Technical Sovereignty for UK mid-market business

YOUR IT BILL IS ONLY PART OF WHAT IT COSTS.

The rest sits in staff hours lost to workarounds and in the risks that surface when an insurer or a buyer starts asking questions. Echo 7® puts a number on that cost for a fixed fee, in a report your executive team can act on.

What your IT bill does not show

Your IT bill lists licences, support and hosting. It does not list the staff hours lost to workarounds, or the questions an insurer or a buyer's technical team will ask you. Those costs arrive late and unplanned.

Regulation is moving too. The Cyber Security and Resilience Bill would bring managed service providers into UK regulation, and it is now in its final stages in Parliament. The government's voluntary Cyber Governance Code of Practice already sets out what it expects of directors on cyber risk.

43%

of UK businesses experienced a cyber breach or attack in the last twelve months.

DSIT Cyber Security Breaches Survey 2025/26

31%

of UK businesses have a board member responsible for cyber security. In the other 69%, no board member is responsible, and an insurer may ask who is.

DSIT Cyber Security Breaches Survey 2025/26

65%

of UK businesses with 50–249 employees experienced a cyber breach or attack in the last twelve months.

DSIT Cyber Security Breaches Survey 2025/26

£3.85m

average total cost of a data breach for a UK organisation without security AI and automation in place, including incident response, notification, recovery, and regulatory fines.

IBM Cost of a Data Breach Report 2026 Updated Q2 2026

Insurers and buyers will ask for these costs. Directors are expected to know them.

When did you last see every one of them on a single page?

Free tool

Find out what your IT estate actually costs.

Answer five questions and get an indicative figure in pounds, split by cost category, that your executive team can act on.

Estimate your cost →

Sample report

See what a finished report looks like.

Every report gives you a cost figure in pounds and a ranked plan to bring it down. Browse an eight-page sample built on fictional data and judge the level of detail for yourself.

Read the sample report →

Sample data. Fictional organisation.

Cover page of a sample Sovereignty Index report

Measure first. Everything after is your choice.

1

Measure.

The Sovereignty Index® asks 50 questions across five pillars and gives you a written report: your Technical Debt Burden in pounds and a ranked plan. If the number does not justify more, you stop there.

Read more →
2

Rebuild.

The Synapse-7® Sovereign Vault is a fixed-fee rebuild onto a Zero-Trust estate in UK regions. You own the tenant and the data, and may leave at any time, with the Continuity Codex documenting your exit.

Read more →
3

Stay sovereign.

Managed Sovereignty re-scores your estate against the Index every quarter and checks it for drift. It is advisory. Optional but advisable: a score is a snapshot, and measuring progress gives your decisions evidence that stays current.

Read more →

The five pillars of a sovereign estate

The Sovereignty Index scores your estate across each dimension, producing your Technical Debt Burden in pounds.

Typical uninspected IT estate Sovereign benchmark

A representative illustration. Your actual Sovereignty Index scores are produced by our diagnostic engagement.

Each step is a separate decision. We earn the next one.

Judge us on what you can check.

A published method.

The Sovereignty Index® is built on 50 questions mapped against recognised standards. Mapped means our questions follow those frameworks. It does not mean the report certifies you against them.

Read the method →

A sample you can read before you spend anything.

Eight pages, fictional data, written for a finance director: a cost in pounds, the risk behind it and a ranked plan.

Read the sample →

An independent review of the architecture.

The Synapse-7® architecture has been independently reviewed by an external enterprise architect.

See the architecture →

A named person, with a team of specialists.

Paul Kelly, MAPM, leads Echo 7 and orchestrates the work. A team of specialists covers enterprise architecture, Azure administration, licensing and other disciplines, and others can take ownership of a client account, so your lead has specialist depth behind them.

About Paul and the team →

We show no client logos or testimonials, so the items above carry the case. Our latest articles follow.

You know the price before you commit.

The Sovereignty Index® is a fixed fee of £3,500, agreed in writing before work begins. We commit to delivering the written output within four weeks of the opening session, once we have the access we need from you. If we miss that date, the fee reduces by 10% for each week the report is late, up to 50% of the fee. Managed Sovereignty is £1,200 per quarter, optional, with no minimum term. The Sovereign Vault is quoted as a fixed fee, in writing, before you commit to anything, because your estate is individual to you. There is no hourly billing, so we have no commercial reason to slow down.

If a provider can't tell you what something costs before they start, ask yourself who that uncertainty serves.

Request an Index →

The longer you wait, the larger the number.

What is your estate r£ally costing you?

One conversation and one fixed-fee report give you a number in pounds your executive team can act on. If you do not measure it, you risk the shock of hidden or unfunded costs, and the government expects directors to know.

A fixed fee of £3,500, agreed in writing. No obligation beyond it.