Business Individuals Public sector
Remote IT help Help
Settle a company invoice SWIFT transfer or card payment Public sector: FACe and DIR3 Did this invoice come from us? Invoices and electronic invoicing
Español English
Send an enquiry
Services
Solutions
Prices
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 83 services
IT outsourcing Your IT department, based outside your office and reaching your systems remotely Managed IT support One team for workstations, Microsoft 365 and the server room, billed monthly IT helpdesk Colleagues log a problem from Teams, by mail or on the web portal Service desk A single front door, SLA-driven priorities and a report every month 24/7 IT support Round-the-clock engineers for platforms that cannot pause, Sundays and holidays included Plans: Start, Business, Premium Monthly support from €590 per month + VAT
Support plans and SLA A 4 h, 1 h or 15 min response depending on the plan, written into the contract Systems administration Accounts, hypervisors, file servers and infected PCs handled over a secure remote session IT infrastructure An honest look at what you run today, quicker systems and cloud-hosted desktops Networking and VoIP Checks of the office LAN and firewall, constant watch over links, and calls moved to Teams Cloud and hostingNew Rented VPS or bare metal, shop hosting, object storage and company mailboxes in European data centres Backup and restore Regular test restores, offsite copies and protection that ransomware cannot wipe
GDPR and personal data protection Processing records, processor agreements and technical measures under Spanish law Security policies and documentation Internal rules that hold up in an audit and against ENS or NIS2 Security tooling deployment Choosing the product, rolling it out and tuning its rules Infrastructure security A segmented network, a reviewed firewall and no forgotten open ports Application security Code review and releases that do not open fresh holes Data leak prevention (DLP) You decide which files may leave by email, USB stick or cloud share Database security Least privilege, encryption and a log of who queried what Web application firewall (WAF) A filter in front of your website, PrestaShop store and APIs Access control and endpoint security Two-factor sign-in, Intune and laptops managed end to end VPN and encryption Protected links for home workers and encrypted laptop drives Vulnerability scanning Scheduled scans and a patch list sorted from critical down Antivirus and EDR The attack is spotted and the affected machine is cut off from the network SOC monitoring Logs and alerts reviewed at any hour of the day System hardening Default settings tightened using CIS and CCN-STIC guides Secure use of AI Clear limits on what employees feed into ChatGPT, Gemini or Copilot
Websites and web apps Fifteen services, from a one-page site to a B2B portal, plus SEO, upkeep and clean-up once a site is hacked E-commerce and integrations Your shop wired to Holded or a3ERP, Amazon.es, Redsys and the courier of your choice Bitrix24 and intranet Set-up, migration and licensing of the Bitrix24 workspace Bespoke software Business applications, mobile apps and integrations written around how your company operates Software testing and QA Bugs, bottlenecks and weak spots found before your customers find them
Artificial intelligenceNew Practical AI projects, from picking a use case to coaching the people who will use it Data and analytics Clean records, one reporting database and supplier invoices captured without typing IT consulting and audit Independent second opinion on the IT roadmap and the way your applications connect Digital marketing Tracing each enquiry from first click to signed order, with the CRM doing the follow-up
Software and licences Genuine IDE, monitoring and admin utility subscriptions Training Live online courses for a whole department or for a single learner
Unsure where to begin? We inspect your setup from a distance and send back a written, ranked to-do list Request an IT check
See the 14 solutions
Data in the EU Email, files and applications hosted in data centres in Spain and the EU GDPR compliance Records, contracts and technical measures in order before the AEPD comes asking Remote and hybrid work Safe access to files and software from home, on the road or from another branch Downtime prevention Backups proven by restores, alerting, and a disaster runbook written ahead of time
Retail and e-commerce PrestaShop, Amazon.es, Redsys, Bizum and SEUR joined up in one flow Manufacturing ERP, plant network and servers kept under watch so the line keeps moving Healthcare and clinics Clinic management software, e-prescriptions and properly protected health data Construction Drawings, BIM models and tender documents reachable from site via the cloud Logistics and transport Warehouse software, connected carriers and a depot that keeps running Public institutions ENS, accessibility under RD 1112/2018 and invoices lodged through FACe
Small businesses A well-configured Microsoft 365 and support without hiring an IT person Mid-sized companies A written SLA for your servers, LAN and protection Large enterprises A dedicated team, short response times and regular reporting Multi-branch companies One IT standard across every office, run from a distance
None of these fits? Describe your situation and we will combine only the services you actually need Send an enquiry
About us Who we are and how a fully remote team works Payments How we bill, electronic invoices and when payment is due Contact Write to us, fill in the form or book a video call via Google Meet or Teams
Service · Cybersecurity

VPN and encryption

Encryption answers two separate questions that are best kept apart. The first is what happens to data in transit: between the Zaragoza office and the Huesca warehouse, between a remote employee's home and the server, between your company and the accountancy firm that receives payroll. The second is what happens to data when a laptop is left behind on the AVE high-speed train or someone walks off with a NAS drive. A badly configured VPN or an unencrypted laptop can turn a minor incident into a breach that may have to be reported to the AEPD; handled properly, a stolen laptop is just a stolen laptop. We design and configure both sides remotely: connections between sites and for people working away from the office, disk encryption with properly safeguarded recovery keys, and a sound way to send sensitive documents to third parties.

Send an enquiry Jump to what is included
WireGuard, IPsec
current, well-audited protocols
BitLocker, FileVault
on every laptop
Recovery keys
in the directory, not on a sticky note
Site to site
and person to site, with MFA

What falls within the scope of this service

We use the firewall or router you already have if it is up to the job. If a site needs new hardware, your staff or installer connects it and we configure it remotely.

Pin down the details with one of our engineers

Site-to-site links

IPsec or WireGuard tunnels between offices, warehouses and shops, with rules defining what may pass from one site to another. Also useful for a branch in the Canary or Balearic Islands that relies on servers on the mainland.

Remote access

A user VPN with MFA, or zero-trust access that publishes only the applications needed rather than the whole network. Every connection is logged with user, time and device.

Disk encryption

BitLocker on Windows and FileVault on Mac, enabled through Intune or Jamf, with the recovery key held in Entra ID. External drives used for backups are included.

Certificates

TLS certificates on websites and internal services, automatic renewal and an expiry inventory, so no service goes down on a Sunday because its certificate lapsed.

Sending sensitive documents

Microsoft 365 message encryption, links with an expiry date and password, or AES-encrypted archives. For regular exchanges with advisers or insurers, a fixed channel rather than loose attachments.

Key custody

Where encryption and recovery keys are stored, who can look them up and what happens if the person in charge is away. Without that, encryption becomes a risk of losing your own data.

How the engagement unfolds, one stage at a time

Encryption is switched on in batches of devices, always with the recovery key verified first. An encrypted disk without its key is a lost disk.

01

Inventory

Sites, links, devices that leave the office, current encryption status and how sensitive documents are sent today.

02

Design

Connection topology, remote access method and encryption policy, with a timetable of changes.

03

Implementation

Tunnels and VPN configured out of hours, disks encrypted in batches and keys checked in the directory.

04

Recovery test

We simulate a lost laptop and unlock an encrypted machine with its key to confirm the procedure works.

A lost encrypted laptop rarely turns into a data protection problem; an unencrypted one probably will. If the disk was encrypted and the key was not compromised, the risk to individuals is low and the assessment of the incident changes completely. Few measures have such a direct effect on what you would need to explain to the AEPD.

Common questions

That depends on which one. Several older VPNs, particularly the SSL products from some vendors, have had serious vulnerabilities exploited on a massive scale. If yours is patched and uses MFA, it may still be fine. If not, a modern protocol such as WireGuard or zero-trust access that does not expose the whole network is the better route.

On machines from the last few years, you will not notice, because the processor handles encryption in hardware. What matters is that the recovery key is stored before encryption starts, so a BIOS update cannot leave the machine locked.

Ideally through a fixed channel: a folder shared with the firm with named access, or the portal the firm already provides. If it has to be email, use Microsoft 365 encryption or an encrypted file with the password sent by another channel. What you want to avoid is an unprotected attachment to a generic address.

Yes. WireGuard and IPsec handle patchy links well, and a second 4G or 5G line can be set up as automatic backup. If the site's connection is very limited, we look at which services would be better in the cloud rather than on the mainland server.

Other work we do in this field

Full area overview
Service GDPR and personal data protection Records of processing, permissions, audit trails and 72-hour breach handling Service Security policies and documentation A policy, a risk analysis and procedures people actually follow Service Security tooling deployment Choose, pilot and roll out security tools remotely Service Infrastructure security Perimeter, network segmentation and secure remote access

Encrypt what travels and what could go missing

Tell us how many sites you have, how staff connect from outside and whether laptops are encrypted. We will propose a design and a timetable.

Hours
Monday to Friday, 9:00-18:00 Spanish time (CET), answers within a working day
Meetings
Video calls via Google Meet or Teams

This site only stores the cookies it needs to work and to remember your chosen city. No advertising or tracking cookies are set. See our privacy policy for the details.