In a public administration it is not enough for email to work. You must be able to show who opens residents' data, the date a restore from backup was last really tested and what your e-office accessibility statement claims. Everything is managed at a distance, and the paperwork is written along the way, not in the week before an audit.
A town of 8,000 people, a joint municipal association and an institute of secondary education have different budgets and different duties, yet they tend to break in the same places: a file server well past its prime, logins for employees who retired years back and an e-office no one has checked for accessibility.
System categorisation, risk analysis, statement of applicability and the controls of Spain's National Security Framework (ENS), following the CCN-STIC guides and CCN-CERT advisories. We help you get ready for an ENS audit or certification; the category and the final call belong to your organisation. We also work out what the Spanish transposition of NIS2 means for you.
An up-to-date record of processing activities, processor agreements with the vendors of your line-of-business applications, permissions tied to job roles, and access logs your DPO can inspect at will. We also prepare the technical side of a DPIA. See GDPR and personal data protection.
A review of the council website and e-office against Royal Decree 1112/2018, the UNE-EN 301549 standard and WCAG 2.1 AA, fixes for the most disruptive barriers and a written accessibility statement. Take a look at Public sector websites.
Servers, Entra ID, Intune, mail and backups for a council, a school or a body spread over several sites. If something physical is needed, like replacing a disk or reconnecting a rack, your own staff or local contractor does it, guided live by our engineer over video.
Technical integration of online procedures with Cl@ve, workstations ready for AutoFirma and public employee certificates, signature workflows for decrees and resolutions, and links to Red SARA services in line with the ENI interoperability framework. The goal: an absence must not leave a decree unsigned.
Pulling out and publishing the datasets your body is expected to offer, in reusable formats rather than scanned PDFs, refreshed automatically where the source allows. We also connect online forms to your internal applications so nobody has to type the same thing twice.
Choosing, advertising and timing the procedure is the job of the contracting authority under Law 9/2017 on Public Sector Contracts (LCSP). Apply takes part as an economic operator: it describes what it can deliver remotely, quotes a price and responds to your market consultations. We do not advise the contracting authority on its own procedure.
Before tendering you can ask us for figures to estimate the contract value, either as part of a preliminary market consultation or for a minor contract. We reply with an approximate amount and the services it would cover.
A remote audit supplies the numbers often missing from the technical specifications: how many workstations and servers, which licences are actually used, which versions are out of support and which weak spots come first.
Publish on your contractor profile in PLACSP or on the regional platform you use. We submit the bid in the form the tender documents require, DEUC included, and deal with clarifications inside the stated time limits.
Roll-out and maintenance as the contract specifies, a signed record per phase, reporting on the schedule agreed and FACe invoices with the DIR3 codes and the file number.
For a live tender or an invitation to bid on a minor contract, write to tender@apply.es, our procurement inbox. Attach the tender documents or the justification report, even in draft: we will say plainly which lots suit remote delivery and which ones we should leave alone.
Every public contract expires. That is why each deliverable is aimed at two audiences: the in-house IT person running things next week, and whichever firm inherits the contract later, who should not have to start over.
Where any budget starts. Issues ranked by how pressing they are, with a rough cost beside each one.
Read it before buying any tool. It tells apart what the ENS and your duties really require and what a vendor would simply like to sell.
Tailored to your body rather than copied from a generic model. Security policy, rules of use, access rights management and a continuity plan; details under Security policies and documentation.
Grounded in a real page-by-page review. Level of compliance, inaccessible content, the grounds for exemptions and a way for residents to report problems, updated whenever the site is redesigned.
As often as the contract says. Requests closed, response times kept, changes applied and restore tests run, in a layout you can use directly for contract oversight.
Handover is planned from the start. The inventory, diagrams, passwords stored in your credential vault and procedures belong to you. When the contract ends, the handover runs on documents, rather than on how cooperative the previous provider feels.
The contracting authority alone. Choosing the procedure, drafting the tender documents, evaluating offers and making the award are matters for you and your legal team under the LCSP. We act purely as a bidder, supplying technical data from an audit, a description of the remote services and a price.
Yes, where the subject and amount fall within the limits the LCSP sets for minor service contracts. We send a clear quote so you can process the file and, if your body asks, the paperwork that goes with the offer. Whether a minor contract is the right route is for the contracting authority to decide.
It is worth considering from the outset. Apply LLP is incorporated outside the European Union, and the LCSP sets specific capacity requirements for non-EU companies, such as the reciprocity report under Article 68. We go through the documents of each tender with you and tell you in advance what paperwork we can provide, so there are no surprises at the admission stage.
Yes, whenever the body requires it. Each invoice carries the DIR3 codes (accounting office, managing body and processing unit) and the file number you give us. Maintenance is billed monthly, projects once the record for each phase has been signed.
Through encrypted remote access, with named accounts and session logs your staff can review. The contract includes no travel. For physical tasks, our engineer guides your staff or your local maintenance firm over video and then checks the result remotely.
No, and anyone who guarantees it without caveats is not being straight with you. Compliance also depends on your vendors, your internal practices and decisions that are yours to make. What we do guarantee is the work: measuring where you stand, fixing what falls within our scope, documenting what remains open and telling you clearly where things are.
Describe what you need or attach draft tender documents. We reply with a proposed scope and an indicative price, useful for working out the estimated contract value or preparing a minor contract.
Your request is with us
Expect an answer within one working day. A reported fault that has halted your team is handled first.
No match found. Try another spelling, or go with the closest provincial capital: every job is done remotely, so the location makes no difference to what we deliver anywhere in Spain.
