Services
Security and data protection
Business software deals with personal data, financial data and trade secrets. We design each system so that access is controlled, data is protected and every action can be traced.
Security is a design decision
Many security issues come from early choices: who can see what, where data lives, how passwords and keys are managed. Correcting them later is costly.
Data protection laws, such as the GDPR in the EU and Bulgaria's Personal Data Protection Act, also require companies to protect personal data by design. Sound architecture makes compliance far easier.
What we build and review
Secure authentication
Strong passwords, two-factor login and single sign-on with company accounts.
Role-based access
Every user sees and does only what their role permits.
Audit trails
Who did what and when, for every important action.
Encryption and backups
Data encrypted in transit and at rest, with tested backup and restore.
Security reviews
Review of existing applications against common risks such as the OWASP Top 10.
Privacy by design
Data minimisation, retention rules and support for data subject requests.
How the pieces connect
Connects to
- Users and devices
- Business data
- External access
Secure architecture
Used by
- Controlled access
- Protected data
- Full audit trail
Standard in our projects
Access
- Two-factor authentication
- Role-based permissions
- Session and device management
Data
- Encryption in transit (TLS) and at rest
- Automated, tested backups
- Data retention rules
Oversight
- Audit log
- Security updates
- Dependency vulnerability scanning
Typical scenario
An example of the type of project we build. It does not describe a specific client.
Situation
A company's internal application lets every employee see all records, salaries and client contracts included, through one shared login.
What we build
Personal accounts with two-factor login, roles by department, an audit log, and encrypted backups.
Result
Everyone sees only what they need, every change can be traced, and data can be restored if something goes wrong.
How the project unfolds
Assessment
Review of data, users, access and risks.
Priorities
The biggest risks first, with a clear plan.
Implementation
Access control, encryption, logging and backups built or strengthened.
Testing
Checks against common attack patterns, plus restore tests.
Ongoing
Updates and periodic reviews as part of support.
What you get
- Security assessment report
- Implemented controls
- Access and roles documentation
- Backup and restore procedure
- Recommendations
Technologies we use
- OAuth 2.0 and OpenID Connect
- TLS
- Encryption at rest
- OWASP guidelines
- Vulnerability scanning
- Backup automation
Questions about this service
Do you help with GDPR compliance?
We build software that supports compliance: access control, data minimisation, retention and export of personal data. Legal advice stays with your lawyer or data protection officer.
Can you test our existing application?
Yes. We check it against common risks and give you a list of fixes in order of priority.
Where is our data stored?
Wherever you decide: on your own servers, or with a provider in a region you pick, such as the EU.
What happens if data is lost?
Backups run automatically and restore is tested, so data can be recovered within an agreed time.
Related services
All services
Let's discuss your project
Explain what you need in a few lines. Within one business day we get back to you with questions and the next steps.
Request a quote