Business Individuals Public sector
Remote support Help
Pay an invoice Card payment or SEPA transfer Is this invoice ours? Invoices and e-invoicing
Français English
Send an enquiry
Services
Solutions
Pricing
Courses
Company
Contact
Send an enquiry
All 83 services
IT outsourcing An external IT team that works remotely and knows your systems inside out Managed IT support Your laptops, servers and Microsoft 365 in our hands at one fixed price per month IT helpdesk Staff raise issues by email, through the portal or in a Teams chat Service desk One queue for every request, priorities set by the SLA, reporting each month 24/7 IT support Night, weekend and holiday cover for systems that must stay up Start, Business and Premium plans Managed IT from EUR 690/month excl. VAT
Support plans and SLA Contracted reaction times of 15 min, 1 h or 4 h Systems administration Servers, user accounts, hypervisors and sluggish or infected PCs, all handled remotely IT infrastructure An honest review of what you run, speed fixes and desktops delivered from the cloud Networking and VoIP Wi-Fi and LAN checks, 24/7 link monitoring, calls through Teams or a VoIP provider Cloud and hostingNew Virtual and physical servers in EU data centres, shop hosting, S3 storage and company mail Backup and restore Copies that are tested by actually restoring them, stored locally and in the cloud
GDPR and personal data protection Registers, processor agreements and the technical measures behind them Security policies and documentation Written rules prepared with audits and NIS2 in mind Security tooling deployment We choose the tools, deploy them and fine-tune the rules Infrastructure security Split networks, strict firewall policy, hardened servers Application security Reviewing code and securing how releases ship Data leak prevention (DLP) Control over which files leave the organisation Database security Who can read what, encrypted at rest, with every access logged Web application firewall (WAF) Filters hostile traffic before it hits your site, shop or API Access control and endpoint security Intune-managed devices with MFA enforced VPN and encryption Encrypted laptop drives and protected remote connections Vulnerability scanning Regular scans with a to-do list ordered by severity Antivirus and EDR Threats detected, the infected device isolated SOC monitoring A security team triaging every alert, day and night System hardening Defaults tightened in line with CIS benchmarks Secure use of AI Clear policies on what staff may paste into Copilot or ChatGPT
Websites and web apps Company sites, shops, portals and B2B platforms, plus UX, SEO, ongoing care and rescue after a hack E-commerce and integrations Orders flowing between your shop, Amazon.fr, the accounting package, card payments and carriers Bitrix24 and intranet A shared workspace for CRM, tasks and documents, configured and licensed Bespoke software Web and mobile applications built to order, integrations, migrations and teams on demand Software testing and QA Manual and automated checks, load tests, usability sessions and pentests before go-live
Artificial intelligenceNew From a first pilot to production models, with GPU capacity and staff workshops Data and analytics One reliable source of figures, dashboards and invoices read automatically IT consulting and audit An outside view of your roadmap and of how your systems fit together Digital marketing Where leads come from, where they get lost and how the CRM should track them
Software and licences Licences for IDEs, monitoring, remote access and admin tooling Training Courses for whole teams or individual coaching sessions online
Not sure what you need? We review your IT remotely and hand you a prioritised fix list Get the free review
All 14 solutions
Data in the EU Mailboxes, files and apps kept in EU-based data centres GDPR compliance Records and controls ready long before the CNIL asks Remote and hybrid work Staff reach company files safely from any location Downtime prevention Tested backups, alerting and a recovery plan on paper
Retail and e-commerce Web shop, Amazon.fr, card payments and Mondial Relay wired into one flow Manufacturing Servers, network and ERP looked after so IT does not stop the line Healthcare and clinics Electronic records, e-prescriptions and patient data kept safe Construction Plans and BIM models available on site, on any device Logistics and transport WMS, carrier integrations and business continuity Public institutions RGAA 4.1 accessibility, NIS2 and invoices filed on Chorus Pro
Small businesses Microsoft 365 set up properly, helpdesk included Mid-sized companies SLA-backed care for servers, network and security Large enterprises Named engineers, short reaction times, regular reports Multi-branch companies Every branch runs on one IT standard
Your case is different? Tell us about it and we will assemble a mix of services around it Describe your case
About us The team and our remote-first approach Payments Invoices, e-invoicing, card payments and payment terms Contact Email, the enquiry form and calls on Teams or Google Meet
Service · Cybersecurity

Database security

A database gathers everything the company knows into one place, in the format that is easiest of all to copy. Even so it is often guarded less carefully than the application in front of it: careful roles and profiles in the software, and underneath a single all-powerful account whose password is known to the previous IT person, the current maintainer and the firm that installed the ERP six years ago.

Send an enquiry What the work covers
Shared admin
the account we switch off
1433
a port with no business facing the internet
TDE
encryption of the database files
Backups
encrypted and immutable

Where this service reaches

Three questions cover the subject: who can connect, what they are allowed to do, and whether a trace remains. We work with SQL Server, PostgreSQL, MySQL and MariaDB, on physical servers, on a VPS or in the cloud.

Put your scope to an engineer

Accounts

A named account for each administrator and a restricted account for each application. The all-powerful account is disabled or locked in a vault, with a written procedure for the rare occasions it must come out.

Network isolation

Direct connections from user workstations are closed, and exposure to the internet should not exist at all. The application talks to the database; people talk to the application.

Access auditing

Sign-ins, permission changes and above all bulk reads. Pulling the whole orders table cannot pass without leaving a trace somebody can read the next morning.

Encryption

Transparent encryption of the data files, encrypted application connections, and encryption of every backup file, including the ones produced by hand just before an upgrade.

Test datasets

Anonymised copies for developers and testers. Checking a new report needs neither real names nor real addresses nor real bank details.

Engine patching

A regular routine for applying security fixes to the engine, tried on a copy before anything touches production.

The way an engagement runs

Changes to a production database happen in a window agreed with you and, where the software vendor has its own requirements, with them as well.

01

Review

Who connects, from where and with which rights. Forgotten accounts nearly always turn up: a consultant from years back, an application retired two summers ago.

02

Tidying access

Unnecessary network paths closed, one account created per administrator, and passwords shared between several people withdrawn.

03

Auditing and encryption

Logging switched on, then encryption applied to the data and to the backup archive alike.

04

Proof

We check that a bulk read really does leave a trace and that restoring from an encrypted backup actually works, with a stopwatch running.

A backup is a database too, just watched less closely. Hand-made export files often sit on a network share half the company can open, unencrypted and with no record of who read them. Whoever holds the copy holds the data, however carefully the server itself has been hardened.

Questions and answers

We first try to reproduce it on an anonymised dataset, which is enough in most cases. If not, access to production is named, time-limited, read-only and logged, and it closes itself at the agreed deadline.

That depends on the version and edition installed. Recent versions offer it more widely than they used to, so we look at your licence before recommending anything. On an older engine we go through disk and backup encryption instead, or plan an upgrade.

Ask which operations actually require it. In almost every case a narrower account will do, or the full account is opened for the length of an upgrade with the password changed at the end of the session. We can hold that technical conversation on your behalf.

At the rhythm set in your backup plan, and always after a significant version change. The test means bringing the database up in a separate environment and starting the application on it, not confirming that a file exists and is roughly the right size.

More from this area

See the whole area
Service GDPR and personal data protection Data mapping, access rights, audit logs, encryption Service Security policies and documentation Policies and procedures people can actually follow Service Security tooling deployment Selection, a pilot, then a remote roll-out that finishes Service Infrastructure security The internet edge, network zones and remote access

Who holds the keys to your database?

Tell us which engines run your applications and where they are hosted. We will propose the scope of a first review.

When we are around
Weekdays, 8:00 to 18:00 CET; answers land inside one working day
Talking it through
A call on Teams or Google Meet, whenever writing is not enough

We set strictly necessary cookies only: they keep the site running and remember the city you chose. Nothing here is used for advertising or tracking. More in our privacy policy.