Business Individuals Public sector
Remote support Help
Pay an invoice BLIK, card or instant transfer Is this invoice ours? Invoices and KSeF
Polski English
Get a quote
Services
Solutions
Pricing
Courses
Company
Contact
Get a quote
See the full catalogue of 83
IT outsourcing An external IT team that works remotely and knows your systems inside out Managed IT support Your laptops, servers and Microsoft 365 in our hands at one fixed price per month IT helpdesk Staff raise issues by email, through the portal or in a Teams chat Service desk One queue for every request, priorities set by the SLA, reporting each month 24/7 IT support Night, weekend and holiday cover for systems that must stay up Start, Business and Premium plans Managed IT from PLN 1,900/month excl. VAT
Support plans and SLA Contracted reaction times of 15 min, 1 h or 4 h Systems administration Servers, user accounts, hypervisors and sluggish or infected PCs, all handled remotely IT infrastructure An honest review of what you run, speed fixes and desktops delivered from the cloud Networking and VoIP Wi-Fi and LAN checks, 24/7 link monitoring, calls through Teams or a VoIP provider Cloud and hostingNew Virtual and physical servers in EU data centres, shop hosting, S3 storage and company mail Backup and restore Copies that are tested by actually restoring them, stored locally and in the cloud
GDPR and personal data protection Registers, processor agreements and the technical measures behind them Security policies and documentation Written rules prepared with audits and NIS2 in mind Security tooling deployment We choose the tools, deploy them and fine-tune the rules Infrastructure security Split networks, strict firewall policy, hardened servers Application security Reviewing code and securing how releases ship Data leak prevention (DLP) Control over which files leave the organisation Database security Who can read what, encrypted at rest, with every access logged Web application firewall (WAF) Filters hostile traffic before it hits your site, shop or API Access control and endpoint security Intune-managed devices with MFA enforced VPN and encryption Encrypted laptop drives and protected remote connections Vulnerability scanning Regular scans with a to-do list ordered by severity Antivirus and EDR Threats detected, the infected device isolated SOC monitoring A security team triaging every alert, day and night System hardening Defaults tightened in line with CIS benchmarks Secure use of AI Clear policies on what staff may paste into Copilot or ChatGPT
Websites and web apps Company sites, shops, portals and B2B platforms, plus UX, SEO, ongoing care and rescue after a hack E-commerce and integrations Orders flowing between your shop, Allegro, the accounting package, BLIK and couriers Bitrix24 and intranet A shared workspace for CRM, tasks and documents, configured and licensed Bespoke software Web and mobile applications built to order, integrations, migrations and teams on demand Software testing and QA Manual and automated checks, load tests, usability sessions and pentests before go-live
Artificial intelligenceNew From a first pilot to production models, with GPU capacity and staff workshops Data and analytics One reliable source of figures, dashboards and invoices read automatically IT consulting and audit An outside view of your roadmap and of how your systems fit together Digital marketing Where leads come from, where they get lost and how the CRM should track them
Software and licences Licences for IDEs, monitoring, remote access and admin tooling Training Courses for whole teams or individual coaching sessions online
Not sure what you need? We review your IT remotely and hand you a prioritised fix list Get the free review
All 14 solutions
Data in the EU Mailboxes, files and apps kept in EU-based data centres GDPR compliance Documents and controls ready before UODO knocks Remote and hybrid work Staff reach company files safely from any location Downtime prevention Tested backups, alerting and a recovery plan on paper
Retail and e-commerce Web shop, Allegro, BLIK and InPost wired into one flow Manufacturing Servers, network and ERP looked after so IT does not stop the line Healthcare and clinics Electronic records, e-prescriptions and patient data kept safe Construction Plans and BIM models available on site, on any device Logistics and transport WMS, carrier integrations and business continuity Public institutions KRI, digital accessibility, NIS2 and e-invoicing through PEF
Small businesses Microsoft 365 set up properly, helpdesk included Mid-sized companies SLA-backed care for servers, network and security Large enterprises Named engineers, short reaction times, regular reports Multi-branch companies Every branch runs on one IT standard
Your case is different? Tell us about it and we will assemble a mix of services around it Describe your case
About us The team and our remote-first approach Payments Invoices, KSeF, BLIK and payment terms Contact Email, the enquiry form and calls on Teams or Google Meet
Service · Systems administration

Active Directory and Entra ID

Beyond roughly 15-20 people, granting access by hand starts to bite back. A colleague who changed teams three years ago can still log into Allegro, while the new assistant spends two days waiting for the contracts folder. A shared identity directory ends the muddle: each person gets one account for Microsoft 365, their laptop and business apps, and what they can open follows from the team they belong to. We work with Entra ID, traditional Active Directory, or both joined together.

Send an enquiry Scope of work
1 account
per employee
MFA
on every account
Minutes
to cut off access
History
of sign-ins on record

Included in this service

The technology is half the job. The other half is agreeing with you and HR who approves access and what a person's first and final day look like.

Talk the scope through with an engineer

Account clean-up

We hunt down leavers' accounts, test users and shared logins. Every account gets an owner or is removed.

Admin roles

Global admin reserved for two break-glass accounts; everyone else receives narrower roles, say for Exchange or Intune, ideally switched on only for the task at hand.

Conditional Access

Mail and SharePoint open only on company-managed devices, and sign-ins from unusual countries are refused.

Intune and policies

BitLocker, screen lock, updates and printers pushed out centrally. Where a local domain remains, we use GPOs as well.

Department-based groups

Folder and app permissions tied to groups that fill themselves from the department HR records.

Self-service password reset

Staff unlock their own account after verifying in the app, instead of raising a ticket at 7:30 on a Monday.

How we work together

Timing depends on company size and the state of the tenant. Changes are rolled out so that nobody loses mail or file access.

01

Tenant review

We inspect roles, accounts, security defaults and the sync with on-site AD, if there is one.

02

Pilot

One department trials the new policies and groups. We smooth out the friction before the rest of the company follows.

03

Rollout

MFA, Conditional Access and Intune enrolment, team by team, with a one-page guide for staff.

04

Routines

A starter and leaver form for HR, plus a quarterly permissions review with line managers.

Shared logins like warehouse1 or reception are a blind spot in every audit. Nobody can say who used them, half the staff know the password, and MFA is usually off because apparently it breaks things. We swap them for named accounts, shared mailboxes and group-based rights, and check along the way that the tenant is not relying on a single global admin without MFA.

Questions and answers

No courier trips required. With Windows Autopilot and Intune the employee signs in with a work account and the machine fetches its policies, apps and BitLocker settings by itself. Your supplier can even deliver new hardware straight to the employee, an InPost locker for example, ready for work after first boot.

A single email to office@apply.pl with Support in the subject is enough. We lock the account, kill live sessions on phone and laptop, and convert the mailbox to a shared one for the manager. Deletion waits, otherwise the OneDrive files would vanish. If the company laptop remains with the leaver, Intune lets us wipe it remotely.

Frequently, though not in one go. First we list what still leans on the domain: a file server, printers, an elderly payroll package, or Wi-Fi authentication via RADIUS. Files go to SharePoint and the rest gets a cloud replacement. Once nothing talks to the controller, we switch it off and you run on Entra ID alone.

Yes. Rather than SMS codes we introduce Microsoft Authenticator push prompts or passkeys, and on trusted company machines Conditional Access trims the number of challenges. Over time most people stop noticing MFA exists.

Neighbouring services

Go to the area overview
Service PC clean-up and malware removal Sluggish or infected machines back in shape, fixed remotely Service Server management Ongoing care for Windows Server and Linux, minus the surprises Service Virtualisation Fewer boxes, faster recovery and resources kept in order

Let us check who can open what

Give us your headcount and describe how people log in today. We begin with a review of accounts and roles in your tenant.

Hours
Mon-Fri 8:00-18:00 CET, reply within one working day
Meetings
Online via Teams or Google Meet

We set strictly necessary cookies only: they keep the site running and remember the city you chose. Nothing here is used for advertising or tracking. More in our privacy policy.