For business For individuals For public sector For partners
Request an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский English 中文
Sign in
Services
Solutions
Service plans
Case studies
Training
About us
Contacts
Sign in
All services
Basic Up to 15 workstations, business-hours support Standard Up to 50 workstations, 24/7 support, servers and network Premium Dedicated team, 15-minute response Project-based One-off work at a fixed quote Free IT audit Infrastructure assessment in 5 days
IT outsourcing and technical support Requests, on-site engineers, 24/7 Service Desk Support levels and SLA Response time fixed in the contract System administration Windows and Linux servers, AD, virtualisation IT infrastructure Core environment, assessment, VDI Networks and telecom Structured cabling, design, audit and monitoring Low-voltage systems Video surveillance and access control Cloud services and hostingNew VPS/VDS, servers for 1C and Bitrix, S3 Backup Backups, cloud storage, recovery plan
Regulatory requirements 152-FZ, personal data, documentation Protection of systems and data Infrastructure, applications, databases, WAF Monitoring and control SOC, vulnerability scanners, antivirus protection Security tools Supply and deployment of security tools, VPN and cryptography
Websites and web development From a business card site to a B2B platform on 1C-Bitrix E-commerce and integrations 1C exchange, payments, delivery, marketplaces Bitrix24 and portals Portal and CRM implementation, licences Custom development Purpose-built services, mobile applications Testing and QA Functional, load and automated testing
Artificial intelligenceNew AI implementation, strategy, staff training Data and analytics Data quality, warehouses, document processing Consulting and audit Digital strategy, systems and architecture audit Marketing Audit, sales funnel, consulting
Workstations Desktops, laptops, peripherals, consumables Servers and networks Servers and storage, network hardware, UPS Retail equipment Online POS, product labelling, scanners Software Antivirus, development and admin software Training Corporate, group and individual
Not sure what to choose? We will run a free infrastructure assessment in 5 days Request an audit
All solutions
Import substitution Migration to Russian software and hardware 152-FZ compliance Documents and safeguards ready for an inspection Office relocation Network, servers and workstations at the new site Opening a branch Standard setup and a link to head office Remote work VDI, 1C access, secure channels Downtime protection Backups, monitoring, recovery plan
Retail and e-commerce POS, product labelling, online store, 1C exchange Manufacturing Shop-floor networks, servers, accounting systems Healthcare Personal data protection, fault tolerance Construction Site-to-site connectivity, workstations, CAD Logistics Warehouse, data terminals, integrations and monitoring Public sector Import substitution, portals, FSTEC requirements
Small business Up to 15 workstations, basic support Mid-sized business Servers, network and 24/7 support Large business Dedicated team, SLA, reporting Branch network One IT standard across every location
No suitable scenario? Describe your task and we will propose a solution that fits your terms Submit a request
About us What we do and how we work Special offers Current promotions and terms Contacts Phone, email and office address

What is included

The work splits into an organisational and a technical part. Separately they do not protect anything: documents without measures do not save the data, measures without documents do not pass an inspection.

Discuss the scope

Processing audit

We find every place where personal data is processed: systems, spreadsheets, paper files, contractor services.

Notification to the regulator

We file or update the details and bring the declared purposes into line with the real ones.

Document set

Policy, orders, registers, an access regulation, consent forms, a log of requests from data subjects.

Threat model

We determine the relevant threats and the protection level and issue the classification report.

Technical measures

Access separation, logging, antivirus, network segmentation, protection of transmission channels.

Response procedure

A procedure for a data leak: the regulator has to be notified within twenty four hours, which is unrealistic without one.

How the work runs

The usual timescale for a company with up to 100 workplaces is two to three months. Most of the time goes on the inventory and on agreeing the documents.

01

Survey

We look at the systems and processes and interview the departments. The output is a register of the data, its purposes and its retention periods.

02

Documents

We prepare a set that matches your processes rather than a generic one. A gap between the paperwork and the practice is the main cause of enforcement notices.

03

Technical measures

We implement what the assigned protection level requires. Part of it is covered by features built into the systems.

04

Maintenance

Once a year we review the registers and documents, and we support you during an inspection.

An inspection almost never starts with the technology. First they ask for the notification, the policy, the orders and the consents. They do not always get as far as the protection tools, because if the first four items are missing the notice is written on those.

Frequently asked questions

It does. The moment you take somebody name and phone number you are a personal data operator. Every company has an HR department and a client database, so practically any organisation falls under the law regardless of size.

Not always. The set of measures depends on the protection level, and that depends on the type of threats and the category of data. For a typical company with no biometric or medical information that is the third or fourth level, where a substantial part of the requirements is covered by mechanisms built into the systems.

The responsibility stays with you. You need a processing agreement listing the permitted actions and the protection requirements. It is a separate document and its existence is checked.

Other services in this area

The whole area
Service Personal data security Technical protection of employee and client data Service Policies and internal regulations Policies, orders, procedures and regulations Service Supply and rollout of security tools Selection, supply and configuration of protection tools Service Infrastructure protection Perimeter, segmentation, network access control

We will assess your compliance

Tell us what data you process and what has already been done. We will say what is missing and how long it will take.