Business Individuals Public sector
Remote support Help
Pay an invoice BLIK, card or instant transfer Is this invoice ours? Invoices and KSeF
Polski English
Get a quote
Services
Solutions
Pricing
Courses
Company
Contact
Get a quote
See the full catalogue of 83
IT outsourcing An external IT team that works remotely and knows your systems inside out Managed IT support Your laptops, servers and Microsoft 365 in our hands at one fixed price per month IT helpdesk Staff raise issues by email, through the portal or in a Teams chat Service desk One queue for every request, priorities set by the SLA, reporting each month 24/7 IT support Night, weekend and holiday cover for systems that must stay up Start, Business and Premium plans Managed IT from PLN 1,900/month excl. VAT
Support plans and SLA Contracted reaction times of 15 min, 1 h or 4 h Systems administration Servers, user accounts, hypervisors and sluggish or infected PCs, all handled remotely IT infrastructure An honest review of what you run, speed fixes and desktops delivered from the cloud Networking and VoIP Wi-Fi and LAN checks, 24/7 link monitoring, calls through Teams or a VoIP provider Cloud and hostingNew Virtual and physical servers in EU data centres, shop hosting, S3 storage and company mail Backup and restore Copies that are tested by actually restoring them, stored locally and in the cloud
GDPR and personal data protection Registers, processor agreements and the technical measures behind them Security policies and documentation Written rules prepared with audits and NIS2 in mind Security tooling deployment We choose the tools, deploy them and fine-tune the rules Infrastructure security Split networks, strict firewall policy, hardened servers Application security Reviewing code and securing how releases ship Data leak prevention (DLP) Control over which files leave the organisation Database security Who can read what, encrypted at rest, with every access logged Web application firewall (WAF) Filters hostile traffic before it hits your site, shop or API Access control and endpoint security Intune-managed devices with MFA enforced VPN and encryption Encrypted laptop drives and protected remote connections Vulnerability scanning Regular scans with a to-do list ordered by severity Antivirus and EDR Threats detected, the infected device isolated SOC monitoring A security team triaging every alert, day and night System hardening Defaults tightened in line with CIS benchmarks Secure use of AI Clear policies on what staff may paste into Copilot or ChatGPT
Websites and web apps Company sites, shops, portals and B2B platforms, plus UX, SEO, ongoing care and rescue after a hack E-commerce and integrations Orders flowing between your shop, Allegro, the accounting package, BLIK and couriers Bitrix24 and intranet A shared workspace for CRM, tasks and documents, configured and licensed Bespoke software Web and mobile applications built to order, integrations, migrations and teams on demand Software testing and QA Manual and automated checks, load tests, usability sessions and pentests before go-live
Artificial intelligenceNew From a first pilot to production models, with GPU capacity and staff workshops Data and analytics One reliable source of figures, dashboards and invoices read automatically IT consulting and audit An outside view of your roadmap and of how your systems fit together Digital marketing Where leads come from, where they get lost and how the CRM should track them
Software and licences Licences for IDEs, monitoring, remote access and admin tooling Training Courses for whole teams or individual coaching sessions online
Not sure what you need? We review your IT remotely and hand you a prioritised fix list Get the free review
All 14 solutions
Data in the EU Mailboxes, files and apps kept in EU-based data centres GDPR compliance Documents and controls ready before UODO knocks Remote and hybrid work Staff reach company files safely from any location Downtime prevention Tested backups, alerting and a recovery plan on paper
Retail and e-commerce Web shop, Allegro, BLIK and InPost wired into one flow Manufacturing Servers, network and ERP looked after so IT does not stop the line Healthcare and clinics Electronic records, e-prescriptions and patient data kept safe Construction Plans and BIM models available on site, on any device Logistics and transport WMS, carrier integrations and business continuity Public institutions KRI, digital accessibility, NIS2 and e-invoicing through PEF
Small businesses Microsoft 365 set up properly, helpdesk included Mid-sized companies SLA-backed care for servers, network and security Large enterprises Named engineers, short reaction times, regular reports Multi-branch companies Every branch runs on one IT standard
Your case is different? Tell us about it and we will assemble a mix of services around it Describe your case
About us The team and our remote-first approach Payments Invoices, KSeF, BLIK and payment terms Contact Email, the enquiry form and calls on Teams or Google Meet
Service · Cybersecurity

VPN and encryption

Data stops being safe the moment it leaves the desk: on its way from the warehouse to head office, from a sales rep's home Wi-Fi to the Comarch ERP server, from a laptop forgotten on a train. Both the GDPR and NIS2 list encryption among the safeguards, and when a laptop goes missing, whether the drive was encrypted matters a great deal in assessing the breach.

Send an enquiry Scope of work
Branches
permanent tunnel with failover
Remote work
no open ports
Suppliers
access with an expiry date
Disks
BitLocker and FileVault

Included in this service

Joining two sites and letting individuals in from outside are separate problems. We design them separately, so that one mistake in the rules cannot expose the entire network.

Talk the scope through with an engineer

Site-to-site

An IPsec or WireGuard tunnel between head office, branches and the cloud, switching over automatically to a backup link such as LTE when the main carrier goes down.

Staff access

Either a classic VPN app or per-application Zero Trust (Entra Private Access, Cloudflare, Tailscale), with a second factor and a device health check every time.

Supplier access

Named accounts for outside firms, for example the engineer who maintains your practice management system, limited to one server and switching themselves off on a set date.

Device encryption

BitLocker on Windows and FileVault on Macs, with recovery keys held centrally in Entra ID or Intune instead of on a sticky note in a drawer.

Mail and files

TLS enforced on mail transport, Purview-encrypted messages for special category data, and rules for sharing files outside the company.

Certificates and logs

A certificate register with reminders before expiry, a connection log, and idle sessions dropped automatically.

How we work together

We configure everything over remote access. The timeline, failover test included, is agreed once the traffic map is ready.

01

Traffic map

We decide which people and systems have to talk to which. A sales rep needs the CRM and email, not the cameras and printers in the warehouse.

02

Configuration

Gateways, routes and per-group rules are set up remotely. Should a branch need a new router physically plugged in, one of your people or a contractor near the site handles that with our step-by-step guide in hand.

03

Second factor and apps

Intune pushes the VPN app to every laptop, and we run a brief call to help people get the authenticator working on their phones.

04

Testing

We cut the main link and check that the tunnel comes back up on the backup one. Documentation is handed over after that test passes.

A leaver's VPN account is the door into the business most often left unlocked. Mailbox access ends on the final working day, yet the remote desktop login tends to surface half a year on, when someone is piecing together a breach. We tie VPN accounts to Entra ID, so disabling a user in one place locks them out everywhere.

Questions and answers

A classic VPN lets people into the network; Zero Trust grants access to one specific application. If your team works mostly in Microsoft 365 and a single ERP, application access is both safer and more convenient. With many older systems on local servers, a VPN split by group is often the simpler route.

No. An open RDP port is a common entry point in ransomware attacks. Remote desktop should only ever be reachable through a tunnel or a gateway that demands a second factor.

On hardware from the last few years you will not notice, as the processor handles the encryption. The bigger danger is having no copy of the recovery key, which is why we store it centrally.

Not as an ordinary attachment with the password in a follow-up email. A SharePoint link restricted to the named recipient and set to expire works better, as does an encrypted message sent through Purview.

Neighbouring services

Go to the area overview
Service GDPR and personal data protection Who sees personal records, what is logged, what is encrypted Service Security policies and documentation Rules and procedures that survive real working days Service Security tooling deployment Choosing, piloting and rolling out tools remotely Service Infrastructure security Perimeter, network zones and safe remote access

Secure your connections and disks

Let us know how many sites you run, how many people work remotely and which suppliers connect to your systems. We will sketch an access model and set it up over a remote session.

Hours
Mon-Fri 8:00-18:00 CET, reply within one working day
Meetings
Online via Teams or Google Meet

We set strictly necessary cookies only: they keep the site running and remember the city you chose. Nothing here is used for advertising or tracking. More in our privacy policy.