Free Exposure Snapshot
$0
A passive, public-records-only check of a firm’s domain and email setup.
Qualified or referred requests. Up to two a week.
One Microsoft 365 tenant
Know what is exposed, and what to fix first.
Before more staff and AI tools can reach client data, Switchback reviews one Microsoft 365 tenant and writes a 30/60/90-day plan your existing IT can carry out. No managed-IT contract and no tool purchase.
Pricing, up front.
Three ways to start, for law and CPA firms and similar professional-services practices. The flagship is still an Identity, Data & AI Security Review of one Microsoft 365 tenant, with a plan your existing IT can carry out. Full pricing and FAQ.
M365 Quick Check
$750–$1,000
About a half day, read-only, with a short written report of the top risks.
The fee is credited toward the full review if that review is booked within 60 days.
Identity, Data & AI Security Review
From $3,500
Fixed scope, one Microsoft 365 tenant. The final price depends on firm size and scope, and is typically $3,500–$5,500.
AI-use guidance is included. See what you get. AI deployment guardrails remain available when AI use is the only question.
Quarterly re-check retainers and add-on reviews (on-premises and Active Directory, and small cloud accounts) are available on request. Contact Switchback.
Separately scoped add-ons
These are not part of the review quote (from $3,500, typically $3,500–$5,500). Both are read-only, and both start only after written scope and authorization. No changes are made to the systems.
On-premises and Active Directory
For file servers, Active Directory, or a mix of on-premises systems and Microsoft 365. The systems are named in the agreement. Read-only and authorized only. Not a penetration test.
Small cloud accounts
A modest footprint in AWS, Azure, or GCP for the same firm. One cloud account, not a multi-cloud review. Read-only access or exports you provide, under a written scope. Quoted separately.
Built for professional-services firms on Microsoft 365.
The useful version of this work is a scoped look at one tenant, and a plan the firm’s existing IT can carry out. Sensitive-data access and sharing are the center of it.
- About 15–75 people.
- Law, accounting, engineering, and similar firms that hold client or employee information.
- No dedicated security lead.
- Often prompted by a cyber-insurance renewal, a client questionnaire, or an AI rollout such as Copilot.
- Based in East Tennessee, available remotely.
Founder-led
You talk directly with the reviewer.
Switchback is founder-led by Logan French, a cloud and data-security practitioner in East Tennessee. The work is independent: Switchback sells no managed services and no tools. Any conflict is disclosed before work starts.
You keep your managed relationship and the implementation work. Switchback brings the scoped review and a plan you can walk through together.
- One tenant. Identity, guests, sharing, and app permissions in Microsoft 365.
- Sampled data flows. Where client and employee data lives, with blind spots written down.
- AI use. What staff report using, and practical guardrails for that use.
- A plan. 30, 60, and 90 days, written for the IT provider you already have.
Logan French
From first call through final walkthrough, you work with the person doing the review, mapping the risk, and writing the findings.
Not sure where to start?
Book a 30-minute scoping call. If the free snapshot or the M365 Quick Check is the right first step, we will say so. The quick-check fee is credited toward the full review if that review is booked within 60 days.