vendor known, new providers ready before Monday, lost devices wiped, and the HIPAA records kept under Security + Compliance. Managed IT services for medical practices are the same plan every client gets, with the same people every time.
Our practice management system is the whole business. Do you know it?
Protected Trust knows which system your practice runs on, the vendor behind it, and the workstation it depends on. When it is down, the call to the vendor is ours.
Can you set up a new provider before Monday?
Yes. Computer, mailbox, access, and the practice management login, ready on Friday.
Do people on a shared tablet need a full plan?
No. Frontline covers people who work from a phone or a shared tablet at $30 per person, per month, with the same protection and training as everyone at a desk.
Do you sign a BAA with a medical practice?
Yes. It sits in the HIPAA section of our Data Processing Agreement and takes effect when your quote names HIPAA. Your own yearly risk analysis stays the practice's to do, and we can do it for you as a quoted Security Risk Assessment.
Is encrypted email included for a medical practice?
Yes, for referrals, records, and anything a patient would not want forwarded. It works from Outlook, and the recipient needs nothing.
Everything we do, in one place.
Managed IT
Security + Compliance
Industries Healthcare, Law firms, Accounting firms, Financial services, Professional services, Construction, Government, Real estate.
Thirty minutes with a real person.
Pick a time that suits you. We will tell you honestly if we fit.
Pick a time Or call 863-594-1141
Opens our booking calendar in a window.