Enforcement Actions
Anthem Inc.$16MHIPAA Unauthorized DisclosureAdvocate Health Care$5.55MHIPAA Security BreachPremera Blue Cross$6.85MHIPAA Security FailuresMemorial Healthcare System$5.5MHIPAA Access ViolationsAmazon$746MGDPR Data MisuseMeta$1.3BGDPR Privacy ViolationsCapital One$80MOCC Data Security FailuresUT MD Anderson Cancer Center$4.3MHIPAA Encryption GapMorgan Stanley$35MSEC Data Disposal FailuresBanner Health$1.25MHIPAA Risk Analysis GapCHSPSC LLC$2.3MHIPAA Security Rule ViolationRite Aid Corp.$1MHIPAA Disposal ViolationsAnthem Inc.$16MHIPAA Unauthorized DisclosureAdvocate Health Care$5.55MHIPAA Security BreachPremera Blue Cross$6.85MHIPAA Security FailuresMemorial Healthcare System$5.5MHIPAA Access ViolationsAmazon$746MGDPR Data MisuseMeta$1.3BGDPR Privacy ViolationsCapital One$80MOCC Data Security FailuresUT MD Anderson Cancer Center$4.3MHIPAA Encryption GapMorgan Stanley$35MSEC Data Disposal FailuresBanner Health$1.25MHIPAA Risk Analysis GapCHSPSC LLC$2.3MHIPAA Security Rule ViolationRite Aid Corp.$1MHIPAA Disposal Violations
Managed IT & security

Your
outsourced
IT department

Support, devices, Microsoft 365, security, and technology strategy — handled by one team. Starting at $125 per user, per month.

What Focul handles

One team for your people, devices, security, and technology.

Your team gets help when they need it.

Unlimited remote help desk and troubleshooting. Something break? Tell us.

Every computer stays managed.

Monitoring, updates, patching, inventory, and mobile device management.

People get access when they join — and lose it when they leave.

Secure onboarding, offboarding, and identity administration.

Microsoft 365 stops being someone's side job.

We administer your tenant, users, permissions, security, and devices.

Security happens in the background.

Endpoint protection, MFA, email security, security policies, and monitoring.

Someone is finally thinking ahead.

Quarterly technology planning, budgeting, security reviews, and recommendations.

HIPAA-alignedBAAs available
Encryptedat rest & in transit
Your data, never soldit stays yours
Microsoft PartnerIntune & Defender
Services

What we actually do.

View all services →
Managed IT

Support, devices, and Microsoft 365 — handled.

  • Unlimited remote help desk for whatever comes up that day
  • Every device monitored, patched, and accounted for
  • Microsoft 365 tenant, users, and permissions administered for you
See the plans→
Security & Compliance

Protection that holds up when someone asks for proof.

  • Endpoint protection, MFA, and email security running by default
  • Security baselines, policies, and awareness training in place
  • Risk assessments and documentation behind your compliance program
Explore security services→
Included in every plan
01
Help desk & support

Somewhere for your team to go when something breaks, without starting a meter.

02
Device management

Monitoring, patching, inventory, provisioning, and mobile device management.

03
Technology planning

Quarterly reviews of what's aging, what's costing you, and what's coming next.

How Focul works

Four steps. Then it just runs.

  1. 01

    Assess

    We document what you already have — devices, accounts, licensing, vendors, and where the risk sits. No guessing, and no bill until we both know the scope.

  2. 02

    Onboard

    Monitoring and security go on your devices, we take over Microsoft 365 and identity, and we clean up what's been left half-finished. Your team keeps working throughout.

  3. 03

    Manage

    Day to day, your people have somewhere to go and your technology has someone watching it. Support, patching, provisioning, and security run without you asking.

  4. 04

    Improve

    Every quarter we look at what's aging, what's costing you, and what's coming — then tell you what to do about it before it becomes urgent.

Managed IT plans

IT shouldn't be complicated. Neither should the price.

From everyday support to security and compliance, choose the level of IT management your business needs.

Essential IT

Reliable IT support and essential protection for smaller teams.

$125/user/month

$750 monthly minimum

What you get

  • Unlimited remote help desk
  • Device monitoring and patching
  • Endpoint protection
  • Microsoft 365 administration (requires Microsoft licensing, billed separately)
  • Employee onboarding and offboarding
  • Quarterly technology review
View full plan details →
Most popular

Focul Managed

Your complete outsourced IT department.

$150/user/month

$1,000 monthly minimum

Everything in Essential, plus

  • Mobile device management
  • Microsoft Intune management (requires Microsoft licensing, billed separately)
  • MFA and identity management
  • Email security management
  • Priority remote support
  • Quarterly technology planning
View full plan details →

Focul Secure

Managed IT, cybersecurity, risk management, and compliance for organizations with higher security requirements.

from$200/user/month

$1,500 monthly minimum

Everything in Managed, plus

  • Advanced threat protection
  • Vulnerability management
  • Security risk assessments
  • Compliance readiness
  • Incident-response planning
  • Quarterly security review
View full plan details →

Not sure what you need? We'll help you figure it out.

Get an IT recommendation →

Microsoft 365 licensing is billed separately. Appropriate Microsoft licensing may be required for certain services, including Intune, MDM, and advanced security capabilities. Focul can procure and manage Microsoft licensing on your behalf.

Who we serve

Built for regulated industries.

Healthcare
HIPAA required

HIPAA risk assessments, endpoint security for PHI, and clinical documentation management. Non-compliance fines reach $1.9M per violation.

Financial Services
BSA / AML required

Regulatory reporting, audit trails, and policy governance for financial institutions. Failed exams risk license suspension.

Insurance
State DOI required

Claims compliance, state regulatory filings, and documentation control. Market conduct exams are public record.

Required by law

Your industry has mandates. Are you meeting them?

Select your industry to see what regulators require — and what's at stake if you're not compliant.

HIPAA regulated

Healthcare compliance isn't optional — it's federal law.

If you handle protected health information (PHI), HIPAA compliance is a legal requirement — not a best practice. The Department of Health and Human Services actively investigates violations and has issued fines exceeding $1.9M for a single incident. No size exemption exists: solo practices and large hospital systems are held to the same standard.

Potential consequences

Up to $1.9M per violation category, per year

HIPAA Privacy RuleFederal mandate

Controls how PHI can be used and disclosed.

HIPAA Security RuleFederal mandate

Requires administrative, physical, and technical safeguards for electronic PHI.

Breach Notification RuleFederal mandate

Mandates reporting data breaches to patients and HHS within 60 days.

Prior Authorization ComplianceCMS regulation

Federal rules govern timelines and documentation for PA submissions.

Business Associate AgreementsRequired by HIPAA

All vendors who handle PHI must have a signed BAA on file.

Free resources

Not ready to talk? Start here.

Two practical, no-fluff checklists — pick the one that matches your industry.

Healthcare

2026 HIPAA Compliance Readiness Checklist

A practical, section-by-section self-assessment covering administrative, physical, and technical safeguards — the areas HIPAA auditors look at first.

Financial Services

BSA/AML Audit Prep Guide

A working checklist across CIP, CDD, SAR filing, OFAC screening, and independent testing — built around what examiners actually review.

Why Focul

The IT department your team actually needs.

One team, not a queue

Support, devices, Microsoft 365, security, and planning come from the same people. Nobody hands you off, and nobody has to be re-briefed on how your business works.

Priced in the open

Per user, per month, with the minimums published before you talk to anyone. You'll know roughly what this costs in about thirty seconds — the conversation is for confirming it, not revealing it.

Security is the baseline

Endpoint protection, MFA, and identity management aren't an upsell tier. And when a regulator, an insurer, or a client asks how your technology is controlled, we can show them.

Partnered with
Ramp
MicrosoftPartner
FAQ

Questions, answered.

Still not sure if Focul is right for your team? Talk to us →

Your IT, end to end. Unlimited remote help desk for your team, monitoring and patching on every device, Microsoft 365 and identity administration, endpoint and email security, employee onboarding and offboarding, and quarterly technology planning. If it plugs in, logs in, or breaks, it's ours.

Plans start at $125 per user, per month with a $750 monthly minimum. Focul Managed is $150 per user with a $1,000 minimum, and Focul Secure starts at $200 per user with a $1,500 minimum. Microsoft 365 licensing is billed separately. There's an estimator on the pricing page if you'd like to see the numbers for your team size.

Per user. Most people use more than one device, and pricing per person is far easier to predict as you hire. Unusual environments — a lot of shared workstations, servers, or specialized equipment — may need additional pricing, and we'll say so before you sign anything.

Yes. Microsoft 365 migrations, Intune deployments, new office setups, network and Wi-Fi work, security hardening, and assessments are all available as standalone projects with no managed plan required.

Yes. Your data is stored on SOC 2 Type II–certified infrastructure and encrypted both at rest and in transit. We follow least-privilege access and maintain administrative, technical, and physical safeguards to protect your information.

Yes. If your organization is a Covered Entity or Business Associate under HIPAA and you use Focul to manage compliance workflows, we're prepared to enter into a BAA. Just reach out and we'll get one started.

Healthcare, financial services, banking & wealth management, and insurance — anywhere compliance is regulated and non-optional. Our tools are built around the specific frameworks and examiners each industry deals with.

No. Focul is built for organizations that don't have a full-time compliance department. It gives you the risk assessments, policies, training, and documentation that make audits manageable — without needing specialized staff to run it.

As a Microsoft partner, we'll license, enroll, and manage your first 200 endpoints — device inventory, encryption enforcement, and remote lock or wipe through Microsoft Intune and Defender — at no cost, to get your device security off the ground.

Yes. Whether it's a HIPAA audit, a BSA/AML exam, an OCC review, or a state market conduct exam, Focul centralizes your evidence and maps your controls to the relevant framework so you stay audit-ready year-round instead of scrambling.

One team for your people,
devices, and technology.

Tell us what you're working with. We'll tell you what it takes to handle it.

Book a free call