Digital Transformation Proposal
Managed IT & AI Accelerator
Native Transformer Services, Inc.
Overview
Hexis Consulting proposes a bundled engagement to serve as NTS's technology partner across two complementary programs: Managed IT and the AI Digital Accelerator.
These programs are designed to work together. Managed IT builds the secure, modern infrastructure your team operates on. The AI Accelerator transforms how that team works — starting with the field app your crews need today and expanding into a company-wide operating system built for AI.
This is not a one-time project. It is a continuous transformation framework designed to make NTS an AI-native company — one where data flows cleanly, processes are documented and automated, and leadership has real-time visibility into a growing field operation.
The Current Situation
NTS runs a complex, high-stakes operation: crews deployed across the United States assembling and testing power transformers, a customer list that includes Siemens Energy, Southern California Edison, and Google, and revenue that has grown significantly year over year. That growth has outpaced the systems supporting it.
Field Operations
- Daily Work Reports are not consistently submitted, creating liability gaps and preventing project managers from tracking crew activity in real time.
- Time logs are submitted without DWR validation — reported hours cannot be reliably tied to physical presence on site.
- Dew point readings are calculated in a separate spreadsheet, screenshotted, and manually pasted into Creator — a fragile workflow for a safety-critical measurement.
- Field staff are submitting time records claiming to be on site when not present — confirmed by senior field staff and ongoing for at least eight months.
Identity & Security
- 33 of 35 email accounts have no two-factor authentication — a single phished password exposes everything.
- Email delivery has had DNS-level failures causing messages to be delayed or lost.
- No centralized device management — no ability to enforce encryption, lock down lost devices, or push security baselines remotely.
NTS's General Liability policy (AXA XL / Indian Harbor) explicitly excludes cyber incidents, data disclosure, and electronic data loss through three separate endorsements. There is currently no standalone cyber policy. The IT security gaps above represent uninsured exposure — a breach, ransomware event, or phished wire transfer produces zero insurance recovery. Resolving this begins with the M365 migration and security baseline below.
Managed IT Services
Managed IT is the infrastructure foundation everything else runs on. This program covers three immediate initiatives and ongoing device management.
Initiative 1 — Windows 11 Pro Upgrade
Every NTS device needs to run Windows 11 Pro to support M365 policy enforcement, BitLocker encryption, and Intune device management. All 13 physical Windows devices are already running Windows 11 — they shipped with the Home edition. No hardware replacement required.
There are two ways to license the upgrade:
Microsoft Store — Retail Key
Each user purchases through the Microsoft Store with a company card. Hexis provides a step-by-step guide and is available if the upgrade fails.
- Lower license cost
- 13 separate transactions and expense reports
- Relies on each user following instructions correctly
- Support tickets arrive unpredictably
- No commercial licensing documentation
Total: ~$1,287
GGWA via Microsoft CSP
Hexis procures licenses through the Microsoft commercial channel and schedules a 30-minute session with each user to run the upgrade.
- One invoice, one coordination process
- Hexis on the call to resolve issues immediately
- Proper commercial licensing documentation
- Higher per-device cost
- Requires scheduling with each user
Total: ~$2,444
Windows upgrades — even on compatible hardware — don't always go cleanly. Activation errors, driver conflicts, and TPM mismatches are common enough that every session should be treated as potentially requiring troubleshooting time. Budget for some sessions running long.
Initiative 2 — Google Workspace → Microsoft 365
Migrate all nativetransformer.com accounts from Google Workspace to Microsoft 365, replacing Gmail with Exchange and Google Drive with OneDrive/SharePoint. This also resolves the DNS delivery issues that have caused emails to be delayed or lost.
Why M365: Microsoft 365 Business Premium includes Windows 11 Pro upgrade rights, Intune device management, Conditional Access (MFA enforcement), Exchange Online, Teams, SharePoint, and Defender for Business — one subscription covers the entire security and productivity stack.
- ~33 active accounts (confirm headcount against current payroll before purchasing seats)
- ~300 GB Google Drive data to migrate — high-volume users prioritized first
- Gmail history migration for active users
- DNS cutover (MX, SPF, DKIM, DMARC)
Initiative 3 — Security Baseline via Intune & Conditional Access
Once all devices are on Windows 11 Pro and enrolled in Intune, Hexis configures the M365 security baseline:
- Conditional Access: MFA required on every sign-in — closes the 33/35 2FA gap immediately
- BitLocker: Full-disk encryption enforced on all Windows devices
- Compliance policies: Screen lock, OS version, encryption status — non-compliant devices blocked from email and data
- Remote wipe: Any enrolled device can be locked or wiped instantly
- Mac: FileVault encryption + screen lock enforced via Intune for Mac
- Defender for Business: Threat detection and ransomware file recovery via OneDrive versioning
Field Staff & Personal Devices
Approximately 18 field technicians currently use personal phones with a company stipend. Personal devices are difficult to support consistently — there is no MDM enrollment, no ability to enforce security policies, and troubleshooting varies widely across Android and iOS versions.
As the field app matures, issuing company tablets to field staff is recommended as a near-term initiative. This would resolve the device management problem, enable guaranteed hardware specs for offline voice transcription, and give Hexis a uniform, manageable device fleet. That transition can be scoped separately once the field app is live. Until then, field staff are supported on a best-effort basis.
Ongoing Managed IT
- Device management and Intune policy maintenance
- Security monitoring via Microsoft Defender for Business
- Unlimited remote helpdesk support (device and M365 issues)
- License and subscription management
- Quarterly device audit and security review
Device Inventory
Current inventory as of July 2026 — 20 managed devices across 4 categories. All physical Windows devices are Windows 11 compatible; no hardware replacement required.
Full Device Table
| Device | User | Make / Model | OS | RAM | Storage | Action |
|---|---|---|---|---|---|---|
| AIDAAAANNNN | Aidan Reindl | Dell 16 Plus DB16250 | Win 11 Home | 32 GB | 954 GB | Upgrade to Pro |
| ASUS | — | ASUS ROG G700TF | Win 11 Home | 32 GB | 1,908 GB | Upgrade to Pro |
| BLKLBL | — | LG 17Z90Q | Win 11 Home | 16 GB | 1,863 GB | Upgrade to Pro |
| DANMERLO | Dan Merlo | LG 17ZB90R | Win 11 Home | 16 GB | 477 GB | Upgrade to Pro |
| DAVID | David | HP ENVY 16 | Win 11 Home | 16 GB | 954 GB | Upgrade to Pro |
| DESKTOP-2PG3MJV | — | Gigabyte G5 MD | Win 11 Home | 8 GB | 477 GB | Upgrade to Pro |
| DESKTOP-6Z22U6I | — | Unknown | — | — | — | Physical Audit |
| DESKTOP-PV51ITL | — | Dell Inspiron 16 7630 2-in-1 | Win 11 Home | 16 GB | 954 GB | Upgrade to Pro |
| ELANSIN | Ed Lansin | HP OmniBook X Flip | Win 11 Home | 16 GB | 954 GB | Upgrade to Pro |
| JASON | Jason O'Flaherty | Lenovo 83F3 | Win 11 Home | 32 GB | 954 GB | Upgrade to Pro |
| JESSICA-NTS | Jessica Burton | Lenovo 83KY | Win 11 Home | 32 GB | 954 GB | Upgrade to Pro |
| JOSHUA_OFFICE | Joshua Felts | Microsoft Surface Laptop Studio 2 | Win 11 Home | 64 GB | 1,908 GB | Upgrade to Pro |
| KARLWORKPC | Karl Clouser | ASUS Laptop Q530VJ | Win 11 Home | 16 GB | 477 GB | Upgrade to Pro |
| MICHAEL | Michael Saldana | ASUS ProArt P16 | Win 11 Home | 32 GB | 1,908 GB | Upgrade to Pro |
| MacBook Pro | Brad / Kevin / Bradley | Apple Mac16,6 (M4 Pro) | macOS Tahoe 26 | 36 GB | 926 GB | Intune Enrollment |
| PADDYWORK | Paddy Hardin | Lenovo 83LY | Win 11 Home | 16 GB | 954 GB | Upgrade to Pro |
| PAOLO__HP | Paolo Cosentino | HP Envy 17 | Win 11 Home | 16 GB | 954 GB | Upgrade to Pro |
Summary by Category
| Category | Count | Action |
|---|---|---|
| Windows 11 Home → Pro upgrade | 13 | Schedule 30-min session per device |
| Mac (Apple Silicon M4) | 1 | Enroll in Intune for Mac; enforce FileVault + screen lock |
| Unknown — no data reported | 1 | Physical audit required |
| Total | 15 |
Google Workspace — Account Summary
35 accounts on nativetransformer.com. Seat count should be confirmed against current payroll before purchasing M365 licenses.
| Finding | Detail |
|---|---|
| Active accounts | 33 |
| Archived accounts | 1 (Kiana Herder — confirmed departed) |
| Accounts with 2FA enrolled | 2 of 35 (Brad Grooms, Eric Hoffman only) |
| Accounts with no 2FA | 33 of 35 |
| Never logged in (active) | Jeremy Dickman, Kim Springer — confirm before purchasing seats |
| Inactive >60 days | 6 accounts — confirm active employment before migration |
| Total Drive data to migrate | ~300 GB (top: M. Saldana 71 GB, E. Hoffman 50 GB, J. Felts 48 GB) |
33 of 35 accounts have no two-factor authentication. A single phished password gives full access to email, Drive, and any connected Zoho applications. This gap is closed at enrollment when M365 Conditional Access requires MFA on every sign-in.
AI Digital Accelerator
A structured, phased program to transform how NTS operates — starting with the tool your field crews need right now, and expanding into a company-wide intelligence layer.
Advisory sessions provide strategic direction, initiative prioritization, and execution oversight, with AI and technology expertise present at every session. For NTS, we recommend a lighter cadence than a pure software company: a monthly strategic session plus as-needed working sessions for specific initiatives. Ongoing async communication is included. The value comes from execution, not meetings.
Transformation Framework
Field App — Active Now
Role-scoped field interface built inside Zoho Creator using Creator Pages. Field technicians see only their relevant forms. Includes DWR with voice dictation, GPS check-in/check-out gating time log submission, in-app dew point calculator with copy-to-report, Internal Connection Report lock, and offline sync. No new apps, no app store dependency, no new licensing.
Process-First Architecture — Foundation Delivered
Before automating anything, the process has to be documented. Hexis has already completed this work for NTS: a 9-section business process map, 26 major operational areas covering 60+ sub-processes, and a complete forms reference across all 59 Creator forms. This is the foundation every subsequent phase builds on.
AI-Ready Data Structuring
Map all data entities across Creator, Projects, CRM, and QuickBooks. Normalize data so it can be efficiently retrieved, cross-referenced, and fed to AI tools. The outcome: instead of pulling separate reports, you can ask "What's the current unbilled AR on all active Siemens jobs?" and get an answer in seconds.
Automation & System Design
Implement automation workflows that eliminate manual steps: DWR PDF auto-filing to WorkDrive, project number flow from Zoho Projects to Creator and QBO, time log aggregation to draft invoices, AR aging alerts, new employee onboarding triggers.
Executive Dashboard
A unified interface pulling from Creator, Projects, and QuickBooks: real-time job status, crew deployment, AR aging by customer, field compliance (DWR submission rates, flagged gaps), and project profitability. No more logging into three systems for a picture of the business.
Continuous Improvement
As the data layer matures, AI tools are layered in: natural language job search, automated DWR summarization, proposal intelligence from historical project data. The long-term vision: NTS operates as an AI-native company where leadership can ask any question about the business in plain language and get a reliable answer.
Development
Implementation work is billed separately from the advisory retainer at $100/hour, minimum one-hour increments. All work is scoped, estimated, and approved before it begins. The field app (Phase 1) carries no project fee — hours are billed at the standard dev rate as work is completed.
Field App — Interactive Prototype
The prototype below demonstrates the Phase 1 field interface concept — role-scoped screens for DWR submission, GPS check-in/out, the in-app dew point calculator, and voice dictation. This will be built inside Zoho Creator Pages on the existing data layer; no new apps or app store dependency.
Investment
Monthly Recurring
User counts are approximate pending confirmation of active headcount against current payroll. Final total adjusts to confirmed seat count.
Included at No Charge
The following one-time work is included as part of entering into a managed services agreement:
- Google Workspace → M365 migration — tenant setup, data migration (~300 GB), DNS cutover, user onboarding
- Windows 11 Pro upgrade facilitation — scheduled remote sessions per device, Intune enrollment confirmation
- Intune / Conditional Access security baseline — MFA, BitLocker, compliance policies, remote wipe setup
- Initial device audit — GCP VM confirmation, unknown device audit, Mac Intune enrollment
- Field App Phase 1 (Creator Pages) — no project fee; implementation hours billed at dev rate
Development
| Work | Rate |
|---|---|
| All implementation and development work | $100 / hr |
All development is scoped, estimated, and approved before work begins. Minimum one-hour increments.
Paid Directly by NTS
| Item | Vendor | Approx. Cost |
|---|---|---|
| M365 Business Premium (~33 seats) | Microsoft | ~$22/user/mo |
| Windows 11 Pro GGWA licenses — Option B | Microsoft CSP | ~$2,444 one-time |
| Windows 11 Pro retail keys — Option A | Microsoft Store | ~$1,287 one-time |
| Cyber liability insurance (recommended after M365 migration) | AssuredPartners | $15–35K / yr |
Expected Outcomes
Immediate (0–3 Months)
- Every PC on Windows 11 Pro with full-disk encryption and MFA enforced
- All staff on M365 with Exchange, Teams, and OneDrive — email delivery issues resolved
- Field app live — DWRs submitted consistently, time logs tied to GPS verification, dew point readings flowing directly to Creator
- Location fraud addressed by GPS check-in enforcement
Medium-Term (3–12 Months)
- Clean, connected data across Creator, Projects, and QuickBooks
- Key workflows automated — DWR filing, invoice aggregation, AR alerts
- Executive dashboard with real-time job status and AR visibility
- SOPs documented and maintained for every major business process
- Cyber liability policy in place at a rate reflective of the improved security posture
Long-Term (12+ Months)
- NTS operates as an AI-native company
- Natural language queries across all business data
- Automated DWR summarization and project status reporting
- Scalable foundation that grows with the company's trajectory
Next Steps
Confirm acceptance of this proposal
Review with your team and confirm the scope and pricing work for NTS.
Execute formal services agreement
Hexis will provide a master services agreement covering both programs.
Confirm active employee headcount
Cross-reference Google Workspace accounts against current payroll to confirm the M365 seat count and final monthly total before purchasing licenses.
Choose Windows 11 upgrade path
Select Option A (retail, user-initiated) or Option B (GGWA, Hexis-facilitated). Hexis will coordinate accordingly.
Begin M365 tenant setup & field app scoping
Hexis starts the migration and schedules a working session to finalize the field app feature set for Phase 1.