Field notes

Notes from the rack.

What we've learned running regulated infrastructure for Sigma, Armellini, Exchange Bank and others — told through the decisions they actually made, not the marketing version.

Neatly cabled switches in a rack — the hardware stays; the hypervisor licence is what changes.
Infrastructure

The Broadcom VMware Price Increase: What a Ten-Server Business Can Actually Do

Why the post-Broadcom VMware renewal lands so hard on a small estate, the three realistic responses, and what moving to Proxmox on your existing hardware involves.

8 min read
A medical practice's front desk — where the practice management system lives, and where the HIPAA hosting question starts.
Compliance

HIPAA-Compliant Hosting: The Questions a Practice Manager Should Ask Before Signing

HIPAA-compliant hosting is a contract and a set of answered questions, not a badge. What the BAA has to say, what 'no-view' hosting means, and the five questions to ask any provider before your practice's server moves.

8 min read
A control room of monitors — the operations view of an on-premises AI cluster, where every query stays inside the building.
AI

Running an LLM On-Prem: What a Community Bank Actually Needs

On-prem LLM for a regulated business, without the vendor reference design: hardware sized for the real workload, models chosen by testing, data that never leaves the perimeter, and an audit trail the examiner can read.

10 min read
A long data center corridor — where Windows Server 2016 workloads end up when they move as-is onto hosted hardware.
Infrastructure

Windows Server 2016 End of Support: The Three Options Before 12 January 2027

Three ways to deal with the Windows Server 2016 deadline, what each one actually involves, and how Armellini Express Lines handled its upgrades without a cutover anyone noticed.

9 min read
A signed document on a desk — the bridge letter in physical form.
Compliance

SOC 2 Bridge Letters Explained: What They Are, When You Need One, and How We Get Them for Clients

What a SOC 2 bridge letter is, when your auditor will accept one, the small details that quietly invalidate the ones you receive, and how the request actually goes for a client whose servers we host.

7 min read
A dense array of enterprise equipment — private infrastructure, owned and operated end to end.
Infrastructure

Private Cloud vs. Public Cloud: What Two Regulated Companies Actually Chose, and Why

The honest version of the private-vs-public cloud decision, told through an insurance underwriter and a refrigerated freight carrier who have each run on dedicated hardware for over a decade.

8 min read
More posts soon

We publish when we have something useful to say — not on a content calendar.

Stay in the loop

Quarterly field report.

One email per quarter. What we've seen in the field, what we're building, and the frameworks that matter for regulated operators. No noise, no re-targeting.