A local small business was sending passwords by email and running operations on a spreadsheet from 2018

A local service business with a small team had grown steadily for years on infrastructure that hadn’t grown with it. Their tech stack was a patchwork of legacy tools: a shared Google Sheet served as the task board, CRM, and project tracker simultaneously. Credentials for shared accounts were sent over email in plaintext. Their hosting was an aging shared server with no monitoring. There was no password manager, no centralized task management, and no separation between personal and business tooling.

The team wasn’t negligent. They simply hadn’t had a reason to modernize until the cracks started showing: a near-miss when a former contractor still had access to shared accounts months after leaving, a client-facing outage caused by an unmonitored server update, and growing frustration from the team that daily operations felt harder than the actual work.

We ran a full operational and security modernization, phased over several weeks to avoid disrupting daily business.

On the security side, the most urgent fix was credential management. We introduced the team to a decentralized password manager, replacing the practice of sharing passwords via email. All shared accounts were migrated, credentials were rotated, and access was scoped by role. We audited third-party access and revoked stale permissions, including the former contractor’s accounts that were still active. Email security was hardened with proper SPF, DKIM, and DMARC configuration. The aging shared hosting was replaced with a modern, monitored solution with automated backups and uptime alerts.

On the operations side, we replaced the all-purpose Google Sheet with a locally hosted task board and CRM system, purpose-built for their workflow and sized for their team. Agentic AI pipelines were introduced for recurring operational tasks: automated client follow-ups, invoice reminders, appointment scheduling, and report generation. These pipelines run in the background and require minimal oversight, which was critical for a small team that can’t afford to babysit automation.

We continue to provide light-touch maintenance and support as the business scales, ensuring the systems stay current without requiring a dedicated IT role.