Business Individuals Public sector
Remote IT help Help
Settle a company invoice SWIFT transfer or card payment Public sector: FACe and DIR3 Did this invoice come from us? Invoices and electronic invoicing
Español English
Send an enquiry
Services
Solutions
Prices
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 83 services
IT outsourcing Your IT department, based outside your office and reaching your systems remotely Managed IT support One team for workstations, Microsoft 365 and the server room, billed monthly IT helpdesk Colleagues log a problem from Teams, by mail or on the web portal Service desk A single front door, SLA-driven priorities and a report every month 24/7 IT support Round-the-clock engineers for platforms that cannot pause, Sundays and holidays included Plans: Start, Business, Premium Monthly support from €590 per month + VAT
Support plans and SLA A 4 h, 1 h or 15 min response depending on the plan, written into the contract Systems administration Accounts, hypervisors, file servers and infected PCs handled over a secure remote session IT infrastructure An honest look at what you run today, quicker systems and cloud-hosted desktops Networking and VoIP Checks of the office LAN and firewall, constant watch over links, and calls moved to Teams Cloud and hostingNew Rented VPS or bare metal, shop hosting, object storage and company mailboxes in European data centres Backup and restore Regular test restores, offsite copies and protection that ransomware cannot wipe
GDPR and personal data protection Processing records, processor agreements and technical measures under Spanish law Security policies and documentation Internal rules that hold up in an audit and against ENS or NIS2 Security tooling deployment Choosing the product, rolling it out and tuning its rules Infrastructure security A segmented network, a reviewed firewall and no forgotten open ports Application security Code review and releases that do not open fresh holes Data leak prevention (DLP) You decide which files may leave by email, USB stick or cloud share Database security Least privilege, encryption and a log of who queried what Web application firewall (WAF) A filter in front of your website, PrestaShop store and APIs Access control and endpoint security Two-factor sign-in, Intune and laptops managed end to end VPN and encryption Protected links for home workers and encrypted laptop drives Vulnerability scanning Scheduled scans and a patch list sorted from critical down Antivirus and EDR The attack is spotted and the affected machine is cut off from the network SOC monitoring Logs and alerts reviewed at any hour of the day System hardening Default settings tightened using CIS and CCN-STIC guides Secure use of AI Clear limits on what employees feed into ChatGPT, Gemini or Copilot
Websites and web apps Fifteen services, from a one-page site to a B2B portal, plus SEO, upkeep and clean-up once a site is hacked E-commerce and integrations Your shop wired to Holded or a3ERP, Amazon.es, Redsys and the courier of your choice Bitrix24 and intranet Set-up, migration and licensing of the Bitrix24 workspace Bespoke software Business applications, mobile apps and integrations written around how your company operates Software testing and QA Bugs, bottlenecks and weak spots found before your customers find them
Artificial intelligenceNew Practical AI projects, from picking a use case to coaching the people who will use it Data and analytics Clean records, one reporting database and supplier invoices captured without typing IT consulting and audit Independent second opinion on the IT roadmap and the way your applications connect Digital marketing Tracing each enquiry from first click to signed order, with the CRM doing the follow-up
Software and licences Genuine IDE, monitoring and admin utility subscriptions Training Live online courses for a whole department or for a single learner
Unsure where to begin? We inspect your setup from a distance and send back a written, ranked to-do list Request an IT check
See the 14 solutions
Data in the EU Email, files and applications hosted in data centres in Spain and the EU GDPR compliance Records, contracts and technical measures in order before the AEPD comes asking Remote and hybrid work Safe access to files and software from home, on the road or from another branch Downtime prevention Backups proven by restores, alerting, and a disaster runbook written ahead of time
Retail and e-commerce PrestaShop, Amazon.es, Redsys, Bizum and SEUR joined up in one flow Manufacturing ERP, plant network and servers kept under watch so the line keeps moving Healthcare and clinics Clinic management software, e-prescriptions and properly protected health data Construction Drawings, BIM models and tender documents reachable from site via the cloud Logistics and transport Warehouse software, connected carriers and a depot that keeps running Public institutions ENS, accessibility under RD 1112/2018 and invoices lodged through FACe
Small businesses A well-configured Microsoft 365 and support without hiring an IT person Mid-sized companies A written SLA for your servers, LAN and protection Large enterprises A dedicated team, short response times and regular reporting Multi-branch companies One IT standard across every office, run from a distance
None of these fits? Describe your situation and we will combine only the services you actually need Send an enquiry
About us Who we are and how a fully remote team works Payments How we bill, electronic invoices and when payment is due Contact Write to us, fill in the form or book a video call via Google Meet or Teams
Area 08 · Security

Cybersecurity

Picture a fifteen-person accountancy practice in Valencia. On Monday its biggest client sends over a security questionnaire, on Tuesday the insurer wants confirmation that every account uses MFA, and on Thursday an employee clicks a fake Correos delivery notice. Three separate events, one underlying issue: you have to be able to prove what you do, and what you do has to work. This area brings GDPR, ENS and NIS2 compliance together with the technical safeguards behind it, and every part of it is delivered remotely over video calls and secure access.

Send an enquiry Regulation and requirements
15
services in this area
ENS
Royal Decree 311/2022 and CCN-STIC guides
72 h
to report a breach to the AEPD
0
site visits, since everything is remote

Regulation and requirements

Each framework asks much the same things in different words. The GDPR talks about appropriate measures, Spain's National Security Framework (ENS) about measures set by system category, NIS2 about risk management owned by the board. One solid foundation answers all three. We work to the principles of ISO 27001, with INCIBE and CCN-CERT guidance as our reference points.

Review your case

GDPR and personal data protection

The technical half of compliance: an inventory that feeds your record of processing activities, role-based permissions, access auditing, support for data subject requests and a one-page sheet for the first hours of a breach.

Security policies and documentation

Texts built from interviews with your team rather than from a template: the policy, a MAGERIT-based risk analysis, the ENS statement of applicability and procedures that can be followed on an ordinary working day.

Technical protection

Nine services, each working on its own layer: identities, devices, network, applications, data and the web. You will rarely need all of them. The risk analysis shows which come first and which can wait a year.

Security tooling deployment

For anyone sitting on unused Microsoft 365 Business Premium features or an EDR still stuck in observe mode. A pilot, department-by-department expansion and a calm switch to blocking.

Infrastructure security

Port 3389 shut, cameras and guest Wi-Fi moved into their own zone, and the ERP supplier connecting through a named account protected by MFA.

Application security

Who is allowed to change a supplier's IBAN in a3ERP, which account PrestaShop syncs under, and where the Redsys payment key is actually stored.

Data leak prevention (DLP)

Files containing ID numbers, IBANs or health details spotted automatically, a prompt before anyone forwards them to Gmail, and hard blocks kept for serious cases, in line with Article 87 of the LOPDGDD.

Database security

The “sa” login retired, encryption at rest on SQL Server or MySQL, auditing on patient and customer tables, and forgotten exports tracked down and deleted.

Web application firewall (WAF)

Cloudflare or your cloud's own WAF tuned weeks ahead of Black Friday, so that at peak trading it halts mass card testing rather than your real shoppers.

Access control and endpoint security

A stolen password is no longer enough: MFA with no exceptions, only Intune-enrolled devices can open company data, and nobody is an administrator on their own laptop.

VPN and encryption

WireGuard or IPsec linking office and warehouse, BitLocker on every laptop with its key held in Entra ID, and a fixed channel for sending payroll to your accountants.

Vulnerability scanning

Monthly internal and external scans, ranked using INCIBE-CERT advisories and the KEV catalogue. Fewer report pages, more patches genuinely applied.

Monitoring and upkeep

Settings made in January no longer fit the business by September: people join and leave, new software arrives, attack methods shift. These four services keep working after the project itself is finished.

Antivirus and EDR Three scattered brands replaced by one console SOC monitoring Small clues from many sources, read side by side System hardening SMBv1, macros and LLMNR gone, no new licences Secure use of AI Rules for ChatGPT and a permission check before Copilot

Where to begin

On a tight budget, sequence matters more than brand. For SMEs of 10 to 250 staff we propose the following order, which tackles the most common ways in first.

01

Who is asking for what

A video call to gather what is already being demanded of you: client clauses, tender terms, the cyber insurance policy, the GDPR. From that we know which evidence you need and which systems hold the most delicate data.

02

Identities and email

MFA, removal of former employees' accounts and rules against fake change-of-IBAN requests. This is where most SME incidents start, and it is the cheapest door to close.

03

Devices, network and backups

EDR with blocking on, basic hardening, remote desktop taken off the internet and backups that have been restored at least once. This is the stage that stops ransomware or limits how far it spreads.

04

Paperwork and monitoring

With the technical groundwork running, the documents describe facts rather than wishes. After that comes whatever the risk warrants: a WAF, DLP, finer segmentation or a SOC.

Put a price on a week without systems before you put one on security. An online shop taking €4,000 a day, or a warehouse unable to issue delivery notes, loses more in a few days offline than years of sensible protection would cost. That figure, rather than fear of a fine, is what helps you decide how much to spend and in which order.

Common questions

The directive and its Spanish transposition set out sectors, size thresholds and exemptions, and the precise fit should be confirmed by a lawyer. What we see all the time is the knock-on effect: small firms outside its scope receiving questionnaires from clients inside it. We prepare that technical side with you.

The system you use to deliver the service must meet the ENS measures for its category, backed by certification from an accredited body or, for some basic-category systems, a self-assessment-based statement if the tender accepts one. We help you get ready for certification: risk analysis, statement of applicability, technical measures and evidence.

Yes. The questions tend to repeat: MFA, offline backups, EDR, patching, training. We go through which ones you can honestly answer yes to, what is missing and what it would take to close the gaps before renewal. Ticking yes to something that does not exist could leave you uncovered at the very moment you need the policy.

Do not switch machines off, as evidence is lost; unplug them from the network instead. From a clean device, change the passwords of admin accounts and email support@apply.es, or helpme@apply.es if you have a contract. If personal data is involved, the 72-hour clock for the AEPD has started. INCIBE also runs a free, confidential cybersecurity helpline.

Yes. Interviews run on Teams or Google Meet and configuration takes place over secure remote access, with every session logged. If a device ever needs handling, a member of your team or your installer does it while we guide them live. The timetable is agreed after the initial review and set out in the contract.

Related areas

All services
Area 05 Networking and VoIP VLANs, Wi-Fi and links between sites Area 07 Backup and restore What gets you working again after ransomware Area 13 Software testing and QA Penetration tests for websites and applications Solution GDPR compliance From the record of processing to technical measures

Tell us what is being asked of you and what you have today

A client questionnaire, a tender requiring the ENS, an insurance renewal or a specific worry. After a remote review we will tell you what is missing, the order to tackle it in and what can wait.

Hours
Monday to Friday, 9:00-18:00 Spanish time (CET), answers within a working day
Meetings
Video calls via Google Meet or Teams

This site only stores the cookies it needs to work and to remember your chosen city. No advertising or tracking cookies are set. See our privacy policy for the details.