// 10 pillar pages — distinct, content-rich, with pain points + features + FAQ + cross-links
// Schema per pillar:
//   en/zh: { kicker, title, lede, painPoints[], solutions[], features[], faq[], seo }
//   relatedPillars[], relatedIndustries[]
//   vendors[]

const SF_PILLARS = {

  wireless: {
    id:'wireless', cat:'Network', icon:'wifi',
    en: {
      kicker:'Wi-Fi & Wireless Networks',
      title:'Wi-Fi that holds up when it matters most.',
      lede:'Saturday lunch rush, year-end sale, school assembly — the moments when 200 phones connect at once are the moments your network usually fails. We design wireless that stays standing under exactly those conditions.',
      painPoints:[
        {h:'Coverage looks fine — until everyone arrives', b:'AP placement done by floor plan rather than by RF site survey leaves dead zones nobody finds until the busiest hour of the year.'},
        {h:'POS and payment terminals time out', b:'A two-second handshake delay turns into a queue of frustrated customers and lost transactions you only notice in the next morning report.'},
        {h:'Staff burn time fighting the network', b:'Tablets drop, scanners reconnect, video calls freeze — your team becomes unpaid IT support for the rest of the floor.'},
      ],
      solutions:[
        {h:'On-site RF survey first, equipment second', b:'We walk the space with calibrated tools, model the actual radio environment, and place every AP based on coverage data — not vendor templates.'},
        {h:'Wi-Fi 6E and Wi-Fi 7 design', b:'Tri-band radios on the 6 GHz spectrum take pressure off the crowded 2.4 / 5 GHz bands, so a busy floor stops competing for airtime.'},
        {h:'Cloud-managed controllers', b:'A single dashboard for every site you operate, with firmware, security policy, and guest portals pushed centrally.'},
        {h:'Captive portal & guest networks', b:'On-brand login for guests, isolated from staff and POS — with optional analytics on returning visitors.'},
        {h:'Outdoor & mesh coverage', b:'IP-rated APs and self-healing mesh extend coverage to courtyards, loading bays, carparks, and rooftops.'},
        {h:'Documentation you can actually use', b:'Every AP labelled, every cable traced, every floor plan saved — handed over so your team owns the network we built.'},
      ],
      features:[
        {h:'802.11be (Wi-Fi 7) ready', b:'320 MHz channels, MLO, 4K-QAM — designed for the next 10 years of devices.'},
        {h:'Per-SSID policy & VLAN', b:'Guest, staff, IoT, POS — each on its own logical network, isolated for security.'},
        {h:'Roaming without a hiccup', b:'802.11k/v/r tuning so devices hand off cleanly across APs, even mid-call.'},
        {h:'PoE+ uplink design', b:'Power and data over one cable; we size switch capacity to your AP count, with headroom for growth.'},
      ],
      faq:[
        {q:'How long does a typical Wi-Fi project take?', a:'Site survey to live network is usually 2–4 weeks for a single floor, longer for multi-site rollouts. We share a written timeline before quoting.'},
        {q:'Do we need to upgrade existing cabling?', a:'Wi-Fi 6E/7 APs are typically 2.5G or 10G uplinks. Cat-6A is required for full performance; Cat-6 may work for lighter loads. We assess during the survey.'},
        {q:'Can you manage the Wi-Fi after install?', a:'Yes — most clients keep us on a managed-IT retainer for monitoring, firmware updates, and adding APs as the floor grows.'},
      ],
      seo:'Wi-Fi 6E and Wi-Fi 7 design and deployment in Hong Kong — site surveys, captive portals, mesh coverage, and cloud-managed controllers for hotels, restaurants, retail, schools, and offices.',
    },
    zh: {
      kicker:'Wi-Fi 與無線網絡',
      title:'高峰時段，網絡依然穩定。',
      lede:'週六午市、年度大減價、學校全體大會 — 200 部手機同時連線的瞬間，往往是網絡崩潰的瞬間。我們設計的無線網絡，正是為這些情況而設。',
      painPoints:[
        {h:'平日覆蓋看似正常 — 一到高峰即崩潰', b:'單憑平面圖規劃 AP 而非實地 RF 勘測，遺下的死角往往要到全年最繁忙的一小時才被發現。'},
        {h:'POS 與支付終端不時逾時', b:'兩秒的握手延遲，已足以累積排隊與失單 — 翌日晨報才會發現。'},
        {h:'員工花時間應付網絡', b:'平板斷線、掃描器重連、視像會議卡頓 — 您的團隊成為樓面其他人的義務 IT 支援。'},
      ],
      solutions:[
        {h:'先勘測，後設備', b:'我們以校準工具實地行走、建立真實 RF 環境模型，每個 AP 按覆蓋數據放置 — 而非廠商範本。'},
        {h:'Wi-Fi 6E 與 Wi-Fi 7 設計', b:'三頻段及 6 GHz 頻譜分擔擁擠的 2.4／5 GHz，繁忙樓面不再爭奪空中時間。'},
        {h:'雲端管理控制器', b:'單一介面管理所有分點 — 韌體、安全策略、訪客入口集中推送。'},
        {h:'認證入口與訪客網絡', b:'品牌化登入頁面，並與員工及 POS 隔離 — 可選回頭客分析。'},
        {h:'戶外及 Mesh 覆蓋', b:'IP 等級 AP 及自癒 Mesh 將覆蓋延伸至庭院、卸貨區、停車場、天台。'},
        {h:'可實際使用的文件', b:'每個 AP 有標籤、每條線有記錄、每張平面圖有保存 — 移交後您的團隊真正擁有此網絡。'},
      ],
      features:[
        {h:'802.11be（Wi-Fi 7）就緒', b:'320 MHz 通道、MLO、4K-QAM — 為未來 10 年裝置而設。'},
        {h:'每 SSID 政策與 VLAN', b:'訪客、員工、IoT、POS — 各自獨立邏輯網絡，安全隔離。'},
        {h:'無感漫遊', b:'802.11k／v／r 調校，裝置在 AP 之間順暢切換 — 通話中亦不中斷。'},
        {h:'PoE+ 上行設計', b:'單線同時供電及傳輸資料 — 我們按 AP 數量配置交換器容量，並預留擴展空間。'},
      ],
      faq:[
        {q:'典型 Wi-Fi 項目需時多久？', a:'單層由勘測到上線一般 2–4 週，多分點則更長。報價前會提供書面時間表。'},
        {q:'是否需要升級現有線路？', a:'Wi-Fi 6E／7 AP 一般以 2.5G 或 10G 上行，Cat-6A 為全速度所需 — 較輕負載 Cat-6 或可勝任。勘測時會逐一評估。'},
        {q:'安裝後可否託管？', a:'可以 — 大部份客戶會以託管 IT 持續服務，包含監察、韌體更新、按需要新增 AP。'},
      ],
      seo:'香港 Wi-Fi 6E 及 Wi-Fi 7 部署 — 包含現場勘測、認證入口、Mesh 覆蓋、雲端控制器，服務酒店、餐飲、零售、學校、辦公室。',
    },
    relatedPillars:['cabling','surveillance','cybersec','managed'],
    relatedIndustries:['hospitality','fnb','retail','education'],
    vendors:['Aruba','Cisco Meraki','Ruckus','Ubiquiti','Fortinet','Juniper Mist'],
  },

  cabling: {
    id:'cabling', cat:'Network', icon:'cabling',
    en:{
      kicker:'Structured Cabling & Fibre',
      title:'The layer everything else stands on.',
      lede:"You only see cabling when it goes wrong. Done right, it disappears for 15+ years and absorbs every upgrade you throw at it. Done badly, you're paying for it again every two years.",
      painPoints:[
        {h:'Cables that nobody can trace', b:'A failed switch port turns into a half-day hunt because nothing is labelled, nothing is documented, and the previous installer left.'},
        {h:'Network speed capped by old copper', b:'Cat-5e installed a decade ago throttles modern Wi-Fi 6E and PoE++ — you bought new gear, but inherited yesterday\u2019s bottleneck.'},
        {h:'Recurring rework every refit', b:'Every renovation rewires from scratch because the original was thrown together; capex stacks up year after year.'},
      ],
      solutions:[
        {h:'Cat-6A copper backbone', b:'10GBASE-T to every desk, certified to TIA-568 — ready for Wi-Fi 7, PoE++, and IP cameras on a single architecture.'},
        {h:'OM4 / OS2 fibre risers', b:'100G-ready vertical backbone using MPO trunks, splice boxes, and properly grounded enclosures.'},
        {h:'Patch panel & labelling discipline', b:'Every drop labelled at both ends, every patch panel mapped, every change logged — your IT team finds the right cable in 30 seconds.'},
        {h:'IP telephony & SIP', b:'Voice rides the same backbone with QoS — sales floors stop sounding like wind tunnels.'},
        {h:'Cable tray & containment', b:'Built to code, designed for the next contractor — additions and changes do not require a forklift upgrade.'},
        {h:'Full TIA-568 certification', b:'Every link tested with calibrated equipment; pass/fail reports archived for the lifetime of the install.'},
      ],
      features:[
        {h:'15-year design horizon', b:'We engineer for the gear arriving in 2030, not the gear shipping today.'},
        {h:'Documentation pack', b:'Floor plans, patch schedules, certification reports — handed over digitally, kept current.'},
        {h:'Salt-air & industrial ratings', b:'Specialist cable for piers, plant floors, and outdoor installs that must survive years of abuse.'},
        {h:'Fibre splice & termination', b:'Carrier-grade splice work, OTDR-tested, documented to the exact splice loss per joint.'},
      ],
      faq:[
        {q:'Should we install Cat-6A or Cat-6?', a:'Cat-6A is now the practical floor for new installs — full 10G to 100m, properly handles PoE++ heat. Cat-6 is acceptable only on tight refurbishments where 1G is the ceiling.'},
        {q:'Do we need fibre or just copper?', a:'Fibre belongs between floors and to the server room. Copper handles the last 100m to the user. Most builds are both.'},
        {q:'Can you re-cable while we operate?', a:'Yes — we plan cutovers around your operating hours, or run the new cable in parallel and migrate port-by-port.'},
      ],
      seo:'Structured cabling, fibre installation, and TIA-568 certification in Hong Kong — Cat-6A copper, OM4/OS2 fibre risers, IP telephony backbone for offices, server rooms, hotels, and industrial sites.',
    },
    zh:{
      kicker:'結構化佈線與光纖',
      title:'承載一切的基礎。',
      lede:'佈線只有在出問題時才會被看見。做得好，它會隱身 15 年以上，並吸收所有升級。做得馬虎，您每兩年就要重做一次。',
      painPoints:[
        {h:'無人能追溯的線路', b:'一個交換器埠失效，變成半日尋線 — 沒標籤、無文件，當年安裝者亦已離職。'},
        {h:'舊銅線拖慢網絡', b:'十年前安裝的 Cat-5e 拖慢 Wi-Fi 6E 及 PoE++ — 新設備買了，卻承襲舊瓶頸。'},
        {h:'每次裝修都要重做', b:'歷次裝修都從頭重佈，原始工程隨意了事 — 資本開支年復年累積。'},
      ],
      solutions:[
        {h:'Cat-6A 銅纜骨幹', b:'10GBASE-T 到每張桌，符合 TIA-568 — 為 Wi-Fi 7、PoE++、IP 攝影機共用一套架構。'},
        {h:'OM4／OS2 光纖立管', b:'採用 MPO 中繼、熔接盒、妥善接地的箱體 — 100G 就緒的垂直骨幹。'},
        {h:'跳線盤及標籤紀律', b:'每條接線兩端有標籤、每個跳線盤有對照、每次變更有紀錄 — IT 團隊 30 秒內找到正確線路。'},
        {h:'IP 電話與 SIP', b:'語音與資料共用骨幹，並設 QoS — 銷售樓面不再像風洞般嘈雜。'},
        {h:'線槽及保護管', b:'符合規範，為下一個承辦商設計 — 增改不需要大規模重做。'},
        {h:'完整 TIA-568 認證', b:'每條鏈路以校準儀器測試，合格／不合格報告長期保存。'},
      ],
      features:[
        {h:'15 年設計年期', b:'我們為 2030 年的設備設計，而非僅應付今日。'},
        {h:'完整文件套裝', b:'平面圖、跳線表、認證報告 — 數碼移交，並保持更新。'},
        {h:'抗鹽霧及工業級', b:'適用於碼頭、廠房、戶外的專用線材，能承受多年使用。'},
        {h:'光纖熔接與端接', b:'電訊級熔接、OTDR 測試、每接點熔接損耗有記錄。'},
      ],
      faq:[
        {q:'應安裝 Cat-6A 還是 Cat-6？', a:'Cat-6A 是新工程的實際底線 — 100 米全速 10G、能處理 PoE++ 熱量。Cat-6 僅適用於上限為 1G 的緊湊翻新項目。'},
        {q:'需要光纖還是銅纜？', a:'光纖適用於樓層之間及到伺服器室；銅纜處理最後 100 米至使用者。大部份項目兩者皆有。'},
        {q:'可否在營運期間重新佈線？', a:'可以 — 我們會配合您的營運時間切換，或先並行新線再逐個埠遷移。'},
      ],
      seo:'香港結構化佈線、光纖安裝及 TIA-568 認證 — Cat-6A 銅纜、OM4／OS2 光纖立管、IP 電話骨幹，服務辦公室、伺服器室、酒店、工業場地。',
    },
    relatedPillars:['wireless','serverroom','iot','managed'],
    relatedIndustries:['finance','government','education','healthcare'],
    vendors:['CommScope','Corning','Panduit','Yealink','Cisco','Belden'],
  },

  serverroom: {
    id:'serverroom', cat:'Data Center', icon:'server',
    en:{
      kicker:'Server Room & On-Prem Infrastructure',
      title:'Where your business actually runs.',
      lede:"The room nobody visits is the one your whole company depends on. We design and build server rooms — racks, power, cooling, network — so the people running your business never have to think about the room running it.",
      painPoints:[
        {h:'Single points of failure hidden in plain sight', b:'One PDU, one cooling unit, one switch — when it fails, half the company stops, and nobody knew it was a single point until it happened.'},
        {h:'Cooling that quietly drifts out of spec', b:'Hot spots above the racks slowly cook drives; you find out from a 3am alert, not from the temperature trend you should have been watching.'},
        {h:'Cabinets that nobody can work on', b:'Cables run loose, switch ports unlabelled, no rear access — every move-add-change is an afternoon, not 10 minutes.'},
      ],
      solutions:[
        {h:'Fault-tolerant power & cooling', b:'A/B power feeds from independent UPSs, redundant in-row cooling, monitored down to the rack — single failures stay invisible to your users.'},
        {h:'Right-sized compute & storage', b:'We size against real workload, not vendor templates — buying half the gear at twice the headroom.'},
        {h:'Hyperconverged infrastructure (HCI)', b:'Nutanix, vSAN, or Azure Stack HCI — scale by sliding in another node, no forklift upgrades.'},
        {h:'Virtualization done properly', b:'VMware, Hyper-V, Proxmox — designed for live migration, snapshots, and clean DR replication.'},
        {h:'Environmental & power monitoring', b:'Per-rack PDU metering, temperature/humidity sensors, leak detection — escalations only when they matter.'},
        {h:'Documented build and labelling', b:'Every cable traced, every U position labelled, every breaker known. Audit-ready from day one.'},
      ],
      features:[
        {h:'42U racks with hot-aisle containment', b:'Energy-efficient layout, rated for high-density compute and AI workloads.'},
        {h:'A/B feed verification', b:'Both feeds tested under transfer, every dual-PSU server confirmed independent.'},
        {h:'In-row cooling', b:'CRAH or DX precision cooling sized to actual rack heat output, with N+1 redundancy.'},
        {h:'Smart PDUs', b:'Per-outlet metering, remote control, integrated with monitoring — power draw visible by circuit.'},
      ],
      faq:[
        {q:'Should we build on-prem or move to cloud?', a:'Both. Steady-state workloads usually run cheaper on-prem at scale; bursty or geographically distributed workloads often belong in cloud. We assess workload-by-workload.'},
        {q:'Can you co-locate instead of building a room?', a:'Yes — we design and rack co-lo deployments at major HK data centres, with the same documentation discipline.'},
        {q:'How long for a typical server room build?', a:'A 12-rack room from greenfield is usually 8–12 weeks, including civil, power, cooling, and commissioning.'},
      ],
      seo:'Server room design and build in Hong Kong — racks, A/B power, in-row cooling, hyperconverged infrastructure, environmental monitoring, and on-prem virtualization for HK businesses.',
    },
    zh:{
      kicker:'伺服器室與本地基建',
      title:'業務真正運行的地方。',
      lede:'沒人會去的房間，正是整家公司最依賴的房間。我們設計並建造伺服器室 — 機架、電源、冷卻、網絡 — 讓營運業務的人，無需操心運行業務的房間。',
      painPoints:[
        {h:'隱藏的單點故障', b:'單一 PDU、單一冷卻機、單一交換器 — 失效時半家公司停擺，事前無人察覺。'},
        {h:'冷卻悄悄超出規格', b:'機架上方熱點慢慢損害硬碟 — 凌晨三點警報才知，本應持續監察的溫度趨勢卻被忽略。'},
        {h:'無法施工的機櫃', b:'線纜散亂、交換器埠無標籤、後方無法進入 — 每次新增變更要花一個下午，而非 10 分鐘。'},
      ],
      solutions:[
        {h:'容錯電源與冷卻', b:'獨立 UPS 提供 A／B 雙路電源、冗餘行內冷卻、機架級監察 — 單點故障對使用者完全透明。'},
        {h:'量身規劃運算與儲存', b:'按實際工作負載而非廠商範本配置 — 避免雙倍成本與閒置容量。'},
        {h:'超融合基礎架構（HCI）', b:'Nutanix、vSAN、Azure Stack HCI — 加裝節點即擴容，無需大規模翻新。'},
        {h:'妥善設計的虛擬化', b:'VMware、Hyper-V、Proxmox — 設計時已考慮即時遷移、快照、災難復原複製。'},
        {h:'環境及電源監察', b:'每機架 PDU 計量、溫濕度感測、漏水偵測 — 只有真正重要時才升級警報。'},
        {h:'完整文件與標籤', b:'每條線可追溯、每個 U 位置有標籤、每個斷路器明確 — 由首日起符合審核。'},
      ],
      features:[
        {h:'42U 機架及熱通道封閉', b:'節能佈局，可承載高密度運算及 AI 工作負載。'},
        {h:'A／B 電源驗證', b:'兩路電源於切換下測試、每部雙電源伺服器確認獨立。'},
        {h:'行內冷卻', b:'CRAH 或 DX 精密冷卻按實際機架熱輸出規劃，並具 N+1 冗餘。'},
        {h:'智能 PDU', b:'每插座計量、遠端控制、與監察系統整合 — 按電路顯示用電。'},
      ],
      faq:[
        {q:'應自建還是上雲？', a:'兩者並行。穩定的工作負載一般在本地較便宜，突發性或地理分散則適合雲端 — 我們逐一工作負載評估。'},
        {q:'可否託管而非自建？', a:'可以 — 我們在香港主要數據中心設計及佈置託管部署，同樣完整文件管理。'},
        {q:'典型伺服器室建造需時多久？', a:'12 機架的全新工程一般需 8–12 週，包含土建、電源、冷卻、調試。'},
      ],
      seo:'香港伺服器室設計與建造 — 機架、A／B 電源、行內冷卻、超融合架構、環境監察、本地虛擬化，服務香港企業。',
    },
    relatedPillars:['cabling','cloud','cybersec','managed'],
    relatedIndustries:['finance','government','healthcare','education'],
    vendors:['Dell','HPE','Lenovo','Nutanix','VMware','APC','Schneider Electric','Vertiv'],
  },

  cloud: {
    id:'cloud', cat:'Data Center', icon:'cloud',
    en:{
      kicker:'Cloud, Backup & Disaster Recovery',
      title:"Cloud where it pays. On-prem where it doesn't.",
      lede:'Cloud is excellent — until your monthly bill is excellent for the wrong reasons. We help you place each workload where it actually belongs, and make sure backup and recovery work the day you need them.',
      painPoints:[
        {h:'Cloud bills that grow without explanation', b:'Egress charges, oversized instances, forgotten test environments — the bill creeps up 15% a quarter and nobody knows why.'},
        {h:'Backups that have never been tested', b:'You discover the backup is corrupted on the day you need to restore — not the day you set it up.'},
        {h:'Migration that drags on for months', b:'A "lift and shift" turns into a 9-month project because nobody mapped dependencies before kickoff.'},
      ],
      solutions:[
        {h:'Cloud strategy & landing zone', b:'Network, identity, governance, and tagging set up properly from day one — not retrofitted three years later.'},
        {h:'Hybrid cloud architecture', b:'Production on-prem, DR in cloud — or vice versa. Match the workload to the platform that actually fits.'},
        {h:'Migration in waves', b:'Lift-and-shift, refactor, or rebuild — moved one workload at a time with rollback runbooks for each step.'},
        {h:'Backup & immutable storage', b:'3-2-1-1 strategy: three copies, two media, one offsite, one immutable. Tested quarterly with documented results.'},
        {h:'Disaster recovery runbooks', b:'A printed, rehearsed plan for what happens at 2am — who calls whom, in what order, and how to declare success.'},
        {h:'FinOps & cost optimization', b:'Right-sizing reviews, reserved-instance planning, lifecycle policies — typical clients save 20–35% in the first quarter.'},
      ],
      features:[
        {h:'Multi-cloud capable', b:'Azure, AWS, Google Cloud — and the ability to mix them when it makes sense.'},
        {h:'Veeam & Commvault deployment', b:'Industry-standard backup, properly configured for ransomware-resistant immutable storage.'},
        {h:'DR drill facilitation', b:'We run the drill with you — not just write the runbook and hope.'},
        {h:'Cost dashboards', b:'Clear monthly view: what is running, what it costs, what to right-size.'},
      ],
      faq:[
        {q:'Should we go all-in on cloud?', a:'Almost never. Most HK businesses run cheaper and faster with hybrid — predictable workloads on-prem, bursty workloads in cloud.'},
        {q:'How long does a cloud migration take?', a:'Depends on app count and dependencies. A typical 50-server estate moves in 6–9 months in waves; a single app may take 4–6 weeks.'},
        {q:'Do you handle Microsoft 365?', a:'Yes — tenant setup, security baseline, conditional access, mailbox migration, and ongoing managed support.'},
      ],
      seo:'Cloud migration, hybrid cloud, backup, and disaster recovery in Hong Kong — Azure, AWS, Google Cloud, Veeam immutable storage, DR runbooks, and FinOps cost optimization.',
    },
    zh:{
      kicker:'雲端、備份與災難復原',
      title:'雲端用得其所，本地用得其當。',
      lede:'雲端服務非常出色 — 直到月結帳單令您「驚喜」。我們協助您把每個工作負載放在合適的位置，並確保備份及復原在關鍵時刻真正有效。',
      painPoints:[
        {h:'雲端帳單莫名增長', b:'流出費用、過大規格、被遺忘的測試環境 — 帳單每季悄悄升 15%，無人能解釋。'},
        {h:'從未測試過的備份', b:'真正需要復原時才發現備份損壞 — 而非設定時。'},
        {h:'拖延數月的遷移', b:'「整體轉移」拖成 9 個月項目 — 因啟動前未曾映射相依關係。'},
      ],
      solutions:[
        {h:'雲端策略與架構規劃', b:'網絡、身份、治理、標籤從首日起妥善設定 — 而非三年後補做。'},
        {h:'混合雲架構', b:'生產本地、DR 雲端 — 或相反 — 按工作負載配對最合適平台。'},
        {h:'分波遷移', b:'整體轉移、重構或重建 — 每次一個工作負載，每步有回退手冊。'},
        {h:'備份與不可變儲存', b:'3-2-1-1 策略：三份副本、兩種媒介、一份異地、一份不可變 — 每季測試並有記錄。'},
        {h:'災難復原手冊', b:'凌晨兩點時的書面、演練過的計劃 — 誰致電誰、依甚麼次序、如何宣告成功。'},
        {h:'FinOps 與成本優化', b:'規格調整、保留實例規劃、生命週期政策 — 典型客戶首季節省 20–35%。'},
      ],
      features:[
        {h:'支援多雲', b:'Azure、AWS、Google Cloud — 必要時混合使用。'},
        {h:'Veeam 及 Commvault 部署', b:'業界標準備份，妥善配置以抵禦勒索軟件的不可變儲存。'},
        {h:'災難復原演練', b:'我們陪同演練 — 而非僅撰寫手冊並寄望。'},
        {h:'成本儀表板', b:'清晰每月檢視：運行中、成本、規格調整建議。'},
      ],
      faq:[
        {q:'應否全面上雲？', a:'極少情況下適合 — 大部份香港企業以混合雲運行更便宜更快 — 穩定工作負載本地、突發工作負載雲端。'},
        {q:'雲端遷移需時多久？', a:'視乎應用數量及相依關係。50 部伺服器環境一般 6–9 個月分波遷移，單一應用 4–6 週。'},
        {q:'是否處理 Microsoft 365？', a:'是 — 租戶設定、安全基線、條件式存取、郵箱遷移、持續託管支援。'},
      ],
      seo:'香港雲端遷移、混合雲、備份、災難復原 — Azure、AWS、Google Cloud、Veeam 不可變儲存、DR 手冊、FinOps 成本優化。',
    },
    relatedPillars:['serverroom','cybersec','business','managed'],
    relatedIndustries:['finance','sme','healthcare','retail'],
    vendors:['Microsoft Azure','AWS','Google Cloud','Veeam','Commvault','Microsoft 365'],
  },

  cybersec: {
    id:'cybersec', cat:'Security', icon:'shield',
    en:{
      kicker:'Cybersecurity & 24/7 SOC',
      title:'Quiet protection — until you need it loud.',
      lede:"Every Hong Kong business is now a target. We layer firewall, endpoint, identity, and 24/7 monitoring so the boring days stay boring — and on the day something happens, somebody is already on it.",
      painPoints:[
        {h:'Phishing that gets through every filter', b:'A convincing email lands in your CFO\u2019s inbox. By the time IT notices, MFA was bypassed and an invoice rerouted.'},
        {h:'Endpoints you cannot see', b:'BYOD laptops, remote staff, contractor devices — your old AV had no view into half the threat surface.'},
        {h:'Audit findings the week before deadline', b:'HKMA, ISO, or PDPO audit drops a list of remediations with weeks to comply — and nobody knows where to start.'},
      ],
      solutions:[
        {h:'Next-gen firewall & secure access', b:'NGFW with deep packet inspection, plus ZTNA for remote access — no more open VPN ports waiting to be scanned.'},
        {h:'EDR / XDR endpoint protection', b:'Behaviour-based detection that catches what signatures miss — every laptop, every server, every cloud workload.'},
        {h:'Email & identity security', b:'Anti-phishing, DMARC enforcement, MFA hardening, conditional access — the layer that stops 90% of incidents.'},
        {h:'24/7 SOC & SIEM monitoring', b:'Our analysts watch your environment around the clock. You see clean morning reports, not 200 false positives.'},
        {h:'Security risk assessment (SRAA)', b:'HKMA TM-G-1, ISO 27001, PDPO — we scope, document, and remediate so audits become a checkpoint, not a crisis.'},
        {h:'Incident response retainer', b:'On-call team for the day something happens. Containment in minutes; investigation, eradication, recovery in hours.'},
      ],
      features:[
        {h:'Compliance-ready', b:'HKMA TM-G-1, ISO 27001, PDPO, PCI-DSS — controls mapped, evidence collected, gaps remediated.'},
        {h:'Threat hunting', b:'Proactive search for indicators of compromise — not just reactive alert handling.'},
        {h:'Phishing simulation', b:'Quarterly campaigns that train your team without shaming them.'},
        {h:'Vulnerability management', b:'Monthly scans, prioritized remediation, tracked to closure.'},
      ],
      faq:[
        {q:'Do we need a 24/7 SOC?', a:'If you handle customer data, money, or regulated information — yes. Attackers work weekends; alert windows are measured in minutes.'},
        {q:'What is your incident response time?', a:'Retainer clients get an analyst on the line within 30 minutes; containment usually within 2 hours.'},
        {q:'Can you help us pass an HKMA audit?', a:'Yes — we have done it many times. We scope, document, remediate, and walk you through the assessment.'},
      ],
      seo:'Cybersecurity, 24/7 SOC, EDR, ZTNA, and HKMA TM-G-1 / ISO 27001 / PDPO compliance for Hong Kong businesses — firewall, endpoint, email, identity, and incident response.',
    },
    zh:{
      kicker:'資訊安全與 24/7 SOC',
      title:'寧靜的守護 — 必要時挺身而出。',
      lede:'香港每一家企業都已成為攻擊目標。我們以防火牆、端點、身份及 24/7 監察層層保護 — 平常的日子保持平常，事情發生時有人已在處理。',
      painPoints:[
        {h:'過濾不到的釣魚郵件', b:'一封逼真的電郵抵達 CFO 信箱 — IT 察覺時 MFA 已被繞過、發票已被改向。'},
        {h:'看不見的端點', b:'BYOD 手提電腦、遙距員工、外判商裝置 — 舊式防毒對一半威脅面無視。'},
        {h:'審核前一週的整改清單', b:'HKMA、ISO 或 PDPO 審核留下整改清單，數週內須完成 — 卻無人知從何開始。'},
      ],
      solutions:[
        {h:'下一代防火牆及零信任存取', b:'NGFW 配深度封包檢查，加上 ZTNA 遙距存取 — 不再有開放的 VPN 埠等待掃描。'},
        {h:'EDR／XDR 端點防護', b:'行為偵測補足特徵碼盲點 — 每部手提電腦、伺服器、雲端工作負載皆受保護。'},
        {h:'電郵及身份安全', b:'防釣魚、DMARC 強制、MFA 強化、條件式存取 — 阻擋 90% 事件的關鍵層。'},
        {h:'24/7 SOC 及 SIEM 監察', b:'分析師全天候監控您的環境 — 您看到的是乾淨晨報，而非 200 個誤報。'},
        {h:'安全風險評估（SRAA）', b:'HKMA TM-G-1、ISO 27001、PDPO — 我們協助範圍界定、文件化、整改 — 審核成為檢查點，而非危機。'},
        {h:'事件應變預付', b:'事件發生時隨時待命的團隊 — 數分鐘內遏制、數小時內調查、清除、復原。'},
      ],
      features:[
        {h:'合規就緒', b:'HKMA TM-G-1、ISO 27001、PDPO、PCI-DSS — 控制項對應、證據收集、缺口整改。'},
        {h:'威脅獵捕', b:'主動搜尋入侵指標 — 而非僅被動處理警報。'},
        {h:'釣魚模擬', b:'每季演練 — 訓練團隊而非羞辱他們。'},
        {h:'漏洞管理', b:'每月掃描、優先排序整改、追蹤至關閉。'},
      ],
      faq:[
        {q:'是否需要 24/7 SOC？', a:'若您處理客戶資料、金錢或受規管資訊 — 需要。攻擊者週末同樣工作，警報窗口以分鐘計。'},
        {q:'事件應變時間？', a:'預付客戶 30 分鐘內接通分析師，一般 2 小時內遏制。'},
        {q:'可否協助通過 HKMA 審核？', a:'可以 — 我們多次處理過。協助範圍界定、文件化、整改、陪同評估。'},
      ],
      seo:'香港資訊安全、24/7 SOC、EDR、ZTNA、HKMA TM-G-1／ISO 27001／PDPO 合規 — 防火牆、端點、電郵、身份、事件應變。',
    },
    relatedPillars:['surveillance','serverroom','cloud','managed'],
    relatedIndustries:['finance','healthcare','government','retail'],
    vendors:['Fortinet','Palo Alto','Check Point','CrowdStrike','SentinelOne','Microsoft Defender','Proofpoint'],
  },

  surveillance: {
    id:'surveillance', cat:'Security', icon:'cctv',
    en:{
      kicker:'CCTV & Access Control',
      title:'See every door. Every hour.',
      lede:'IP cameras, license plate recognition, biometric access, and visitor logs — unified into one dashboard so security is somebody answering the phone, not somebody you call later.',
      painPoints:[
        {h:'Hours of footage, no way to find the moment', b:'You know the incident happened — but scrubbing through 24 hours of recording from 12 cameras takes a full afternoon.'},
        {h:'Carparks managed by paper logs', b:'Membership barriers, paper plates, attendant on every shift — slow, expensive, and tamper-prone.'},
        {h:'Access systems that nobody trusts', b:'Doors prop open, cards get shared, visitor logs are hand-written — your audit fails because nobody enforces the system that exists.'},
      ],
      solutions:[
        {h:'4K IP camera systems', b:'Sharp enough to read a number plate at the gate, a face at the lobby, and a barcode at the loading dock.'},
        {h:'NVR & video management', b:'Centralised recording with retention policies that match your industry\u2019s requirement.'},
        {h:'AI video analytics', b:'Search for "person in red jacket entering door 3 between 14:00 and 14:30" — done in seconds, not hours.'},
        {h:'ANPR / licence plate recognition', b:'Carparks that admit members automatically, log every visitor, and flag stolen plates against the database.'},
        {h:'Biometric & RFID access', b:'Fingerprint, face, or card — pick the level of friction that suits each door.'},
        {h:'Visitor management', b:'Tablet sign-in, host notification, badge printing — every entry logged with photo and signature.'},
      ],
      features:[
        {h:'ONVIF compatibility', b:'Open standards so you are never locked into one camera vendor.'},
        {h:'H.265 storage efficiency', b:'Half the storage cost of older codecs at the same quality — typically 90+ days retention without breaking the budget.'},
        {h:'Multi-site dashboard', b:'View 50 sites from one console; export evidence with chain-of-custody metadata.'},
        {h:'Integration with HR & visitor systems', b:'New hire on Monday → badge active. Resignation → access revoked the same hour.'},
      ],
      faq:[
        {q:'How long is footage retained?', a:'Default is 30 days, but we size storage to your industry: banks often need 90+ days, schools sometimes longer for safeguarding.'},
        {q:'Can the system trigger alerts?', a:'Yes — perimeter intrusion, loitering, abandoned object, ANPR watch-list — all configurable per camera.'},
        {q:'Do we need separate access control or can it be one system?', a:'One system is now standard — cameras, doors, and visitor management on a unified platform makes audits trivial.'},
      ],
      seo:'CCTV, IP cameras, ANPR, access control, and visitor management in Hong Kong — 4K IP video, AI video analytics, biometric access, and unified video management for buildings, carparks, and retail.',
    },
    zh:{
      kicker:'閉路電視與門禁系統',
      title:'每道門、每小時，盡在掌握。',
      lede:'IP 攝影機、車牌辨識、生物識別門禁、訪客記錄 — 統一於一個介面 — 安全是有人接電話，而非事後才致電。',
      painPoints:[
        {h:'數小時錄影 — 找不到關鍵時刻', b:'明知事件已發生 — 但翻看 12 個攝影機 24 小時錄影要花一個下午。'},
        {h:'紙本管理停車場', b:'會員閘、紙本車牌、每班次需要管理員 — 慢、貴、易出錯。'},
        {h:'無人遵守的門禁', b:'門被卡開、卡被共用、訪客記錄手寫 — 審核失敗，因系統雖在卻無執行。'},
      ],
      solutions:[
        {h:'4K IP 攝影機系統', b:'清晰至閘口可看車牌、大堂可看面孔、卸貨區可看條碼。'},
        {h:'NVR 及影像管理', b:'集中錄影並依行業要求設定保存期。'},
        {h:'AI 視頻分析', b:'搜尋「14:00 至 14:30 進入 3 號門的紅衣人」— 數秒完成，不需數小時。'},
        {h:'ANPR／車牌辨識', b:'會員停車場自動進入、每位訪客有記錄、被盜車牌與資料庫比對。'},
        {h:'生物識別與 RFID', b:'指紋、面孔或卡 — 為每道門選擇合適摩擦度。'},
        {h:'訪客管理', b:'平板簽到、通知聯絡人、列印識別證 — 每次進入有照片及簽名記錄。'},
      ],
      features:[
        {h:'ONVIF 相容', b:'開放標準 — 不被單一攝影機廠商鎖定。'},
        {h:'H.265 儲存效益', b:'同等畫質下儲存成本減半 — 一般 90+ 日保存而不超預算。'},
        {h:'多分點儀表板', b:'單一控制台檢視 50 個分點；匯出證據時帶監管鏈元資料。'},
        {h:'與 HR 及訪客系統整合', b:'新入職星期一 → 識別證生效；離職 → 同小時撤銷存取。'},
      ],
      faq:[
        {q:'錄影保存多久？', a:'預設 30 日 — 但按行業規劃：銀行通常需要 90+ 日，學校為兒童保護或更長。'},
        {q:'系統可否觸發警報？', a:'可以 — 周界入侵、逗留、遺留物、ANPR 監視名單 — 每攝影機可設。'},
        {q:'門禁與閉路電視應否分開？', a:'統一已成標準 — 攝影機、門、訪客管理共用平台讓審核更輕鬆。'},
      ],
      seo:'香港閉路電視、IP 攝影機、ANPR、門禁系統及訪客管理 — 4K IP 影像、AI 視頻分析、生物識別門禁，服務樓宇、停車場、零售。',
    },
    relatedPillars:['cybersec','iot','cabling','managed'],
    relatedIndustries:['hospitality','retail','government','healthcare'],
    vendors:['Hikvision','Dahua','Axis','Milestone','HID','Suprema'],
  },

  ai: {
    id:'ai', cat:'Software', icon:'ai',
    en:{
      kicker:'AI Workflow & Local LLM',
      title:'AI that earns its keep.',
      lede:"Most AI demos look impressive and quietly cost a fortune. We build AI that does specific, measurable jobs — and host it on your hardware when your data shouldn't leave the building.",
      painPoints:[
        {h:'Pilots that never reach production', b:'A flashy demo that only the IT team knows how to use, eating subscription fees while business value stays hypothetical.'},
        {h:'Sensitive data sent to public APIs', b:'Marketing wants ChatGPT for customer enquiries — but your contracts forbid sending PII outside the firewall.'},
        {h:'Workflows that still need humans glueing them', b:'Three SaaS tools that should work together — but a person re-types the data between them every day.'},
      ],
      solutions:[
        {h:'AI chatbots — customer & internal', b:'Trained on your knowledge base, escalation paths defined, handoffs to humans built-in. Cantonese, Mandarin, English.'},
        {h:'Local LLM deployment', b:'Llama 3, Qwen, or Mistral hosted on your own GPU — answers stay inside your firewall.'},
        {h:'RAG over your documents', b:'Retrieval-augmented generation grounded in your contracts, policies, manuals — no hallucinations, citations on every answer.'},
        {h:'Workflow automation', b:'n8n, Zapier, Power Automate, or custom RPA — the glue between your systems, finally.'},
        {h:'Process audit & re-engineering', b:'We map the actual flow, identify the bottleneck, then automate where it pays back.'},
        {h:'API & systems integration', b:'CRM, ERP, ticketing, calendars — wired together with proper error handling and audit logs.'},
      ],
      features:[
        {h:'On-prem GPU sizing', b:'We spec the right hardware for your model size and concurrency target.'},
        {h:'Vector database setup', b:'Pinecone, Weaviate, or local pgvector — chosen for your scale.'},
        {h:'Evaluation harness', b:'Quantitative quality measurement, not just vibes — tracked over time.'},
        {h:'Human-in-the-loop design', b:'Every workflow has a clear escalation path; nothing critical runs unattended.'},
      ],
      faq:[
        {q:'Should we use a public LLM or run our own?', a:'For non-sensitive content, public APIs are usually right. For PII, contracts, medical, financial — local LLM is increasingly the only acceptable answer.'},
        {q:'How accurate are the chatbots?', a:'With RAG and proper grounding, our deployments routinely achieve 90%+ on first-response correctness. We measure and report monthly.'},
        {q:'Can AI replace our helpdesk?', a:'No — but it can handle the repetitive 60–70% of tickets, freeing your team for the work that needs them.'},
      ],
      seo:'AI chatbots, local LLM deployment, RAG, and workflow automation in Hong Kong — Llama 3, Qwen, n8n, Power Automate, on-prem GPU hosting for healthcare, finance, government, and enterprises with data residency requirements.',
    },
    zh:{
      kicker:'AI 流程與本地 LLM',
      title:'AI 必須有實際回報。',
      lede:'大部份 AI 示範看起來很厲害，卻在背後悄悄燒錢。我們建造的 AI 只做具體、可量化的工作 — 當數據不應離開公司，我們會把它部署在您自己的硬件上。',
      painPoints:[
        {h:'從未上線的試點', b:'只有 IT 懂得使用的炫酷示範 — 月費照付，業務價值卻仍停留在假設。'},
        {h:'敏感資料傳至公共 API', b:'市場部想用 ChatGPT 處理查詢 — 但合約禁止個人資料離開防火牆。'},
        {h:'仍需人手黏合的流程', b:'三個應該互通的 SaaS — 卻每日由人手重輸資料。'},
      ],
      solutions:[
        {h:'AI 聊天機械人 — 客戶與內部', b:'以您的知識庫訓練、升級路徑明確、轉交人手已內建。粵語、普通話、英文。'},
        {h:'本地 LLM 部署', b:'Llama 3、Qwen 或 Mistral 部署於您自己的 GPU — 回答留於防火牆內。'},
        {h:'企業文件 RAG', b:'檢索增強生成，依據您的合約、政策、手冊 — 無幻覺，每答案附引用。'},
        {h:'工作流程自動化', b:'n8n、Zapier、Power Automate 或客製 RPA — 終於把您的系統連繫起來。'},
        {h:'流程審核與重塑', b:'映射真實流程、識別瓶頸、按回報自動化。'},
        {h:'API 及系統整合', b:'CRM、ERP、工單、日曆 — 完整錯誤處理及審核紀錄。'},
      ],
      features:[
        {h:'本地 GPU 規劃', b:'按模型大小及並發目標選定合適硬件。'},
        {h:'向量資料庫設定', b:'Pinecone、Weaviate 或本地 pgvector — 按規模而選。'},
        {h:'評估框架', b:'量化品質衡量，不止憑感覺 — 持續追蹤。'},
        {h:'人手介入設計', b:'每個流程有明確升級路徑 — 關鍵任務不無監督運行。'},
      ],
      faq:[
        {q:'應用公共 LLM 還是自建？', a:'非敏感內容一般用公共 API；個人資料、合約、醫療、金融 — 本地 LLM 漸成唯一可接受答案。'},
        {q:'聊天機械人準確嗎？', a:'配合 RAG 及妥善基礎，我們部署一般首回正確率達 90%+。每月衡量及報告。'},
        {q:'AI 可否取代服務台？', a:'不可 — 但可處理 60–70% 重複工單，釋放團隊處理真正需要他們的工作。'},
      ],
      seo:'香港 AI 聊天機械人、本地 LLM 部署、RAG 及工作流程自動化 — Llama 3、Qwen、n8n、Power Automate、本地 GPU 寄存，服務醫療、金融、政府及有數據駐留要求的企業。',
    },
    relatedPillars:['business','cybersec','serverroom','cloud'],
    relatedIndustries:['healthcare','finance','government','retail'],
    vendors:['Llama 3','Qwen','Claude','OpenAI','n8n','vLLM','LangChain','Microsoft Copilot'],
  },

  business: {
    id:'business', cat:'Software', icon:'apps',
    en:{
      kicker:'Business Software & Web Apps',
      title:'The systems your office runs on.',
      lede:'ERP, CRM, email, websites, mobile apps — the everyday tools where your team actually spends their days. We deploy, integrate, and tune them so the software stops being the problem.',
      painPoints:[
        {h:'Spreadsheets reconciling spreadsheets', b:'Finance, sales, and ops each maintain their own tracker — and spend half a week a month making them agree.'},
        {h:'Marketing site that nobody can update', b:'A WordPress install from years ago, plugins outdated, no one remembers the admin password.'},
        {h:'Apps that work for IT, not for staff', b:'Software chosen on a feature checklist that nobody on the floor finds usable.'},
      ],
      solutions:[
        {h:'ERP implementation', b:'Odoo, SAP B1 — sized to your headcount, configured to your workflow, integrated with what you already run.'},
        {h:'CRM deployment', b:'Pipedrive, HubSpot, Zoho, Salesforce — set up properly, with clean data and adoption training.'},
        {h:'Microsoft 365 / Google Workspace', b:'Tenants set up for security, compliance, and the way your business actually operates.'},
        {h:'Website design', b:'Marketing sites built on Next.js, WordPress, or headless CMS — fast, multilingual, SEO-tuned.'},
        {h:'Mobile app development', b:'iOS, Android, React Native, Flutter — for customer-facing apps and internal tools alike.'},
        {h:'API integration', b:'Wire your CRM to your accounting to your warehouse — clean error handling, retry logic, audit logs.'},
      ],
      features:[
        {h:'Bilingual UX (中／英)', b:'Web and apps designed for HK markets — Cantonese-aware, properly localised.'},
        {h:'SEO-ready websites', b:'Schema markup, sitemaps, performance optimisation — your marketing pages get found.'},
        {h:'Single sign-on (SSO)', b:'One login for all systems — Azure AD, Okta, Google identity.'},
        {h:'Adoption training', b:'Software is only valuable if used. We train your team and check in 30/60/90 days later.'},
      ],
      faq:[
        {q:'Odoo or SAP B1?', a:'Odoo is faster and cheaper to deploy; SAP B1 has stronger manufacturing and global reporting. We help you decide based on your industry and headcount.'},
        {q:'Can you build mobile apps in-house?', a:'Yes — we have a mobile team that ships React Native and native apps. Most projects launch in 12–16 weeks.'},
        {q:'How do you handle data migration?', a:'We map source to destination, build automated migration scripts, run dry runs, and cut over with rollback plans. No "good luck" go-lives.'},
      ],
      seo:'ERP, CRM, Microsoft 365, website design, and mobile app development in Hong Kong — Odoo, SAP B1, Next.js, WordPress, React Native, Flutter — bilingual UX and integrated business systems.',
    },
    zh:{
      kicker:'商務軟件與網頁應用',
      title:'辦公室的日常工具。',
      lede:'ERP、CRM、電郵、網站、流動應用 — 團隊每天實際使用的工具。我們部署、整合、調校 — 讓軟件不再是問題本身。',
      painPoints:[
        {h:'用 Excel 對 Excel', b:'財務、銷售、營運各自維護自己的表 — 每月花半週才能對齊。'},
        {h:'無人能更新的行銷網站', b:'多年前的 WordPress、插件已過期、無人記得管理員密碼。'},
        {h:'IT 用得順、員工用不來', b:'按功能清單選擇的軟件 — 樓面實際使用者卻無法上手。'},
      ],
      solutions:[
        {h:'ERP 部署', b:'Odoo、SAP B1 — 按人數規劃、依工作流程配置、與現有系統整合。'},
        {h:'CRM 部署', b:'Pipedrive、HubSpot、Zoho、Salesforce — 妥善設定、乾淨資料、採用培訓。'},
        {h:'Microsoft 365／Google Workspace', b:'依安全、合規及實際業務運作配置租戶。'},
        {h:'網站設計', b:'以 Next.js、WordPress 或 Headless CMS 建構 — 快速、多語、SEO 優化。'},
        {h:'流動應用開發', b:'iOS、Android、React Native、Flutter — 面向客戶或內部使用皆可。'},
        {h:'API 整合', b:'連接 CRM、會計、倉儲 — 完整錯誤處理、重試邏輯、審核紀錄。'},
      ],
      features:[
        {h:'雙語 UX（中／英）', b:'為香港市場而設 — 粵語感知、妥善本地化。'},
        {h:'SEO 就緒網站', b:'結構化資料、網站地圖、效能優化 — 行銷頁面易被找到。'},
        {h:'單一登入（SSO）', b:'所有系統一個登入 — Azure AD、Okta、Google 身份。'},
        {h:'採用培訓', b:'軟件只在被使用時才有價值 — 培訓團隊並於 30／60／90 日後檢查。'},
      ],
      faq:[
        {q:'Odoo 還是 SAP B1？', a:'Odoo 部署更快更便宜；SAP B1 製造及全球報告較強。按行業及人數協助決定。'},
        {q:'可否內部開發流動應用？', a:'可以 — 我們有自己的流動團隊，交付 React Native 及原生應用 — 大部份項目 12–16 週上線。'},
        {q:'如何處理資料遷移？', a:'映射來源至目的地、建立自動化遷移腳本、運行試演、切換時備有回退計劃 — 不靠「祝您好運」上線。'},
      ],
      seo:'香港 ERP、CRM、Microsoft 365、網站設計及流動應用開發 — Odoo、SAP B1、Next.js、WordPress、React Native、Flutter — 雙語 UX 及整合業務系統。',
    },
    relatedPillars:['ai','cloud','managed','cybersec'],
    relatedIndustries:['retail','sme','hospitality','fnb'],
    vendors:['Odoo','SAP B1','Microsoft 365','HubSpot','Zoho','WordPress','Next.js'],
  },

  iot: {
    id:'iot', cat:'IoT', icon:'iot',
    en:{
      kicker:'IoT & Smart Building',
      title:'Buildings that pay attention.',
      lede:"Every floor, every server room, every cold storage unit has signals worth listening to — temperature, occupancy, power draw, asset location. We wire them up so your building tells you what's going on, before it becomes a problem.",
      painPoints:[
        {h:'Equipment failures discovered too late', b:'A chiller drifts; cold storage warms; product spoils overnight — and the morning shift discovers it from the smell.'},
        {h:'Energy bills nobody can explain', b:'Lights on after hours, HVAC fighting itself, idle equipment drawing power — your bill is 25% waste, but you cannot prove which 25%.'},
        {h:'Asset hunts that should be 30-second lookups', b:'Trolley, scanner, IV pump — somewhere in the building, last seen Tuesday. A quarter of staff time goes to finding things.'},
      ],
      solutions:[
        {h:'BMS integration & dashboards', b:'Existing building management systems integrated with monitoring, alerts, and reporting — one pane for your facility.'},
        {h:'Environmental sensors (LoRaWAN)', b:'Temperature, humidity, leak, door — long-range, battery-powered, easy to deploy at scale.'},
        {h:'Smart lighting & DALI', b:'Occupancy-aware lighting, scheduled dimming, daylight harvesting — typical 30–40% energy savings.'},
        {h:'Asset tracking & RTLS', b:'Real-time location for high-value or high-loss assets — BLE, UWB, or RFID depending on accuracy needed.'},
        {h:'Digital signage', b:'Centrally managed displays for lobbies, meeting rooms, cafeterias — content from one CMS to every screen.'},
        {h:'AV & conference rooms', b:'One-touch room launch, calendar integration, video conferencing — meetings start on time, every time.'},
      ],
      features:[
        {h:'LoRaWAN gateway design', b:'Coverage planning so sensors actually report, even from the basement.'},
        {h:'BACnet & Modbus integration', b:'Talk to legacy BMS, chillers, and meters in their native protocol.'},
        {h:'Custom dashboards', b:'Grafana, Power BI, or bespoke — show the metrics your facility actually cares about.'},
        {h:'Alerts that escalate', b:'Right alarm, right person, right time — with on-call rotations and acknowledgement tracking.'},
      ],
      faq:[
        {q:'How much does BMS integration cost?', a:'Depends on what is already in place — typical projects range from a single-floor pilot to multi-building deployments. We start with a one-day audit.'},
        {q:'Will sensors interfere with Wi-Fi?', a:'No — LoRaWAN runs on dedicated sub-GHz frequencies, separate from Wi-Fi.'},
        {q:'Do we need to replace existing chillers/lighting?', a:'Rarely — we read what is there via BACnet/Modbus and add control where it pays back.'},
      ],
      seo:'IoT, smart building, BMS integration, LoRaWAN sensors, smart lighting, and asset tracking in Hong Kong — for hospitals, hotels, industrial sites, offices, and shopping centres.',
    },
    zh:{
      kicker:'物聯網與智能樓宇',
      title:'能感知的建築物。',
      lede:'每一層樓、每一個機房、每一個冷藏倉，都有值得聆聽的訊號 — 溫度、人流、用電、資產位置。我們把它們接上，讓建築物在問題出現前先告訴您。',
      painPoints:[
        {h:'設備故障太遲發現', b:'冷凍機異常 — 冷藏倉升溫 — 產品連夜變壞 — 早班從氣味發現。'},
        {h:'無人能解釋的電費', b:'下班後仍開燈、HVAC 自相抵消、閒置設備耗電 — 帳單 25% 是浪費，卻無法證明是哪 25%。'},
        {h:'本應 30 秒可查的資產搜尋', b:'手推車、掃描器、輸液泵 — 上次見到是星期二 — 員工四分一時間花在找東西。'},
      ],
      solutions:[
        {h:'BMS 整合及儀表板', b:'現有樓宇管理系統整合監察、警報、報告 — 設施一個介面。'},
        {h:'環境感測器（LoRaWAN）', b:'溫度、濕度、漏水、門 — 長距離、電池供電、易於大量部署。'},
        {h:'智能照明與 DALI', b:'人流感應、排程調光、自然光採集 — 一般節能 30–40%。'},
        {h:'資產追蹤與 RTLS', b:'高價值或高遺失資產的即時位置 — BLE、UWB 或 RFID 按精度所需。'},
        {h:'數碼顯示', b:'集中管理的大堂、會議室、餐廳顯示 — 一個 CMS 統一所有屏幕。'},
        {h:'視聽及會議室', b:'一鍵啟動、日曆整合、視像會議 — 會議準時開始，次次如此。'},
      ],
      features:[
        {h:'LoRaWAN 閘道設計', b:'覆蓋規劃讓感測器真正回報 — 即使在地庫。'},
        {h:'BACnet 及 Modbus 整合', b:'以原生協議與舊式 BMS、冷凍機、計量器溝通。'},
        {h:'自訂儀表板', b:'Grafana、Power BI 或客製 — 顯示設施真正關心的指標。'},
        {h:'升級式警報', b:'正確警報、正確人、正確時間 — 配備值班輪替及確認追蹤。'},
      ],
      faq:[
        {q:'BMS 整合成本多少？', a:'取決於現有甚麼 — 典型項目由單層試點至多樓部署 — 由一日審核開始。'},
        {q:'感測器會干擾 Wi-Fi 嗎？', a:'不會 — LoRaWAN 使用專用 sub-GHz 頻率，與 Wi-Fi 分離。'},
        {q:'是否需要更換現有冷凍機／燈？', a:'極少 — 我們透過 BACnet／Modbus 讀取現有，並在有回報的地方加裝控制。'},
      ],
      seo:'香港物聯網、智能樓宇、BMS 整合、LoRaWAN 感測器、智能照明、資產追蹤 — 服務醫院、酒店、工業、辦公室、商場。',
    },
    relatedPillars:['surveillance','cabling','serverroom','managed'],
    relatedIndustries:['hospitality','healthcare','retail','government'],
    vendors:['Johnson Controls','Carrier','Schneider Electric','Samsung','LG','Crestron','Milesight'],
  },

  managed: {
    id:'managed', cat:'Support', icon:'support',
    en:{
      kicker:'Managed IT & Support',
      title:'The IT department that picks up the phone.',
      lede:"Helpdesk, on-site support, and proactive monitoring — staffed by engineers who actually know your environment because they built half of it. One number, one team, one accountable partner.",
      painPoints:[
        {h:'Tickets that bounce between vendors', b:'Network blames server, server blames apps, apps blames network — and your team is the unwilling project manager.'},
        {h:'Reactive support that always feels late', b:'You discover the problem from staff complaints — not from monitoring that should have caught it hours earlier.'},
        {h:'Surprise quarterly invoices', b:'Pay-per-call support that turns every issue into an estimate — and never builds a relationship.'},
      ],
      solutions:[
        {h:'Helpdesk — call, email, chat', b:'Real engineers, fast triage, proper ticketing — not a call centre that escalates everything.'},
        {h:'On-site support', b:'Engineers at your location in hours, not days. The person dispatched is the person who can actually fix it.'},
        {h:'Proactive monitoring & patching', b:'Disks, certs, queues, services — watched continuously, fixed before users notice.'},
        {h:'Quarterly business reviews', b:'Sit down every 3 months: what broke, what we fixed, what to plan for next quarter.'},
        {h:'Hardware procurement', b:'We size, source, and deploy — leveraging vendor relationships your single business might not have.'},
        {h:'Vendor management', b:'One throat to choke — we coordinate carriers, ISPs, software vendors, and warranty providers on your behalf.'},
      ],
      features:[
        {h:'Predictable monthly fee', b:'Bundle helpdesk, monitoring, patching, and reviews into one number — no surprise invoices.'},
        {h:'Documented runbooks', b:'Common issues solved the same way every time — handover-resistant.'},
        {h:'Asset register', b:'Every device, license, and contract tracked — the document your finance team has been asking for.'},
        {h:'Escalation matrix', b:'Severity 1 in 30 minutes; severity 2 by next business hour. Documented and held to.'},
      ],
      faq:[
        {q:'Do you cover existing systems we did not install?', a:'Yes — we audit on day one, document what is there, and take it on. Most clients have a mixed estate.'},
        {q:'What is included in the monthly fee?', a:'Helpdesk, monitoring, patching, antivirus, backup verification, and quarterly reviews. Hardware and major projects are scoped separately.'},
        {q:'Can you co-manage with our internal team?', a:'Yes — many clients keep an internal IT lead and use us for depth, after-hours, and specialist work.'},
      ],
      seo:'Managed IT services and helpdesk in Hong Kong — proactive monitoring, on-site support, patching, vendor management, and quarterly business reviews for SMBs and enterprises.',
    },
    zh:{
      kicker:'託管 IT 與支援',
      title:'會接電話的 IT 部門。',
      lede:'服務台、上門支援、主動監察 — 由真正熟悉您環境的工程師處理（因為一半的環境是他們親手建造）。一個電話、一隊人、一個負責任的合作夥伴。',
      painPoints:[
        {h:'在廠商之間互推的工單', b:'網絡推卸給伺服器、伺服器推卸給應用、應用又推回網絡 — 您的團隊成為被迫的項目經理。'},
        {h:'總是慢一步的被動支援', b:'從員工投訴才發現問題 — 而非本應幾小時前察覺的監察。'},
        {h:'季度的意外帳單', b:'按次計費的支援把每個問題變成估價 — 永遠建立不到關係。'},
      ],
      solutions:[
        {h:'服務台 — 電話、電郵、即時通訊', b:'真工程師、快速分流、妥善工單 — 不是甚麼都升級的客服中心。'},
        {h:'上門支援', b:'工程師數小時內到場，不是數日 — 派出的是真正懂得處理的人。'},
        {h:'主動監察及修補', b:'硬碟、憑證、佇列、服務 — 持續監察，在使用者察覺前已修復。'},
        {h:'季度業務檢討', b:'每三個月坐下：壞了甚麼、修了甚麼、下季要規劃甚麼。'},
        {h:'硬件採購', b:'我們規劃、採購、部署 — 善用單一企業未必擁有的廠商關係。'},
        {h:'廠商管理', b:'一個負責人 — 我們代您協調電訊商、ISP、軟件廠商、保固提供者。'},
      ],
      features:[
        {h:'可預測月費', b:'服務台、監察、修補、檢討統一定價 — 不再有意外帳單。'},
        {h:'文件化運作手冊', b:'常見問題每次同一處理 — 不怕人員交接。'},
        {h:'資產登記', b:'每部裝置、授權、合約皆有追蹤 — 財務團隊一直想要的文件。'},
        {h:'升級矩陣', b:'嚴重 1 級 30 分鐘；嚴重 2 級下個工作小時 — 有文件並嚴守。'},
      ],
      faq:[
        {q:'是否涵蓋非由您安裝的現有系統？', a:'是 — 我們首日審核、文件化現狀、接手管理。大部份客戶環境混雜。'},
        {q:'月費包括甚麼？', a:'服務台、監察、修補、防毒、備份驗證、季度檢討。硬件及重大項目另外規劃。'},
        {q:'可否與內部團隊聯合管理？', a:'可以 — 很多客戶保留內部 IT 主管，由我們提供深度、非辦公時間、專項工作。'},
      ],
      seo:'香港託管 IT 服務及服務台 — 主動監察、上門支援、修補、廠商管理、季度業務檢討，服務中小企及大型企業。',
    },
    relatedPillars:['cybersec','cloud','business','serverroom'],
    relatedIndustries:['sme','education','government','fnb'],
    vendors:['Microsoft','Datto','NinjaOne','PRTG','ConnectWise','Veeam'],
  },
};

// Map every catalog service id to a pillar (used in megamenu deep-links)
const SF_SERVICE_TO_PILLAR = {
  cabling:'cabling', fiber:'cabling', iptel:'cabling',
  wifi:'wireless',
  serverroom:'serverroom', fault:'serverroom', hypervisor:'serverroom', hci:'serverroom',
  cloud:'cloud', backup:'cloud',
  cyber:'cybersec', soc:'cybersec', sraa:'cybersec',
  cctv:'surveillance', access:'surveillance',
  chatbot:'ai', localllm:'ai', workflow:'ai',
  erp:'business', web:'business', app:'business',
  iot:'iot',
  managed:'managed',
};

const SF_PILLAR_LIST = ['wireless','cabling','serverroom','cloud','cybersec','surveillance','ai','business','iot','managed'];

// Pillar groups for the mega menu (clustered by category)
const SF_PILLAR_GROUPS = [
  { en:'Network',      zh:'網絡',     ids:['wireless','cabling'] },
  { en:'Data Center',  zh:'數據中心', ids:['serverroom','cloud'] },
  { en:'Security',     zh:'安全',     ids:['cybersec','surveillance'] },
  { en:'Software & AI',zh:'軟件與 AI',ids:['ai','business'] },
  { en:'Smart & Support',zh:'智能與支援',ids:['iot','managed'] },
];

window.SF_PILLARS = SF_PILLARS;
window.SF_SERVICE_TO_PILLAR = SF_SERVICE_TO_PILLAR;
window.SF_PILLAR_LIST = SF_PILLAR_LIST;
window.SF_PILLAR_GROUPS = SF_PILLAR_GROUPS;
