A customer audit arrives with a 90-day deadline
And no evidence package in place. Contracts have been lost this way. We turn the scramble into a formality.
Enforcer: customer auditor30 years building the IT foundation Ontario SMBs run on. Managed IT, cybersecurity, helpdesk, built to one standard: the same one your carrier, your customer auditor, and your AI roadmap demand.


















Hey there, I'm Lee, CEO of EmpowerIT. I've been doing this for 30 years across Kitchener-Waterloo. EmpowerIT was founded in 2015 to productize what I learned the hard way.
We start by streamlining the fundamentals: tightening security, eliminating manual processes, stabilizing your foundation. Then we move you into smarter, more secure platforms designed for predictable growth and easier day-to-day operations. Once your environment is solid, we build AI-ready workflows that transform how your business gets things done.
The result? An agile, future-ready company that scales with confidence. Everything we deliver is backed by evidence, clear reporting, and visible improvements.
Most of what we inherit looks the same. So does what we leave behind.
click to see the audit hide the auditWe turn daily IT firefighting into smooth sailing.
Document everything. Segment the network. Test backups against the recovery plan, not against themselves. Put the SOC in front of the alerts. Production-grade infrastructure, continuously monitored, to the same standard your insurance carrier, your customer auditor, and your AI capability will all need at the same time.
this is what foundation actually buys you.
Six scenarios. We've walked into all of them, sometimes more than once.
And no evidence package in place. Contracts have been lost this way. We turn the scramble into a formality.
Enforcer: customer auditorAnd the questionnaire is harder than last year. D&O may renew at the same review. Bundles cascade.
Enforcer: insurance carrierWith no tested recovery. Business interruption measured in weeks. The carrier reviews. Customers notice.
Enforcer: carrier · customer · regulatorPIPEDA. Provincial privacy. AI use clauses in customer contracts. The compliance surface keeps expanding.
Enforcer: regulatorYou can't safely follow because your data hygiene isn't ready. The gap compounds quarterly.
Enforcer: your marketRight when things get hard. We walk in cold and stabilize what was running on duct tape.
Enforcer: operational realitySimple reasons. Strong results.
Every monitor, every backup test, every policy is in place because we walked into the wreckage where it was missing. The system is the result.
Documented anonymized recoveries — see [07]The pressure comes from the carrier, the customer auditor, and the AI market. We aren't the dependency. We're what keeps you qualified for all of them.
Carrier-ready · Audit-ready · AI-readyLee personally leads scoping. Real people respond to support. Quarterly business reviews summarize outcomes, not tickets.
< 15 min response · 0 ticket daysSame operational stance that satisfies your carrier is the stance your AI workloads need. One stack, two outcomes.
Custom AI infrastructure · AI-built marketingTwo layers. One operational stance.
Production-grade infrastructure, continuously monitored. 24/7 SOC using NinjaRMM + Field Effect + Microsoft 365. Real people in helpdesk, <15 min average response, zero ticket days. Built so the foundation rigor is the same rigor your AI workloads will eventually need.
See the FoundationAI Readiness assessment against your actual use cases, not generic checklists. Then custom AI build, Lee-led scoping with outsourced dev team execution. AI-built marketing properties (this page itself). Custom memory and agent infrastructure. Voice and conversational AI in client partnership.
See the Next MileAnonymized recoveries across two verticals.
Ransomware during operations. Critical production data encrypted. Operations restored within days. Zero data loss. Continuous SOC posture maintained since.
Ransomware mid-quarter. Client files, billing systems, working papers encrypted. Quarter delivered on time. Client confidentiality preserved.
Three projects, deployed and running.
Memory and agent orchestration platform. Vault + scheduled crawler + MCP-served tools, running on an OVH Canadian VPS as long-term memory for the EmpowerIT build system.
AI-generated content detection at evidence-grade fidelity. Voice and conversational AI platform built in client partnership with multi-skeleton coverage and calibration anchors.
EmpowerIT's marketing properties are designed, written, deployed, and iterated by AI through the same build infrastructure. The site is the proof.
Twelve pages. Five business days. Walks through your environment, threat surface, backup posture, recovery readiness, and AI-readiness baseline.
5 business days. No deck. No demo. Just findings.Two surfaces. The one your carrier and customer auditor grade today, and the one your AI roadmap will grade next. Anything unchecked is a gap.
If you're reading this before you've spoken to us, these are the questions we get most. The answers don't change between calls — that's the point.
Carriers now ask about EDR coverage, log retention, incident response time, backup immutability, and MFA enforcement on every renewal. The questions are getting harder each cycle.
EmpowerIT runs a free 12-page IT Gap Analysis that maps your current posture against what your specific carrier's renewal questionnaire will demand. Most renewals close cleanly when the carrier sees a 24/7 SOC, tested immutable backups, and a written incident response runbook in place.
A customer audit with a 90-day deadline is recoverable if the foundation work starts on day one. 2 days in 2023 was the most extreme case we've handled.
The Gap Analysis identifies the highest-risk gaps first: identity (MFA, conditional access), endpoint (EDR coverage), data (immutable backups + tested recovery), network (segmentation, monitoring), and documentation. Then we remediate in dependency order.
Our two documented recoveries (see section [07] · The receipts) were 72-hour and 48-hour recoveries. Both preserved business continuity through quarter-end deliverables.
Recovery time depends almost entirely on whether your backups were immutable, tested against the recovery plan rather than against themselves, and whether a SOC was monitoring at the time of detection. Not which MSP runs the recovery.
AI readiness is a foundation question more than an AI question. Before AI workloads can run safely, the underlying infrastructure needs the same posture your insurance carrier and customer auditor already want: identity hygiene, data segmentation, network monitoring, evidence collection.
EmpowerIT's AI Readiness assessment evaluates your specific use cases — not a generic checklist — and produces a prioritized roadmap. Lee Darke leads the scoping personally.
EmpowerIT serves Ontario SMBs in the $2M to $200M revenue band. Engagements are scoped per environment after the free 12-page Gap Analysis identifies the actual gap surface.
Most clients move from audit to remediated foundation within 60 to 90 days, then continue on a managed-services baseline that includes 24/7 SOC, helpdesk under 15 minutes average response, and quarterly business reviews focused on outcomes rather than tickets.
Regular IT support reacts to tickets. A SOC is proactive threat hunting in front of the alerts.
EmpowerIT runs 24/7 detection on NinjaRMM for monitoring, Field Effect for threat detection and response, and Microsoft 365 Defender for identity and endpoint coverage. The same posture runs against clean environments and recovered environments — that's the operational practice behind the zero re-compromise pattern to date.
Foundation is the IT layer Ontario SMBs run on: managed infrastructure, 24/7 cybersecurity operations, and helpdesk to the standard your insurance carrier and customer auditor demand.
Next Mile is what the foundation makes possible: AI Readiness assessment, custom AI build, evidence-by-design compliance. Same operational stance. One layer makes the other safe.
Free 12-page IT Gap Analysis with Lee. We evaluate your environment, walk through the findings, you leave with prioritized actions. Zero pressure, full clarity.