Up Technology

How it works

What the monthly plan buys is automation with a person behind it: a small helper keeps each computer up to date and running well and alerts us to warning signs before they turn into a failure, and a real local person decides what happens next. Everything here describes the system as it runs today, not a roadmap.

Level 1 · the short version

What you are buying, technically

A small agent on each PC

A Windows service that reports health and carries out approved work. It only ever calls out to our server over TLS; nothing is opened inbound on your network.

One server, ours

A single management server Up Technology operates, hosted in a Virginia data center. No shared multi-tenant SaaS: your inventory and health data live on infrastructure we control.

Health, not content

The agent sends readings and status — updates, antivirus, disk, backup, security settings, installed programs. It does not read documents, email or browsing history.

Nothing acts without a switch

Automated action (patching, enforcement, fixes) is gated by named switches: fleet-wide masters we control, plus per-client approvals and each device's own Care Policy and schedule. Every master ships off. For a new business client we recommend: alert on everything, act on nothing until each switch is agreed with you and recorded.

Remote help is consent-gated

By default a session asks on the user's screen first and starts only if they click Allow. A notify-only setting (the user is told a session has started, not asked) exists per site or per device; the server refuses to set it for any client without a recorded authorization on file, every change is admin-only and audit-logged, and we do not set it without the client's agreement. Every session shows a persistent notice and a Stop button while connected and is logged. With nobody signed in, a screen session does not start. The technician terminal and file browser are separate tools: they ask no one, and each terminal session and file action is logged.

Signed, logged, backed up

Every build is code-signed under a Microsoft-issued publisher certificate. Every operator action lands in an audit log. The database is backed up nightly and an encrypted copy is kept off the server.

One more fact behind all six: Up Technology is one person, Jamie Wiebrand, on a platform he built and operates himself. Nobody else, and no other IT company, has access to the server or to your computers through it. If that is enough, you have the picture; the two links at the bottom go deeper.

Architecture

Client PC (each) agent service · runs as SYSTEM tray helper · the signed-in user outbound only · TLS :443 heartbeat ≈ every 30 s Up Technology server Hetzner · Ashburn, Virginia, USA Caddy→ TLS, Let's Encrypt FastAPI→ WebSocket + HTTPS API SQLite→ health + inventory APScheduler→ sweeps, reports, backups Operator dashboard browser · HTTPS · session login 4 roles · read-only → superadmin every action → audit log Nightly backup database → HMAC-signed copy (server) pulled nightly → age-encrypted → private repository, off the server Client reports email via a delivery relay (Brevo) monthly report · day-one report status page · private link Signed builds Azure Trusted Signing (Microsoft CA) agent updates: hash-verified outbound · wss https nightly reports signed build

scroll sideways for the whole diagram →

agent traffic · signed builds operator sessions · client reports nightly backup
For a business owner

Salons, shops and offices

What the monthly plan buys is automation: it keeps every computer up to date and running well, and alerts us to warning signs before they turn into a failure. A real local person watches over it, and you get a plain-English report every month. You pay by how many computers you have, and the more you have, the less each one costs: see what a business pays, by size. Windows computers; month to month, cancel anytime, no fee.

It is one person, Jamie Wiebrand, on a platform he built and runs. No outside IT company has access to your computers through us. If you already have an IT advisor, they get the technical overview to read, not a login.

Where our job stops

  • Windows computers only. Not servers, storage boxes, printers, routers, phones, Microsoft 365 or your vendor's software.
  • We don't back up your files. We check that OneDrive is running and signed in. Shared drives on a server are invisible to us.
  • We are not a HIPAA business associate. Healthcare practices, talk to us first.
  • Your business software is never updated without your say. Tell us which programs run your business and we mark them "never update automatically."
  • Not a 24-hour help line. One person. Email is read every day and answered within one business day, a target, not a guarantee.
  • You can leave at any time. Month to month, no fee.

Get in touch with how many computers you have and what runs your business; you'll get a plain answer and a price.

Want more?

Two ways to go deeper

The illustrated tour

Day one, the daily checks, how an update lands, what happens when something looks wrong, remote help, and your information, drawn out for the person at the keyboard.

Read the tour

The full technical overview

Components, enrollment, the network path, what data moves and how long it is kept, every automation switch and its gate, the update pipeline, and the questions IT advisors ask.

Read the technical overview