Services
The systems your operation runs on, wired together cleanly.
Systems architecture is the deliberate design of how identity, case management, communications, storage, endpoint management, and the connections between them fit together. The outcome is a stack that new hires can learn in a week, that scales without a rebuild, and that behaves the same way on Monday morning as it did on Friday night.
How we run it
Four phases, applied to this practice
Phase 1
Discovery & Audit
We inventory every platform in use, every account, every integration, and every custom rule someone remembers writing. We map data flows and identify the duplicate systems, the fragile handoffs, and the shadow tools nobody wants to admit still run on someone's laptop.
Phase 2
Architecture & Design
We produce a target architecture, usually a diagram plus a plain-language write-up, showing how identity, core platforms, and integrations should be wired. It names the winners, the losers, and the sequence to get there without a big-bang cutover.
Phase 3
Build, Integrate & Automate
We configure identity (SAML, SCIM, MFA), the core platforms (case management, CRM, M365 or Google Workspace), endpoint policy (Intune, Jamf), and the integrations that replace manual work. Always to the design, with a rollback path documented in advance.
Phase 4
Train, Measure & Refine
We hand off with written runbooks, admin training for the people who will keep it running, and a health-check cadence, quarterly for the first year, so drift gets caught early instead of at the next incident.
What this looks like in practice
Recent work and field notes
Recent architecture and configuration work, and how the design choices played out on the ground.
Article
Identity is the new perimeter
SSO, MFA, and password management are the foundation everything else rests on. Why identity is now the front line of security for growing firms.
ReadCase Study
Migrating from CASEpeer to Filevine in under 3 months
A high-volume law firm moved from CASEpeer to Filevine in under three months — data intact, team trained, system wired into everything around it.
ReadArticle
The quiet cost of good-enough systems
Every firm carries the weight of decisions made on a Tuesday afternoon. Here is how to tell which ones are worth revisiting — and which ones to leave alone.
Read
Engagement models
How this work is scoped
Model
Project Delivery
The natural fit. Scoped delivery for a migration, replatform, or fresh identity build.
Model
Audit & Roadmap
When you inherited a stack and need a defensible read on what to keep, replace, and in what order.
Model
Fractional Leadership
For firms carrying architecture debt across many systems, an ongoing engagement keeps decisions consistent.
FAQ
Questions we answer often
Which platforms do you actually configure yourselves?
The ones we ship most often: Microsoft 365 and Google Workspace tenants, Entra ID / Okta identity, Intune and Jamf for endpoints, Filevine and CASEpeer for case management, Aircall and RingCentral for telephony, and the identity and SSO layer connecting them. Others we scope with a partner.
Do you rip everything out and start over?
Almost never. Most engagements keep two or three anchor systems and rebuild around them. We move in phases with reversible cutovers so the firm keeps running while the architecture improves underneath.
How do you handle case management or CRM migrations without losing work in flight?
We map the source-of-truth for every data type first, freeze active matters late in the process, and run a supervised weekend cutover with rehearsed rollback. Live matters get a manual double-entry window rather than any risk of data loss.
What does 'identity first' mean in practice?
Every user is provisioned from a single system, usually Entra ID or Okta, with SSO into every platform that supports it, and SCIM to auto-deprovision on the last day. It removes the biggest single source of shadow accounts and offboarding gaps.
Will our IT vendor or MSP still have a role after this?
Yes. We work alongside your MSP. We set the design and standards; they operate the day-to-day. Where there is overlap in scope we write it down explicitly so nothing falls through the gap.
Considering this work for your firm?
Drew replies personally within three business days.