We help you protect your systems and get in line with GDPR, NIS2 and the Cyber Resilience Act, without big-firm consulting and with a clear path.
We start with an assessment and step in only where needed.
We secure workstations, network, email and accounts, lowering the likelihood of attacks and downtime.
We support the technical and organisational side of protecting the data of customers, employees and suppliers.
NIS2 mainly concerns medium and large organisations in specific sectors, but it also reaches their suppliers. We check with you whether and how it applies.
It concerns anyone who makes, imports or distributes products with digital elements (software, connected devices). Reporting duties for vulnerabilities and incidents apply from 11 September 2026; full application from 11 December 2027.
We are technical consultants: we do not issue certifications and we do not replace a lawyer or a DPO. For legal matters we work alongside the professional you trust.
A quick orientation, not legal advice.
A defined first step, at a fixed price, to understand where you stand and what is really needed.
A clear action plan · An illustrative example of the kind of document we deliver. The data is made up.
| Priority | Action | Area |
|---|---|---|
| High | Turn on two-factor authentication for email | Cybersecurity |
| High | Check that backups can be restored | Cybersecurity |
| Medium | Records of processing and privacy notices | GDPR |
| Medium | Check whether a customer asks you for NIS2 requirements | NIS2 |
| Low | Basic staff training on phishing | Cybersecurity |
Interview and analysis: systems, data, suppliers and the obligations that apply to you.
A document with priorities, timing and costs. You decide what to do and when.
We put the technical measures in place and prepare procedures and records.
Periodic checks and updates as rules and systems change.
Tell us your sector, number of workstations and what worries you. We reply with a written proposal, with price and timing, before any work begins.
It depends. In general the directive applies to medium and large organisations in the listed sectors (energy, transport, health, digital infrastructure, manufacturing and others), with some exceptions. Even if you are not in scope, you may supply a company that is, and receive security requirements from them. We check this together in the initial assessment.
No. We help you understand what is needed, put the technical measures in place and prepare the documentation. Certifications and legal opinions are for accredited bodies and professionals.
The regulation covers products with digital elements, so it includes software that is sold or distributed, not only hardware. It does not cover simply using software and devices you bought. We check your case.
After a first conversation we send a written proposal with price and timing. We start once payment is made online, before any work begins.
Yes, most of the work is done remotely, with you connected when we work on your systems.
Before the session we tell you which connection tool to use. You start and end the session, and we stay connected only for as long as needed.