How to Judge Your Managed IT Provider: A Renewal Scorecard for Orlando Dental Practices
A renewal notice for your IT contract sits in a Lake Mary practice owner's inbox: twelve more months, same fee. You try to list what the last twelve months of "managed IT" produced, and the list stops after a printer ticket.
If that sounds like your office, in Lake Mary, off Aloma Avenue in Winter Park or out in Kissimmee, the problem is rarely the provider's effort. It is that nobody agreed what proof of the work would look like, so the renewal gets decided on how the last outage felt: the afternoon the server restarted during a thunderstorm, or the morning the imaging PC would not open.
This guide is meant for an owner running one, two or three offices across Orange, Seminole, Osceola or Lake County, paying an outside firm or a part-time technician today, with a rollover date coming up. Inside are a scorecard you can fill in with last year's paperwork, a maintenance calendar shaped around Central Florida's storm months, the Florida record rules worth turning into renewal questions, and a way to total the score into keep, renegotiate or move. Whether a monthly plan suits you at all is argued in the managed IT buyer's guide; for the whole metro, suburb by suburb and season by season, start with our Orlando and Central Florida dental IT guide. This page stays on one job: the renewal.
Judge a managed IT provider on evidence, not on memory. Ask for twelve months of reports and score ten items: patches per device, backup results, a recent test restore, the alert log, tickets by type, licences and warranties, accounts added and removed, MFA coverage, firewall firmware and UPS batteries.
- Central Florida's year has a shape a maintenance plan should follow.
- The plan has to know the software your schedule runs on and the imaging your clinicians read from, by name and version.
- Florida has rules that touch where and how dental records are kept.
- The same way any managed provider's work is checked: by the evidence it leaves, not by how close its building is.
- Add up the ten scorecard lines for a total out of 20, then check the calendar: did the spring and pre-season work happen, with evidence?
In this guide
- What should a managed IT plan prove to an Orlando practice every month?
- What should the plan do differently in a Central Florida year?
- Which practice systems does the plan have to know by name?
- Where does your patient data live, and does Florida law care?
- What does managed IT cost an Orlando practice, and what is quoted separately?
- How is a Dallas-headquartered provider's work checked from a Winter Park office?
- How do you score your current provider before renewal?
- Where has Legend's work shown up in Central Florida?
- What to ask your IT provider before you renew or sign
- Sources
- Frequently asked questions
- The bottom line
What should a managed IT plan prove to an Orlando practice every month?
A managed plan should leave a paper trail you can read: which devices were patched, which backups ran and whether one was restored as a test, what the monitoring caught and what was done about it, which tickets opened and closed, and which user accounts changed. If you cannot see those things, you cannot tell what you paid for.
The fee for a managed plan buys work you mostly never see. That is the point of it, and it is also why renewals go wrong: the owner compares a monthly invoice against a feeling. The fix is to ask for the evidence the work leaves behind and to score it the same way every time. The table below is a scorecard built for that. Score each line 0, 1 or 2, for a total out of 20.
- 0 — you have never seen this, or the provider could not produce it when asked.
- 1 — it exists, but you had to ask, it was incomplete, or it was months old.
- 2 — it arrives without asking, covers every device or account, and you can read it.
| # | Evidence item | What you should be able to see | Red flag | Score (0–2) |
|---|---|---|---|---|
| 1 | Patch status per device | Every workstation, the server and any imaging PC listed by name, with the date of its last Windows and application update | A single "98% patched" figure with no device list; the imaging PC missing from the list | |
| 2 | Backup job results | Each backup job by name, with success or failure for each run in the month, including the offsite copy | Only "backups OK"; failures shown with no note of what was done | |
| 3 | Last test restore | The date a file or the practice database was restored to prove the backup works, what was restored and how long it took | No test restore in the last quarter, or "we'd know if it failed" | |
| 4 | Alert log and action taken | What the monitoring flagged (disk filling, service stopped, device offline) and what someone did about each item | Alerts listed with no action column, or an alert that repeats every month unresolved | |
| 5 | Tickets opened and closed, by type | A count by category (printer, imaging, practice software, email, phones, new user), with anything still open named | One undifferentiated number; tickets closed with no note; the same problem reopened month after month | |
| 6 | Licence and warranty list | Microsoft 365 seats, security software, server and workstation warranty end dates, firewall licence renewal | No list, or a list that was last updated when the office opened | |
| 7 | User accounts added and removed | New hires set up and departed staff removed from email, the practice software and remote access, with dates | A hygienist who left in spring still holding an active email account in autumn | |
| 8 | MFA coverage | Which accounts sign in with multi-factor authentication (a second check, such as a phone prompt, on top of the password) and which do not | Admin accounts without MFA; "most users" with no names | |
| 9 | Firewall and firmware status | The firewall model, its firmware version and the date it was last updated; the same for switches and Wi-Fi access points | Firmware from years ago; nobody able to say who holds the firewall login | |
| 10 | UPS battery status | Each uninterruptible power supply (the battery box that keeps a server or switch running through a blip) with its last self-test and battery age | UPS units that have never been tested, or a battery warning light the front desk has learned to ignore |
A few lines deserve more than a glance.
Test restores (line 3) are where most scorecards fall apart. A backup job that reports "success" tells you a copy was written; it does not tell you the copy can be read back into Dentrix or Open Dental on a bad morning. A test restore is the only proof, and it should be dated. If you want to understand the moving parts behind a backup and a restore, Legend's page on dental backup and recovery lays out the service side.
Accounts (lines 7 and 8) are a security question as much as an admin one. An account that outlives the employee is one of the easiest ways into a practice's email. The dental cybersecurity page explains why identity and MFA sit at the centre of most security work now; the scorecard simply asks whether you can see the result.
UPS batteries (line 10) matter more in Central Florida than in most places, for reasons the next section covers. A UPS with a dead battery looks exactly like a working one until the moment it is needed.
None of these items is exotic. Any provider that runs a managed plan has the tools to produce them. The question at renewal is whether yours does, and whether anyone at the practice has been reading what comes back. Legend's national page on managed IT services for dental practices describes the service in general terms; the scorecard is a way to test any provider against what you receive, Legend included.
What should the plan do differently in a Central Florida year?
Central Florida's year has a shape a maintenance plan should follow. The Melbourne office of the National Weather Service puts over 90% of local lightning in May–October, and NOAA dates the Atlantic hurricane season June 1 through November 30. Heavy work belongs in the quieter months; the storm months call for checks you can see in writing.
A provider that runs the same twelve identical months in Kissimmee as it would in a city with no storm season is leaving value on the table. The weather office that forecasts for Orlando, NWS Melbourne, adds a detail that matters to a practice schedule: the bulk of that May-to-October lightning arrives between noon and midnight. In other words, during afternoon columns and evening backups, across six months of the year. The hurricane centre's own climatology page adds that tropical systems occasionally form outside the official June-to-November dates.
Neither fact means disaster. Both mean that patching, replacements and moves fit some months better than others, and that a provider should be able to show you what it did ahead of the wet season, not only after something broke.
| Period | What is happening in Central Florida | Managed task worth expecting | Evidence to ask for |
|---|---|---|---|
| January–February | Licences and annual subscriptions renew; schedules are back after the holidays | Reconcile Microsoft 365 seats and security licences against current staff; retire accounts for anyone who left in the autumn | Updated licence list (scorecard line 6); account removals with dates (line 7) |
| March–April | The last stretch before NWS Melbourne's May–October lightning window | Schedule larger changes now: server or firewall replacement, workstation refresh, any provider change. Run UPS self-tests and replace ageing batteries. Run a full test restore | Dated test restore (line 3); UPS test results (line 10); a written plan for any hardware work |
| May | Lightning season begins; hurricane season is a few weeks out | Confirm the offsite backup copy is current and where it sits; check that firewall and switch firmware is up to date | Backup job report including the offsite copy (line 2); firmware dates (line 9) |
| June–November | NOAA's Atlantic hurricane season; afternoon and evening thunderstorms through October | Keep update windows and restarts out of the afternoon; after any storm day, review alerts for devices that dropped offline; hold major changes unless something has failed | Alert log entries for storm days and what was done (line 4); a list of devices that came back after an outage and any that did not |
| School breaks | Family and pediatric practices often book their heaviest weeks when children are out of school | Avoid planned downtime, migrations and new-software rollouts in those weeks | A maintenance schedule that names the weeks the provider will not touch production systems |
| December | Year-end budgeting; equipment ageing out | Review warranty end dates, flag hardware due for replacement next spring, and price it before the budget is set | Warranty list with end dates (line 6); a written hardware forecast |
Two notes on the table. First, the school-break row depends on your own calendar: check your county district's published dates, and if you run a children's practice, our guide to pediatric dental practice IT in Orlando goes further into those weeks. Second, the calendar is not a hurricane plan. Getting the whole office ready for a hurricane belongs to Florida's hurricane and cybersecurity guide for dental offices, and the physical side (earthing, surge devices, the copper a strike can follow into the building) has its own guide to lightning and surge protection for an Orlando dental office. The calendar asks a narrower question: did the provider do the right work in the right months, and can it show you?
Which practice systems does the plan have to know by name?
The plan has to know the software your schedule runs on and the imaging your clinicians read from, by name and version. On practice software, the platforms whose IT environment Legend supports are Dentrix, Eaglesoft, Open Dental and Archy; on imaging, they are DEXIS, Vatech, Carestream, Planmeca/Romexis and Dolphin Imaging. Whoever you pay, its records should name yours.
Generic IT providers think in devices: servers, laptops, printers. A dental office thinks in the practice management system and the imaging chain behind it. When those two views do not meet, the result is the classic Orlando-summer morning: Windows installed an update overnight, the sensor driver in operatory two no longer talks to the imaging software, and the first patient of the day is already in the chair.
For scoring purposes, the provider's records should answer four plain questions:
- Which practice management system and version do we run, and where does its database live? On the server in the back office, on a hosted service, or split between the two.
- Which imaging software runs on which workstations, and which machine holds the image store? Many offices have one PC that matters far more than the others and nobody has written down which.
- Who is the contact at each software vendor, and who calls them? Whether vendor calls are part of your agreement is a question to settle in writing; the answer varies between providers and contracts.
- What happens to these systems on update night? A provider that knows your imaging bridge will hold or stage certain updates rather than push everything at once.
For the local version of that work, see Legend's dental software and imaging support in Orlando; a Dentrix office gets a single-platform walkthrough at Dentrix IT support.
If your scorecard's patch list (line 1) does not show the imaging PC, or shows it patched on the same night as everything else with no note, that is worth raising before you renew.
Where does your patient data live, and does Florida law care?
Florida has rules that touch where and how dental records are kept. F.A.C. 64B5-17.002 wants records held four years minimum and any electronic back-up "updated in a time frame that does not exceed seventy-two hours (72 hrs.)". Section 408.051(3) covers where some providers' offsite data physically sits. Your provider should be able to answer both in writing.
This section states the rules and turns them into questions. It does not tell you how they apply to your practice; that is a question for your counsel, and for the software vendor where a rule depends on the product.
Record retention. Under subsection (4) of F.A.C. 64B5-17.002 (last amended 10-30-23), a dentist keeps each patient's written record for no less than four years, and that clock starts on the date the dentist last examined or treated the patient.
Electronic records and backups. Subsection (8) allows records to live in electronic form on condition that the dentist holds a back-up copy, on disk, tape or another secure electronic system, held onsite or off-site, "as long as the back-up system is updated in a time frame that does not exceed seventy-two hours (72 hrs.)," the point being that a system failure should not cost the practice its data.
Where offsite data is kept. Florida Statutes s. 408.051(3) reaches health care providers that run certified electronic health record technology. For them, patient information held away from the office, on physical or virtual systems, at a third-party or subcontracted facility or with a cloud company, has to sit physically within the continental U.S., a U.S. territory, or Canada. Your software vendor can say whether its product carries that certification; your counsel can say what follows for your practice.
Breach notice. Under Florida's data-breach statute, s. 501.171(4)(a), affected individuals must be told within 30 days of the point a breach is determined, or of the point there is reason to believe one happened. Recovery after an incident is the business of the Florida dental technology and cybersecurity guide; here it matters only because your provider's alert log (scorecard line 4) is part of the record of what happened.
Turned into renewal questions, those rules become:
- How often does each backup job run, and can you show me a month of results against a 72-hour window?
- Where, by country and provider, is every offsite or cloud copy of our patient data physically kept, including copies held by your own subcontractors?
- How long do you keep backup copies, and does that retention match what our counsel says we need for records?
- If a cloud service we use moved its storage region, how would we find out?
- When did you last restore our practice database from the offsite copy, rather than the local one?
A provider that can answer those in a page has done the thinking. One that needs a week to find out has told you something too.
What does managed IT cost an Orlando practice, and what is quoted separately?
Legend publishes one price line for managed IT: starting at $360 per month. The figure is a starting point, not a quote for a particular office. Hardware procurement, major cabling projects and software licensing are quoted separately. Backup protection from $39.99 per month (storage-dependent) is the other published figure.
Price is where most renewal conversations start, and it is the least useful place to start. A lower monthly fee that scores 6 out of 20 on the evidence table is not cheaper than a higher one that scores 18; it is a different product.
Legend's published figures, in its own wording:
- Starting at $360 per month for managed IT.
- Hardware procurement, major cabling projects and software licensing are quoted separately.
- Backup protection from $39.99 per month (storage-dependent).
- Dental startups are custom quoted.
Those are the only Legend numbers this guide gives. The more useful exercise sits on your own desk: put last year's invoices next to the completed scorecard and ask what each line of the scorecard cost you. A few patterns to look for:
- Fees that grew while the evidence did not. If the monthly line went up at the last renewal and lines 1–10 still score mostly 1s, ask what the increase paid for.
- Projects billed that should have been routine. A "network cleanup" project that recurs every year often means the monthly work is not being done.
- Licences you pay for twice. Microsoft 365 seats for departed staff, security software on retired PCs, or a backup service your provider's plan already covers.
- Hardware surprises. If a failed server or switch was the first you heard of a warranty lapse, line 6 was a 0 for some time before the failure.
A clear agreement separates the monthly work from the things priced one at a time, and states both in writing. That is the shape Legend's published wording describes, and it is a fair shape to ask of any provider you are comparing.
How is a Dallas-headquartered provider's work checked from a Winter Park office?
The same way any managed provider's work is checked: by the evidence it leaves, not by how close its building is. Legend's base is Dallas, and its published model reads: onsite dispatch by appointment across served dental markets; remote-first nationwide. For an owner, the question is what you can verify from your own desk and what needs a booked visit.
Plenty of Central Florida practices assume the right provider is the one nearest the office. Nearness helps with one thing, a person walking in the door, and it helps less with the rest: monitoring, patching, backups, account changes and most tickets happen over the network, wherever the provider sits. So the useful test is not distance; it is whether you can check the work.
What an owner can check without anyone in the building:
- The monthly report or portal view behind scorecard lines 1–10.
- The ticket history: what was asked, who handled it, what the note says, whether it was closed or reopened.
- Backup job results and the date of the last test restore.
- The licence, warranty and account lists, compared against your own staff list.
- Whether the help desk number reaches someone when your team calls it.
What needs someone in the building, booked ahead:
- Replacing a server, firewall, switch or UPS.
- Cabling, new operatories and moving equipment between rooms.
- Physical checks after a storm when a device will not come back online remotely.
- Anything where a person has to see the rack, the closet or the wall plate.
In Legend's published wording: onsite dispatch by appointment across served dental markets; remote-first nationwide. It has in-house engineers; no outsourced first-level triage. 24/7 monitoring runs alongside a staffed 24/7 helpdesk at 1-800-794-1588, reached on a single general line. You can read how the help desk is set up on Legend's dental IT helpdesk page, and how Legend serves practices across the metro on its page for managed dental IT in Orlando.
Whichever provider you score, ask the same two things of the "booked ahead" list: how a visit is requested, and how it shows up afterwards in the ticket history. A provider whose visits leave no record is as hard to judge as one that never visits.
How do you score your current provider before renewal?
Add up the ten scorecard lines for a total out of 20, then check the calendar: did the spring and pre-season work happen, with evidence? A high total with the calendar done supports renewal; a middle total supports renegotiation in writing; a low total, or a zero on backups or test restores, supports comparing alternatives.
Do the scoring with the provider, not about them. Send the scorecard ahead of a renewal meeting, ask them to bring the evidence for each line, and score it together. That turns a vague conversation ("are you happy with us?") into a specific one, and it gives a good provider the chance to show work you never saw.
A simple way to read the total:
| Total (out of 20) | Calendar evidence | Reading | What to do before the renewal date |
|---|---|---|---|
| 16–20 | Spring test restore and UPS checks done; storm-day alerts handled | The plan is doing what a plan should, and you can see it | Renew; ask for the same evidence in the same format every month |
| 10–15 | Some seasonal work done, some not | The work may be happening but is not visible, or parts are missing | Renegotiate: list the lines scoring 0 or 1 and ask for each in writing, with a date, as a condition of renewal |
| Below 10, or a 0 on line 2 or 3 | Little or none | You cannot show what the fee bought, or backups are unproven | Compare alternatives before signing anything that runs past the next storm season |
These bands are a judgement aid, not a formula. A provider scoring 14 that fixes its gaps within a month may be a better bet than a new provider you have never seen work. And a single zero on backups or test restores outweighs a dozen tidy ticket reports, because it is the line that decides whether a bad morning is an inconvenience or a crisis.
If the score points toward moving, two Legend articles cover the move itself: how to switch dental IT providers without downtime walks through the handover, and managed dental IT versus break-fix helps if you are weighing whether a monthly plan suits your practice at all. Practices with several sites, or a group growing toward that, will find the multi-location side on the DSO IT support page.
One timing point from the calendar: if you do decide to move, the March–April window is the quieter one for Central Florida. A provider change in the middle of August thunderstorm season is possible, but it doubles the number of things that can go wrong in the same week.
Where has Legend's work shown up in Central Florida?
Legend's project pages name two practices in the region: Sapphire Dental Studio, a Winter Garden startup on Orlando's west side, plus City Beautiful Pediatric Dentistry inside the city itself. Both pages describe openings. Neither page describes a monthly plan, and neither practice is offered here as an example of one.
Sapphire Dental Studio, Winter Garden. According to the Sapphire Dental Studio project page, the startup opened in a brand-new Winter Garden building, with Legend's part being the technology groundwork, "focused on stability, security, and readiness from opening day." The page credits the opening with a tidy, up-to-date IT setup, reliable connectivity and a secure starting configuration. It names Drs. Curtis Dugas and Yoo Jin Chung as the dentists and carries a project-update date of January 5, 2026.
Orlando: City Beautiful Pediatric Dentistry. Legend's October 2025 post, reproduced on the City Beautiful Pediatric Dentistry project page, congratulates Dr. Danielle Lombardi Recine as her Orlando office opened, with a note on her background and her specialist training in children's dentistry.
Beyond the metro, Legend's company record reads: served over 3,500 practices since 2004, 22+ years in dental IT, and a 4.8 rating · 173 Google reviews. Its own description of its leadership: Ian Lynch — 22 years in dental IT; oversees the NOC, onsite dispatch and client technology roadmaps.
When you score any provider, ask for the same thing you are reading here: named practices in your part of Florida, what the provider did for them, and permission to say so. A provider that can show its work in public is easier to hold to its work in private.
What to ask your IT provider before you renew or sign
Bring these to the renewal meeting, or to any provider you are comparing. Questions one to five grow out of Central Florida's weather and Florida's rules; six onward would fit a practice in any state. Ask for answers in writing.
- Show me the test restore you ran before last May. Which data did you restore, from which copy, and how long did it take?
- On the storm days last summer, which of our devices dropped offline, and what did you do about each one?
- Where is every offsite and cloud copy of our patient data physically kept, by country and provider, including your subcontractors' storage?
- Can you show a month of backup results against a 72-hour window, with any gaps explained?
- Which weeks will you keep clear of planned work because of our busiest school-break or holiday schedule, and how will we see that on your calendar?
- Which of our devices are missing from the patch report, and why?
- Who holds the administrator logins for our firewall, server, Microsoft 365 tenant and practice software, and when did we last receive a current copy?
- Which accounts still sign in without MFA, and what is the date to close that gap?
- What did the monitoring flag last quarter that we never heard about, and what was done?
- Which of our warranties and licences end in the next twelve months, and what will replacing them cost, quoted separately?
- When a visit is needed, how do we request it, and where does it appear in the ticket history afterwards?
- If we left, what would you hand over, in what format, and how long would you keep our data after the contract ends?
Sources
- National Weather Service Melbourne, "Lightning facts": https://www.weather.gov/mlb/lightning_facts (accessed 2026-10-19)
- NOAA National Hurricane Center, tropical cyclone climatology: https://www.nhc.noaa.gov/climo/ (accessed 2026-10-19)
- Florida Statutes s. 408.051: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0408/Sections/0408.051.html (accessed 2026-10-19)
- Florida Administrative Code 64B5-17.002: https://www.flrules.org/gateway/ruleNo.asp?id=64B5-17.002 (accessed 2026-10-19)
- Florida Statutes s. 501.171: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.171.html (accessed 2026-10-19)
Frequently asked questions
What reports should a managed IT provider give a dental office each month?
At minimum: patch status for every device by name, backup job results including the offsite copy, the date of the last test restore, an alert log with the action taken, tickets by type, licence and warranty dates, account changes, MFA coverage, firewall firmware and UPS battery status. If a report covers fewer than half of these, ask why before renewing.
How can we tell whether our backups would really restore?
Ask for a dated test restore: a file or the practice database copied back from the backup and opened to prove it works, with what was restored and how long it took. A job marked successful only shows a copy was written. In Central Florida, a test restore in March or April, before the storm months, is a sensible habit.
Does Florida law say where our cloud backups can be stored?
Under Florida Statutes s. 408.051(3), a provider running certified electronic health record technology must keep offsite patient information, cloud copies included, physically inside the continental U.S., a U.S. territory, or Canada. Whether your software counts as certified technology is something the vendor and your counsel can settle. Your IT provider should tell you where every copy is kept.
Can a Dallas-headquartered provider look after an office in Lake Mary or Kissimmee?
Most managed work, such as monitoring, patching, backups, account changes and most tickets, happens over the network, wherever the provider is based. Legend is based in Dallas, and its stated model is onsite dispatch by appointment across served dental markets; remote-first nationwide. Judge any provider by the evidence it gives you and how booked visits appear in the ticket history.
What does Legend's managed IT cost for an Orlando practice?
Legend publishes a starting price of $360 per month for managed IT; the figure is a starting point, not a quote for a particular office. Hardware procurement, major cabling projects and software licensing are quoted separately. Backup protection from $39.99 per month (storage-dependent) is listed on its own. Dental startups are custom quoted.
Which months suit a server replacement or a provider change in Central Florida?
March and April are the quieter window. The Melbourne NWS office counts over 90 percent of local strikes in the May–October months, and NOAA's hurricane season for the Atlantic lasts from June 1 through November 30. Planning major hardware work or a provider change before May keeps it out of the months when storms are most likely to interrupt it.
What is the clearest red flag in a provider's monthly report?
Backup results with no test restore. A report can look busy with tickets and patch percentages while the one thing that matters on a bad morning has never been proven. Other warning signs are devices missing from the patch list, alerts with no action noted, and accounts for departed staff still active months later.
At renewal, how do we check who holds the admin passwords?
The practice should. Your provider needs working access, but you should hold a current, securely stored copy of the administrator logins for the firewall, server, Microsoft 365 tenant and practice software, and it should be refreshed whenever they change. Ask for that copy at every renewal; a provider that resists handing it over is a provider that is hard to leave.
If a provider monitors 24/7, can our staff reach a person at night?
Monitoring and a staffed help desk are different things: monitoring is software watching your systems, while a help desk is people your team can call. Ask any provider about both. On Legend's side, there is 24/7 monitoring plus a staffed 24/7 helpdesk at 1-800-794-1588, a single line anyone on your team can dial.
The bottom line
If you are holding a renewal notice, fill in the scorecard with whatever your current provider has sent over the last three months, gaps included, and bring it along. Legend's Free Dental IT Assessment is one way to get a second view: it checks your network security, backups, software, computers and performance, then hands you written findings and prioritized recommendations to hold up against your own score before anything is signed.

