Compliance-Ready Deployment · one-time work
Compliance-Ready Deployment
Will Pickeral, William Belle LLC · support@williambelle.co
If your app handles protected data, there are technical rules it has to meet before a customer or a partner will trust it. The tool you built with does not know those rules apply to you.
From $6,000, plus what your cloud provider charges to host it. A fixed quote before any work starts.
Who This Is For
An app that holds health records, financial and tax data, or legal matters. In practice: therapy and health practices, accounting and tax firms, financial advisers and insurance, and law.
Everything in a Secure Cloud Deployment is in this one, and the evidence on top of it is the part you hand to whoever asks.
What This Adds
The deployment underneath already secures your app, encrypts your data, and hands it over documented. Four things are only in this tier.
- Your app worked through against the named rules of your field, control by control. For health records that is a Technical Safeguards Assessment; other fields call the same work by their own name. Each control is answered in writing, with what I looked at to answer it.
- Protected data only ever touching cloud services the provider's agreement covers. The agreement that comes with your subscription covers a specific list of services and not the rest. Putting records through one that is not on it breaks the agreement, and nothing in your app will tell you that has happened.
- A record of who reached what, kept and readable, so a question about who saw a record has an answer.
- One document at the end holding every answer, what I looked at, and a plain list of what stays your responsibility.
Ask for the sheet of what I check an app against in your field. It lists every control by name, and you can have it before you decide anything.
What This Is Not
It is not a certificate, and it is not a prediction of what a regulator or a customer's reviewer will decide. Nobody can make your app meet the rules on your behalf, and an engineer who says otherwise is selling you something that does not exist.
What I Do, and What Stays Yours
What I do: configure your app and the cloud it runs on to meet the technical rules, then produce the written evidence that it was done. That is the part that needs an engineer.
What stays yours: being ready to meet the rules is not only a technical question. Your written policies, staff training, the person you name as responsible, your ongoing review of what could go wrong, and the statement you sign all stay with you. So does the data-protection agreement with your cloud provider: it comes with your subscription, in your name, and keeping it on file is yours. I tell you which services it has to cover.
I tell you plainly which is which, in writing, before we start.
The security controls in every deployment.
What It Costs
From $6,000. The price depends on which rules apply and what your app already does. An app that already has proper sign-in and a database in the right place is less work than one that does not. You get a fixed quote before any work starts.
Your cloud provider bills you directly for hosting, with no markup from me. See pricing.
Afterwards
The rules do not stop applying the day the app goes live. New staff arrive, settings drift, and the evidence goes stale.
Keep your app running covers that, and includes a daily check on your app at no extra charge.
Getting Started
Tell me what your app holds and what field you are in. Or get a free 20-minute review first — show me what you have and I'll tell you what I'd fix first in it, and why.