Frequently asked questions.
Straight answers about who we are, how we work, and what each capability covers.
About AqueductWorking with usNetworkingCloudData & AnalyticsSecurityCyber Resilience & RecoveryWorkforce ExperienceEnterprise AIIndustries
FAQ
About Aqueduct
What does Aqueduct Technologies do?
Aqueduct is an IT solutions provider that plans, builds, operates and evolves technology for leading organizations, from growing companies to the Fortune 500. We work across seven capabilities: Networking, Cloud, Data & Analytics, Security, Cyber Resilience & Recovery, Workforce Experience and Enterprise AI. Together they make up the Aqueduct Model. Like the spans of an aqueduct, each one carries part of the load.
How long has Aqueduct been around, and who leads it?
Manak Ahluwalia, our President and CEO, founded Aqueduct in Massachusetts in 2011 after 10 years at Alliant Technologies, where he rose from intern to Chief Technology Officer and launched its Boston office. Our headquarters is at 150 Royall St in Canton, MA; we moved there from Waltham in early 2023. Today our managed services team manages more than 100,000 devices for customers.
Is Aqueduct financially stable?
Yes. Aqueduct is privately held, minority-owned, profitable and debt-free. That lets us make decisions for long-term customer relationships rather than short-term financial pressure.
What makes Aqueduct different from other IT providers?
70%+ of our team are engineers, architects and consultants, so the people who advise you are the people who build and run what you buy. Our advice is vendor-agnostic, so recommendations follow your environment, not one vendor’s agenda. And we back our work with the Aqueduct Services Guarantee and a 98% customer retention rate.
Does Aqueduct guarantee its work?
Yes. Under the Aqueduct Services Guarantee, if a solution doesn’t perform as designed, we keep working at no cost for our services until it does. It’s one reason we have a 98% customer retention rate.
Has Aqueduct won industry awards?
Yes. CRN has named Aqueduct to its Solution Provider 500, MSP 500 and Tech Elite 250 lists for 10+ consecutive years, and to its Security 100 in 2026. The Boston Business Journal has named us one of its Best Places to Work for 10+ years and ranked us the #4 largest minority-owned business in Massachusetts in 2026. We have been a Boston Globe Top Place to Work and an Inc. Best Workplace for 10+ years, including 2026. We are also a Rubrik Elite and Pure Storage Elite partner.
Does Aqueduct have a SOC 2 report?
Yes. Aqueduct holds a SOC 2 Type II attestation, which independently tests our controls for security, availability and operational integrity over time.
Is Aqueduct a certified minority-owned business, and does working with you count toward supplier diversity goals?
Yes to both. Aqueduct holds two MBE certifications: nationally through the Greater New England Minority Supplier Development Council, an NMSDC affiliate, and in Massachusetts through the state’s Supplier Diversity Office. That lets our work count toward supplier diversity requirements at both the national and state level.
How diverse is Aqueduct’s own team?
60% of our leadership team are women and minorities, and 15% of our workforce are military veterans. We recruit veterans and candidates from underrepresented groups through diversity programs and partnerships.
Does Aqueduct give back to the community?
Yes. We return more than 10% of our profits to the community and support 25+ local charities, including Dana-Farber Cancer Institute, Boston Children’s Hospital, the Jimmy Fund, United Way, the Museum of Science and the Boston Symphony Orchestra. Through our Community Service Volunteer Day and on their own time, our people volunteer as coaches, mentors and tutors.
Does Aqueduct have a sustainability policy?
Yes. Our Corporate Social Responsibility Policy covers secure, sustainable disposition of retired IT assets for customers, fair labor practices and responsible sourcing. We also work with suppliers who meet ethical, environmental and social standards.
FAQ
Working with us
Can we buy technology through Aqueduct instead of going to each vendor?
Yes. We handle procurement end to end across our technology partners: pricing, licensing, registration, order tracking and delivery, with capital or operating-expense options and usage-based billing where it fits. You can also buy through the major cloud marketplaces, so purchases count against cloud commitments you already have. Our MSAs are flexible, so organizations of any size can set up a long-term agreement without friction.
Can we try a solution before we buy it?
Yes. A proof of concept lets you test fit, performance and business requirements in your own environment before you commit, which lowers the risk of the final choice.
What if we’re not sure what we need yet?
Start with a conversation. From there, the right first step depends on you: a strategic planning session to line up your technology roadmap with your business goals, a focused assessment of one technology area, a small first project, or a full maturity assessment that benchmarks where you stand today. Our recommendations are vendor-agnostic and based on what fits your environment.
Do you offer a virtual CIO or CISO?
Yes. Our vCIO and vCISO services give you experienced technology and security leadership without a full-time hire. They set strategy and roadmaps, report to your executives and board, and guide the programs that follow, often alongside our GRC & compliance as a Service.
What happens after a solution is deployed?
We stay. Every engagement follows the same lifecycle: Plan, Build, Operate, Evolve, so after we build we can operate it with monitoring, incident response and health checks, then help it evolve. Customer Success Managers track the technology you’ve activated and build an adoption plan, and our Adoption Services add onboarding, training and enablement so your people actually use what you bought.
Do you keep track of end-of-life equipment, licenses and renewals?
Yes. We run health checks to flag end-of-life and end-of-support equipment and licenses, prepare renewal quotes ahead of time and consolidate contracts so annual budgeting is simpler. For one publicly traded biopharma company, we reviewed every asset, renewal and usage level in a week, cutting total cost of ownership by 33% and deferring 90% of the cash outlay by six months or more.
Do your managed services go beyond monitoring?
Yes. We offer 24/7/365 IT operations for critical infrastructure and cloud services, end-user support covering devices, security and connectivity, and security operations that watch every event, alert and vulnerability and respond fast. Add-ons include vulnerability management, penetration testing, backup, wireless performance management and dispatch.
Can you help if our IT team is suddenly short-staffed?
Yes. We provide on-demand IT staffing with no contract, term or volume commitment. Our engineers can quickly document your environment and procedures, then cover help desk, end-user support or project work on a pay-as-you-go basis that scales up or down as you need.
Can you ship and stage equipment internationally?
Yes. We handle import and export, warehousing, staging and configuration, with supply chain visibility and a single point of contact from order to install. For sites outside the United States, we work with a logistics partner that handles local shipment, import and tax in each country.
Is Aqueduct a good fit if we want a local partner in New England?
Yes. About 80% of our team lives within 60 miles of Boston, so escalations are handled locally, engineers can be on site when you need them and our executives are easy to reach. We are also active in the Greater Boston community through volunteering, sponsorships and board service.
Do you work with organizations outside New England?
Yes. We are headquartered in Canton, MA, and work with leading organizations across the United States, from growing companies to the Fortune 500. Our engineers travel to customer sites, our managed services run remotely around the clock, and our logistics partner delivers equipment internationally.
Connect
Networking
What networking work does Aqueduct do?
We design, deploy and run campus, branch and data center networks, wireless, WAN and SD-WAN, cloud connectivity, and DNS, DHCP and IP address management with Infoblox. Most projects start with a network or wireless assessment, a site survey or an ISE assessment so we understand your environment before recommending anything. Partners include Cisco, HPE Juniper Networking, Palo Alto Networks, Infoblox, Nile, F5 and Fortinet.
Can you handle large, multi-site rollouts on a tight timeline?
Yes. For one network refresh across 150 locations, we handled design, provisioning, warehousing and off-site configuration, on-site engineers and coordinated cabling, and finished most sites within six months. For a global manufacturer with aging infrastructure, we assessed and standardized the network across several countries, raising operational efficiency by 30%.
Can you build out the network for a new office or headquarters move?
Yes. For a multinational financial services firm moving into a new 100,000 sq. ft. headquarters, we delivered wired and wireless networking, A/V and ISE, then 24/7 managed services. We also source and contract the carrier services for new sites, acting as your single point of contact across every provider involved.
Can you reduce and simplify our telecom and carrier costs?
Yes. As your Technology Advisor, we work with your carriers to restructure plans, consolidate billing across locations and reconcile invoices.
Run
Cloud
Can you help us move to the cloud, or bring workloads back on premises?
Yes. We plan and carry out both cloud migration and repatriation. An asset management firm that wanted to cut capital spending moved its infrastructure to our Infrastructure as a Service with disaster recovery as a Service, gaining a more flexible and cost-efficient model.
Can you modernize an aging data center?
Yes. For an industrial technology company, we deployed new server and storage platforms across its manufacturing and distribution sites, making production systems 30% faster and raising throughput by 25%. For a private equity firm, we designed, deployed and now manage a hyperconverged (HCI) stack that cut infrastructure costs by 30%.
Can you help us choose colocation and direct cloud connections?
Yes. We use a vendor-agnostic research tool that compares data centers, carriers and cloud on-ramps by cost, performance and location, including fiber routes, power costs and proximity to power plants. It turns a colocation decision into a data-driven one.
Can you supply high-performance compute for AI and machine learning?
Yes. We size, architect, procure and implement GPU-enabled private cloud and compute platforms for AI workloads, with the capacity, connectivity and data access that inference and model development need. We partner with NVIDIA for accelerated computing.
Use
Data & Analytics
Do you design and deploy storage: file, block and object?
Yes. We design file (NAS), block (SAN) and object storage around your performance and capacity needs with partners including NetApp, Pure Storage, Nutanix and Rubrik. Aqueduct is a Pure Storage Elite partner.
Can you help us control who can access sensitive files?
Yes. Using Pure Storage for performance and Varonis for data classification, permission management and audit logging, we centralize scattered files, automate access rights based on roles and keep a verifiable audit trail for compliance and eDiscovery.
Can you help us find and protect sensitive data in the cloud?
Yes. We deploy data security posture management with Cyera to find, classify and protect sensitive data across cloud, hybrid and on-premises environments.
Protect
Security
What security work does Aqueduct do?
We assess, design, deploy and manage security across governance, risk and compliance, zero trust and secure access (SASE and SSE), firewalls and next-generation firewalls, SIEM and SOAR, and web and email security. Assessments come first, covering compliance, zero trust maturity, vulnerabilities, identity and third-party risk. Partners include Arctic Wolf, Cisco, Palo Alto Networks, Fortinet, CrowdStrike, Okta, Zscaler, Mimecast and ReliaQuest.
Can you run penetration tests and keep our systems patched?
Yes. Penetration testing is available as a one-time engagement or as Penetration Testing as a Service for continuous testing. Vulnerability Management as a Service and Patching as a Service find and close gaps on an ongoing basis.
Can you help us implement zero trust?
Yes. For a wealth management firm, we put in place SASE, SSE, segmentation and round-the-clock detection and response, giving it end-to-end protection with real-time threat management. Identity is part of every zero trust design: we assess identity security and deploy identity and access management with Okta.
Do you offer a SOC or managed detection and response?
Yes. MDR Advantage, our managed detection and response service, monitors, detects and responds to threats around the clock, and we also offer SOC as a Service. Both draw on the SIEM and SOAR tooling we deploy for centralized logging and automated response.
Can you help with compliance and third-party risk?
Yes. We run compliance assessments, GRC & compliance as a Service and ongoing GRC program management, including continuous monitoring for HIPAA, PCI and privacy requirements. For one global organization, we built a full third-party risk management program that reduced high-risk control gaps by 40% within 12 months.
Recover
Cyber Resilience & Recovery
Do you handle backup and data protection?
Yes. We design and deploy data protection with Rubrik, where Aqueduct is an Elite partner, and we offer Backup as a Service for teams that would rather not run backups themselves.
Can you tell us whether we could recover from a cyberattack?
Yes. Our Cyber Resilience Readiness session reviews how you would recover today, before an attack tests it, and shows where your recovery plan has gaps.
Do you offer disaster recovery as a Service?
Yes. We run disaster recovery as a Service alongside our Infrastructure as a Service, so you keep a tested recovery site without having to build or staff one.
Empower
Workforce Experience
Can you help us move to cloud calling or a cloud contact center?
Yes. We evaluate, select and deploy UCaaS and CCaaS platforms, then manage implementation, billing and support. Providers we work with include Zoom, RingCentral, Five9 and 8x8. For a security technology company with 11,000 employees, we upgraded its Cisco collaboration environment without disrupting the business and found $30,000 in savings by refreshing software before end of sale.
Can you migrate or upgrade our contact center?
Yes. A regional bank with a high-touch contact center moved off a hosted platform with our help, choosing one with omnichannel support, advanced call routing and workforce management. Customer satisfaction rose as hold times dropped and callers were verified faster.
Do you offer AI-powered voice solutions?
Yes. We deploy agentic AI voice to automate routine calls and customer interactions as part of modernizing how you communicate.
Do you provide help desk and end-user support?
Yes. Our managed services team provides help desk and end-user support across devices, security and connectivity for remote, hybrid and in-office staff. It can cover your whole workforce or fill gaps in your own team's hours.
Can you help us roll out Microsoft 365 Copilot and other AI tools to employees?
Yes. We configure Microsoft 365, Teams, Copilot and approved personal AI tools, control access to them with secure access and enterprise browser protections, and help employees build confidence and practical skills through training and adoption support.
Advance
Enterprise AI
Can you assess whether we’re ready for AI?
Yes. Our AI Readiness Workshop looks at whether your infrastructure and data can support AI and machine learning workloads before you invest, so spending follows a clear plan.
How do we get AI out of pilots and into production?
Start with governance, meaning an inventory of the AI already in use, guardrails, clear ownership and a plan for each tool's lifecycle. Then we build the platform, integrations and runtime controls that let AI connect to your systems and data and run reliably, and we monitor its performance, usage, cost and risk once it's live.
Can you build AI agents and automate workflows?
Yes. We design and deploy shared copilots, intelligent applications, workflow automation and agents, grounded in your own trusted data and knowledge. Each agent gets its own identity and only the access and authority it needs to act across your systems.
How do you keep AI agents secure and under control?
We test, evaluate and secure AI applications and agents before they reach production, then watch them in operation so issues are detected, contained and fixed. Identity and delegated authority set what each agent can do, and data classification keeps sensitive data out of places it shouldn't go.
Can you help us use AI without exposing sensitive data?
Yes. An AI Security Assessment shows where AI introduces risk in your environment, and data classification with partners such as Cyera finds sensitive data before it reaches an AI tool.
Where can our team learn what’s practical with AI?
We host seminars and roundtables on topics such as public versus private AI, plus hands-on workshops including AI-driven networking. They are built for technology leaders deciding where AI fits.
FAQ
Industries
Do you work with banking and financial services firms?
Yes. We have worked with private equity firms, asset managers, wealth managers and banks on Infrastructure as a Service, zero trust and contact center modernization, with the documentation regulators and examiners expect.
Do you work with healthcare organizations?
Yes. A national healthcare and senior living provider with 24,500 employees across 150 locations modernized its network with Cisco Meraki and Splash Access through us, increasing access points by 80%. We finished 60% of all sites within six months.
Do you work with technology and SaaS companies?
Yes. Where uptime is the product, we cover cloud cost and operations, security posture and the SOC 2 and questionnaire evidence your customers ask for, and testing and security for the AI features and agents you build. A fast-growing security technology company refreshed its calling platform with us before end of sale while it grew 20%.
Do you work with colleges and universities?
Yes. We design campus wireless and segmentation around the academic calendar, protect sponsored research data with controls aligned to NIST 800-171 and CMMC, and help institutions find the AI already in use, set policy and guardrails and govern the assistants they deploy.
Do you work with hotels, resorts and restaurant groups?
Yes. For hospitality groups with many locations and little on-site IT, we standardize property networks, protect payment and guest data with PCI-aligned controls and run guest contact centers. A multi-billion-dollar restaurant and retail enterprise replaced appliance-based security at more than 2,000 locations with a cloud-first zero trust architecture through us.
Do you work with life sciences and biopharma companies?
Yes. For a fast-growing biopharma company whose platform was slowing R&D, we modernized its infrastructure with hybrid cloud and now provide managed services, helping speed up clinical trials with zero downtime.
Do you work with manufacturers?
Yes. We have standardized global networks, modernized data centers at manufacturing and distribution sites and restructured carrier plans. We also separate plant systems from business networks, so connecting the plant floor doesn't put production at risk.
Do you work with state and local government?
Yes. We help towns, cities, agencies and public safety organizations modernize aging systems in phases that fit budget and procurement cycles, protect CJIS data and set up tested ransomware recovery so essential services keep running.
Have a question we didn’t answer?
Tell us about your organization and priorities, and the right person on our team will follow up.