Menu
No data was found
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
IT decisions you can defend, from a supplier whose prices are already published.
In the public sector it isn’t enough for a decision to be right. It has to be demonstrably right, to an auditor, a funder, a board or a committee, often years later. That applies to what you spend on IT, who you spend it with, and what you did about security. This page is about meeting that standard without the overhead that usually comes with it.
If you’re a registered charity, our charities page covers the ground that’s specific to you, including the licensing you may be entitled to.
Everything has to be justifiable, including the IT supplier. Procurement rules, published spend, value for money tests and audit. Choosing a provider isn’t just about whether they’re good, it’s about whether you can show your working. That’s a real constraint and most IT companies have never had to think about it.
The budget cycle doesn’t match the problem. Funding is annual, often with a capital and revenue distinction that doesn’t map neatly onto how modern IT is bought. Something urgent in October competes with a budget that was set in March, and underspend disappears.
The compliance load is specific and growing. Cyber Essentials is increasingly a condition of funding, framework participation or supplying central government. Schools and colleges in England have the DfE’s digital and technology standards, plus filtering and monitoring expectations under Keeping Children Safe in Education. Councils are being pointed at the Cyber Assessment Framework. None of these are optional and all of them need evidence.
And legacy systems linger. Replacing a core system is a procurement exercise, so systems stay in service long past the point a private business would have moved on. That has to be managed rather than tutted at.
You work in a regulated space with sensitive data, limited money and a volunteer workforce. All three have to be solved together or none of them are.
Public bodies are targeted, and the consequences run further than a private business. A ransomware attack on a council doesn’t just stop internal systems, it stops services people depend on, and it becomes a public story, a committee item and sometimes a national one. Several UK councils have lost months of service to attacks.
Meanwhile, without the right support it’s easy to overspend on the wrong things, buy capability you don’t use, or discover a compliance gap during an inspection rather than before it.
What a public sector organisation needs from IT is slightly different to what a business needs. It needs to work, obviously. But it also needs to be documented, auditable, procured defensibly, and capable of answering an FOI request or a subject access request without three people spending a fortnight on it. Done properly, that’s not more expensive. It’s mostly just doing things in an order that leaves a trail.
Our pricing is published, our packages are standard, and our accreditations are verifiable. That makes a value for money case straightforward to write and straightforward to defend later, which matters more here than almost anywhere.
Cyber Essentials and Cyber Essentials Plus, plus help evidencing the technical elements of whichever framework applies to you, whether that’s the DfE standards for a school, the Cyber Assessment Framework for a council, or a funder’s own requirements.
Honest advice about what has to happen now, what can wait for the next financial year, and how to phase it. We’d rather you spent the right amount at the right time than the wrong amount in a hurry in March.
Two minutes, a handful of questions, covering the ground auditors and funders ask about. Useful whether or not you ever speak to us.
Cyber Essentials is the deciding factor. It’s increasingly a condition of funding, of joining a framework, of supplying central government, and of satisfying a grant maker’s due diligence. Professional includes the certification tools and support, which turns a recurring piece of work into something that’s already in hand.
It also gives you the strongest security stack we offer, which is proportionate for an organisation holding resident, tenant, pupil or service user data.
For a smaller organisation without those requirements, a parish council or a small membership body for instance, Essential covers complete cloud and email security, real Microsoft 365 backup, device security and your Microsoft 365 Business Premium licence.
Not-for-profit pricing applies across every package, and the current rates are published on the package pages, which is usually the easiest thing to attach to a procurement note.
The Professional IT Support Service is for businesses that want the best — complete IT support, the strongest security we offer, and Cyber Essentials tools and certification support all in one package. If you need to protect your reputation, meet compliance requirements, and have confidence your IT is in safe hands, this is it.
Key Features
Every package is unlimited support with no ticket caps and no per-incident charges. Rolling monthly terms are available, longer terms carry a discount, and not-for-profit pricing applies across the range.
What you have, who can reach it, and when it was last reviewed. The thing most often missing and most often asked for.
Including elected members, trustees and governors, who often sit outside the main setup and are frequently targeted.
FOI and subject access requests are far easier when data lives somewhere structured. Email archives and shared drives nobody has tidied in a decade are where those requests go to die.
For a public body the question at the inquiry afterwards is always how long services were unavailable and whether that was foreseeable.
Not necessarily replacement, which may be years away. An honest view of the risk it carries meanwhile, and what mitigations are in place, written down.
Public bodies keep things for specific periods for specific reasons. Your IT should reflect that rather than keeping everything forever by accident.
This is the part that stops most people, and it’s usually smaller than imagined.
Systems, devices, access, backups, licences and compliance position, delivered as a document you can circulate internally or attach to a report. No obligation, and it’s useful on its own.
Published prices, standard packages, verifiable accreditations, and whatever supporting detail your process needs. We’ve no interest in making this awkward for you.
Multi-factor authentication, device protection, tested backup and the groundwork for certification.
Unlimited support, monitoring and patching, with evidence maintained in a form that suits an audit rather than reconstructed when one is announced.
Questions public sector and non-profit organisations ask us
Yes, and it’s one of the reasons our prices are published rather than quoted on request. Standard packages and public pricing make a comparison straightforward to document, and we’ll provide whatever supporting detail your procurement process needs.
Yes, across every package, and it’s shown alongside the standard rate on each package page so you can evidence it.
We work to the technical elements: broadband and network, device management, cyber security, and the filtering and monitoring expectations that sit alongside safeguarding duties. The safeguarding and curriculum side stays with the school, and we’d work with your DSL rather than around them.
Certification is included in our Professional package, and as an NCSC Assured Service Provider and IASME certified Cyber Advisor we take you through the process rather than handing you a questionnaire. We’ll give you an honest timescale after a look at where you’re starting.
Very common, and not something we’d lecture you about. What we would do is isolate it so it can’t become the way in, document the risk clearly so it’s a recorded decision rather than an oversight, and help you plan the replacement into a budget year that works.
Then we’d tell you what genuinely can’t wait and what should sit in next year’s plan. Nobody is well served by rushing a purchase in March, including us.
We can make them considerably easier by making sure data is where it should be and searchable. The decisions about what to disclose remain yours, properly.
We don’t work to fixed SLA response times, and that’s deliberate. We work on priority, so something affecting service delivery is treated as such rather than queued behind something trivial.
No. You can take any package on a rolling monthly term, which also suits organisations whose funding is confirmed annually. Longer terms carry a discount if that’s a better fit.
We work with councils, schools and academy trusts, housing providers, membership bodies and non-profits across Bristol, Bath, Cheltenham, Gloucester, Somerset and Swindon, with remote support anywhere in the UK. We’re an NCSC Assured Service Provider, Cyber Essentials Plus certified, and ISO 9001 and ISO 27001 accredited, all independently verifiable for your records.
Start with a written picture of where you stand. It’s useful at your next audit or board meeting whether or not you work with us.
We’re a really small not-for-profit community organisation working with young people in Bristol and have worked with WDYI for a year and half. The We Do Your IT team – they have always been incredibly helpful, supportive and go to great lengths to resolve any issues we have.
It was really hard to choose an IT provider because as a grant funded organisation we have very limited funding available, and have to be so careful about making the most of it – balancing risk with paying for a reasonable, proportionate service for the size of our organisation.
We’ve always been really grateful to WDYI for being really sensitive to our limited funding and capacity – they have really adapted to this to provide the most supportive service that they can and have never made us feel that we were less important than their bigger clients. The organisation has a good heart 🙂 This is really unusual for a tech company and it means a lot, so thank you.
Josh in particular has made a really big effort to always look after us, eg helping ensure we weren’t left without a laptop when a third party courier company had messed up a delivery. Thanks WDYI team 🙂
Amy Scribs – NeonDaisy CIC