In-house teams who get paged for the site, not only the box.
The shape of the estate
Windows desktops and laptops, a handful of servers per site, a firewall and often a 4G router in front. Hybrid: some things in a rack, some in a cloud tenant, none of it clean. About 250 to 2,000 assets, not a ten-machine shop and not a 50,000-seat campus.
The pressure
Someone has to sign the change. Auditors will ask who did. Data cannot quietly live in a region you did not pick. A monitor-only pane does not help; an AI that remediates alone makes the audit worse.
Private healthcare and aged care
Clinics, wards, aged-care sites. Workstations, shared drives, a local server, a firewall. Residency and a named approver are not optional.
Multi-site professional and financial services
Offices that each have a small server room and a lot of Windows. Head office IT, not a helpdesk-only bench.
Mid-market education and privacy-sensitive orgs
Schools, colleges, membership bodies, anyone who will be asked where the telemetry lives and who approved the fix.