Kyokusai Atelier

Singapore · company systems & product infrastructure

Your systems, operational and documented — and owned by you.

We set up, migrate and maintain the systems small companies run on: email and identity, files and access, cloud accounts and production infrastructure. Every account is registered to your company from the first day, and our access can be removed without anything needing to be rebuilt.

Starts with
A paid assessment, from S$250
Typical launch
Days, not months
Afterwards
Managed support or full handover
01

Who this is for

Newly registered companies

You have a company but no email, no shared files, and no idea which platform to pick. You need it working this week, not evaluated for a quarter.

Software startups

You are building a product and need cloud accounts, environments, pipelines and access control set up properly before you hire anyone to own them.

Companies recovering control

Your domain is in someone's personal account, a former developer still has access, or an agency holds the keys and stopped replying.

02

What we deliver

Three fixed-shape engagements. Each ends with a documented handover, whether or not you retain us afterwards.

Engagement A

Company IT Launch

The operating systems of a business — identity, communication, files, money — configured, secured and documented.

Included

  • Domain registration and DNS
  • Google Workspace or Microsoft 365
  • Business email and aliases
  • Shared drives and permission structure
  • Multi-factor authentication
  • Break-glass recovery accounts
  • Password manager and vault structure
  • HR and payroll platform
  • CRM configuration
  • Accounting and invoicing
  • Payment processing
  • Onboarding and offboarding runbooks
  • Ownership map and handover pack

Engagement B

SaaS Startup Launch

Everything in Company IT Launch, plus the product infrastructure a software team needs before its first infrastructure hire.

Added on top

  • GitHub organisation and teams
  • AWS, Azure or Google Cloud accounts
  • Staging and production separation
  • Infrastructure as code
  • CI/CD pipelines
  • Managed databases
  • Secrets management
  • Logging and monitoring
  • Backups with tested restores
  • Budget alerts and cost controls
  • Developer access model
  • Architecture documentation

One primary stack, configured properly, rather than every tool configured partially.

Engagement C

Migration and Rescue

For estates that grew without a plan, or where control sits with people who have left. Scoped from an assessment, never quoted blind.

Typical work

  • Recover domain ownership
  • Move personal email to company accounts
  • Migrate Workspace or Microsoft 365
  • Consolidate scattered company files
  • Remove former employee access
  • Recover agency-held accounts
  • Repair permission structures
  • Move CRM, HR or accounting platforms
  • Replace shared passwords
  • Rebuild cloud environments
  • Document ownership and recovery paths
03

How an engagement runs

  1. Assessment

    Paid, fixed price, and useful on its own. You receive a written risk summary and ownership map whether or not you continue.

  2. Scope and quotation

    A fixed-scope proposal with exclusions stated explicitly, priced from what the assessment found rather than from assumptions.

  3. Account provisioning

    You create the owner accounts and pay the subscriptions directly. We are invited in as delegated administrators.

  4. Delivery and testing

    Configuration, migration and integration, with restores tested and access changes verified rather than assumed.

  5. Handover

    Documentation of what exists, who owns it, and how to recover it. Written to be used by someone who was not in the room.

  6. Managed support, or not

    Retain us monthly, or take it in-house. Either way the accounts stay yours and our access can be revoked immediately.

04

Start with an assessment

We do not offer a free checkup. A free review creates pressure to find work; a paid one produces a document you keep. The fee is credited toward remediation if you proceed within the agreed period.

Business systems

Business Systems Assessment

S$250–500Typically completed within one week

  • Domain and account ownership
  • Administrators and recovery paths
  • Former employee access
  • Email and file structure
  • SaaS subscriptions and spend
  • MFA coverage and gaps
  • Onboarding and offboarding practice
  • Critical integrations
  • Operational risks

Cloud infrastructure

Cloud Infrastructure Assessment

from S$800Scoped to the size of the estate

  • Cloud account ownership
  • Identity and access management
  • Production and staging separation
  • CI/CD and deployment paths
  • Secrets handling
  • Backups and restore testing
  • Monitoring and alerting
  • Database configuration
  • Cost risks and single points of failure

What you receive

  • Risk summary, written plainly
  • Ownership map of every account
  • Prioritised list of issues
  • Recommended remediation
  • Fixed quotation for the work
  • Delivery timeline
05

Ownership

Most of what we are called in to fix was caused by a supplier owning something the company should have owned. We work the other way round, deliberately, and it constrains how we operate.

  1. 01Youapprove the platforms before anything is purchased.
  2. 02Youcreate the owner account, controlled by the company.
  3. 03Youpay third-party subscriptions directly, on a company payment method.
  4. 04Youinvite us with delegated administrative access.
  5. 05Weconfigure, migrate, integrate and test.
  6. 06Youchoose managed support or full handover.
  7. 07Wecan be removed without anything needing to be rebuilt.

You own everything. We operate it only while you choose to retain us.

06

Monthly support

Defined scope, defined response targets, and stated exclusions. We do not sell unlimited support cheaply, because nobody delivers it.

AreaIncluded monthlyQuoted separately
User accountsOnboarding, offboarding, licence changesBulk migrations
AccessQuarterly access reviews, permission fixesEstate-wide restructures
SecurityMFA coverage checks, recovery verificationIncident response retainers
VendorsCoordination, renewal trackingContract negotiation
CloudMonitoring, backup verification, cost reviewRe-architecture
DocumentationKept current as things changeInitial handover pack
07

How we work

08

What we support

A deliberately narrow catalogue, supported properly, rather than everything supported superficially. If you need something outside it we will say so rather than learn on your systems.

Company systems

Google WorkspaceMicrosoft 365Cloudflare HubSpotZoho CRMTalenoxQuickHR XeroQuickBooksStripeHitPay 1PasswordBitwarden

Product infrastructure

AWSGitHubTerraformGitHub Actions DockerManaged databases
09

Questions we are asked

Why is the assessment paid?

A free review creates an incentive to find work. A paid one produces a document that is useful whether or not you engage us — the ownership map and risk list are yours to keep, and to hand to someone else if you prefer. The fee is credited toward remediation if you proceed.

What happens if we stop working with you?

Nothing breaks. Every account is registered to your company and paid on your payment method, so removing our delegated access is a single administrative action. That is the point of the ownership model, and it is why we insist on it even when it makes setup slower.

We already have an IT provider. Where do you fit?

Often alongside. Many providers handle devices and helpdesk well but do not touch cloud infrastructure, and many development agencies do the reverse. We are usually engaged where those two halves meet, or where nobody owns the seam between them.

Our systems are a mess. Is that a problem?

It is the common case. Domains in personal accounts, former staff with live access, three places files live — this is what estates look like when they grow without anyone owning them. The assessment exists precisely so that mess gets documented before it gets quoted.

Do you resell the software?

No. You buy subscriptions directly from the vendor on a company payment method. We take no margin on licences, which means our advice on what you need is not affected by what we would earn on it.

How quickly can a launch happen?

A Company IT Launch is usually days once accounts are approved and provisioned. Migrations and rescues depend on what the assessment finds — recovering a domain held by an unresponsive third party has a timeline set by the registrar, not by us.

Getting started

Tell us what you have and what is worrying you. If an assessment is the right first step we will say so — and if it is not, we will tell you that instead.

hello@kyokusaiatelier.com