Anyone can email as your business.
A scammer. A competitor. Anyone. New York law makes that your problem to fix. Check your domain below in ten seconds, no signup, nothing touched.
that email check is just the first loose thread 🧵
If you run a business in New York 🗽, the law already expects more from you than one email fix.
See what it expects →2 people or 200. Small doesn't mean exempt.
Being a small business doesn't get you out of the SHIELD Act. It just means your safeguards are scaled to your size, not that you can skip them. Everything you need to know fits on a form and a receipt.
Does your business keep anyone's name next to anything sensitive?
(your own payroll counts)"Sensitive" includes Social Security numbers, card and account numbers, health information, and an email with its password. Businesses answering yes are expected under GBL §899-bb to keep reasonable safeguards: a person responsible for security, a risk assessment, trained staff, vetted vendors, and a written record that all of it exists.
This receipt is hypothetical. Keeping it that way is the entire job. Amended December 2024 · your insurer reads the same statute.
What I find in almost every small business, the first time anyone looks.
None of this takes a year to close. But closing it properly, in the order that matters, documented the way the state and your insurer expect: that's the actual work, and it's what you'd be hiring.
My program closes every gap the law expects, and hands you the paperwork to prove it.
Flat prices, published up front.
The number on this page is the number on the invoice. No retainers, and nothing renews without a conversation.
The fast first pass: email security, passwords, backups, devices, Wi-Fi, cloud accounts, and what needs attention next. Under two hours of your time.
- A report you'll actually read
- Every finding ranked by risk
- Walkthrough call included
Find it, fix it, put it in writing: everything in the Checkup, plus the security program the law expects and a staff training session. Gaps closed in four to eight weeks.
- Written security program
- Staff security training
- Documentation for your insurer
Help when something comes up: fixing what a checkup flags, setting up new computers and accounts, or sorting out an everyday IT headache. No retainer, no monthly bill.
- Pay only for the time you use
- Hours estimated up front
- No ongoing commitment
Pricing covers teams of 15 or fewer; larger teams get a quote up front, never a surprise. NYC Shield is my own service, built around the NY SHIELD Act, not a government program.