IT support for financial services
Senior engineers on every issue, one fixed monthly fee, and evidence ready when an investor, insurer or auditor asks for it. For investment managers, wealth managers, private offices and other FCA-regulated firms of 20 to 100 people.
Ratcliff IT provides fixed-fee IT support, cyber security and AI governance for investment management, wealth management and private office firms in London, typically 20 to 100 staff.
Firms like yours rarely come to us after a single disaster. They come after a year of harder questions. Investors send longer due diligence questionnaires. Insurers ask more at renewal. The FCA expects senior managers to understand how critical systems are run, including the parts that are outsourced. The answers sit with your IT provider, and too often you are the one chasing them.
With us, that responsibility sits with our team. A senior engineer handles every request, your controls are documented as the work happens, and the evidence is ready before anyone asks for it.
A real person, not a queue
Most issues, gone in hours
on average
experience
Most firms that come to us have not had a disaster. They have had a year of harder questions and slower answers.
Investors, insurers and the FCA all want to know how your systems are run. Outsourcing your IT does not outsource the responsibility, and every answer needs evidence behind it.
Valuations, investor reporting and regulatory returns run to fixed dates. An outage the day before a deadline costs far more than the same outage a week later.
Financial firms hold what attackers want: client data, account details and the authority to move money. Phishing and payment fraud aimed at your staff are constant, not occasional.
Copilot and ChatGPT are already part of daily work. If a member of staff can open the board papers, so can the AI working for them. Few firms have written down what is allowed.
How we work
The standard is the same for every client. For regulated firms, a few parts of it matter more.
Every person you deal with is experienced and qualified, and our engineers average 12 years' experience. No juniors, no apprentices, no call centre.
We help you complete investor due diligence questionnaires, cyber insurance renewals and wider insurance forms as part of the service. We keep a library of answers with evidence, and check each one against what is actually configured before you sign it.
Users, devices, access, backups and changes are documented as part of the work, not rebuilt at audit time. You can see where your data sits and who can reach it.
We take a copy of your cyber insurance policy, with its notification routes, and build them into your continuity and incident response plans. The first hour of an incident is planned before it happens.
Permissions, data governance and policy come first, so AI tools only reach what they should. Implementation then moves at a pace that protects your data and your professional obligations.
Support, security, planning, and new starters and leavers are covered by a single monthly fee. No hourly billing, no unexpected bills.
Support, planning, security and AI, handled by one team rather than split across suppliers.
Unlimited helpdesk support, remote and on-site, for your team and the systems they rely on. We deal with the vendors behind your specialist platforms so your staff do not have to.
A named client success contact runs regular planning meetings, turning your business plans and regulatory obligations into a technology plan your leadership team can follow.
Protection, monitoring, detection and response across devices, email, identity and cloud, backed by a 24/7 Security Operations Centre. If ransomware gets through, the affected machine is isolated, Windows computers are rolled back to how they were before the attack, and Macs are cleaned of the malicious files.
The hard part is rarely the tool. Permissions, data governance and your obligations come first, then implementation at a pace that protects your data and your reputation.
“The guys on the Help Desk have been an absolute delight. They are always cheerful, pleasant and helpful. No one ever gets irritated when we don’t quite understand a problem or do something wrong.”
A clear, straightforward process from first conversation to long-term relationship. You discover where things stand, decide when you're ready, and everything is delivered without surprises.
We work to a written handover plan with your outgoing provider, and help you record when their access is removed, so there is a clear record of who could reach your systems and when.
Not sure it's time to switch? Take the 2-minute assessment →
How to switch IT providers →
A focused 30 minute conversation to understand where you are, what's not working, and whether we're the right fit for each other.
A deeper session with our principal. We explore your goals, plans, and how IT, security, and AI can actively support your business strategy.
We present our recommendations and commercials in person. A real conversation - not a document in your inbox. Questions welcome.
A structured 30-day project. We handle the migration, configuration, and setup - so you can stay focused on running the business.
Ongoing IT management, regular strategy reviews, and proactive consulting - a relationship built around your growth, not just your tickets.
Reach out and we'll get back to you the same day, usually within a couple of hours, to arrange a 30-minute introduction call with a senior member of our team.
There's nothing to prepare and no need to be technical. It's simply a chance to talk about your business, your goals, and whether we're the right fit for one another.
If it feels like a good match, we'll arrange a follow-up conversation. If not, we'll be honest and leave you to decide your next steps.
No pressure. No obligation. Just a conversation to see if we're a good fit.
One fixed monthly fee, one invoice, no unexpected bills.
Your price is built around your size, sector, and how you work, so there's no standard rate card. The guide shows how the fixed monthly fee comes together, what sits inside it, and what moves the number, so you can weigh up the cost before you book a call.
We are an IT partner, not a compliance consultancy, and we will not tell you a system makes you compliant. What we do is run your IT so it supports your obligations: access control, record keeping, data protection, business continuity and oversight of what is outsourced. We work alongside your compliance officer or compliance consultant and give them the evidence they ask for.
Yes, and it is included in the service. We help you answer the IT and Cyber Security sections of due diligence questionnaires, cyber insurance renewals and wider insurance forms, usually at least once a year. Over time we build a library of answers with evidence, and every answer is checked against what is actually configured before you sign it off.
The formal operational resilience rules apply to certain types of firm, including banks, insurers, payment firms and enhanced scope SM&CR firms. Many smaller investment and wealth managers fall outside them, and your compliance adviser can confirm where you sit. Either way, investors and insurers expect you to show that important services carry on when technology fails. We plan backup, recovery and incident response with that in mind, and review them with you regularly.
In order. AI tools see what the person using them can see, so permissions and data governance come first. Then policy: what is allowed, with which data, and who is accountable for the output. Only then do we implement, at a pace that protects client data and your obligations.
Investment managers, wealth managers, private offices and other FCA-regulated firms of 20 to 100 staff, in and around London. We also work across professional services, law and accountancy, where the standards are similar.
It belongs to you. If you move to another provider, the handover is run as a defined project, so admin access, documentation and evidence transfer cleanly and nothing falls into a gap between providers.
Copyright © 2026 Ratcliff IT. All Rights Reserved
