For business For individuals For public sector For partners
Request an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский English 中文
Sign in
Services
Solutions
Service plans
Case studies
Training
About us
Contacts
Sign in
All services
Basic Up to 15 workstations, business-hours support Standard Up to 50 workstations, 24/7 support, servers and network Premium Dedicated team, 15-minute response Project-based One-off work at a fixed quote Free IT audit Infrastructure assessment in 5 days
IT outsourcing and technical support Requests, on-site engineers, 24/7 Service Desk Support levels and SLA Response time fixed in the contract System administration Windows and Linux servers, AD, virtualisation IT infrastructure Core environment, assessment, VDI Networks and telecom Structured cabling, design, audit and monitoring Low-voltage systems Video surveillance and access control Cloud services and hostingNew VPS/VDS, servers for 1C and Bitrix, S3 Backup Backups, cloud storage, recovery plan
Regulatory requirements 152-FZ, personal data, documentation Protection of systems and data Infrastructure, applications, databases, WAF Monitoring and control SOC, vulnerability scanners, antivirus protection Security tools Supply and deployment of security tools, VPN and cryptography
Websites and web development From a business card site to a B2B platform on 1C-Bitrix E-commerce and integrations 1C exchange, payments, delivery, marketplaces Bitrix24 and portals Portal and CRM implementation, licences Custom development Purpose-built services, mobile applications Testing and QA Functional, load and automated testing
Artificial intelligenceNew AI implementation, strategy, staff training Data and analytics Data quality, warehouses, document processing Consulting and audit Digital strategy, systems and architecture audit Marketing Audit, sales funnel, consulting
Workstations Desktops, laptops, peripherals, consumables Servers and networks Servers and storage, network hardware, UPS Retail equipment Online POS, product labelling, scanners Software Antivirus, development and admin software Training Corporate, group and individual
Not sure what to choose? We will run a free infrastructure assessment in 5 days Request an audit
All solutions
Import substitution Migration to Russian software and hardware 152-FZ compliance Documents and safeguards ready for an inspection Office relocation Network, servers and workstations at the new site Opening a branch Standard setup and a link to head office Remote work VDI, 1C access, secure channels Downtime protection Backups, monitoring, recovery plan
Retail and e-commerce POS, product labelling, online store, 1C exchange Manufacturing Shop-floor networks, servers, accounting systems Healthcare Personal data protection, fault tolerance Construction Site-to-site connectivity, workstations, CAD Logistics Warehouse, data terminals, integrations and monitoring Public sector Import substitution, portals, FSTEC requirements
Small business Up to 15 workstations, basic support Mid-sized business Servers, network and 24/7 support Large business Dedicated team, SLA, reporting Branch network One IT standard across every location
No suitable scenario? Describe your task and we will propose a solution that fits your terms Submit a request
About us What we do and how we work Special offers Current promotions and terms Contacts Phone, email and office address

What the solution includes

Both sides of the matter: the paperwork the regulator checks and the technical measures that actually protect the data.

Discuss the timeline

Assessment

What data is processed, where it sits and who has access. This determines the data category and the required protection level.

Threat model

It defines what exactly we are defending against. This document rules out unnecessary security tools and saves a noticeable amount of budget.

The governance document set

Orders, policies, regulations, logs and consent forms. What an inspector asks for first.

Technical measures

Access separation, centrally managed antivirus, logging, channel encryption and security tools matched to your protection level.

Notification to the regulator

Preparing and filing the personal data processing notification, and checking that any already filed is still current.

Staff briefing

Who works with the data and how, what must not leave the company, how clearance is granted. With signatures in the log.

Order of works

Trying to cover everything at once is expensive. The sequence that works goes from the assessment to the documents and only then to buying security tools.

01

What is processed and where

We find every place data is stored: HR records, the client database, video surveillance, the website, cloud services.

02

Protection level

We determine the data category and the protection level. The scope of requirements and the cost of everything else follow from it.

03

Documents

A threat model and the governance document set in ten business days. It covers most of what an inspection raises.

04

Technical measures

We deploy security tools matched to the threat model and brief the staff. After that we keep it all in working order.

A fine is not the main risk. A leaked client database damages your reputation more than any regulatory order, and repairing the relationship with a counterparty who has learned their data leaked costs more than the document set.

Frequently asked questions

Yes. The law makes no exceptions for size: if you keep employee records and client contacts, you are a personal data operator with all the obligations. The workload for a small company is smaller, but the same set of documents is required.

For formally passing an inspection, sometimes yes, but that protects you from a fine, not from a breach. We always show which part of the package satisfies the regulator and which actually reduces risk, and let you choose knowingly.

If the inspection is two weeks away or more, then usually yes, the document set and the baseline measures can be done in time. If there is less time, we will say honestly that only part can be covered and set priorities: first what gets asked for first.

It depends on the required protection level and on whether you work with public sector clients. In some cases certification is mandatory, in others any reliable solution will do. This is determined during the assessment, before any purchase.

The set needs maintaining: processes, systems and requirements change. The list of processed data should be reviewed once a year and whenever new systems appear. This can be covered by a support contract.

Which services it is built from

The whole catalogue
Area 09 Information security The core of the solution: documents and security tools Area 03 System administration Access separation and logging Area 08 Backup Data preservation as part of the requirements Area 21 Training Staff briefing on handling data

We will assess your inspection readiness

Tell us what data you process and what has already been done. We will run an assessment and show the gap between where you are and what is required.