Logins, laptopsand leavers.
Set up properly, once, for growing companies with no IT person yet. Fixed price, agreed in writing, done so it runs itself.
When IT becomes someone’s side job
A customer sends a questionnaire.
The insurer asks about MFA.
You raise a round.
Someone leaves, with access.
That’s usually the moment.
Who has access.xlsx
Last edited 4 months ago
| App | Owner | Admins | Checked |
|---|---|---|---|
| AWS | ? | Founder’s Gmail | Never |
| Slack | Priya | 6 | Mar |
| Figma | Tom (left) | 2 | – |
| Stripe | Shared login | 3 | – |
| HubSpot | ? | ? | – |
| GitHub | Dan | 9 | Jan |
| Notion | Priya | 4 | Mar |
2-step verification
41 active accounts
23 of 41 enrolled
- Sam OkaforLeft in June
- finance@Shared inbox
- + 16 moreNot enrolled
Not sure if that’s you yet? See what breaks at your size.
Three ways to sort it
| Doing it by hand | Hiring an IT person | Saifer | |
|---|---|---|---|
| A new starter’s first day | Someone remembers, mostly | Handled, once they’re hired | Accounts and laptop ready before day one |
| When someone leaves | A checklist of apps, if one exists | Handled, if they’re around | Access removed from one place, same day |
| MFA | Some people, some apps | Enforced, eventually | Enforced on every account |
| Laptops | Bought on a card, set up by hand | Managed | Enrolled, encrypted and wipeable remotely |
| A security questionnaire | Answered by whoever is free | Answered with evidence | Answered with evidence you can reuse |
| Cost | Hidden in everyone’s time | A full-time salary | A fixed price, agreed up front |
| Time to get there | Never quite finished | Months, starting with recruiting | Weeks |
| When it’s done | Depends who’s still around | Depends on them staying | Documented and handed to your team |
What breaks at your size
IT becomes a side job
What tends to break
Laptops are bought on a card and set up by hand. Leavers keep access to apps nobody remembered. Your first ops or people hire is quietly doing IT.
What to put in place
Device management, a list of every app and who owns it, sensible groups, a standard onboarding and offboarding process, and it all written down.
Where we’d start
A Health Check to see where you stand, then a Foundations Sprint to fix what matters most.
What we set up
The things a customer, auditor or insurer will ask about. Pick one to see what it looks like when it’s done, and how we get there without disrupting anyone.
One account opens every app, so a leaver loses everything at once instead of app by app.
We connect your apps to Google Workspace, Microsoft Entra or Okta one at a time. Each one is tested with a few people first, switched over in an agreed window, and the old login stays open until everyone is through. Nobody loses a morning.
Single sign-on rollout
7 of 11 apps connected · old logins kept until each switch-over
- Google WorkspaceIdentity provider
- Slack41 people signed in
- GitHubConnected, 2 service accounts kept
- NotionSwitch-over Sat 15 Nov, 09:00
- HubSpotTesting with 3 people
- FigmaQueued
The rollout tracker, app by app. Sample data.
Single sign-on rollout
7 of 11 apps connected · old logins kept until each switch-over
- Google WorkspaceIdentity provider
- Slack41 people signed in
- GitHubConnected, 2 service accounts kept
- NotionSwitch-over Sat 15 Nov, 09:00
- HubSpotTesting with 3 people
- FigmaQueued
Two fixed prices
An IT Health Check is £750 to £1,250, fixed. One call, a read-only review, and a written report with the fixes in priority order.
The price depends on your size. If you don’t need us, the report will say so.
What’s included →IT Health Check: summary
Sample report · 41 people
- High
- 3
- Medium
- 5
- Low
- 4
Fix first
- Recover the AWS root accountWeek 1
- Enforce 2-step verificationWeek 1
- Close 3 former staff accountsToday
A Foundations Sprint is £4,000 to £5,000, fixed scope. SSO, MFA, laptops, joiners and leavers, and the policies to match, set up and handed over.
Afterwards, ongoing support is available from £1,200 a month. How that works
What’s included →IT runbook
Owner: your ops lead · updated at handover
- Accounts, and who owns each one
- Joiners, movers and leavers
- Laptops: set up, update, wipe
- Emergency access and recovery
- Every change made, and how to undo it
- Based in
- London
- Started
- 2026
- Team
- Small. You meet everyone who does the work.
Where we learned it
Between us we ran IT at Meta, led IT at a fast-growing martech company, and looked after it in finance, at small companies and at AI startups. Each one taught us something: what big tech gets right at scale, what a 40-person company can’t afford to copy, and where it goes wrong when nobody owns it. You get the best of all of that, set up right the first time, without learning it the hard way.
In short
- Platforms
- Google Workspace
- Microsoft 365
- Okta
- Microsoft Entra ID
- Jamf
- Microsoft Intune
- 1Password
- Slack and GitHub admin
- Experience
- Enterprise IT in big tech
- Led IT at a fast-growing martech company
- IT in finance
- Small companies and AI startups
- SOC 2 and customer questionnaires
- Okta, Entra and Google Workspace rollouts
- Mac and Windows fleets
Questions people ask first
Do you run a help desk?
No. We set things up so your team rarely needs one, and hand over clear instructions for the day-to-day.
Are you on call?
No. Changes happen in agreed windows, often evenings or weekends so nobody is disrupted. Ongoing clients get next business day replies.
What size of company do you work with?
Mostly companies between 20 and 200 people with no dedicated IT person. Smaller teams usually just need the basics; we’ll tell you if that’s you.
Do we need Okta?
Not necessarily. Plenty of companies do fine with what’s built into Google Workspace or Microsoft 365. We’ll recommend the setup that fits, which is often what you already pay for.
Can you help with SOC 2 or a security questionnaire?
Yes, with the IT side: identity, devices, access and the evidence auditors ask for. We’re not auditors, and we’ll work alongside whichever compliance tool you use.
Will you need admin access?
For a Health Check, read-only. For a sprint, a named admin account for each of us, with hardware-key MFA, removed or reduced when we finish. You always keep the master keys.
Who actually does the work?
The people you speak to on the first call. Nothing is subcontracted, and if we’re not the right fit we’ll say so and point you to someone who is.
Prices and what’s included in each service are on the services and pricing page.
If IT has become someone’s side job,tell us what prompted it.
Opens an email to hello@saifer.co.uk with what you wrote. We reply within one working day.
- hello@saifer.co.uk
- Based
- London. UK companies first, US by arrangement, remote in both cases.