THE AI HUB
Human-Led, AI-Powered, Always On

Managed IT Services Proposal

Prepared For:

Rupert Carlyon, Founder & Managing Director

Kōura Wealth

Level 1/29 East Street

Auckland, New Zealand

rupert@kourawealth.co.nz

Proposal Date: 8 December 2025

Valid Until: 8 January 2026

Reference: KW-MSP-2025-12

Prepared By: Steve Byrne

Executive Summary

THE AI HUB is pleased to present this comprehensive managed IT services proposal to Kōura Wealth. As your trusted IT partner since 2019, we've supported your growth from inception to managing $268 million in assets for over 6,330 KiwiSaver members.

Building on our recent security uplift project and deep understanding of your unique requirements as a digital-first financial services provider, this proposal delivers enterprise-grade IT infrastructure, advanced security, and strategic technology management.

With proven expertise in financial services compliance, cryptocurrency platform security, and cloud infrastructure, combined with our physical Auckland presence, we are uniquely positioned to continue as your complete technology partner as you scale.

THE AI HUB Managed Services

Complete Managed IT Platform for Financial Services

A comprehensive, enterprise-grade IT solution designed specifically for modern financial services organisations. Everything you need to operate securely, compliantly, and efficiently.

Platform Upgrade: Office 365 → Microsoft 365 E3

Microsoft 365 Platform Upgrade

As part of our managed services, we're upgrading your Microsoft platform from Office 365 to Microsoft 365 E3 Enterprise, adding enterprise device management and security capabilities.

Current: Office 365

  • ✓ Office apps (Word, Excel, etc.)
  • ✓ Exchange Online (email)
  • ✓ SharePoint & OneDrive
  • ✓ Microsoft Teams
  • No device management
  • No Windows Enterprise
  • Limited endpoint security
  • Basic identity management

Upgraded: Microsoft 365 E3

  • Everything in Office 365 PLUS:
  • Microsoft Intune (device management)
  • Windows 11 Enterprise licenses
  • Defender for Endpoint P1
  • Azure AD Premium P1
  • Information Protection
  • Advanced Compliance

This platform upgrade would typically represent an additional $336/month ($24/user × 14 users) if purchased separately.

Defence-in-Depth Security Architecture

Our security approach combines Microsoft's platform capabilities with industry-leading tools for comprehensive protection:

Layer 1: Microsoft Defender for Endpoint P1 (Included in M365 E3)

Foundation Protection: Next-generation antivirus, attack surface reduction, device control, endpoint firewall, network protection, and web content filtering across Windows, macOS, iOS, and Android.

Layer 2: CrowdStrike Falcon (Added by THE AI HUB)

Advanced EDR: Endpoint detection and response with 24/7 threat hunting, behavioural analysis, and automated threat remediation. Provides advanced capabilities beyond Defender P1's foundation protection.

Layer 3: Microsoft 365 Backup (4x Daily)

Ransomware Recovery: Automated backups every 6 hours with 30-day immutable storage, enabling rapid environment restoration in the event of a security incident.

Layer 4: Dark Web Monitoring

Early Warning System: Continuous monitoring of dark web and breach databases for compromised Kōura credentials.

Layer 5: THE AI HUB Management

Human Oversight: Proactive security monitoring, policy tuning, incident response, and strategic security planning.

This defence-in-depth approach layers Microsoft Defender P1, CrowdStrike, backup, monitoring, and active management. Multiple independent security systems provide comprehensive protection against sophisticated threats.

Complete Service Inclusions

✓ Microsoft 365 E3 Enterprise

Complete productivity and security platform with Intune, Defender P1, Windows 11 Enterprise, and Azure AD P1. Licensing scales with your team.

✓ Microsoft 365 Backup

4x daily automated backups with 30-day immutable storage. Monthly restoration testing included for all users.

✓ CrowdStrike Falcon

Advanced endpoint detection and response with 24/7 threat hunting and automated response capabilities for all endpoints.

✓ Managed Internet 500/500

Business-grade fibre connectivity with SLA guarantees and priority support.

✓ DNS Hosting & Management

Enterprise DNS hosting with continuous monitoring and failover protection.

✓ Dark Web Monitoring

Continuous monitoring of dark web and breach databases for compromised credentials across all users.

✓ Proactive Support & Management

Incident resolution, break-fix support, routine maintenance, and strategic IT planning included.

✓ 24/7 Emergency Support

After-hours emergency support for critical issues, with Auckland-based business hours coverage.

Implementation Services

Professional services to upgrade your Microsoft 365 platform and configure your environment for optimal security and productivity.

Autopilot & Intune Deployment

  • Windows Autopilot configuration for zero-touch device deployment
  • Microsoft Intune setup for mobile device management
  • Application deployment policies
  • Conditional access policies for security
  • Compliance policies for all device types
  • User training and documentation

Ongoing Managed Services

Comprehensive support and management to keep your IT infrastructure running optimally, with regular reviews to ensure service quality and value delivery.

Proactive Management

  • 24/7 infrastructure and security monitoring
  • Proactive issue identification and resolution
  • Monthly security patch management
  • Quarterly service reviews and reporting
  • Backup testing and verification
  • Security policy review and updates

Support Services

  • Auckland-based support (8:30am-5pm NZST)
  • After-hours emergency support
  • Unlimited incident resolution and break-fix support
  • Onsite support within Auckland CBD
  • Service delivery for routine changes and maintenance
  • Strategic IT planning and roadmap

Note: Major projects, new implementations, and significant infrastructure changes are quoted separately. See Terms & Conditions for complete scope definition.

Investment Summary

One-Time Implementation

Autopilot & Intune Build Project
NZD $1,439.13

Monthly Managed Services

Complete managed services platform with Microsoft 365 E3 licensing billed per actual user. Platform support remains fixed for up to 18 users, with quarterly reviews to ensure optimal service delivery.

Microsoft 365 E3 Licensing (current: 14 users @ $64/user/month)
NZD $896.00
Managed Services Platform (fixed for up to 18 users)
NZD $2,036.40
• Microsoft 365 Backup (all users)
Included
• CrowdStrike Falcon EDR (all users)
Included
• Managed Internet (500/500 Mbps)
Included
• DNS Hosting & Management
Included
• Dark Web Monitoring (all users)
Included
• Proactive Support & Management
Included
• 24/7 Emergency Support
Included
Total Monthly Investment (current 14 users)
NZD $2,932.40

Note on User Count: Microsoft 365 E3 licensing is billed monthly based on your actual user count. The Managed Services Platform fee remains fixed for up to 18 users. If you add staff, your M365 licensing adjusts automatically—no service changes required.

Simple, Transparent Pricing

  • One-Time Implementation: NZD $1,439.13
  • Monthly Services (current 14 users): NZD $2,932.40
  • • Microsoft 365 E3: $896.00/month (billed per actual user)
  • • Managed Services Platform: $2,036.40/month (fixed for up to 18 users)
  • Fixed platform pricing for up to 18 staff
  • M365 licensing scales with your actual user count
  • Quarterly reviews to ensure service quality
  • Complete Microsoft 365 E3 platform upgrade
  • Defence-in-depth security architecture
  • Autopilot & Intune implementation
  • Incident resolution and break-fix support
  • No lock-in contract, 30-day notice

All prices quoted exclude New Zealand GST of 15%, which will be added to invoices as applicable.

Why THE AI HUB?

Your Trusted Partner Since 2019

We've been with you from day one, providing essential technology infrastructure and proactive IT support throughout your journey from start-up to managing $268M+ in assets. We intimately understand your technology environment, business goals, and the unique security challenges of managing cryptocurrency investments alongside traditional KiwiSaver funds.

Proven Financial Services & Crypto Security Expertise

Our recent security uplift project addressed critical gaps identified by Layer 9 Information Security, implementing enterprise-grade protection. We understand the distinct cybersecurity challenges of digital asset management, regulatory compliance, and protecting sensitive client financial data.

Deep Technical Knowledge of Your Environment

Unlike new providers who need months to understand your systems, we already know your infrastructure inside-out. We've configured your Microsoft Entra ID, deployed your MFA, set up your DLP policies, and secured your endpoints. This means zero learning curve and immediate value delivery.

Local Auckland Presence, Enterprise Capability

Based in Auckland with physical presence when you need us, combined with 24/7 monitoring and support. We're not a remote-only provider - we show up when it matters, whether for office support or crisis response.

Battle-Tested Security

We've recovered businesses from ransomware attacks. Our security approach isn't theoretical - it's proven in real-world crisis situations. Your data is protected by enterprise-grade security that's tested monthly, with immutable backups that have saved clients from complete operational disasters.

Transparent Pricing, No Lock-In

No hidden fees, no surprise charges. Month-to-month service with 30-day notice period. We earn your business every month through exceptional service, not through contractual lock-in.

Terms & Conditions

Service Terms

  • Implementation Timeline: 4-6 weeks from signed agreement
  • Implementation Payment: Due upon completion
  • Contract Term: Month-to-month (no lock-in)
  • Notice Period: 30 days written notice
  • Monthly Billing: In advance on the 20th of each month
  • Price Protection: 12 months fixed pricing from go-live date
  • GST: All prices quoted exclude NZ GST of 15%, which will be added to invoices

Support & SLA

  • Business Hours Support: 8:30am - 5:00pm NZST, Monday-Friday
  • After Hours: Emergency support available 24/7
  • Response Times: Critical: 1 hour, High: 4 hours, Normal: Next business day
  • Service Delivery: Unlimited support and service delivery time
  • Quarterly Reviews: Service review meetings and reporting to ensure service quality, identify improvements, and monitor resource utilisation

Additional Services

  • Additional M365 Users: Automatically billed at $64/user/month as licenses are added
  • Users Beyond 18: Platform support pricing to be reviewed in quarterly meeting
  • Additional Service Hours: NZD $169.57/hour
  • After-Hours Projects: NZD $213.04/hour
  • Onsite Support: Included within Auckland CBD, travel time applies outside

Microsoft Licensing

  • CSP Pricing: Microsoft 365 E3 pricing based on Microsoft CSP rates at time of billing
  • Price Changes: Subject to Microsoft price changes with 30 days notice to client
  • Transparency: Microsoft licensing shown separately on invoices for full visibility

Inclusions & Exclusions

Support Services (Included in Monthly Fee)

  • Incident Resolution: Troubleshooting and break-fix support for existing systems
  • Service Restoration: Restoring functionality when systems fail or degrade
  • Security Management: Patch management, security monitoring, threat response
  • Backup & Recovery: Backup monitoring, testing, and restoration services
  • User Support: Password resets, access issues, routine user assistance
  • Standard User Onboarding: Basic new user setup with standard permissions
  • Minor Configuration Changes: Routine adjustments requiring less than 1 hour
  • Proactive Management: System monitoring, maintenance, performance tuning
  • Strategic Planning: Quarterly reviews, technology roadmap, advice

Billable Services (Quoted Separately)

  • New Software Deployments: Installation and configuration of new applications
  • Infrastructure Changes: Upgrades, modifications, or expansions beyond routine maintenance
  • Complex User Onboarding: Custom permissions, multi-system setup, training
  • Major Configuration Changes: Requiring more than 1 hour or testing/validation
  • System Migrations: Email migrations, file server moves, platform changes
  • Project Work: Office relocations, major upgrades, implementations
  • Custom Development: Integrations, automation, bespoke solutions
  • Hardware Procurement: Device purchases with standard margin
  • Third-Party Licensing: Software beyond Microsoft 365 platform

Note: When a service request falls outside standard support, we will provide a quote before proceeding. Our goal is to ensure transparency and avoid surprise charges.

Proposal Acceptance

By signing below, Kōura Wealth agrees to engage THE AI HUB for managed IT services as outlined in this proposal.

Investment Summary:

  • Autopilot & Intune Build: NZD $1,439.13 (one-time)
  • Monthly Services (current 14 users): NZD $2,932.40
  • • Microsoft 365 E3: $896.00/month (scales with actual users)
  • • Managed Services Platform: $2,036.40/month (fixed up to 18 users)
  • Fixed platform support for up to 18 staff
  • M365 licensing billed per actual user count
  • Quarterly reviews to ensure service quality
  • Complete Microsoft 365 E3 platform upgrade
  • Defence-in-depth security architecture
  • Incident resolution and break-fix support
  • No lock-in contract, 30-day notice
Authorised Representative - Kōura Wealth
Name & Title
Date
Steve Byrne - Director, THE AI HUB
Date