At $225–$325 per user per month, a 25–100 employee community bank pays for the core managed IT service: security, backup, patching, and support. Compliance services should be listed separately and priced to the bank's needs, because procedures and required reporting differ from bank to bank. Those services include a standard set of bank reports, any additional reports the bank requires, and support when auditors arrive.
A flat "compliance included" claim either overcharges a simple bank or underserves a complex one. Here's how to tell what you're actually buying.
| Users | Monthly Managed IT | Annual Managed IT |
|---|---|---|
| 25 | $5,625–$8,125 | $67,500–$97,500 |
| 50 | $11,250–$16,250 | $135,000–$195,000 |
| 100 | $22,500–$32,500 | $270,000–$390,000 |
These figures cover managed IT only. Compliance services are quoted separately. For what moves a bank within this range, see How Much Does Managed IT Cost for a 25–100 Employee Community Bank in Ohio?
Every piece of IT and compliance work belongs in one of three places:
| Part | What it covers | How it's priced |
|---|---|---|
| Managed IT | Security, backup, patching, and support | Per user |
| Compliance services | Bank reports, additional reports, and auditor support | Priced to the bank's needs |
| The bank's responsibility | Board approval and regulatory decisions | Handled by the bank's compliance team and counsel |
If a provider can't tell you which part each task falls into, that's a gray area that will surface during your next exam.
"Comprehensive IT support" doesn't tell you anything. Here's what our community-bank managed IT actually includes:
"Compliance included" doesn't tell you anything either. Our compliance service for community banks includes:
Our team reviews these reports before they reach the bank. In one case, we caught a remote-connection report showing session end times in UTC instead of Eastern time, which made sessions look four hours off, and had it corrected before an auditor saw it.
No two banks require the same reporting, because procedures are specific to each bank. Pricing compliance into the per-user rate forces every bank to pay for the same package, whether it fits or not.
Use this test with any provider:
"An examiner asks who remotely accessed this server on a specific date. Can you produce it, and is it covered?"
With us, the remote access report is a standard part of the compliance service. A provider should be able to answer that question just as clearly before you sign. For more scenarios to test, see What Should a Community Bank Look for When Choosing a Managed IT Provider?
Be wary of any provider that says it will "ensure compliance." An IT provider supplies technical controls and evidence. Your compliance team and counsel determine your bank's obligations.
The problem: During onboarding, a review of nearly 100 past work entries at a community bank showed close to 40 hours of recurring compliance support that had never been formally scoped.
What we did: We identified that work line by line, separated it from routine support, and presented it to the bank.
The result: The bank moved to a defined compliance service, so that work is now scoped, scheduled, and documented instead of happening informally.
For the rest of that onboarding, see How Do You Switch IT Providers at a Community Bank Without Disrupting Operations or Creating Compliance Risk?
From our home base in St. Henry, Ohio, we support community banks across west-central and Northwest Ohio, including Lima, Sidney, and Dayton, and serve businesses throughout Northeast Indiana, including Fort Wayne and Richmond. Learn more on our community bank IT services page.
Answer: At Tomorrow's Technology Today, no. The $225–$325 per-user price covers core managed IT. Compliance services are listed separately and priced to the bank's needs, because procedures and reporting requirements differ from bank to bank.
Answer: A standard set of 9 bank reports, any additional reports the bank's procedures or auditors require, and support when auditors arrive.
Answer: No. An IT provider supplies technical controls and evidence. The bank's board, compliance team, and counsel determine its regulatory obligations.
Answer: Review past IT work line by line and separate routine support from recurring compliance activity. In one onboarding, that review found close to 40 hours of unscoped compliance support, and the bank moved to a defined compliance service.
Not sure what compliance work your bank is actually paying for? Call 419-678-2083 and we'll walk through it with you.