The pace of technological change does not reduce because a firm is small. Astris CSP delivers more security than most regulated financial institutions, on a simple per-person basis, with the option to keep your data in Switzerland, Europe, the United States, or Canada.
You can outsource your IT to Astris CSP on a simple per-person basis, scaling with your headcount. We provide and support the software your firm runs on, in an environment configured to a higher security standard than most regulated financial institutions operate to internally.
That means a single arrangement covering productivity, helpdesk, cybersecurity, governance, and the regulator-facing artefacts your auditors will look for. The line-of-business applications your firm runs on — from Microsoft 365 to your accounting and Trust & Company platforms — are supported as part of that arrangement, not treated as someone else's problem.
A complete cloud workplace built on Microsoft 365 and selected partner platforms — provisioned, governed, and supported on a per-user retainer.
Protection calibrated to a sector targeted by financially motivated actors — not a generic SMB baseline. Continuously monitored, evidenced for the board.
Access to governance, IT strategy, vendor selection, and sector-specific experience — on a small monthly retainer with a defined hours allowance.
An environment that compliance officers and regulators can read at a glance — residency-aware, evidenced, and aligned to the frameworks in force where you operate.
As a Family Office and Asset Manager, cybersecurity is of the utmost importance. Astris CSP has been a critical partner in educating us on these risks, and implementing the appropriate solutions to keep us and our clients safe.
A defended environment isn't a product you buy once. It's ten layers — each one selected, configured, licensed, integrated, and then run every day: a 24/7 security operations centre, an extended-hours helpdesk, and a team that does only this.
Here is everything we manage, so your firm never has to assemble it. Set up in-house, this is a procurement project, a year of integration, and a payroll line you'd struggle to justify. With Astris, it is already built, already staffed, and already running.
MFA, conditional access, SSO, privileged access
Provisioning, control, patching, encryption, remote wipe
Managed EDR, 24/7 SOC, incident response
Anti-phishing, threat protection, admin, backup
Secure storage, access control, data residency
Firewall, secure Wi-Fi, segmentation
Immutable, SEC-compliant backup, disaster & hurricane recovery
Reporting, change control, documented change & audit trail
Extended-hours helpdesk (3am–6pm ET), onboarding, day-to-day
Vetted employees, cyber insurance, regulator-required security training & phishing simulations
The IT environment of a wealth management firm is not a domain name and a handful of email addresses. It belongs to a regulated business, and the mailboxes within it carry the authority to instruct payments and approve transactions of real consequence. That is what these tiers are priced to run and to defend.
You could assemble all of this yourself. Bought on a per-user basis, it is already built, already staffed, and already running — at a fraction of the cost of standing it up in-house. Each tier is simply how deeply we run it for you; every tier inherits the one below.
Pricing is per user, per month. Devices, software licensing, and onboarding are quoted alongside; published rates assume an engagement of five users or more across a single firm.
We'll scope the right arrangement for your firm.
Security baseline assessment, initial defence implementation, and risk-profile development.
Advanced security configuration, backup system implementation, and team security training.
System monitoring activation, process documentation, and a performance baseline.
Executive reporting setup, compliance documentation, and service-level confirmation.
Most firms that come to us are not starting from nothing — they are leaving a local provider they've outgrown on service, security, or both. We've made that move many times, and we manage it so your team feels continuity, not disruption.
In 2019, founder David Evans was consulting with a Bahamian client — a 25-staff firm with a small group of relationship executives positioned around the world. The client asked David to assess local vendors against three concerns specific to the region: hurricane recovery times, secure remote working for executives at distance, and the cybersecurity posture appropriate to their sector.
No suitable provider existed. The opportunity was to go further — to create a cloud-based service utilising Microsoft's highest security standards, fulfilling regulatory obligations across the Caribbean, the United States, the United Kingdom, and Switzerland, at a price a firm of that size could justify.
Astris CSP was born from that engagement. The name was chosen deliberately. Astris signifies looking to the stars to navigate in the darkness; a single A historically signified the alternative. Both fit the vision for an alternative cloud computing service provider, designed for a sector that requires more than the generalist market offers.
The client invited me to build a company that could meet what we couldn't find in the market. Astris CSP was born from that conversation.
From $300m AUM to $1TN.
Most recently, David delivered the architecture and IT roadmap for the most aggressive merger and acquisition spree in fund management history, leading Apex Fund Services from $300 million in assets under management to $1 trillion.
The five leaders below sit on top of a dedicated engineering and service-desk team — Microsoft-certified, security-vetted, and operating extended hours so your firm is covered well beyond the names on this page.
Service desk staffed 3am–6pm ET, with 24/7 security monitoring behind it. Your firm is never resting on a single person.
Bahamas-born, raised in the Channel Islands. In his early twenties, David headed up the software team at McLaren racing. He moved to financial services and built a reputation for digital transformation, designing strategy for UBS, Standard Bank, Lloyds TSB, and RBC.
Today, through Astris CSP, he serves as Programme Director for both the IT remediation and cybersecurity programmes of a premier offshore government. Earlier, he delivered the architecture and IT roadmap for the largest M&A spree in fund management history.
Based in Dublin and bilingual in Spanish and English, Daniel has spent more than a decade in technical support and customer success. He supported clients across twenty-two countries as a Technical Support Engineer at Cobalt Technology, and trained and mentored service-desk teams across EMEA at Hewlett Packard Enterprise.
Microsoft 365 and Azure certified, with a master's in banking and finance. He leads customer success at Astris CSP, where he has been since 2022.
A career IT leader from Uruguay with deep roots in financial services. Eduardo spent more than fifteen years as IT Manager for Latin America at RBC, then led data-centre and payments rollouts across the Americas as a Regional Technical Director at Planet.
A certified ScrumMaster, fluent in Spanish, Portuguese, and English. He leads the Professional Service Success team at Astris CSP, supporting clients globally.
A Microsoft cloud engineer based in Dublin, Nayan designs and runs the Microsoft 365 and Azure environments at the centre of the Astris architecture — tenant migrations, identity and access, device management, and the integrations with Egnyte, Huntress, and Dynamics that hold a client's workplace together.
Holds an M.Sc in Information Systems from University College Dublin and built his foundations as a developer at Accenture, delivering for UK government clients. He leads technical success at Astris CSP.
A CIMA-qualified accountant with more than fifteen years in funds, financial operations, and compliance. Michelle built her career in fund administration at Ocorian, including as an Associate Director in Jersey, working alongside lawyers and regulators on fund structures.
She manages finance and operations at Astris CSP — budgets, cash flow, and the day-to-day running of the firm.
Astris CSP provide outsourced IT management to Coriats… they give us access to first-class quality and strategic thinking when we need it, without paying for it when we don't. I sleep better at night knowing they are on the team.
A successful family office business in the Bahamas with twenty-five staff and a small group of relationship executives positioned around the world. Astris was engaged to put hurricane recovery, secure remote working, and a managed cybersecurity posture on a single foundation.
Names are withheld in confidence. We can arrange a conversation — contact us →
The company was established in response to a request from a significant client by a team of four industry experts. An excellent example of how IT architecture, set correctly at inception, supports both the licensing process and the firm's later growth without re-platforming.
Names are withheld in confidence. We can arrange a conversation — contact us →
The firm had invested in Microsoft 365 and had an in-house IT resource. Demand had grown with headcount, requiring a helpdesk function and structured access controls. Astris was layered alongside the existing IT resource rather than replacing it.
Names are withheld in confidence. We can arrange a conversation — contact us →
A successful thirty-person trust company running a legacy platform operated by a team inexperienced in financial services, at the limit of its service and security. Astris built a new, globally distributed Microsoft 365 and cloud environment, migrated email, files, and their Navision wealth application with no downtime, and rebuilt every device — phones, laptops, and servers — to the highest security and productivity standards.
Names are withheld in confidence. We can arrange a conversation — contact us →
Astris has exceeded our expectations in cyber risk mitigation, educating us on state-of-the-art best practices… they monitor and benchmark us against the industry. As a director I feel proud to share that with the Board and auditors.
Most principals know their portfolio's risk numbers to a decimal place and have no equivalent figure for the office itself. This year's reports change that — the data now lets you benchmark your own operation against peers, and the comparison is unflattering for offices that have treated cyber as an IT line item rather than a board responsibility.
Read briefing →Microsoft 365 with Copilot is the safest place for a regulated firm to begin its AI adoption — but a holding pattern is not a destination. As an intelligence layer reads across everything, Microsoft 365 shifts from the cockpit where work happens to one well-governed data store among several. The question that should govern the decision is sovereignty: where it lives once the interface, the data, and the model are no longer the same company.
Read note →UBS just put resilience — a word wealth-management founders have been underusing — at the centre of its 2026 Global Family Office Report. For a startup competing on trust, that reframing is an opening: the firms that can demonstrate recovery from disruption will win allocations the brand names assume are already theirs.
Read briefing →
Astris CSP is a cloud-led cybersecurity and managed-IT firm built specifically for wealth managers, family offices, trust companies, and law firms. It delivers a single arrangement covering managed IT, cyber defence, virtual-CIO consulting, and regulatory readiness — configured to a higher security standard than most regulated financial institutions run internally.
Astris works with regulated wealth-management businesses: family offices, wealth and asset managers, trust and company service providers, and law firms. Its clients operate across the Bahamas, Turks & Caicos, Miami, Wyoming, Uruguay, Jersey, and Switzerland. Published rates assume an engagement of five or more users at a single firm.
Managed IT and cybersecurity is priced per user, per month across three tiers — Essential, Enhanced, and Complete — each inheriting the one below, with published rates starting from $250 per user per month. Devices, software licensing, and onboarding are quoted alongside, and every tier is delivered through the same four-week implementation. We scope the right tier for each firm.
A Microsoft 365 security review is a complimentary, fixed-scope assessment of your live Microsoft 365 and Entra tenant, benchmarked against the CIS Benchmarks. It examines identity and access, administrative control, email integrity, data governance, external sharing, Defender threat protection, and audit-log evidence readiness — delivered as a report a board, auditor, or compliance officer can read rather than a raw tool dump.
Astris is based in Nassau, and the Bahamas is the primary jurisdiction for the firms it serves, so its environments are built around the Bahamas Data Protection (Privacy of Personal Information) Act and the supervisory expectations of the regulators its clients answer to — the Securities Commission of The Bahamas for wealth and asset managers, and the Central Bank of The Bahamas for banks and trust companies. Those sit alongside the frameworks clients answer to elsewhere, including GDPR in the European Union, SEC and state privacy law in the United States, FINMA and the nDSG in Switzerland, and PIPEDA in Canada. Astris provides evidence and reporting for boards and auditors, regulator-required security training and phishing simulations, structured portals for auditor access, and background-checked personnel throughout.
Astris runs ten managed layers every day: identity and access, devices and endpoints, threat detection and response, email security, files and collaboration, network, backup and continuity, governance and evidence, support and service desk, and people and assurance. That includes a 24/7 security operations centre and an extended-hours helpdesk, so a firm never has to assemble and staff it in-house.
Astris is headquartered in Lyford Cay, New Providence, in the Bahamas, with an EU office in Trim, County Meath, Ireland, and serves firms across the Caribbean, the United States, the United Kingdom, and Switzerland. Client data can be held in Switzerland, the European Union, the United States, or Canada, depending on the firm’s residency requirements.
Astris CSP Limited
Pineapple House No. 4
SP64284, Lyford Cay
New Providence, The Bahamas
Astris CSP (Ireland) Limited
Trim, County Meath
Ireland
