Your system does not need replacing.
It needs a few more years.

A written report you can forward upward without editing it.

That is the design constraint. It has to survive being read by your boss, and by a councillor who was not in the room.

1. 01

   What the system is

   Plain language, one page, no jargon. Proves we understood it before we had opinions about it.

2. 02

   Condition summary

   A small number of ratings across defined dimensions, so it can be skimmed in thirty seconds.

3. 03

   Genuinely risky vs merely ugly

   Most legacy systems are full of things that look alarming and do not matter, and one or two things that look fine and will take you down. Separating those is the work.

4. 04

   Failure modes, named and ranked

   What breaks, under what conditions, with what consequence for service delivery.

5. 05

   What it costs to fix

   Prioritised and honest, including leave this alone where that is the right answer.

6. 06

   A priced remediation menu

   Discrete, scoped, individually priced items, each weighed against the working life it is likely to buy. The report ends with the next decision already made simple.

Where the honest answer is that a system should be replaced rather than repaired, the report says that, and prices that too.

The list matters more than the brochure.

• Tell you to buy a new system. That is a capital project with a business case and a competition, and it is the answer you have already been given and already could not afford.
• Produce a ten-year digital strategy. You did not ask what technology will look like in 2035. You asked whether this thing will make it to 2029.
• Touch anything during the assessment. Read-only means read-only.
• Quote you a number that can go up later.

Answered the way we would answer them in the room.

How many years will this buy us?

We will not put a number on that before we have looked, and we would be suspicious of anyone who does. What the assessment produces is a priced list of discrete fixes, each one weighed against the working life it is likely to buy. Some systems turn out to have a long runway and a short list of cheap problems. Some turn out to be genuinely at the end, and the report says so in writing rather than selling you work that will not help.

What does read-only actually mean?

No code changes, no data migration, no retraining, no configuration changes, and nothing about how the system runs changes while the assessment is underway. Your staff keep working through it. The engagement cannot break your operation because it does not touch it, which is the point: it is the smallest first purchase that still produces something real.

Why is the remediation price a ceiling instead of a quote?

Because a ceiling is the harder commitment, not the softer one. An estimate can move upward and usually does. A ceiling cannot. If the work comes in under the ceiling, you are invoiced for what it actually took. If it turns out to be larger than the ceiling, that is our problem, not a change order.

Does the assessment fee come off the remediation?

Yes. If you proceed within 90 days of receiving the report, the full assessment fee is credited against the extension. The assessment is priced to be an easy first decision, not a revenue line.

Can we buy this without running a competition?

That depends on your own purchasing bylaw, not on us, and you should check the threshold before you rely on it. What we can say is that every price on this page is deliberately kept in the range municipalities normally handle by quote rather than by competitive process, and that the assessment comes out of an operating line rather than a capital request.

Have you done this for a government before?

We hold an active contract with a Canadian provincial government ministry, client name withheld under contract confidentiality. We can speak to scope and approach in a procurement conversation, but we will not name a client on a website, which is the same discretion your file would get.

Do you hold SOC 2, ISO 27001, or FedRAMP?

No. We do not hold SOC 2, ISO 27001, FedRAMP, StateRAMP, or HECVAT, and we will not imply otherwise on a bid. CyberSecure Canada certification is in progress. WCAG 2.1 AA is the standard we build to, not a certificate we hold. If your requirement is hard-gated on one of those, we are not your supplier and we will say so on the first call.

What happens after the extension work is done?

Nothing, unless you want it to. There is no licence, no renewal, and no clause that lets us reprice you later. If you would rather not go back to having nobody who knows the system, we offer a care retainer at $2,500 per month, or $27,500 paid annually. It is optional and it is cancellable.