Murfreesboro · Franklin · Brentwood · Rutherford & Williamson Counties · Greater Nashville
The IT department your practice is too small to hire
I spent eight years on the IT team of a radiology company — 200 remote sites, 60 radiologists, and every HIPAA obligation that came with them — after five years in small-business and industrial IT. Now small medical and dental practices around Murfreesboro can have that same standard of support, on a flat monthly rate.
Your software vendor keeps supporting your software. I handle everything around it — the computers, the network, Microsoft 365, your backups and your security — so the tools your staff depend on all day actually stay up.
Locally owned, licensed and insured in Murfreesboro. You always work directly with me.
What working with me looks like
- One named person who answers — not a ticket queue
- Flat monthly rate, quoted up front, no surprise invoices
- HIPAA-fluent: I sign Business Associate Agreements
- Problems caught by monitoring before your staff call
- I take the time to explain any issues and how I will resolve them
Start here
HIPAA Security Risk Assessment
The HIPAA Security Rule requires every covered entity to keep a current, documented analysis of the risks to its electronic protected health information (45 CFR § 164.308(a)(1)(ii)(A)). It is also the first document an auditor asks for — and the one most small practices cannot produce. This is where we start, and you keep the report whether or not you ever hire me for anything else.
What you receive
- An inventory of your systems and everywhere patient information actually lives — computers, cloud services, email, portable drives and paper-to-digital workflows
- A review of the threats and weaknesses that apply to your office specifically, not a generic checklist
- An assessment of what you have in place today measured against the Security Rule's requirements
- A written risk register with every item rated by severity
- A prioritized plan to fix them, with cost estimates — so you can budget instead of guess
- A management sign-off document, formatted and organized for the six-year retention requirement
Some of what I check for specifically: shared logins nobody has changed in years, multi-factor login switched off because it was inconvenient, mail forwarding rules pointing at personal addresses, a backup nobody has ever restored from, and former employees whose accounts still work.
$2,500–$4,750 flat
Up to 10 staff — $2,500
11–25 staff — $3,500
26–50 staff — $4,750
Quoted in writing before any work starts. The entire fee is credited against your first three months if you start a Complete plan within 90 days.
Not sure you need the full assessment yet? The Practice IT Health Check is $495 — about three hours, a written summary of what I found and your five biggest risks. Credited back if you start a monthly plan within 90 days.
Being straight with you about what this is not. This is a technical security risk analysis and a documentation deliverable — not legal advice, not a certification, and not an official audit. No one can sell you "HIPAA certified." What it does give you is an honest picture of where you stand and the written evidence that you looked.
Services
Everything a small office needs from an IT department, without the payroll. Medical and dental practices are my specialty — and the same package fits any small professional office around Murfreesboro that runs on computers it cannot afford to lose: veterinary clinics, therapy and counseling practices, law firms, accounting offices and similar teams of roughly 5–30 people.
Day to day
Managed IT & Support
Remote monitoring, patching, and support your front desk can actually reach. Regular check-ins so small problems never become the reason you close early.
Microsoft 365
Setup, Migration & Hardening
Email, files and Teams migrated with minimal downtime, then locked down: multi-factor authentication, phishing protection, sensible sharing policies, and licensing you are not quietly overpaying for.
Security
Cybersecurity & Backup/DR
Managed endpoint protection, patch management, and backups that have actually been test-restored. The unglamorous fundamentals that keep you off the breach notification list.
Compliance
HIPAA Risk Assessments
The documented security risk analysis the Security Rule requires, written so a practice manager can read it — plus a remediation plan with real numbers attached. See what's included.
Workstations
New Computers & Onboarding
Specifying, buying, imaging and deploying workstations that will still be supportable in four years — plus clean new-hire setup and, just as importantly, complete access removal the day someone leaves.
From $895
GoDaddy 365 Rescue
Bought Microsoft 365 through GoDaddy? You are almost certainly paying more for less — limited admin control, missing security features, and support that cannot help with either. I move you to Microsoft directly without losing mail, files or a day of work — worked from a written runbook, in a scheduled evening or weekend window, with a rollback plan at every step.
AI
AI for Your Office
Adopt AI tools without quietly shipping patient or client data to a company you have never heard of — including private setups that run entirely on hardware you own and never leave your building. Practical, not hype.
Where my work stops — and why that is good news
I do not support, configure or integrate your practice-management, EHR or imaging software. Those vendors know their own products far better than any general IT provider ever will, and you are already paying them to. I stay out of their lane.
What I do is own everything around that software: the workstations it runs on, the network and internet it depends on, the Microsoft 365 tenant your staff live in, the backups, and the security controls that keep all of it defensible. When your software vendor needs a port opened, a workstation prepped, a scanner mapped or a server rebooted at 6 a.m., I am the person on the other end of that call — so your office manager stops being the go-between. I also run network cabling and wired drops when an office needs them, quoted per job.
Why this background matters to a practice
Most IT companies learn what a healthcare environment demands on your dime. I spent eight years inside one, where downtime had a clinical cost and a HIPAA one.
doing IT for a radiology company — a HIPAA-regulated environment, every day, not a weekend course
remote imaging sites the team kept connected, patched and running every morning
radiologists who needed their equipment working before their first read of the morning
- I speak HIPAA without a translator. Access controls, audit logging, encryption, minimum necessary, and what "reasonable and appropriate" means in a five-person office.
- I sign Business Associate Agreements — no hesitation, no legal review theater, no surprise when you ask.
- I stay in my lane with your clinical software and coordinate cleanly with the vendors who own it, so nobody spends a morning stuck between two support desks.
- I understand a clinical schedule. Disruptive work happens after hours or on your lightest day, not at 10 a.m. on a Tuesday.
- Front-desk reality is built in. Phishing defense and email hygiene designed for busy people who open attachments from strangers all day, because that is literally their job.
- Encrypted, tested backups your compliance documentation can point to — restored on purpose, on a schedule, before you ever need them for real.
Simple monthly plans
One flat monthly price based on how many people you have — so IT is a budget line, not a lottery. No surprise invoices when something breaks. Your exact number comes after a short discovery call; I would rather price it right than price it fast.
Foundation
Everything in the cloud, no server. Good fit: 4–8 people.
from$115/person/month
Minimum $575/month
- Monitoring, security updates and patching on every computer
- Managed antivirus and ransomware protection
- Microsoft 365 administration and security setup
- Backup of your Microsoft 365 email and files
- Unlimited remote support during covered hours — email, text or portal, answered by me
- One on-site visit every quarter, included
- Business Associate Agreement signed
Complete
With or without a server. Good fit: 8–20 people.
from$1,595/month
$175 per person / month
Everything in Foundation, plus:
- Server management — updates, backup, hardware health
- Backup with tested restores and a written recovery plan
- I deal with your software vendors — no more getting bounced between two companies
- Security awareness training with simulated phishing
- Yearly update to your HIPAA risk documentation
- One on-site visit per month
- Technology and budget review twice a year
Compliance add-on
Multiple providers or locations, or facing an audit.
add$30/person/month
On top of Complete — no separate minimum
- Your full HIPAA program maintained: written policies, staff training records, BAA register, incident response plan
- A complete Security Risk Assessment every year, in the form an auditor expects
- Disaster recovery plan with an annual live test
- Quarterly planning and budget session
Larger practices pay less per person. Teams of 13–20 and 21–30 each get a lower per-person rate — your exact number is quoted for your headcount after a short discovery call.
Add-ons: servers, additional locations and vendor-managed workstations (imaging, operatory or other specialty PCs) are all supported — each is quoted up front as part of your flat monthly number, so there are no surprise line items later.
Prefer to pay by the hour?
- Business hours, no plan $185/hr
- After hours & Saturday $275/hr
- Emergency or holiday callout $350/hr
- Monthly plan clients $150/hr
One-hour minimum during business hours, two after. Projects are quoted flat and in writing before anything starts.
How support works
Outages come first. If the office is down, call and say so — that is the call I pick up, and I stay on it until you are working again.
Everything else — one person stuck, a new hire, a change, a question — comes in by email, text or the portal (a simple web page, set up during onboarding, where your staff submit and track requests). You hear back from me the same business day with a time, and most of it is handled remotely within a day or two — over a one-time connection your person approves and can watch.
Some problems belong to a vendor, a carrier or a manufacturer. I can’t promise their clock; what I promise is that you are never waiting to find out what is going on.
The honest version
I am one person, not a call center. Evenings and Saturdays I answer when I can, and I will tell you straight away whether I can actually be there rather than leave you waiting. Emergency after-hours callouts, including nights, Sundays and holidays, are available at the emergency rate when I can take them. What I do not promise is guaranteed round-the-clock coverage.
Most days I am on site somewhere. Send requests by email, text or the portal and I answer between jobs, inside the times above. Call when the office is down, and say so — that number is the one I pick up. You always know in advance when I am away, and outage coverage for those days is arranged before I go.
If you need genuine 24/7, you need a larger firm — and I will say so in our first conversation instead of selling you something I cannot deliver.
Questions practice managers actually ask
Will you sign a Business Associate Agreement?
Yes, without hesitation. If I touch systems that store or transmit electronic protected health information, a BAA is not optional and I do not treat it as a negotiation. Send me yours, or I can provide one.
Do you support our practice-management, EHR or imaging software?
No — and that is deliberate. Your software vendor knows that application better than any general IT provider will, and you are already paying for their support. I own everything around it: workstations, network, internet, Microsoft 365, backups and security.
In practice that makes your life easier, not harder. When your software vendor says "your IT needs to open a port" or "the workstation needs a driver," I am the person who handles it — instead of your office manager relaying technical messages between two companies.
We already have an IT company. Why would we talk to you?
Plenty of reasons that are not "fire them." A HIPAA security risk assessment is a second set of eyes, and most practices genuinely need one on file. If your current provider is doing well, you will get a report that says so — and you will have the documentation you were missing.
How fast do you respond?
If the office is down, call and say so — that is the call I pick up, and I stay on it until you are working again. Everything else comes in by email, text or the portal, and you hear back the same business day with a time.
Because I am one person I cap how many offices I take on so that stays true — I onboard a single new office per month, and I would rather turn work away than stretch past what I can actually cover.
Are you available after hours?
Covered hours are Monday to Friday, 7:30 a.m. to 5:00 p.m. Central. Anything disruptive — migrations, upgrades, server work — gets scheduled outside those hours on purpose, so your office opens normally the next morning.
Evenings and Saturdays I answer when I can. After-hours work is $275/hour and emergency or holiday callout is $350/hour, both with a two-hour minimum. Emergency calls at night and on Sundays are taken at that rate when I can; what I do not promise is guaranteed 24/7 coverage, and I would rather tell you that now than let you down at 2 a.m.
What does getting started actually look like?
A free 30-minute conversation about what is working, what is not, and what keeps breaking. Then the $495 Practice IT Health Check — a walkthrough of your computers, accounts, backups and security, and a written summary of what I found, what is urgent, and what it costs to fix. You keep that document either way, whether or not you hire me, and the $495 is credited toward onboarding if you start a plan within 90 days.
If it is a fit, we start — one office at a time, one month at a time.
Are we locked into a long contract?
Plans run 12 months, or month-to-month if onboarding is paid in full, with 30 days’ notice either way. Onboarding is $75 per person ($400 minimum) and is waived on 24- or 36-month agreements, which are an option, not a requirement. Plans are billed on the 1st by bank auto-pay; travel within about 40 minutes of Murfreesboro is included. Assessments, health checks and projects are one-time work with no ongoing commitment attached.
Are you a real, licensed business?
Yes. PoeTential Enterprises LLC is a Tennessee limited liability company operating as PoeTential Technologies, licensed with Rutherford County and the City of Murfreesboro. Happy to provide documentation for your vendor file.
Let's look at your setup
Tell me a little about your office and I will get back to you the same business day. If it is faster to just call, please do — you will reach me, not a receptionist.
Call or text
Hours
Monday–Friday, 7:30 a.m.–5:00 p.m. Central
After-hours and scheduled Saturday work by arrangement.
Based in
Murfreesboro, Tennessee 37129
Mobile service business — I come to your office.