OneStep ITSecure IT for businesses with offshore VAs
Hire offshore. Keep client data in Australia.
OneStep IT moves your email to Microsoft 365 and gives your overseas VAs a locked-down Windows 365 Cloud PC hosted in Australia, documented so you can show clients, auditors and industry bodies exactly how their data is protected.
Who this is for
Two problems most growing businesses run into
Your email is stuck with a hosting reseller
GoDaddy, Crazy Domains and Vodien email plans hide the Microsoft admin tools you need for proper security, and some don't give you Microsoft 365 at all.
- Move to Microsoft 365, billed by Microsoft directly
- Keep every email, folder and calendar
- Multi-factor sign-in and email authentication (SPF, DKIM, DMARC) set up properly
You want overseas VAs and need to prove client data is safe
Clients, insurers, auditors and industry bodies want to know how data is protected, where it's stored, and what stops it being copied. A shared laptop checklist doesn't answer that well.
- Australian-hosted Cloud PC for each VA
- Controls enforced centrally, not left to the VA
- Written controls statement for compliance and vendor questionnaires
How it works
From first call to your VA's first day
- 01
Discovery
We go through your mailboxes, current host, software and what your VA needs access to.
- 02
Microsoft 365 move
Email, files and licensing moved to Microsoft direct, with backups taken first.
- 03
Cloud PC build
Windows 365 in Australia East, locked down through Intune and Conditional Access.
- 04
VA onboarding
Laptop connected, apps installed, Teams calling on an Australian number.
- 05
Support
Help after go-live and compliance paperwork ready to submit.
Offshore data controls
What's in place, and the risk each control covers
Every control below is applied from Microsoft's admin centre and can't be switched off by the VA.
| Covers | Control | What it means in practice |
|---|---|---|
| Data location | Australian-hosted Cloud PC | All work happens on a Windows 365 Cloud PC in Microsoft's Australia East region, inside your own Microsoft 365 tenant. |
| Data leakage | No copying out | Clipboard, local drives, USB, printers and ports are blocked between the Cloud PC and the VA's laptop. |
| Screen capture | Screen capture protection and watermark | Screenshots from the laptop come out blank, and a device QR watermark traces any photo of the screen. |
| Web and apps | Web filtering and app control | Personal email, file sharing and non-work categories are blocked. Macros and risky Office behaviour are restricted. |
| Access | Sign-in rules | Multi-factor sign-in for staff accounts, and VA sign-ins limited to Australia and the VA's own country. |
| Lost devices | Nothing stored at home | A lost or stolen laptop exposes no client data, and access can be cut off instantly from Australia. |
| Privacy Act | APP 8 alignment | Client information isn't sent overseas, which supports your obligations under Australian Privacy Principle 8 and industry offshore vendor checks. |
Packages
Fixed prices, based on real builds
Each package is a one-off project fee. Microsoft licences are billed to you by Microsoft, not marked up by us.
Microsoft Move
For offices that only need email moved and secured.
- Up to 3 users and 5 mailboxes
- Move from GoDaddy, Crazy Domains, Vodien and similar
- Microsoft licensing set up direct
- Multi-factor sign-in and sign-in rules
- SPF, DKIM and DMARC email records
- Mailbox backups before the move
- 2 weeks of support after go-live
Offshore Ready
Everything in Essentials, plus a secure workspace for one VA.
- Windows 365 Cloud PC in Australia
- Full lockdown: capture, copy, web and app controls
- Security controls statement for compliance submissions
- VA laptop connected and tested
- Business apps and macro tools set up
Offshore Ready Plus
The complete setup, done end to end.
- Everything in Offshore Ready
- Teams calling with an Australian number
- Shared password manager set up
- Security briefing for your VA
- 30 days of support after go-live
Add-ons
- Each extra user
- $150
- Each extra shared mailbox (over 5 total)
- $75
- Each extra VA Cloud PC
- $295
- Teams calling, each extra user
- $95
Ongoing support
- Hourly support
- $150 / hr
- Prepaid 5-hour block
- $750
Remote Australia wide, or onsite in QLD. Prepaid hours are valid for 12 months.
All prices in AUD. Not included: Microsoft and Windows 365 licences, the VA's laptop, call charges, after-hours work, and lodging compliance submissions on your behalf. Larger offices or complex moves are quoted individually.
Experience
Hands-on experience across Microsoft 365 and offshore teams
A recent example: a finance business had its email on a GoDaddy plan that hid the Microsoft security settings, and its industry body needed a clear answer on how a new offshore VA would handle client data.
We moved the office to Microsoft 365 direct, built a Windows 365 Cloud PC in Australia for the VA, applied screen capture protection, watermarking, web filtering and sign-in rules, and wrote the controls statement for their compliance submission. The VA now works in the CRM, Outlook and business portals from the Cloud PC, and makes calls on an Australian number through Teams.
About
One point of contact who knows your setup
OneStep IT is a Queensland-based IT practice working day to day in Microsoft 365 administration, email migrations and security for small businesses. It was set up to give businesses a straightforward way to grow with offshore staff without putting client data at risk.
What we cover in your free 30-minute call
- How many staff and mailboxes you have, and where your email is hosted now
- Whether you're hiring one VA or several, and when they start
- The software your team uses: CRM, portals, specialist apps, phones
- Any compliance requirements from your industry, clients or insurer
- Which package fits, and a written quote afterwards
No cost and no obligation. Calls run remotely Australia wide, or in person in QLD.
- Cyber security: Google and Microsoft certified
- Microsoft 365 & Intune
- Email migrations
- Windows 365
Book your free 30-minute call
Call or email with a couple of times that suit you, and let us know roughly how many staff you have and whether you're bringing on a VA.