Managed IT for HR consultancies
IT Support for HR Consultancies in Melbourne
An HR consultancy holds other businesses' most sensitive information about their own people, and it holds it on behalf of a client who is trusting the consultancy to be more careful than they would be themselves.
The risk is rarely a sophisticated attack. It is an investigation report emailed to the wrong person, a former consultant who still has the files, or an interview recording sitting somewhere nobody chose. Each of those is a technology decision, and each can be made properly once.
What you are holding
- Workplace investigation interviews, notes and findings
- Performance management and termination files
- Medical certificates and return-to-work plans
- Salary, remuneration and restructure modelling
- Recruitment files and reference checks
Want the number first? Our pricing is published: AgileCORE from $85 and AgileCOMPLETE from $130 per user per month ex GST, plus the AgileSECURE add-on at $44. Estimate your monthly figure in two minutes, or book a conversation.
How it goes wrong
Three ways sensitive HR files leave the firm
The wrong recipient
Autocomplete picks the wrong Sarah, and an investigation report is in someone else's inbox. Sensitivity labels, a warning on external email and encryption that travels with the file make that mistake harder to make and easier to contain.
The consultant who left
Client files in a personal OneDrive or a personal inbox leave when the person does. Client work belongs in client folders the firm controls, with access that ends the day an engagement or an employment does.
The recording nobody chose
An interview recorded in Teams, or transcribed by an AI notetaker, ends up stored wherever the tool decided. Where recordings and transcripts go, and how long they stay, should be set once by the firm, not by default.
Whether the Privacy Act applies to your consultancy depends on your turnover and what you do, and that is a question for your lawyer. In practice your clients usually decide it for you: their contracts and supplier questionnaires expect the same protections either way, and we make sure you can answer them truthfully.
Scope
What we take responsibility for
Agreed in writing on day one in a Responsibility and Accountability Matrix.
Microsoft 365 for sensitive files
Client folders, sensitivity labels, external sharing that expires, and retention set to match your engagement terms.
Access that ends
Multi-factor sign-in for everyone, and access to client material removed when an engagement or a consultant finishes. Your HRIS and payroll platforms stay with their vendors; we secure the sign-in to them and work with the vendor when something breaks.
Devices and backups
Managed laptops that can be locked and wiped if one is lost on the way to a client, and backups tested by restoring from them.
Published pricing
AgileMANAGED: structured IT from $85 per user / month
We publish our pricing because a consultancy that budgets properly deserves to know the number before the first meeting, not after the third.
AgileCORE
Remote support, monitoring, security baselines and Microsoft 365 management. The usual fit for a consultancy.
View AgileCORE →AgileCOMPLETE
Everything in CORE, plus onsite support, managed servers with 24/7 monitoring, and quarterly business reviews.
View AgileCOMPLETE →Where we work
Based in Mornington, working with consultancies across Melbourne
Agile IT Solutions has been based in Mornington since 2007. HR and people consultancies tend to be small, mobile and spread out, from home offices to firms around Cheltenham, with consultants who spend more time at clients' premises than their own. That is why most of what we do is remote, and why we manage the laptop rather than the office.
Questions
IT questions from HR consultancies
Does the Privacy Act apply to an HR consultancy?
It depends on your turnover and what you do, and that is a question for your lawyer. In practice your clients' contracts and supplier questionnaires usually expect the same protections whether the Act covers you or not, so it is worth having the controls in place and being able to show them.
How do we stop a sensitive report going to the wrong person?
With several small controls rather than one big one: sensitivity labels on investigation and termination files, a warning when an email is going outside the firm, encryption that stays with the file, and the ability to revoke access after it has been sent. None of them stops every mistake, and together they make one much less likely and much easier to contain.
Can we record investigation interviews in Teams?
Teams can record and transcribe, and whether you should, and with what consent, is a legal question for you and your client. The technology question is where the recording and transcript are stored, who can open them and how long they are kept. We set that once for the firm so it does not depend on who started the meeting.
Do you support our HRIS or payroll platform?
The platform stays with its vendor, and we are not its consultant. We are responsible for how your people sign in to it, the devices it is used from, and Microsoft 365 around it. When a fault sits in the platform itself, we work with you and the vendor until it is running again.
How do we get started?
A discovery conversation. We look at where client files live today, who can reach them and where the gaps are, then set out what a structured managed service would look like. No obligation and no quote pushed at you in the first meeting.