Regulated work needs an IT partner who reads the fine print.
Six industries with six different rulebooks. We work inside all of them, and we can show you exactly how your data is handled.
Legal Practices
Privilege is a technical problem, too.
Attorney-client privilege only holds if the systems holding the conversations hold up. We design document management, email, and remote access so client matters stay with the people entitled to see them.
“A departing associate still had access to three active matters. CalKin rebuilt our permissions around matters instead of shared folders, and the documentation they handed us cut our last outside-counsel review from a week to an afternoon.”
Healthcare
HIPAA compliance, actually maintained.
A signed BAA is the start, not the finish. We keep administrative, physical, and technical safeguards current, document them, and help you survive an audit without a scramble.
“Our previous provider signed the BAA and then went quiet. CalKin ran the risk analysis we had postponed twice, closed the gaps that mattered first, and now sends a quarterly report our compliance officer can file without editing.”
Dental Practices
Imaging, charts, and schedules that never stall.
When the practice management server is down, the chairs sit empty. We keep imaging, charting, and scheduling fast, backed up, and compliant — with support that understands a morning huddle can't wait.
“Our imaging server failed on a Tuesday morning and the chairs still filled on time. CalKin restored the prior night's data from a spare configuration before the first patient sat down. That morning is why we stayed.”
Education
Student data protected, classrooms uninterrupted.
Schools carry a mix of district policy, FERPA obligations, and a hundred devices nobody fully owns. We bring order: managed Chromebooks and laptops, filtered networks, and clear data handling.
“We had Chromebook carts across three buildings and no reliable record of who owned what. CalKin inventoried every device, tightened filtering to satisfy CIPA, and cleaned up our vendor agreements before the state review.”
Defense Contractors
CMMC is now a condition of the award.
If you bid on DoD work, a CMMC level is no longer a nice-to-have — primes push it down to every subcontractor who touches controlled unclassified information. We map your environment against NIST SP 800-171, close the gaps, and keep the evidence a C3PAO asks for.
“Our first gap analysis was sobering. CalKin worked the POA&M with us control by control, built the SSP and the evidence file, and we passed assessment on the first attempt without missing a contract deadline.”
Government
Public money, public scrutiny.
Municipalities, counties, and agencies answer to auditors, councils, and the public. We run the controls, keep the records, and can sit in the room when someone asks who has access to what — and why.
“Every vendor tells us they are CJIS aware. CalKin was the first to hand over access logs, retention schedules, and segmentation diagrams without being asked twice, and they sit in the room when council wants answers.”
Documentation you can hand to an auditor.
Every regulated client gets a documentation track, not just a stack of tools. Here is what we maintain for each industry, and how often we revisit it.
Legal Practices
Reviewed twice a yearHealthcare
Quarterly review, annual risk analysisDental Practices
Quarterly backup proofEducation
Annual, before the school yearDefense Contractors
Quarterly, pre-assessment in year oneGovernment
Annual, aligned to the budget cycleIn a different regulated field?
Financial services, insurance, nonprofits — if confidentiality is part of your work, it's part of ours. Tell us your requirements.