Technology advisory · San Francisco Bay Area

Senior counsel for technology decisions with real stakes.

Dragonfish advises independent schools, nonprofits, and mission-driven organizations on IT, security, and AI governance when leadership needs judgment, clarity, and defensible execution.


Practice

What we do.

  • IT Strategy

    Senior counsel on roadmaps, budgets, vendor relationships, and the technology decisions a board will be asked about.

  • Security & Compliance

    Security posture work for FERPA, HIPAA, SOC 2, and cyber insurance — written for the audit, designed for the day-to-day.

  • AI Governance

    Policy, platform selection, and deployment frameworks for Copilot, ChatGPT, and Claude — with the guardrails leadership can defend.

  • Workspace Operations

    Microsoft 365 and Google Workspace administration, identity, and cross-platform migrations — tenant hygiene that holds up under scrutiny.


Selected work

A few engagements.

Representative examples, anonymized at clients' request.

Independent K–8 School

A documented governance posture, owned by the school.

An unstaffed-for-IT independent school with an unmanaged Google Workspace tenant and no documentation. A scored environment review, a tailored policy pack aligned to FERPA, and a roadmap the head of school sustains independently — with quarterly check-ins.

Healthcare-Adjacent Foundation

Compliance-ready before the next audit cycle.

A foundation on Microsoft 365 with fragmented vendors and quiet pressure to adopt AI. Security and compliance review, a governance framework for Copilot, and a phased platform launch — adopted under policies leadership can defend at the board.

Education Nonprofit

A stable foundation after years of patchwork.

A small education nonprofit with aging systems, unclear vendor relationships, and growing privacy concerns. Health check, security audit, and a right-sized governance kit. The team now operates from a documented baseline — and knows what to ask for next.


Principal

Built on operator experience.

Fifteen-plus years leading IT at organizations where the work matters and the budgets are real — healthcare foundations, independent schools, and nonprofits navigating compliance, AI, and modernization on lean teams.

Dragonfish is built for executive decisions, not ticket queues. The work blends operating experience, governance discipline, and practical AI adoption into systems your team can actually sustain.


How we work

A quiet process.

  1. 01

    Conversation

    A short call to understand the situation, the constraints, and whether we are the right fit.

  2. 02

    Definition

    A scoped engagement with clear deliverables, a stated timeline, and a fixed price. No retainers, no scope drift.

  3. 03

    Delivery

    Quiet, scheduled execution with milestone updates. Most engagements run four to ten weeks.

  4. 04

    Handoff

    A presentation, documentation written for your team to own, and a calendar of what to revisit and when.

Begin

A thirty-minute conversation. No pitch.

If the practice is a fit, we will tell you. If it is not, we will say so and point you to someone who is.

Schedule a call