Services
Security and data protection
Business software handles personal data, financial data and trade secrets. We design every system so that access is controlled, data is protected, and every action can be traced.
Security is a design decision
Many security problems come from early decisions: who can see what, where data is stored, how passwords and keys are handled. Fixing them later is expensive.
Data protection laws, such as the GDPR in the EU and Law no. 195/2024 in Moldova, also require companies to protect personal data by design. Good architecture makes compliance much easier.
What we build and review
Secure authentication
Strong passwords, two-factor login and single sign-on with company accounts.
Role-based access
Each user sees and does only what their role allows.
Audit trails
Who did what and when, for every important action.
Encryption and backups
Data encrypted in transit and at rest, with tested backup and restore.
Security reviews
Review of existing applications against common risks such as the OWASP Top 10.
Privacy by design
Data minimisation, retention rules and support for data subject requests.
How it fits together
Connects to
- Users and devices
- Business data
- External access
Secure architecture
Used by
- Controlled access
- Protected data
- Full audit trail
Standard in our projects
Access
- Two-factor authentication
- Role-based permissions
- Session and device management
Data
- Encryption in transit (TLS) and at rest
- Automated, tested backups
- Data retention rules
Oversight
- Audit log
- Security updates
- Dependency vulnerability scanning
Typical scenario
An illustrative example of the kind of project we build, not a description of a specific client.
Situation
A company's internal application gives every employee access to all records, including salaries and client contracts, through a shared login.
What we build
Personal accounts with two-factor login, roles per department, an audit log, and encrypted backups.
Result
Each person sees only what they need, every change is traceable, and data can be restored if something goes wrong.
How the project runs
Assessment
Review of data, users, access and risks.
Priorities
Most important risks first, with a clear plan.
Implementation
Access control, encryption, logging and backups built or improved.
Testing
Checks against common attack patterns and restore tests.
Ongoing
Updates and periodic reviews as part of support.
What you receive
- Security assessment report
- Implemented controls
- Access and roles documentation
- Backup and restore procedure
- Recommendations
Technologies we use
- OAuth 2.0 and OpenID Connect
- TLS
- Encryption at rest
- OWASP guidelines
- Vulnerability scanning
- Backup automation
Questions about this service
Do you help with GDPR compliance?
We build software that supports compliance: access control, data minimisation, retention and export of personal data. Legal advice remains with your lawyer or data protection officer.
Can you test our existing application?
Yes. We review it against common risks and give you a prioritised list of fixes.
Where is our data stored?
Where you decide: on your servers, or with a provider in the region you choose, such as the EU.
What happens if data is lost?
Backups are automated and restore is tested, so data can be recovered within an agreed time.
Related services
All services
Let's talk about your project
Describe what you need in a few lines. We reply within one business day with questions and next steps.
Request a quote