Review
A clear account of what one decision or system demands: risks, obligations, skills and cost, with a recommendation you can act on with or without us.
Technology beyond the promise The real cost, real demands, right decisions
We bring deep technology and cyber security expertise to organisations facing complex technology decisions, with complete transparency about the security risks, compliance obligations and skills involved.
Worked with
Our vision
A future where every organisation, regardless of size or budget, fully understands what technology promises, what it demands, and what it takes to remain secure and resilient.
Our mission
SmartLancs bridges the gap between what technology promises and what it truly demands of your business, bringing deep technology and cyber security expertise to organisations navigating complex technology decisions. We guide leadership with complete transparency about security risks, compliance obligations, and the skills required, so every organisation can adopt the right technology securely, confidently, and resiliently.
Approach
Every technology decision has two sides: what it promises, and what it demands in security, compliance and skills. We make both visible before you commit, then help you adopt it securely.
Who we work with
-
Businesses
From small teams to established operators. Advice proportionate to your size and budget, because sound technology decisions and good security shouldn't be reserved for large organisations.
-
Universities & research
Research groups, labs and spin-outs. We secure research data, help you meet funder and compliance requirements, and turn research code into reliable tools.
-
Publicly funded programmes
Technology and security partner on grant- and contract-funded work, including for Innovate UK, with the milestone reporting, audit trails and governance that public funding expects.
-
Listen
We start with the decision in front of you: what you hope technology will change, and the people it will affect.
-
Assess
We set out what each option truly demands: security risks, compliance obligations, the skills to run it and the full cost.
-
Decide
Leadership gets a plain-English recommendation with nothing hidden, so you can choose with confidence, including choosing not to proceed.
-
Adopt securely
We deliver or oversee the change with security built in, train your team, and leave you resilient: tested backups, clear responsibilities and a plan for incidents.
Where we help
- Technology decisions
- Independent advice on what to adopt, what it will demand of you, and what to leave alone.
- Cyber security
- Risk assessments, security reviews and practical controls, proportionate to your size.
- Compliance
- Cyber Essentials, ISO 27001 readiness, UK GDPR and sector obligations, explained in plain English.
- Skills & capability
- What a technology needs your people to know, where the gaps are, and how to close them.
- Resilience
- Backups that restore, incident response plans, and continuity arrangements you have actually tested.
- AI & emerging technology
- Separating promise from reality: the data, oversight and security that adopting AI demands.
Ways to work with us
Adoption
We lead or oversee implementation with security built in, and hand over a system your team is equipped to run.
Partnership
A named senior adviser for technology and cyber security decisions, on hand whenever leadership needs a straight answer.
Common questions
Is there a minimum size or budget?
No. Our vision is that every organisation, whatever its size or budget, understands what technology demands of it. Many clients start with a two-week review.
What does “complete transparency” mean in practice?
Before you commit, you'll know the security risks, the compliance obligations, the skills your team will need and the full running cost, in writing and in plain English. If the honest answer is not to proceed, we'll say so.
Do you only do cyber security?
No. We advise on technology decisions as a whole. Security, compliance and skills are part of every recommendation, not a separate add-on.
Can you partner on a funded bid, such as Innovate UK?
Yes. We join consortium bids as a technology and security partner or subcontractor, help scope work packages and costs, and handle the technical reporting once the project is funded.
Do you work with universities and research groups?
Yes. We help research teams secure their data, meet funder and compliance requirements, and turn research code into tools that outlast a single grant.
Do you only work with organisations in Lancashire?
We're rooted in the North West and enjoy working on site, but most of our work runs remotely and we work with organisations across the UK.
Will we be tied to you once the work is done?
No. You own everything we deliver, and every engagement ends with documentation and a handover that leaves your team confident to run it.
How do you price your work?
Reviews are a fixed fee. Adoption projects are fixed scope with staged payments, so you know the cost before work starts. Partnership is a simple monthly retainer.
Can you work alongside our existing IT provider?
Yes, and we often do. We provide the independent security and decision-making view while your provider keeps the day-to-day running.
Portfolio
How organisations have used our guidance to adopt technology securely and confidently. Select a project to read what changed.
-
The challenge
Research data sat on personal laptops and shared drives, and a new funder required evidence of secure data management.
What we did
Set out exactly what the funder and UK GDPR demanded, moved data to university-managed secure storage, and trained the team on their responsibilities.
The result
Funder conditions met, and every researcher now knows what is expected of them and why.
-
The challenge
Tablets linked to the ERP promised live order tracking, but nobody had asked what the connection would expose.
What we did
Mapped what it would really demand: network segmentation, device management and the skills to maintain both. Then delivered it with security built in.
The result
Live order status for customers, a segmented network, and an in-house team trained to keep it secure.
-
The challenge
Sensitive documents moved by email, and every vendor promised a “secure portal”.
What we did
Compared the shortlist against UK GDPR obligations, real security controls and the admin skills each one required, then configured the right fit.
The result
The practice passed its next data-protection audit without findings, and staff understand their part in keeping client data safe.
-
The challenge
An ageing on-site server, untested backups and a growing list of questions from the firm's insurer.
What we did
A staged migration with multi-factor sign-in, clear access rules and monthly restore tests, documented for the partners in plain English.
The result
Cyber Essentials Plus certification and a recovery plan the firm has actually rehearsed.
-
The challenge
Two hundred volunteers, a shared spreadsheet of sensitive details, and no budget for an expensive platform.
What we did
Used tools the charity already licensed, checked the data-protection obligations for volunteer information, and set access by role.
The result
Fewer missed shifts, volunteer data properly protected, and no new running costs.
-
The challenge
Trustees were accountable for cyber risk, but each school ran its IT differently and nobody had the full picture.
What we did
Assessed every school against the same standards and produced one risk register written for the board, not for IT specialists.
The result
Trustees can see and prioritise their risks, with a costed improvement plan that fits the trust's budget.
They were the first advisers to tell us what the system would demand of us, not just what it would do. We made the decision with our eyes open.
Projects
What we're working on now: funded R&D, and the tools and initiatives that help more organisations understand what technology demands.
-
In progress
Innovate UK funded project
Funded by Innovate UK
One or two sentences on the problem the project tackles and what it will deliver, written for a non-specialist reader.
-
Live
Decision Lens
Our structured method for weighing a technology decision: what it promises against the security risks, compliance obligations, skills and costs it brings.
-
In development
Audit Ready
A plain-English checklist and evidence tracker that helps small organisations reach Cyber Essentials without a dedicated security team.
-
Research
Plain Ledger
Testing what AI invoice reconciliation really demands of small finance teams: data quality, human oversight and security, not just accuracy.
-
Live
Local Tech Clinic
A free monthly drop-in where any local organisation can bring a technology or cyber security question, whatever its size or budget.
About Us
Deep technology and cyber security expertise, with complete transparency about what every decision demands.
The team
-
Team member name
Founder & technology lead
Two or three sentences on their background in technology and cyber security, and the kinds of decisions they help leadership teams make.
LinkedIn profile -
Team member name
Co-founder & cyber security lead
Two or three sentences on their background in technology and cyber security, and the kinds of decisions they help leadership teams make.
LinkedIn profile
SmartLancs exists because organisations are too often sold what technology promises, and left to discover what it demands.
Security risks, compliance obligations and the skills needed to run a system usually surface after the contract is signed. We bring them to the surface first, so leadership can decide with the full picture.
Every engagement is led by a senior person with deep technology and cyber security experience, who stays with it from the first conversation to a secure, resilient result.
What we hold ourselves to
Complete transparency
We set out the risks, obligations and skills a decision involves, including the uncomfortable ones.
Secure by default
Security isn't a phase at the end. It shapes every recommendation from the start.
Right-sized advice
Proportionate to your size and budget. Good security shouldn't be reserved for large organisations.
Confidence, not dependence
We explain as we go and leave your team able to own what's in place. No lock-in.
Contact Us
Tell us about the technology decision in front of you. We'll reply within one working day to arrange a free 30-minute call.
- Phone
- +44 (0)0000 000000
- Office
- Lancashire, United Kingdom
- Hours
- Monday to Friday, 9am to 5.30pm