Business Individuals Public sector
Remote support Help
Pay an invoice BLIK, card or instant transfer Is this invoice ours? Invoices and KSeF
Polski English
Get a quote
Services
Solutions
Pricing
Courses
Company
Contact
Get a quote
See the full catalogue of 83
IT outsourcing An external IT team that works remotely and knows your systems inside out Managed IT support Your laptops, servers and Microsoft 365 in our hands at one fixed price per month IT helpdesk Staff raise issues by email, through the portal or in a Teams chat Service desk One queue for every request, priorities set by the SLA, reporting each month 24/7 IT support Night, weekend and holiday cover for systems that must stay up Start, Business and Premium plans Managed IT from PLN 1,900/month excl. VAT
Support plans and SLA Contracted reaction times of 15 min, 1 h or 4 h Systems administration Servers, user accounts, hypervisors and sluggish or infected PCs, all handled remotely IT infrastructure An honest review of what you run, speed fixes and desktops delivered from the cloud Networking and VoIP Wi-Fi and LAN checks, 24/7 link monitoring, calls through Teams or a VoIP provider Cloud and hostingNew Virtual and physical servers in EU data centres, shop hosting, S3 storage and company mail Backup and restore Copies that are tested by actually restoring them, stored locally and in the cloud
GDPR and personal data protection Registers, processor agreements and the technical measures behind them Security policies and documentation Written rules prepared with audits and NIS2 in mind Security tooling deployment We choose the tools, deploy them and fine-tune the rules Infrastructure security Split networks, strict firewall policy, hardened servers Application security Reviewing code and securing how releases ship Data leak prevention (DLP) Control over which files leave the organisation Database security Who can read what, encrypted at rest, with every access logged Web application firewall (WAF) Filters hostile traffic before it hits your site, shop or API Access control and endpoint security Intune-managed devices with MFA enforced VPN and encryption Encrypted laptop drives and protected remote connections Vulnerability scanning Regular scans with a to-do list ordered by severity Antivirus and EDR Threats detected, the infected device isolated SOC monitoring A security team triaging every alert, day and night System hardening Defaults tightened in line with CIS benchmarks Secure use of AI Clear policies on what staff may paste into Copilot or ChatGPT
Websites and web apps Company sites, shops, portals and B2B platforms, plus UX, SEO, ongoing care and rescue after a hack E-commerce and integrations Orders flowing between your shop, Allegro, the accounting package, BLIK and couriers Bitrix24 and intranet A shared workspace for CRM, tasks and documents, configured and licensed Bespoke software Web and mobile applications built to order, integrations, migrations and teams on demand Software testing and QA Manual and automated checks, load tests, usability sessions and pentests before go-live
Artificial intelligenceNew From a first pilot to production models, with GPU capacity and staff workshops Data and analytics One reliable source of figures, dashboards and invoices read automatically IT consulting and audit An outside view of your roadmap and of how your systems fit together Digital marketing Where leads come from, where they get lost and how the CRM should track them
Software and licences Licences for IDEs, monitoring, remote access and admin tooling Training Courses for whole teams or individual coaching sessions online
Not sure what you need? We review your IT remotely and hand you a prioritised fix list Get the free review
All 14 solutions
Data in the EU Mailboxes, files and apps kept in EU-based data centres GDPR compliance Documents and controls ready before UODO knocks Remote and hybrid work Staff reach company files safely from any location Downtime prevention Tested backups, alerting and a recovery plan on paper
Retail and e-commerce Web shop, Allegro, BLIK and InPost wired into one flow Manufacturing Servers, network and ERP looked after so IT does not stop the line Healthcare and clinics Electronic records, e-prescriptions and patient data kept safe Construction Plans and BIM models available on site, on any device Logistics and transport WMS, carrier integrations and business continuity Public institutions KRI, digital accessibility, NIS2 and e-invoicing through PEF
Small businesses Microsoft 365 set up properly, helpdesk included Mid-sized companies SLA-backed care for servers, network and security Large enterprises Named engineers, short reaction times, regular reports Multi-branch companies Every branch runs on one IT standard
Your case is different? Tell us about it and we will assemble a mix of services around it Describe your case
About us The team and our remote-first approach Payments Invoices, KSeF, BLIK and payment terms Contact Email, the enquiry form and calls on Teams or Google Meet
Service · Cybersecurity

Database security

The database concentrates everything your company knows, in the format easiest to copy wholesale. Paradoxically it is often less guarded than the application in front of it. The ERP has roles and permissions; underneath, SQL Server relies on one “sa” login whose password is known to the previous IT person, the current contractor and the partner who installed the system five years back.

Send an enquiry Scope of work
sa
shared login we switch off
1433
port that must stay off the internet
TDE
encrypted database files
Backups
encrypted and immutable

Included in this service

Three things matter: who is able to connect, what each connection may do, and whether it leaves a record. We handle SQL Server, PostgreSQL, MySQL and MariaDB on premises, on VPS and in Azure.

Talk the scope through with an engineer

Logins

Personal logins for DBAs and a separate, restricted login for every application. The “sa” or “root” account is disabled or its password locked in a vault.

Network isolation

Staff computers lose direct database access, and nothing on the internet should reach it at all. Applications talk to the database, people talk to applications.

Read auditing

Sign-ins, privilege changes and, most importantly, bulk reads are recorded. Nobody should be able to dump the full customer table unnoticed.

Encryption

Transparent data encryption at rest, encrypted client connections and encryption applied to each backup file.

Test environments

Developers and testers work on pseudonymised copies. Building a new report does not call for real names, addresses or PESEL numbers.

Engine updates

A regular routine for installing security patches to the database engine, tried on a test instance before production.

How we work together

Production changes happen in a maintenance window agreed with you and, where relevant, with the application vendor.

01

Assessment

Mapping every connection by source and privilege level. Forgotten logins often surface, a former implementation consultant's among them.

02

Access clean-up

Superfluous network paths closed, an individual login for each administrator and shared passwords retired.

03

Auditing and encryption

Event capture enabled; live data and backup archives encrypted.

04

Proof

We confirm that a bulk read gets logged and that a restore from an encrypted backup genuinely works.

A backup is also a database, only less carefully watched. .bak files and mysqldump exports frequently sit unencrypted on a share half the office can open. Whoever holds the copy holds the data, however well the server is defended.

Questions and answers

First we try reproducing it on pseudonymised data, which is often enough. If that fails, production access is time-limited, read-only and logged, and it is withdrawn when the task is done.

That depends on the version and edition. In recent versions TDE can be available in cheaper editions too, so we check your licence first. On older releases we look at alternatives such as disk and backup encryption, or plan an upgrade.

We find out what the vendor really needs it for. Usually a narrower login will do, or the full one can be enabled only for the length of an upgrade, with the password changed after every session.

Regularly, at the pace set in your backup plan, and after any significant change, such as a system upgrade. A real test means restoring into a separate environment and running the application against it, not just confirming the backup file exists.

Neighbouring services

Go to the area overview
Service GDPR and personal data protection Who sees personal records, what is logged, what is encrypted Service Security policies and documentation Rules and procedures that survive real working days Service Security tooling deployment Choosing, piloting and rolling out tools remotely Service Infrastructure security Perimeter, network zones and safe remote access

See who holds the keys to your data

Tell us which database engines your systems use and where they run. We will suggest the scope of a review.

Hours
Mon-Fri 8:00-18:00 CET, reply within one working day
Meetings
Online via Teams or Google Meet

We set strictly necessary cookies only: they keep the site running and remember the city you chose. Nothing here is used for advertising or tracking. More in our privacy policy.