Frequently Asked Questions
eCreek IT Solutions is a Denver-based managed IT services provider (MSP) that serves as Your IT Department for Colorado businesses and nonprofits. Below are straight answers to the questions we hear most about managed IT, cybersecurity, compliance, and AI, plus answers written for the industries we know best: manufacturing, engineering and construction, healthcare, legal, and nonprofits.
Don’t see your question? Book a free consult or call us at 720-524-0250.
Last updated: October 2026
About eCreek and Getting Started (6)
Who is eCreek IT Solutions?
eCreek IT Solutions is a managed IT services provider based at 1385 S Colorado Blvd in Denver, Colorado. We act as the IT department for small and mid-sized businesses and nonprofits across the Front Range, providing managed IT services, cybersecurity, compliance, cloud services, business phone systems, and AI services.
We’ve been named to the Inc. 5000 for four consecutive years, won the BBB Torch Award for Ethics, and were named one of Denver’s Best Places to Work. See all of our recognition or meet the team.
What areas of Colorado does eCreek serve?
We’re headquartered in Denver and support businesses throughout the Front Range, including Denver, Boulder, Aurora, Lakewood, Golden, Englewood, Centennial, the Denver Tech Center, Highlands Ranch, Lone Tree, Parker, Castle Rock, Broomfield, Fort Collins, and Colorado Springs.
Most support happens remotely, and our local techs come on site when the job calls for it. See every location we serve.
What industries does eCreek specialize in?
Our four focus industries are manufacturing, engineering, and construction; healthcare; legal; and nonprofits. Each has its own compliance rules, software, and day-to-day pressures, and our team works with them every day.
We also support accounting and finance, architecture and design, professional services, energy, aviation, automotive, and property management firms. Jump to our industry-specific FAQs below.
Is my business too small for managed IT services?
Usually not. Managed services are typically the best fit for organizations with 10 or more computers, and that’s the size where an outsourced IT department starts saving real time and money. Smaller teams can still work with us on projects, security assessments, or private AI. Compare our support models to see what fits.
What makes eCreek different from other Denver IT companies?
We’re local, we answer fast, and we keep our people. The numbers that matter to our clients:
- Under 15 minutes average response from a real tech
- 99% customer satisfaction (CSAT)
- 97.7% client retention
- 8.6 years average employee tenure, so you work with the same people who know your systems
- 2,500+ threats detected and blocked every month
Read more about what makes us different, our core values, and reviews from our clients.
How do I get started with eCreek?
Start with a free consultation. We’ll learn how your business runs, what’s working, and what isn’t. If you’d like a baseline first, request a free network assessment and we’ll show you where you stand on security and reliability before you commit to anything.
Managed IT Services and IT Support (8)
What does a managed IT service provider (MSP) do?
A managed IT service provider takes ownership of your technology for a predictable monthly fee. At eCreek that includes help desk and on-site IT support, 24/7 monitoring, patching and updates, cybersecurity, backups, vendor management, and strategic planning. The goal is to prevent problems instead of waiting for things to break. Learn more about our managed IT services in Denver.
What's the difference between fully managed and co-managed IT?
With fully managed IT, eCreek is your entire IT department: support, security, strategy, and everything in between. With co-managed IT, we work alongside your internal IT staff, filling gaps like after-hours monitoring, security tools, backups, or big projects so your team can focus on what they do best.
Not sure which fits? See which model is right for you.
How is managed IT different from break-fix IT support?
Break-fix providers bill you after something fails, so they earn more when you have more problems. Managed IT flips that: you pay a flat monthly fee, and we’re rewarded for keeping your systems healthy through monitoring, patching, and security. The result is less downtime, fewer surprises, and a budget you can plan around.
Is managed IT cheaper than hiring an in-house IT person?
For most small and mid-sized Colorado businesses, yes. One in-house hire costs a full salary plus benefits and tools, and still leaves you with one person’s skills, one person’s vacation schedule, and no backup. A managed provider gives you a whole team, including security and compliance specialists, for a predictable monthly cost. We break down the math in Managed IT vs. In-House IT: What It Really Costs in Colorado.
How quickly does eCreek respond to IT issues?
Our average response time is under 15 minutes, from a real technician rather than an automated queue. Most issues are resolved remotely the same business day, and urgent incidents like outages or security events are escalated right away. Current clients can open a support ticket or visit our support center.
Can eCreek help us move to the cloud or support remote and hybrid work?
Yes. We plan and manage migrations to Microsoft 365, Google Workspace, and Azure, and we secure remote and hybrid teams with multi-factor authentication, managed devices, and secure remote access. See our cloud services or read Cloud Computing for Small Teams.
Does eCreek offer business phone systems?
Yes. We provide managed VoIP phone systems with call routing, voicemail-to-email, mobile apps, and call reporting, all supported by the same team that supports the rest of your IT. Learn more about our phone line services.
How often should my business review its IT strategy?
At least once a year, and any time you’re growing, adding locations, changing core software, or facing a new compliance requirement. A regular review keeps your technology budget, security, and business goals pointed in the same direction. Here’s why every Denver business needs an IT audit.
Switching IT Providers and Onboarding (4)
I'm frustrated with my current IT provider. How hard is it to switch?
Easier than most people expect. We coordinate the handoff with your current provider, collect passwords and documentation, secure your data, and plan the cutover so your team keeps working. You don’t have to manage the awkward conversation alone. See how switching IT providers works.
What is onboarding like with eCreek?
Onboarding usually follows five steps:
- A full assessment of your network, devices, accounts, and security
- Documentation of your systems, vendors, and passwords
- Security baseline: multi-factor authentication, endpoint protection, and backups
- Cutover from your previous provider with minimal disruption
- An introduction to our help desk so your team knows exactly how to get help
We already have internal IT staff. Can eCreek still help?
Yes. Through co-managed IT, we support your in-house team with security tools, 24/7 monitoring, backup management, help desk overflow, and project help. Your IT staff stay in charge, with a deeper bench behind them. Read Outsourced IT vs. Internal IT.
What happens if my IT provider gets bought out?
Acquisitions often bring new ticket systems, offshore help desks, price changes, and turnover in the techs who knew your environment. It’s a good moment to review your contract and ask who will be supporting you next year. We wrote about what happens when your IT provider gets bought out.
Cybersecurity (8)
How does eCreek protect businesses from cyber threats?
We use layered protection, so no single failure leaves you exposed:
- AI-powered endpoint protection and 24/7 monitoring
- Multi-factor authentication (MFA) and password management
- Email filtering to stop phishing and spam
- Vulnerability scanning and penetration testing
- Encrypted, tested backups and business continuity planning
- Security awareness training for your staff
Together these block more than 2,500 threats for our clients every month. Explore our cybersecurity services.
What cybersecurity basics should every small business have?
Start with multi-factor authentication on email and remote access, automatic patching, endpoint detection and response (EDR), backups you’ve actually tested, limited admin rights, and regular staff training. Those basics stop most common attacks. Our guide to small business cybersecurity basics walks through each one.
What's the difference between antivirus and EDR?
Traditional antivirus looks for known threats. Endpoint detection and response (EDR) watches behavior on every device, so it can catch new or disguised attacks, isolate an infected computer, and give our team the details to respond. Read Antivirus vs. EDR.
I think my business was hacked. What should I do right now?
Call us immediately at 720-524-0250. While you wait:
- Disconnect affected computers from the network, but don’t power them off
- Don’t pay any ransom or reply to the attacker
- Change passwords from a device you know is clean
- Write down what you saw and when
We’ll contain the threat, protect your data, restore operations, and walk you through a post-incident review. Here’s what happens after a ransomware attack.
How is AI changing cybersecurity for small and mid-sized businesses?
AI cuts both ways. Attackers use it to write convincing phishing emails, clone voices, and impersonate executives. Defenders use it to spot unusual behavior faster than any person could. We use AI-driven detection tools and train staff to verify unusual requests, especially those involving payments or passwords. Read how AI is powering the next wave of phishing scams.
Does eCreek offer security awareness training?
Yes. Our training includes short lessons and simulated phishing tests, so employees learn to spot suspicious emails, links, and requests in a safe setting. Since most attacks start with a person, trained staff are one of your strongest defenses. Learn about security awareness training.
Can eCreek help us qualify for cyber insurance?
Yes. Insurers now expect controls like MFA, EDR, tested backups, and staff training, and they want proof. We put those controls in place and document them so your application and renewals go smoothly. See what to know about cyber insurance.
How do I know if my business is at risk?
Take a look at our Are You At Risk? page and our overview of current cybersecurity threats, or request a free network assessment and we’ll show you exactly where the gaps are.
Compliance (7)
What compliance frameworks does eCreek support?
We help Colorado organizations meet HIPAA, CMMC and NIST SP 800-171, DFARS, SOC 2, PCI DSS, and Colorado privacy and AI requirements. Our compliance services include risk assessments, a prioritized Plan of Action and Milestones (POA&M), remediation, and ongoing monitoring.
What is compliance readiness, and why does it matter for small businesses?
Compliance readiness means you can prove you meet your requirements before an auditor, insurer, or customer asks. It covers assessments, written policies, technical controls, and documentation. Small businesses benefit most because one failed audit or lost contract hurts more. Read our guide to compliance management in Colorado.
What is Compliance as a Service?
Compliance as a Service (CaaS) is ongoing compliance support for a predictable monthly fee. Instead of a one-time project that goes stale, eCreek sets up your controls, maintains them, monitors for drift, and keeps your documentation and reporting current. Learn more on our compliance page.
What's the current status of CMMC for defense contractors?
CMMC Phase 1 began in November 2025, adding self-assessment requirements to many Department of Defense contracts. In July 2026, the Department of War suspended Phase 2, which would have required third-party (C3PAO) assessments for many Level 2 contracts starting November 10, 2026, while it reviews the program.
The suspension doesn’t remove existing obligations. Contractors handling Controlled Unclassified Information still have to meet DFARS 252.204-7012 and the 110 controls in NIST SP 800-171. Read DFARS vs. CMMC vs. NIST 800-171 or see our IT services for defense contractors.
Does the Colorado Privacy Act apply to my business?
It may. The Colorado Privacy Act generally applies to organizations that control or process personal data of 100,000 or more Colorado consumers per year, or 25,000 or more if they earn revenue from selling personal data. Even if you fall below those thresholds, customers and partners increasingly expect the same protections. Read why data privacy matters.
What is the Colorado AI Act, and does it affect my business?
Colorado passed the first broad state AI law in 2024 (SB 24-205). In May 2026 it was replaced by SB 26-189, which applies to AI-assisted “consequential decisions” made on or after January 1, 2027, in areas like hiring, housing, healthcare, insurance, lending, education, and legal services. Businesses using AI in those decisions will need to notify Colorado residents and explain adverse outcomes.
Enforcement is also tied up in ongoing federal litigation, so watch for updates. Read our breakdown of the Colorado AI law, and see how AI governance helps you prepare.
How much does compliance cost for a Colorado small business?
It depends on the framework, your size, and how far you are from the requirements today. A gap assessment is the fastest way to get a real number. We explain the main cost drivers in What CMMC and HIPAA Compliance Really Cost in Colorado.
AI Services (16)
Most teams are already using AI. These answers cover how eCreek helps Colorado businesses use it well: safely, with clear rules, and in ways that save real hours.
What AI services does eCreek offer?
eCreek acts as your outsourced AI department. Our AI services include:
- Private AI: a secure AI workspace for your whole team, so company data stays out of personal accounts
- AI Governance: acceptable-use policies, data rules, and approved-tool lists
- AI Training: practical training on the tools your team already has
- AI Development: custom apps, agents, and dashboards built around how you work
- AI Automation: connecting AI to your CRM, accounting, ticketing, and other systems
- AI Hosting: hosting, monitoring, and support after go-live
See the full AI services overview.
How do I know if my business is ready for AI?
Take our free AI Maturity Model assessment. The two-minute quiz places you on one of five levels based on how your team actually uses AI day to day, not which tools you own, and shows the next practical step.
What are the five levels of AI maturity?
eCreek’s AI Maturity Model has five levels:
- Level 1, AI Drifter: People try AI now and then, often on personal accounts, with no shared rules.
- Level 2, Prompted Operator: Shared prompts and templates make AI the standard first-draft tool for common tasks.
- Level 3, Agent Builder: AI agents run repeatable tasks with approved tools and data, inside your workflows.
- Level 4, Agent Manager: Work is routed across multiple agents with approval gates and full audit trails.
- Level 5, Physical Integrator: AI coordinates machines, sensors, and physical work under safety controls.
We help clients move up one level at a time. Find your level.
What is shadow AI, and why should my business care?
Shadow AI is employees using AI tools the business hasn’t approved, like pasting client documents into a free chatbot on a personal account. It usually comes from good intentions, but it means company data may be stored or used in ways you can’t see or control. The fix isn’t banning AI. It’s giving people an approved tool and clear rules. Read Do You Know How Your Employees Are Using AI?
What is private AI, and how is it different from free ChatGPT?
Private AI is a managed AI workspace your business controls. Your team gets access to leading AI models in one approved place, while administrators manage who has access, which tools are allowed, and what data can be used. Your work isn’t sitting in free consumer accounts or training anyone else’s model. eCreek’s private AI is powered by Hatz AI and supported by our team.
Can we still use ChatGPT, Claude, or Microsoft Copilot?
Yes. Our private AI environment gives access to multiple models, so you aren’t locked into one vendor, and we can help you set up business versions of the tools your team prefers with the right controls. Not sure which to choose? Read ChatGPT vs. Claude vs. Copilot for Business.
What does working with eCreek on AI look like?
We follow five steps, and you can stop after any of them:
- 1. Conversation (free, 30 minutes): We learn how your team uses AI today and where the manual work is.
- 2. Discovery (free, about an hour): Our AI engineer walks you through ranked opportunities with honest estimates.
- 3. Scope (fixed fee, about two weeks): We come on site, map how the work really runs, and build a working demo on your own data.
- 4. Proposal: Two clear numbers, one to build and one to run.
- 5. Build and run: We build it, host it, secure it, train your people, and keep improving it.
Book the free conversation to get started.
How much do eCreek's AI services cost?
The first two steps, a 30-minute conversation and a discovery session with our AI engineer, are free. After that, pricing depends on what you need. Our ready-made private AI workspace is priced for your whole team rather than per user, and custom apps or private AI stacks come with two clear numbers after scope: one to build and one to run. No surprises, and never a price before we’ve seen the work.
The bigger number is what AI gives back. Taking retyping, searching, and first drafts off your team’s plate can save thousands of dollars a month in staff time. Book a free conversation and we’ll tell you honestly where the savings are for your business.
What kinds of AI solutions does eCreek build?
Three types, and many clients use more than one:
- Ready-made private AI: a private workspace for your whole team, running in days.
- Custom apps: built around your process, fields, and roles, connected to your systems. We start with the process eating the most hours. See AI development.
- Private AI stack: self-hosted on your own network for data that can’t leave your control, with a policy you approve for when work can go to larger models. See AI hosting.
All three are hosted, monitored, and supported by eCreek after go-live.
Can AI connect to our existing systems like our CRM, ERP, or accounting software?
Yes, and that’s where most of the value is. Instead of copying and pasting into a chat window, AI reads from and writes to the systems you already use. For example, a 40-person contractor’s quote used to take most of a week of retyping notes and digging through old jobs. With a custom app, a draft quote priced from their real job history appears minutes after the site visit, ready for review. Learn about AI automation.
What is an AI agent, and is it safe to let one into our systems?
An AI agent is AI that completes multi-step tasks, like gathering information, drafting a document, and updating a record, rather than just answering a question. eCreek builds agents with guardrails: each agent gets a defined role, a sandbox, limited access, and a human approval step before anything changes, plus audit trails so you can see what it did. See our AI development services.
Does my business need an AI policy?
Yes, if anyone on your team uses AI, and they probably do. A good policy is short and practical: which tools are approved, what data can and can’t go in, when a person must review the output, and who owns the result. Our AI governance service builds and rolls this out. Start with how to write an AI policy for ChatGPT at work or AI policies for regulated businesses.
How does eCreek train employees to use AI?
Our AI training is built on four skills rather than tool tricks, so it holds up as tools change:
- Delegation: knowing which parts of a job to hand to AI
- Description: asking clearly, with audience, goal, and format
- Discernment: checking output for errors and made-up facts
- Diligence: owning the result and knowing what data is safe to use
Your team practices on their own real work. Read more about the 4D framework for small businesses or join one of our AI training events.
Will AI replace my employees?
That’s not how we approach it. We use AI to take repetitive work, like retyping, searching, and first drafts, off your team’s plate so people can spend time on judgment, clients, and growth. Every system we build keeps a person accountable for the final result. The businesses getting the most from AI are the ones whose people know how to work with it.
Does eCreek use AI in its own business?
Yes. We built our own AI-powered operations platform that brings our tools and data together and automates work that used to fill our team’s day. Everything we recommend to clients, we’ve tested on ourselves first. Read more about AI services for Denver businesses.
Where can I find free AI resources for my business?
- AI Toolkit: a free download to help you get started
- AI prompts for small businesses: ready-to-use prompts for everyday tasks
- AI Maturity quiz: find your level in two minutes
- AI training events: live sessions for Colorado teams
Industry-Specific Questions (9)
Manufacturing, Engineering, and Construction
What IT challenges are unique to manufacturers, engineers, and construction firms?
These businesses run on more than office computers: shop-floor machines, legacy ERP systems, large CAD and BIM files, job-site connectivity, and crews working from phones and tablets. Downtime stops production or a job site, not just email. We support all of it. See IT for manufacturing, engineering, and construction, and read about hidden IT risks for Colorado manufacturers.
We work on defense contracts. Can eCreek help with CMMC and NIST 800-171?
Yes. We help defense suppliers assess their current state against NIST SP 800-171, build a POA&M, close gaps, and maintain the documentation needed for CMMC, even while Phase 2 is suspended. See our IT services for the defense industrial base and DFARS vs. CMMC vs. NIST 800-171.
How can AI help a construction or manufacturing company?
Common wins include faster quotes and estimates priced from your own job history, job cost visibility, proposal drafting, and less retyping between field apps, CRM, and accounting. We start with the process eating the most hours and build from there. Learn about custom AI apps.
Healthcare
Can eCreek help medical and dental practices stay HIPAA compliant?
Yes. We support medical practices, dental practices, and surgery centers with HIPAA risk assessments, access controls, encryption, secure backups, device management, and staff training, plus documentation that holds up to an audit. Read about HIPAA compliance for Denver healthcare.
Can our healthcare staff use ChatGPT with patient information?
Not with free or consumer AI tools. Protected health information should only go into AI tools covered by a business associate agreement and configured with the right controls. A private AI environment and a clear policy give staff a safe way to get the benefits. Read Healthcare Staff, ChatGPT, and HIPAA.
Legal
How does eCreek support law firms?
Law firms need airtight client confidentiality, reliable document management, and protection from ransomware groups that specifically target legal practices. We provide all of that, and as a member of the Association of Legal Administrators, we understand how firms operate. See our IT services for law firms and 10 reasons law firms need IT support.
Is it ethical for attorneys to use AI?
It can be, with care. ABA Formal Opinion 512 and Colorado’s confidentiality rule (Rule 1.6) mean lawyers must protect client information, understand the tools they use, and verify AI output before relying on it. That points to private, approved AI tools and a firm-wide policy. Read Client Confidentiality in the Age of AI, AI tools for law firms, or download our Legal AI Trail Map.
Nonprofits
Does eCreek work with nonprofits?
Yes. We deliver IT that empowers your mission: protecting donor and client data, making the most of nonprofit software programs, and freeing staff to focus on the work that matters. See our nonprofit IT services and read about cybersecurity for nonprofits.
How can a nonprofit use AI on a tight budget?
Start small and safe. A shared private AI workspace priced for the whole team, not per user, can help with grant drafts, donor communications, reports, and research, with a simple policy that keeps donor data protected. Our free AI Toolkit is a good first step.
Still Have Questions?
We’re a local team, and we’d rather talk it through than make you guess.

