Who we help
Most IT consultancies start with the tools. We start with who carries the liability.
The organisations we're built for are regulated. They carry real compliance obligations: DSPT, SRA, GDPR. When something goes wrong, someone answers for it by name.
Enterprise IT consultancies are too expensive and move too slowly for them. Pure managed-service providers lack the compliance depth. They fall between two markets and pay too much for tools that do not fit.
That is the gap we work in.
Primary focus — the DSPT V8 deadline has passed
The DSPT V8 deadline has passed — are you actually compliant?
The Care Quality Commission audit and NHS DSPT Category 2 compliance are separate obligations. Most care home groups treat them as one. They are not.
DSPT V8 tightened the evidence requirements for independent assurance. If your network spans multiple homes, the scope is wider than it was under V7. The 30 June 2026 submission deadline has now passed; if you have not submitted, that is an urgent gap, not a future one.
We're built for NHS supply-chain care organisations — 50 to 500 employees — that need DSPT advisory, a reference architecture that satisfies the evidence requirements, and infrastructure that is demonstrably on UK or EU servers they own or control.
Self-hosted infrastructure simplifies DSPT evidence considerably. You can name the server. You can name the jurisdiction. You can name the person who holds the keys. That is three NDG evidence items ticked without a spreadsheet.
Secondary focus — NEN 7510 / NIS2
NEN 7510 requires demonstrable control. That is easier on infrastructure you own.
Dutch healthcare organisations are required to meet NEN 7510 (information security for healthcare). Many procure cloud services from US-headquartered providers and then spend time arguing about where the data actually lives.
Genitco operates from Estonia (Genitco OÜ) with EU data residency by default. The legal entity is Estonian; the infrastructure is in EU jurisdiction. That is a cleaner answer for NEN 7510 evidence than most Dutch healthcare IT providers can give.
We respond in Dutch for Dutch visitors. The NEN 7510 guide is available in Dutch.
Legal sector — CLOUD Act and SRA obligations
A US-based email provider is a structural problem for legal privilege.
The US CLOUD Act allows US law enforcement to compel disclosure of data held by US-incorporated companies, regardless of where the data is physically stored. Microsoft's UK data centres do not change this. The parent company is US-incorporated.
For law firms, this is a professional conduct question, not just a GDPR question. Legal privilege depends on confidentiality. Confidentiality depends on who can access your data without your knowledge.
We're built for law firms under 50 solicitors that want email, documents, and matter-related AI that runs on infrastructure with no structural US access vector. The SRA and ICO cannot mandate the answer — but the professional obligation is clear.
UK SME — M365 migration
M365 for 50 users costs more than most organisations realise. The maths usually surprises them.
Microsoft 365 Business Premium carries a per-seat list price that adds up fast at 50 users. That price comes before Copilot licensing, before Azure storage overages, and before the additional security tooling you need to satisfy an audit.
Genitco's Team tier (managed, up to 50 users, email, documents, chat, video, and AI assistant) is £1,800 a month. We run the stack. You own the data. The cost-calculator tool on this site does the comparison for your specific user count.
If you host it yourself (you-host retainer), the cost is £550 a month for the control plane and governance layer. You pay Hetzner or your preferred EU provider directly for compute.
The migration is the hard part. We scope it, price it, and execute it. The M365 guide has the component-by-component breakdown.
Community rates — verified, lightweight
If your purpose is public, we reflect that in the price.
UK registered charities receive 40% off project fees, 50% off managed hosting, and 40% off advisory retainers. CICs and B-Corps receive 25–30% off across the board.
Verification is a charity commission number or a Companies House link. We check. We do not audit. The discount applies to our expertise fee. Infrastructure passes through at cost either way.
This is not a charitable donation. It is pricing that reflects that the public benefit of your organisation is real, and that we would rather work with more of you than fewer.
Startup rates — pre-seed or under £500k raised
A scoping conversation costs nothing. It might save you six months.
Early-stage startups (pre-seed, under £500k raised, under 10 FTE) receive 25% off project fees and 50% off managed hosting for the first 12 months.
Alternatively: deferred payment. We scope, build, and defer the fee until your next funding round. Not available for every engagement; contact us to discuss.
The AI Sizing Scope workshop (£750, two hours, written recommendation) is often the right first engagement. The honest answer is sometimes: you do not need AI for this yet. We will say that.
Community — no pitch
We built the micro-stack repo for you. No sales.
The `genitco/micro-stack` repository (Apache-2.0) is a Docker Compose bundle for running Nextcloud, Stalwart, Mattermost, and a small local LLM on one box. It is educational, not the full orchestration we run for paying clients.
Open-source maintainers who want the chat assistant or website hosting for their project: that is 100% off. Contact us with your maintainer status.
If you want the community room: we run a Matrix space. Details in the open-source section.
Community rates
Published, not hidden.
The discount structure is public. Verification is lightweight: we check a number or a domain, we do not audit. The rate applies to our expertise fee. Infrastructure passes through at cost regardless.
| Audience | Generate (Build) | Operate (Run) | Govern (Oversee) | Verification |
|---|---|---|---|---|
| UK registered charity | 40% off | 50% off | 40% off | Charity Commission number |
| NHS trust / state school / local gov | 30% off | 50% off | 30% off | Org email domain or procurement framework |
| Social enterprise (CIC / BCorp) | 25% off | 30% off | 25% off | Self-declared + registry link |
| Early-stage startup (pre-seed / <£500k / <10 FTE) | 25% off or deferred | 50% off first 12 months | 25% off | Companies House + founder declaration |
| Open-source maintainer | 100% off chat assistant + website hosting | — | Case-by-case | Maintainer status on the repo |
Discounts do not stack. The best applicable rate applies. For any organisation in multiple categories, contact us and we will find the right rate.
Who it is not for
Organisations that prioritise speed over stability
Self-hosted infrastructure requires someone accountable for it. If you have no in-house technical capability and no appetite for a managed retainer, the risk of owning your stack is real.
Direct NHS trust procurement
NHS trusts have longer procurement cycles and require G-Cloud 15 framework listing. We are working towards that for Wave 2. Care homes and supply-chain organisations do not need it.
Organisations that want the cheapest option
We are not the cheapest option. We are a better value proposition for organisations with compliance obligations. If the only question is cost, M365 Solo is £4.99 a user. We are not competing there.
Large enterprise
We are a small team. We take on organisations where we can do the work properly. Organisations above 500 users are usually better served by a larger practice, and we will say so.
Not sure if you fit?
The scoping call is 30 minutes. We will ask what you are running, what it costs, and what the compliance requirement actually is. If it is a fit, you will have a proposal within five working days. If it is not, we will tell you that directly and point you somewhere more useful.