FAQ

Straight answers about fractional CTO services, the two monthly plans, and how an engagement starts.

The role

What is a fractional CTO?

A fractional CTO is the technology leader a company keeps on a monthly plan instead of hiring a full-time executive. The work is strategy, security, vendors, budget, and the systems the business runs on.

Is a fractional CTO an officer of our company?

No. Fractional CTO is a working title. Talon Software is an independent advisor. The role does not make anyone an officer of the client company and does not include authority to bind that company.

How is this different from a managed IT provider?

A managed IT provider keeps devices, accounts, and tickets moving. A fractional CTO decides what the technology should be, what it should cost, and what happens next. Support can sit inside the monthly plan, but the leadership work is the point of the engagement.

How is this different from a project consultant?

A project has a start and an end. A monthly plan stays with the company: a roadmap, a budget, vendor decisions, and someone leadership can ask when the next question comes up. Defined projects can still be sold on their own.

Who will I be working with?

Talon Software is the practice of Kendall Tapani. All services are provided by him, from the first call through the monthly plan. He also built this website, and he sends his best wishes.

Fit

Who is this for?

A company that needs technology leadership and does not need a full-time CTO. The conversation is usually with the owner, CEO, COO, or CFO. A strong fit is a business where technology decisions keep coming back to leadership, and a full-time hire is more than the role requires.

Who is this not for?

A company shopping for a help desk, a founder looking for a technical cofounder, a team that needs more developers rather than a leader, and an organization that already has a technology executive.

How do we start?

Request a discovery call. Thirty minutes is enough to tell whether an assessment is the right next step.

How an engagement runs

What happens on the first call?

Thirty minutes, at no charge. The call confirms a real reason to talk, a budget, and who can decide. Where the work is a fit, an assessment proposal follows within one business day.

What are the steps after that?

A paid assessment, a readout to leadership, onboarding over the first two weeks, then steady state. Onboarding covers access, introductions to vendors and staff, and a 30-60-90 day plan. Steady state is the agreed cadence, a monthly report, and a quarterly roadmap review.

Where do you work?

Talon Software is based in Vancouver, WA. Client work can be on site or remote, at the cadence agreed in the plan.

How do you handle access to our systems?

Accounts are issued in a named user. Shared passwords are not used. Hardware-key multi-factor authentication is required.

What if the work runs larger than expected?

Hours are tracked privately against the quote. If a client runs over the planned hours for two months, the scope is reset rather than quietly absorbing the extra work.

Can you help with cyber insurance, HIPAA, SOC 2, or CMMC?

On Pro, yes, as readiness and paperwork: insurance applications, customer security questionnaires, and preparation for frameworks such as SOC 2, HIPAA, or CMMC. A licensed firm still performs any formal audit.

Can you help us decide what to do with AI?

On Pro. The work is a short list of workflows worth automating, a tool choice, a usage policy, and one pilot carried through to a result. It is not a mandate to adopt a tool for its own sake.

Plans and price

What are the two plans?

Essentials runs the technology: help desk and accounts, the software and network, licenses and vendors, the technology budget, and baseline security, with a monthly review. Pro includes that work and adds the decisions Essentials does not cover: security leadership, compliance questionnaires, software oversight, hiring support, AI decisions, and a seat in leadership meetings.

Why is there no price list?

Every company gets a quote. Price follows headcount, locations, the condition of the current setup, compliance requirements, and how involved leadership wants the work to be. The fee buys defined responsibilities. It is not an hourly rate.

Is support included?

Yes. Support is part of the monthly price, not a second invoice. At the start, daily support is handled directly. Later, a managed IT partner can take the ticket work under the same relationship. A company that already likes its provider can keep that provider, with the work directed and reviewed.

Are you available around the clock?

No. Response is during business hours. Messages are answered within one business day. Emergencies get best effort, not a guarantee. There is no personal on-call.

What are the contract terms?

Three months minimum, then month to month with 30 days' notice. Invoices go out in advance and are due in 15 days. Assessments and defined projects are priced separately, with or without a monthly plan.

What does a plan client receive each month?

Essentials includes a monthly review of what is in place, what it costs, and what needs a decision. Pro includes weekly presence and a seat in leadership meetings.

Services

What is an assessment?

A paid review before a monthly plan. It includes a meeting with leadership and staff, a look at the relevant systems, a written report, and a readout. If a plan makes sense, the proposal is the last page of that readout.

What kinds of assessments are there?

Three. A technology assessment covers systems, vendors, and spend, and produces a twelve-month roadmap. A business assessment looks at how technology supports operations. A network security assessment reviews network, access, backups, and exposure, with findings ranked by risk.

Does the assessment count toward a plan?

If a plan is signed within 30 days, half of the assessment fee is credited toward the first month.

What other services are there?

Custom website management, an application security audit, a backup and recovery test, and a security questionnaire for an insurer or a customer. Each is quoted on its own and does not require a monthly plan. An application security audit ranks findings. It is not a certification.

Can you lead a project without a monthly plan?

Yes. A project is a defined piece of work with a start, an end, and a deliverable, such as a migration, an ERP or CRM selection, or an office move. Projects are taken when there is room to finish them.

Do you write production code or sign audits?

Staff-augmentation coding is not the default. Software oversight on Pro covers build-versus-buy, selecting a developer or agency, architecture and code review, and delivery. Formal audit attestation and legal advice stay with licensed firms. The practice prepares the client. Those firms sign.

Request a discovery call