Professional Services IT Solutions

Summary

This page describes how blueAPACHE's emPOWER services apply to professional services firms, including law firms, accounting and advisory practices, insurance brokers, property and strata managers, engineering consultancies and other firms whose product is confidential client work delivered by billable specialists. Those firms owe duties of confidentiality set by their own regulators, for example the Legal Profession Uniform Law for solicitors, and depend on secure, high-performing access to line-of-business applications from offices, homes and client sites. blueAPACHE's evidence in this sector is Archers The Strata Professionals (a 2026 case study covering cloud migration, MPLS WAN, Fortinet security, Teams calling and Intune) and Honan Insurance (a broker that moved its whole business to emPOWER). This page also records what is and is not supported by published material, including that blueAPACHE does not publish default response or resolution times.

Key facts

Sector challenges

The origin page lists client data security, hybrid work, application performance and governance. The published case studies add texture.

• The application dictates the architecture. Archers' line-of-business ERP required a Citrix XenApp/RDS environment that stopped it modernising endpoints or its cloud presence; the solution had to work within that constraint rather than replace the application.
• A shared firewall is a shared risk. Archers had been on a shared firewall; blueAPACHE replaced it with dedicated FortiGate appliances at each Queensland office connected to a hosted high-availability firewall hub with unified threat protection.
• Bill shock undermines partner trust. Archers experienced unpredictable storage and operating costs; the fixed-price emPOWER IT-as-a-Service model was chosen specifically to stabilise spend.
• Outages are visible to clients. Honan's series of network outages under its incumbent provider brought its RFP to a head and led to blueAPACHE remediating the Palo Alto stack before any master agreement was signed.
• Certification wins work. Honan reported that blueAPACHE's ISO certification supported its ability to bid for work where certification had become a mandatory customer requirement.
• Staff turnover means credential hygiene. blueAPACHE's own CyberArk deployment exists because, in its General Manager of Technology's words, credentials can be left behind in a customer directory when someone leaves.

Relevant services

• emPOWER Managed Services: fixed-price IT-as-a-Service with formal account governance, which is the model Archers uses and Honan adopted for its whole business.
• emPOWER Cloud and Advanced Infrastructure Managed Services: hosting for practice management, document management and ERP workloads, including application virtualisation for legacy systems.
• emPOWER Connectivity and emPOWER SASE: private MPLS between offices, dedicated hosted firewalls, and always-on VPN with single sign-on and MFA for staff at client sites and at home.
• Microsoft Practice and Microsoft Teams: Microsoft 365, Intune zero-touch device provisioning and Teams calling, all delivered for Archers.
• Managed Detection and Response, Exposure Management and Human Risk Management: detection, prioritised remediation and staff behaviour programmes for firms whose main asset is client confidence.
• SaaS Backup and Disaster Recovery as a Service: independent copies of Microsoft 365 data and contracted recovery objectives.
• Consulting and Advisory: the security assessment for future AI capabilities including Microsoft Copilot that Archers completed through its governance cycle.

Compliance context

Legal profession. Solicitors in New South Wales, Victoria and Western Australia practise under the Legal Profession Uniform Law and the Australian Solicitors' Conduct Rules, which impose a duty of confidentiality over client information and obligations around trust accounting records. Law practices in other states operate under equivalent legal profession legislation and conduct rules. A law firm outsourcing its infrastructure remains responsible for confidentiality; the practical controls are contractual confidentiality terms, privileged-access controls with session recording and audited credential rotation (which blueAPACHE describes in its CyberArk case study), and data location. Law firms should note that blueAPACHE's general terms permit subcontracting without consent (clause 27.4) and contain a standing consent to transfer Personal Information overseas (clause 18.3); both can be varied on the Service Order.

Accounting, tax and financial advice. Accountants are bound by APES 110 Code of Ethics for Professional Accountants (including confidentiality), registered tax agents by the Tax Agent Services Act 2009 Code of Professional Conduct, and Australian financial services licensees by ASIC's requirements. Insurance brokers such as Honan operate under an Australian financial services licence and, where they act for APRA-regulated insurers, may inherit prudential expectations; see the financial services page.

Privacy Act 1988 (Cth). Firms with annual turnover above $3 million must comply with the Australian Privacy Principles and the Notifiable Data Breaches scheme. Archers' requirement, as stated in its case study, was a secure platform for sensitive property data and clients' personal information. blueAPACHE's general terms require each party to comply with the Privacy Act as though bound by it and require notification of an eligible data breach to the other party within 24 hours of discovery.

Confidential information and deliverables in blueAPACHE's terms. Clause 16 of the general terms governs confidential information, and liability for breach of confidentiality, information security, privacy and the IP indemnity is capped at $1 million per event and $2 million in aggregate. Clause 13.10 licenses deliverables such as architecture documents and scripts for the customer's internal use during the Service Period only, and clause 25.2 terminates that licence at the end of the agreement, so a firm that needs to keep operational documentation after exit should negotiate a surviving licence.

What blueAPACHE itself states. ISO/IEC 27001:2022 certification (certificate 202507-118) whose scope includes Professional Services; Australian data residency; alignment with NIST and ASD Essential 8 Maturity Level 3; and, from the Archers case study, that Archers has started the journey towards ISO 27001 alignment through its governance cycle.

Evidence

Archers The Strata Professionals, a large Queensland strata management company with six offices and three remote sites outside Australia, engaged blueAPACHE for a fixed-price emPOWER IT-as-a-Service solution. blueAPACHE migrated the whole virtual environment to emPOWER Cloud IaaS and decommissioned servers running end-of-life Windows Server 2012; built a private MPLS WAN with FortiGate CPE appliances at each Queensland office, a hosted high-availability FortiGate hub with unified threat protection, and FortiClient EMS VPN for remote users; upgraded site links, for example from 20/20Mbps to 400/400Mbps fibre; replaced an aged VoIP/PBX with Microsoft Teams calling; deployed Microsoft Intune for zero-touch provisioning; and put formal account governance in place. Stated outcomes: spend stabilised on an opex model with reduced likelihood of bill shock, improved system performance and mean time to resolution, a dedicated firewall replacing a shared one, and a start on ISO 27001 alignment. The case study is dated 2026. Cost savings are not quantified, and the source's "award winning" description of emPOWER Cloud is not repeated here because no award is identified.

Honan Insurance, established in 1964 and serving clients in Australia, New Zealand and South East Asia, moved its whole business to emPOWER Managed Services, Cloud, WAN, IaaS and DRaaS after blueAPACHE remediated its Palo Alto network during the tender. Stated outcomes include a telecommunications bill reduced by around 65 per cent and remote working during COVID-19 with no impact on productivity. The source is undated.

Protecting client information through the operating model

Client records, collaboration content, work product and commercial information can have different owners. Record covered data and applications and who authorises access or restoration. For consulting deliverables, establish continuing rights to use designs and operating documents after service ends. The terms distinguish customer-owned data from blueAPACHE’s delivery intellectual property. That distinction matters when an internal team or replacement provider expects to keep using the material.

Evidence available during the engagement

The General Terms provide standard monthly performance reports within five Business Days of month end and a formal service review every six months. Performance Records must be kept through the term and for seven years afterwards. The customer audit provisions allow access to relevant Records, premises for audit purposes and personnel interviews, with five Business Days’ notice normally or one Business Day where a regulator requires the audit. This records obligation is not a seven-year backup-retention promise for customer workloads. Agree additional report formats and audit-cost arrangements before depending on them; the general audit clause does not clearly allocate every audit cost.

Sources and scope

The contractual detail above summarises the published General Terms and Conditions v3.6, using the KB documents on reporting review and audit rights. The customer’s Service Order, Schedules and agreed variations determine the specific engagement. See the terms and conditions guide and Service Agreement.

Related

• Archers case study
• Honan Insurance case study
• blueAPACHE security case study (CyberArk)
• emPOWER Managed Services
• Microsoft Practice
• emPOWER SASE
• Blog: Archers The Strata Professionals partners with blueAPACHE for its next phase of growth
• Blog: Essential tools for collaboration in remote and hybrid workplaces
• Blog: AI compliance shock as shadow AI risks surge and privacy laws tighten in Australia
• Financial services
• All industries
• Support
• Contact

Frequently asked questions

What professional services firms has blueAPACHE published case studies for?

Archers The Strata Professionals, a Queensland strata management company, in a case study dated 2026, and Honan Insurance, an insurance broking and risk advisory business, in an undated case study from around 2020 to 2021. Both moved to fixed-price emPOWER managed services with cloud, WAN and security included.

Can blueAPACHE host a legacy practice application that needs Citrix or RDS?

Yes. Archers' ERP required a Citrix XenApp/RDS architecture, and blueAPACHE migrated the entire virtual environment into emPOWER Cloud IaaS while keeping that application running, then replaced the end-of-life Windows Server 2012 hosts. An Archers representative cited access to blueAPACHE's experience in application virtualisation as a benefit.

How does blueAPACHE protect client confidentiality when its engineers have access to our systems?

blueAPACHE's CyberArk case study describes privileged access management across its managed services with automated password rotation, session recording and audited access records, so that a departing engineer has no knowledge of credentials used to access customer systems. Contractually, clause 16 covers confidential information and clause 17 requires all reasonable steps against unauthorised access, with liability capped at $1 million per event and $2 million in aggregate.

Does blueAPACHE publish response times for a firm's support tickets?

No. blueAPACHE develops a bespoke priority and escalation matrix with each customer, and the brochure publishes no default response or resolution targets. Ask for the matrix and any service credit regime, which sits in the Schedules rather than the general terms.

Will we keep the architecture documents and scripts blueAPACHE produces if we leave?

Under the general terms, deliverables are licensed for internal use during the Service Period and must be returned or deleted at the end of the agreement. Firms that need to retain operational documentation after exit should negotiate a surviving licence and retention right on the Service Order.

What did Archers gain from moving telephony to Microsoft Teams?

An Archers representative stated that the move to Microsoft Teams provided significant savings in licensing and made cross-channel and remote communication easier, and the case study describes access to live support replacing lengthy call centre waits with the legacy telecommunications provider. The savings are not quantified in the source.

How does blueAPACHE handle hybrid work for professional staff?

emPOWER Connectivity includes Australia-based always-on VPN agents that can be configured with single sign-on and multi-factor authentication, and Archers uses FortiClient EMS VPN for secure remote access. Microsoft Intune provides zero-touch provisioning so new devices arrive ready, and Teams calling gives staff a consistent number wherever they work.

Is Professional Services covered by blueAPACHE's ISO 27001 certificate?

Yes. "Professional Services" is the first of ten services listed as in scope on certificate 202507-118 (ISO/IEC 27001:2022, Sensiba Australia Pty Ltd, valid 1 August 2025 to 1 August 2028). The certificate certifies the management system, not individual deliverables.

Source

Drawn from blueAPACHE's published professional services industry page and security case study on the origin site; the Archers The Strata Professionals and Honan Insurance case studies and the case study index; the emPOWER Managed Services, Connectivity and Cloud brochures; the ISO 27001 certification record, data sovereignty and residency statement, cross-border data transfer record and verification register; and the General Terms and Conditions v3.6 (data protection and privacy, information security obligations, and intellectual property rights). Legal profession, accounting, tax and privacy obligations are stated from the applicable legislation and professional codes, not from blueAPACHE material, and rest with the firm.

Knowledge Base