Murfreesboro · Rutherford County · Greater Nashville
The IT department your practice is too small to hire
I spent eight years on the IT team of a radiology company — 200 remote sites, 60 radiologists, and every HIPAA obligation that came with them — after five years in small-business and industrial IT. Now small medical and dental practices around Murfreesboro can have that same standard of support, on a flat monthly rate.
Your software vendor keeps supporting your software. I handle everything around it — the computers, the network, Microsoft 365, your backups and your security — so the tools your staff depend on all day actually stay up.
Locally owned, licensed and insured in Murfreesboro. You always work directly with me.
What working with me looks like
- One named person who answers — not a ticket queue
- Flat monthly rate, quoted up front, no surprise invoices
- HIPAA-fluent: I sign Business Associate Agreements
- Problems caught by monitoring before your staff call
- I take the time to explain any issues and how I will resolve them
Start here
HIPAA Security Risk Assessment
The HIPAA Security Rule requires every covered entity to keep a current, documented analysis of the risks to its electronic protected health information (45 CFR § 164.308(a)(1)(ii)(A)). It is also the first document an auditor asks for — and the one most small practices cannot produce. This is where we start, and you keep the report whether or not you ever hire me for anything else.
What you receive
- An inventory of your systems and everywhere patient information actually lives — computers, cloud services, email, portable drives and paper-to-digital workflows
- A review of the threats and weaknesses that apply to your office specifically, not a generic checklist
- An assessment of what you have in place today measured against the Security Rule's requirements
- A written risk register with every item rated by severity
- A prioritized plan to fix them, with cost estimates — so you can budget instead of guess
- A management sign-off document, formatted and organized for the six-year retention requirement
Some of what I check for specifically: shared logins nobody has changed in years, multi-factor login switched off because it was inconvenient, mail forwarding rules pointing at personal addresses, a backup nobody has ever restored from, and former employees whose accounts still work.
$2,500–$4,750 flat
Up to 10 staff — $2,500
11–25 staff — $3,500
26–50 staff — $4,750
Quoted in writing before any work starts. The entire fee is credited against your first three months if you start a Complete plan within 60 days.
Not sure you need the full assessment yet? The Practice IT Health Check is $495 — about three hours, a written summary of what I found and your five biggest risks. Credited back if you start a monthly plan within 60 days.
Being straight with you about what this is not. This is a technical security risk analysis and a documentation deliverable — not legal advice, not a certification, and not an official audit. No one can sell you "HIPAA certified." What it does give you is an honest picture of where you stand and the written evidence that you looked.
Services
Everything a small office needs from an IT department, without the payroll. Medical and dental practices are my specialty — and the same package fits any small professional office around Murfreesboro that runs on computers it cannot afford to lose: veterinary clinics, therapy and counseling practices, law firms, accounting offices and similar teams of roughly 5–30 people.
Day to day
Managed IT & Helpdesk
Remote monitoring, patching, and a helpdesk your front desk can actually reach. Regular check-ins so small problems never become the reason you close early.
Microsoft 365
Setup, Migration & Hardening
Email, files and Teams migrated with minimal downtime, then locked down: multi-factor authentication, phishing protection, sensible sharing policies, and licensing you are not quietly overpaying for.
Security
Cybersecurity & Backup/DR
Managed endpoint protection, patch management, and backups that have actually been test-restored. The unglamorous fundamentals that keep you off the breach notification list.
Compliance
HIPAA Risk Assessments
The documented security risk analysis the Security Rule requires, written so a practice manager can read it — plus a remediation plan with real numbers attached. See what's included.
Workstations
New Computers & Onboarding
Specifying, buying, imaging and deploying workstations that will still be supportable in four years — plus clean new-hire setup and, just as importantly, complete access removal the day someone leaves.
From $895
GoDaddy 365 Rescue
Bought Microsoft 365 through GoDaddy? You are almost certainly paying more for less — limited admin control, missing security features, and support that cannot help with either. I move you to Microsoft directly without losing mail, files or a day of work — worked from a written runbook, in a scheduled evening or weekend window, with a rollback plan at every step.
AI
AI for Your Office
Adopt AI tools without quietly shipping patient or client data to a company you have never heard of — including private setups that run entirely on hardware you own and never leave your building. Practical, not hype.
Where my work stops — and why that is good news
I do not support, configure or integrate your practice-management, EHR or imaging software. Those vendors know their own products far better than any general IT provider ever will, and you are already paying them to. I stay out of their lane.
What I do is own everything around that software: the workstations it runs on, the network and internet it depends on, the Microsoft 365 tenant your staff live in, the backups, and the security controls that keep all of it defensible. When your software vendor needs a port opened, a workstation prepped, a scanner mapped or a server rebooted at 6 a.m., I am the person on the other end of that call — so your office manager stops being the go-between. I also do not run low-voltage cabling or physical wiring installs; when a job needs it, I bring in a licensed installer and manage the work.
Why practices pick me
Most IT companies learn what a healthcare environment demands on your dime. I spent eight years inside one, where downtime had a clinical cost and a HIPAA one.
doing IT for a radiology company — a HIPAA-regulated environment, every day, not a weekend course
remote sites whose connectivity, workstations and uptime were my responsibility
physicians who needed their equipment working before their first read of the morning
- I speak HIPAA without a translator. Access controls, audit logging, encryption, minimum necessary, and what "reasonable and appropriate" means in a five-person office.
- I sign Business Associate Agreements — no hesitation, no legal review theater, no surprise when you ask.
- I stay in my lane with your clinical software and coordinate cleanly with the vendors who own it, so nobody spends a morning stuck between two support desks.
- I understand a clinical schedule. Disruptive work happens after hours or on your lightest day, not at 10 a.m. on a Tuesday.
- Front-desk reality is built in. Phishing defense and email hygiene designed for busy people who open attachments from strangers all day, because that is literally their job.
- Encrypted, tested backups your compliance documentation can point to — restored on purpose, on a schedule, before you ever need them for real.
Simple monthly plans
One flat monthly price based on how many people you have — so IT is a budget line, not a lottery. No surprise invoices when something breaks. Your exact number comes after a short discovery call; I would rather price it right than price it fast.
Essentials
Everything in the cloud, no server. Good fit: 6–10 people.
from$895/month
$145 per person / month
- Monitoring and updates on every computer
- Managed antivirus and ransomware protection
- Microsoft 365 administration and security setup
- Backup of your Microsoft 365 email and files
- Help desk for your staff during covered hours
- Business Associate Agreement signed
- Quarterly check-in
Complete
With or without a server. Good fit: 8–20 people.
from$1,595/month
$175 per person / month
Everything in Essentials, plus:
- Server management — updates, backup, hardware health
- Backup with tested restores and a written recovery plan
- I deal with your software vendors — no more getting bounced between two companies
- Security awareness training with simulated phishing
- Yearly update to your HIPAA risk documentation
- One on-site visit per month
- Technology and budget review twice a year
Complete + Compliance
Multiple providers or locations, or facing an audit.
from$2,795/month
$205 per person / month
Everything in Complete, plus:
- Your full HIPAA program maintained: written policies, staff training records, BAA register, incident response plan
- A complete Security Risk Assessment every year, in the form an auditor expects
- Disaster recovery plan with an annual live test
- Quarterly planning and budget session
- Two on-site visits per month
- First position in the queue
Larger offices pay less per person. Teams of 13–20 and 21–30 each get a lower rate, so a 10-person office on Complete lands around $1,750/month and a 20-person office around $3,260/month.
Add-ons: server $245/month each · additional location $350/month · vendor-managed workstations (imaging, operatory or other specialty PCs) monitored only, $25/month each.
Prefer to pay by the hour?
- Business hours, no plan $185/hr
- After hours & Saturday $275/hr
- Emergency, Sunday or holiday $350/hr
- Monthly plan clients $150/hr
One-hour minimum during business hours, two after. Projects are quoted flat and in writing before anything starts.
How fast I respond
- Office down, nobody can work 1 business hr
- System down or several people stuck 4 business hrs
- One person stuck, has a workaround Same day
- Requests, changes, new staff setup 2 business days
Covered hours are Monday–Friday, 7:30 a.m.–5:00 p.m. Central — earlier than most IT companies, because your day starts before theirs does.
The honest version
I am one person, not a call center. Evenings and Saturdays I answer when I can, and I will tell you straight away whether I can actually be there rather than leave you waiting. I do not promise overnight or Sunday coverage.
If you need genuine 24/7, you need a larger firm — and I will say so in our first conversation instead of selling you something I cannot deliver.
Questions practice managers actually ask
Will you sign a Business Associate Agreement?
Yes, without hesitation. If I touch systems that store or transmit electronic protected health information, a BAA is not optional and I do not treat it as a negotiation. Send me yours, or I can provide one.
Do you support our practice-management, EHR or imaging software?
No — and that is deliberate. Your software vendor knows that application better than any general IT provider will, and you are already paying for their support. I own everything around it: workstations, network, internet, Microsoft 365, backups and security.
In practice that makes your life easier, not harder. When your software vendor says "your IT needs to open a port" or "the workstation needs a driver," I am the person who handles it — instead of your office manager relaying technical messages between two companies.
We already have an IT company. Why would we talk to you?
Plenty of reasons that are not "fire them." A HIPAA security risk assessment is a second set of eyes, and most practices genuinely need one on file. If your current provider is doing well, you will get a report that says so — and you will have the documentation you were missing.
How fast do you respond?
If your office is down and nobody can work, one business hour, and I stay on it until you are working again. A system down or several people stuck, four business hours. One person stuck with a workaround, same business day. Routine requests and new-staff setup, two business days.
Because I am one person I cap how many offices I take on so those numbers stay real — I onboard a single new office per month, and I would rather turn work away than stretch past what I can actually cover.
Are you available after hours?
Covered hours are Monday to Friday, 7:30 a.m. to 5:00 p.m. Central. Anything disruptive — migrations, upgrades, server work — gets scheduled outside those hours on purpose, so your office opens normally the next morning.
Evenings and Saturdays I answer when I can. After-hours work is $275/hour and emergency, Sunday or holiday callout is $350/hour, both with a two-hour minimum. I do not promise overnight or Sunday coverage, and I would rather tell you that now than let you down at 2 a.m.
What does getting started actually look like?
A free 30-minute conversation about what is working, what is not, and what keeps breaking. Then a walkthrough of your setup — computers, accounts, backups, security. Then a written summary: what I found, what is urgent, and what it costs to fix. You keep that document either way, whether or not you hire me.
If it is a fit, we start — one office at a time, one month at a time.
Are we locked into a long contract?
Monthly plans are billed on the 1st, in advance. Longer 24- or 36-month agreements are available and waive the setup fee, but they are an option rather than a requirement — we agree the term in writing before you sign anything. Assessments, health checks and projects are one-time work with no ongoing commitment attached.
Are you a real, licensed business?
Yes. PoeTential Enterprises LLC is a Tennessee limited liability company operating as PoeTential Technologies, licensed with Rutherford County and the City of Murfreesboro. Happy to provide documentation for your vendor file.
Let's look at your setup
Tell me a little about your office and I will get back to you the same business day. If it is faster to just call, please do — you will reach me, not a receptionist.
Call or text
Hours
Monday–Friday, 7:30 a.m.–5:00 p.m. Central
After-hours and scheduled weekend work by arrangement.
Based in
Murfreesboro, Tennessee 37129
Mobile service business — I come to your office.