Skip to content

Your Tool Stack

4 min read · Setting Up the Practice

Lesson video in production

The full lesson text below is complete — the video version lands with launch.

The equipment list for this business is a laptop you already own, internet you already pay for, and a headset for client calls. The capital band for this course is under a thousand dollars, and you will struggle to spend even that if you try. What deserves your attention instead is the software stack and, more than the software, the security habits around it, because your product is being trusted with the keys to someone's business.

The short list

Business email on your own domain. Not your personal address, and not a free consumer account with a nickname you chose in 2009. A .com domain costs about eleven dollars a year, and business email through a mainstream provider runs about seven dollars a month per user on an annual plan. You can start on free tiers of everything else; start here, because everything a client sees flows from this address.

A scheduling tool. The kind that shows your availability and books meetings. Every mainstream option has a free tier that covers a solo VA. Set your availability honestly, with buffers, and stop playing email ping-pong about times forever.

A password manager. Non-negotiable, for reasons the next section makes obvious. Mainstream options run three to six dollars a month for an individual.

Invoicing and payments. Free tiers from mainstream invoicing tools are enough for your first clients, with paid tiers in the ten-to-thirty-dollar range as you need recurring auto-charges and bookkeeping exports. You want recurring auto-charges. Chasing retainers manually every month is volunteering for a second job.

A time tracker. Even on pure packages, track your time per client for the first ninety days. It is the only honest way to know whether a package is priced right, and the data feeds the floor-rate math later in this course.

A project board and document storage. Free tiers again. One board for client tasks, one folder structure per client that you would be comfortable showing them.

That is the entire stack: roughly thirty to sixty dollars a month once you are established, most of it free for the first months. When a client uses a tool you have never seen, you learn theirs; you already have the skill of learning systems without training, and clients consistently prefer "I'll learn your stack" to "you must use mine."

The security layer

Everything above is commodity. This part is differentiator.

You will hold credentials, customer data, financial records, and private communications for multiple businesses at once. One sloppy habit on your side is a breach on theirs, and in small-niche worlds, reputation moves faster than marketing. The habits:

A password manager for everything, with unique credentials per client. Never reuse a password across clients, ever. If a client's systems support it, you log in through their delegated-access or team-member feature instead of their personal credentials, so their audit trail shows what you did and their off switch works without touching anything else.

Two-factor authentication on every account you control that offers it. On client accounts where you hold access, the client owns the second factor, not you.

Least-privilege by default. Ask for the minimum access that covers the scope. Read access where write access is not needed. One inbox, not the whole mail account. The request itself signals what kind of operator you are, and buyers notice.

Never email passwords or put them in spreadsheets or chat. The password manager exists precisely so you never have to. If a client insists on sending credentials insecurely, have them use the sharing feature of the manager, or a one-time secret link, and say why in one sentence: "this keeps it out of my email forever."

Offboarding hygiene. The day a contract ends, access goes back: credentials removed from your manager, delegated access revoked on their side, client files returned or destroyed per the agreement, confirmed in writing. The graceful version of an ending gets its own treatment later in the course; the access revocation is the same day, every time, no exceptions, including clients you love.

A note on AI tools in your own delivery. Using a drafting assistant to tighten your own client communications is ordinary professionalism now, with one bright line: client data never goes into a tool they have not approved, and confidential material goes nowhere, ever. Your contract, later in the course, is where approval gets recorded.

The stack costs almost nothing. The trust habits are what clients are actually buying, and no free tier hands you those.

Keep going — you're working through Start a Virtual Assistant Business.

All courses are free ↗