Business Individuals Public sector
Remote support Help
Pay an invoice BLIK, card or instant transfer Is this invoice ours? Invoices and KSeF
Polski English
Get a quote
Services
Solutions
Pricing
Courses
Company
Contact
Get a quote
See the full catalogue of 83
IT outsourcing An external IT team that works remotely and knows your systems inside out Managed IT support Your laptops, servers and Microsoft 365 in our hands at one fixed price per month IT helpdesk Staff raise issues by email, through the portal or in a Teams chat Service desk One queue for every request, priorities set by the SLA, reporting each month 24/7 IT support Night, weekend and holiday cover for systems that must stay up Start, Business and Premium plans Managed IT from PLN 1,900/month excl. VAT
Support plans and SLA Contracted reaction times of 15 min, 1 h or 4 h Systems administration Servers, user accounts, hypervisors and sluggish or infected PCs, all handled remotely IT infrastructure An honest review of what you run, speed fixes and desktops delivered from the cloud Networking and VoIP Wi-Fi and LAN checks, 24/7 link monitoring, calls through Teams or a VoIP provider Cloud and hostingNew Virtual and physical servers in EU data centres, shop hosting, S3 storage and company mail Backup and restore Copies that are tested by actually restoring them, stored locally and in the cloud
GDPR and personal data protection Registers, processor agreements and the technical measures behind them Security policies and documentation Written rules prepared with audits and NIS2 in mind Security tooling deployment We choose the tools, deploy them and fine-tune the rules Infrastructure security Split networks, strict firewall policy, hardened servers Application security Reviewing code and securing how releases ship Data leak prevention (DLP) Control over which files leave the organisation Database security Who can read what, encrypted at rest, with every access logged Web application firewall (WAF) Filters hostile traffic before it hits your site, shop or API Access control and endpoint security Intune-managed devices with MFA enforced VPN and encryption Encrypted laptop drives and protected remote connections Vulnerability scanning Regular scans with a to-do list ordered by severity Antivirus and EDR Threats detected, the infected device isolated SOC monitoring A security team triaging every alert, day and night System hardening Defaults tightened in line with CIS benchmarks Secure use of AI Clear policies on what staff may paste into Copilot or ChatGPT
Websites and web apps Company sites, shops, portals and B2B platforms, plus UX, SEO, ongoing care and rescue after a hack E-commerce and integrations Orders flowing between your shop, Allegro, the accounting package, BLIK and couriers Bitrix24 and intranet A shared workspace for CRM, tasks and documents, configured and licensed Bespoke software Web and mobile applications built to order, integrations, migrations and teams on demand Software testing and QA Manual and automated checks, load tests, usability sessions and pentests before go-live
Artificial intelligenceNew From a first pilot to production models, with GPU capacity and staff workshops Data and analytics One reliable source of figures, dashboards and invoices read automatically IT consulting and audit An outside view of your roadmap and of how your systems fit together Digital marketing Where leads come from, where they get lost and how the CRM should track them
Software and licences Licences for IDEs, monitoring, remote access and admin tooling Training Courses for whole teams or individual coaching sessions online
Not sure what you need? We review your IT remotely and hand you a prioritised fix list Get the free review
All 14 solutions
Data in the EU Mailboxes, files and apps kept in EU-based data centres GDPR compliance Documents and controls ready before UODO knocks Remote and hybrid work Staff reach company files safely from any location Downtime prevention Tested backups, alerting and a recovery plan on paper
Retail and e-commerce Web shop, Allegro, BLIK and InPost wired into one flow Manufacturing Servers, network and ERP looked after so IT does not stop the line Healthcare and clinics Electronic records, e-prescriptions and patient data kept safe Construction Plans and BIM models available on site, on any device Logistics and transport WMS, carrier integrations and business continuity Public institutions KRI, digital accessibility, NIS2 and e-invoicing through PEF
Small businesses Microsoft 365 set up properly, helpdesk included Mid-sized companies SLA-backed care for servers, network and security Large enterprises Named engineers, short reaction times, regular reports Multi-branch companies Every branch runs on one IT standard
Your case is different? Tell us about it and we will assemble a mix of services around it Describe your case
About us The team and our remote-first approach Payments Invoices, KSeF, BLIK and payment terms Contact Email, the enquiry form and calls on Teams or Google Meet
Service · Cybersecurity

Application security

Business software tends to be well defended at the front door and wide open inside. Ordinary users can browse far beyond their job, the shop-to-warehouse link runs under an administrator login because it was quickest to set up, and the KSeF token lives in a text file on the accountant's desktop. We fix this on Comarch ERP Optima, enova365, Subiekt nexo or a CRM your developers built.

Send an enquiry Scope of work
1 integration
= 1 identity with minimum rights
6-monthly
role review
No keys
left in config files
Change log
edits and exports recorded

Included in this service

Every application is treated twice over: as a store of your data and as a possible exit route for it.

Talk the scope through with an engineer

Roles and rights

Permissions follow job descriptions instead of blanket access. A sales rep should not be able to pull the full contractor database in one click.

Integration identities

Each connection, whether BaseLinker, a payment gateway or the accounting sync, receives a separate account or Entra ID app registration holding precisely the permissions it uses.

Keys and tokens

Secrets move from config files into a vault, are pinned to known IP addresses and rotated on schedule. KSeF tokens carry only the scope their task demands.

App consents

We list the third-party apps employees have authorised against Microsoft 365 or Google Workspace data and introduce stricter approval for future ones.

Change history

A record of who altered prices, exported client lists or raised their own privileges. Without it an investigation has nothing to work on.

Patching and libraries

A fixed update routine tested on staging, plus monitoring of third-party components in custom-built software.

How we work together

Department managers decide who needs what. We convert those decisions into configuration.

01

Inventory

Every application in use, its users, the data inside and the places it sends that data.

02

Role design

Managers and we agree the roles and their contents, captured in a spreadsheet that is simple to maintain.

03

Implementation

Roles applied, integrations moved to their own identities, secrets tidied and logging enabled.

04

Recurring checks

Regularly, for example every six months, rights are matched against current positions, because staff change teams and their access tends to follow them.

An integration account is frequently the strongest identity in the company. It has full rights, a password that never changes and sign-ins nobody reviews. Steal its key and an attacker has everything at once, with no employee involved.

Questions and answers

Common, but avoidable. Access to a handful of modules is usually enough, and full rights can be granted temporarily for a specific upgrade. We change the password after each such session.

In a secrets vault or inside the system that uses it, never in a desktop file or an email. It should carry only the permissions the integration needs and be replaced when the person who generated it leaves.

This service covers configuration, permissions, integrations and dependencies. A full vulnerability hunt in the code is a penetration test, available separately in the testing and QA area.

Yes, above all where someone could change a supplier's bank account number or export data. If the system supports sign-in via Entra ID or Google Workspace, we connect it to the company identity with MFA, and access ends automatically when an employee leaves.

Neighbouring services

Go to the area overview
Service GDPR and personal data protection Who sees personal records, what is logged, what is encrypted Service Security policies and documentation Rules and procedures that survive real working days Service Security tooling deployment Choosing, piloting and rolling out tools remotely Service Infrastructure security Perimeter, network zones and safe remote access

Tidy up access across your systems

Name the systems your business relies on and how they connect. We will suggest where to begin.

Hours
Mon-Fri 8:00-18:00 CET, reply within one working day
Meetings
Online via Teams or Google Meet

We set strictly necessary cookies only: they keep the site running and remember the city you chose. Nothing here is used for advertising or tracking. More in our privacy policy.