How we handle your admin accounts and passwords

Looking after a business's IT means holding the keys to it. This article explains the rules we follow so that access stays safe, visible and yours.

Everything is in your name

Domains, Microsoft 365 or Google tenants, admin accounts, software subscriptions and hardware are registered to your business, not to us. If we set something up, the account that owns it belongs to you. That is the foundation of everything else here, and it is what makes a clean handover possible if you ever change provider.

Named accounts with the least access needed

We work from accounts in our own names, each with the level of access the job requires and no more. We do not use a single shared "admin" login, and we do not sign in as your staff. Every action is then traceable to a person, which protects you and us.

Your emergency admin account

You keep an emergency administrator account that we never use day to day. Its credentials are stored for you, with multi-factor authentication, so that if we were ever unavailable you or another provider could still get in.

A password vault, not a spreadsheet

Credentials we hold for your systems live in an encrypted password manager, never in email, documents or chat. Each client's credentials are kept separate. When someone on our side no longer needs access, it is removed in one step.

We never ask you for your password

We do not need your personal password to help you, and we will not ask for it by email, text or phone. If we need to act on your account, we use our own admin access and tell you what we did. Anyone claiming to be us and asking for a password is not us.

Removing our access

You can remove our access at any time. When our work together ends, we hand over admin credentials through a secure channel, confirm what we have removed on our side, and document it; see What you own, and what you get if we part ways.