Every Norvet customer signs a Master Services Agreement before we touch a single cable or device. They also agree to an acceptable use policy, and for clients in certain industries we walk through our incident response framework and business continuity plan together.
We do this because we have seen what happens when you skip it. A contractor dispute without a written scope is a he-said-she-said situation in front of an arbitrator. A data incident without a documented response plan is a scramble at exactly the moment you cannot afford to scramble.
We built these documents for ourselves. Then we kept getting asked for them.
What is in the Operating Toolkit
The Operating Toolkit is twelve operating templates, available at /operating-toolkit. The full pack is $49. Three templates — enough to get your most critical paperwork in order — are available free as a starter pack with email capture only.
The full pack covers:
Agreements and contracts
- Master Services Agreement (MSA) - Exclusive Contractor Agreement - Georgia statutory lien waivers (interim and unconditional)
Information security
- Information Security Policy - IT Acceptable Use Policy - Data Breach Response & Notification Policy
Business continuity and resilience
- Business Continuity Plan (BCP) - Disaster Recovery Plan (DR) - Incident Response Plan (IR)
Cybersecurity and compliance
- Cybersecurity Implementation Plan - Anti-Bribery & Anti-Corruption Policy
Strategy
- Digital Transformation Roadmap
These are working documents, not filler. The MSA is the same structure we use with our own customers. The IR plan reflects the frameworks our cybersecurity partners run. The Georgia lien waiver is formatted to the state's statutory O.C.G.A. § 44-14-366 requirements — relevant to any contractor on commercial work, not just IT.
Who this is for
Three groups ask us about documentation more than anyone else.
New business owners
You just incorporated and are operating on a handshake. You signed your LLC documents. You do not have a vendor agreement, a contractor agreement, or a data policy. The first time a contractor dispute or a phishing incident hits, you will wish you had spent an hour on this.
SBA and M&A buyers
You just acquired a business. The previous owner had no documentation, or what they had is unsigned and outdated. You have ninety days to get your operations in order before the bank or the seller notice-period ends. The toolkit gives you the structure to start that process on day one.
Small contractors and trades
Including our own cabling subcontractors — you work on commercial projects and need proper lien waiver language. Georgia's lien law is specific. The wrong form does not protect you.
A note on what these are, and are not
These are templates. They are not legal advice, and Norvet is not a law firm.
What they are: professionally structured, plain-language frameworks that we have used and refined in actual business operations. They give you a starting point that is significantly better than a Google search result or a blank page.
Each template carries an attorney-review notice at the top calling out the load-bearing clauses to flag for your counsel. Have a Georgia attorney review on first use, then re-use the same form on subsequent engagements. For the lien waiver, the form is jurisdiction-specific and statutory — it is designed to be used as-is, but confirm it matches your project type.
The infosec policies and BCP/DR templates are designed to be completed by your team, not by a consultant. They are workbooks, not deliverables. You fill in the blanks for your systems, your vendors, your RTO/RPO targets. We have included guidance notes inside each section.
The free starter pack
If $49 feels like a commitment before you have seen the quality, take the free starter pack. Three templates — the IT Risk Self-Assessment Checklist, the Acceptable Use Policy, and the Code of Conduct & Ethics Policy. Download, complete, use. We email them as Markdown attachments. No subscription drip.
If you want the full bundle after that, it is $49 — one-time, via Stripe Checkout. Refund within seven days if it does not fit your business.
Where this fits in the Norvet relationship
Every Norvet customer gets an MSA before we start work. If you are already a customer and you want the full toolkit to use across your own vendor relationships, it is available at the same link.
If you are not a Norvet customer but you found this page because you are trying to get your documentation together — good. Get the templates. Get your business in order. When you are ready to talk about your technology stack or your cabling project, we will be here.
Explore the Operating Toolkit: norvetmsp.com/operating-toolkit
Need help with Managed IT?
Norvet MSP delivers fully managed IT support so your team can focus on what matters most — growing the business.