Businesses Private clients
Remote assistance Help
Paying as a business Bank transfer via SWIFT, or card Is this invoice genuinely ours? PDF, ebInterface and ZUGFeRD
Deutsch English
Send an enquiry
Services
Solutions
Pricing
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT services Your IT team without the office desk: devices, logins and servers kept running from afar All-inclusive IT support One flat monthly price covering PCs, Microsoft 365 and your servers IT helpdesk Staff report an issue via mail, portal or a Teams chat and get screen-share help fast Service desk One front door for all requests, priorities tied to the SLA, a monthly summary for the boss Round-the-clock support Engineers on standby overnight, at weekends and over public holidays Start, Business and Premium plans Monthly care starting at €890 plus VAT
Service plans and SLAs Contractual reaction times of 4 hours, 1 hour or 15 minutes System administration Logins, virtual hosts, shared drives and infected machines, all fixed through an encrypted session IT infrastructure A candid stocktake, quicker machines and desktops streamed from the cloud Network and telephony Firewall and WLAN audited, connections watched, calls handled inside Microsoft Teams Cloud and hostingNew Servers, shop hosting, S3 storage and mailboxes hosted in Austria or elsewhere in the EU Backup and recovery Copies kept off the premises, separated from the company network, restored on a schedule to prove they work
GDPR and data protection Processing register, AVV contracts and safeguards aligned with GDPR and Austria's DSG Security policies and documentation Written house rules you can hand to an auditor or use for NIS2 groundwork Security solution roll-out We pick the product, install it and tune the rule set Infrastructure security Network zones, a cleaned-up rulebase and servers with nothing needlessly exposed Application security Reviewed code and deployments that stay free of new gaps Data loss prevention (DLP) Keeps sensitive files from leaving via mail attachments, flash drives or file shares Database security Tight rights, encrypted tables and an audit trail of every query Web application firewall (WAF) Bad traffic and bots stopped before reaching your site, Shopware store or API Access control and endpoint protection MFA, Intune policies and laptops you control centrally VPN and encryption Safe tunnels for home working and BitLocker on every notebook Vulnerability scans Regular scanning with fixes prioritised by severity Antivirus and EDR Malicious activity spotted, the compromised device quarantined immediately SOC monitoring Every alert reviewed by a human, clear-cut attacks contained automatically at night too System hardening Factory defaults locked down using CIS benchmarks and BSI recommendations Safe use of AI Ground rules for what may be typed into Copilot or ChatGPT
Websites and web applications 14 services spanning one-page sites to B2B portals, with SEO, care plans and post-hack repair E-commerce and integrations Webshop wired up to BMD or RZL, Amazon, eps and Austrian Post Custom software Line-of-business tools, apps and APIs that follow your processes, not the other way round Software testing and QA Defects and slowdowns caught while they are still cheap to fix
Artificial intelligenceNew Practical AI work, from spotting the right opportunity to staff training under the AI Act Data and analytics Tidy master records, a single reporting base and invoices read in automatically IT advisory and audit A second opinion on your IT plans and on how the pieces connect Online marketing Leads followed from the ad click to the signed offer, tracked in a CRM
Software and licensing Official subscriptions for IDEs, monitoring suites and sysadmin tools Training Instructor-led online sessions for teams or individuals
No idea which step comes first? We review your setup over a remote session and email you a prioritised action list Request a review
Browse all 13 solutions
NIS2 readiness Check whether you fall in scope, then set up risk handling, incident reporting and proof GDPR compliance Paperwork and technical controls in order well before the DSB comes knocking Remote and hybrid work Employees reach files and programs safely wherever they happen to be working Downtime prevention Proven backups, monitoring and an emergency playbook prepared in advance
Retail and e-commerce Shopware or WooCommerce joined up with marketplaces, eps and couriers Manufacturing ERP, servers and plant network monitored so the shop floor keeps running Medical practices and healthcare Ordination software, ELGA and e-card stable, with health data locked down Construction Plans, BIM files and AVA data synced to tablets on site Logistics and transport WMS, carrier links and dispatch that survives an outage
Small businesses A well-run Microsoft 365 and help on hand, no IT hire needed Mid-sized companies Infrastructure and security under a signed service agreement Large enterprises Assigned engineers, fast reaction and reporting to your CIO Multi-site companies Identical IT at every branch, administered from one place
Your case looks different? Describe it in a few lines, and we assemble only the pieces that matter to you Send an enquiry
About us The people behind Apply and our remote-only way of working Payment Invoices, electronic formats and due dates Contact Mailboxes, our web form, plus Teams or Meet calls
Service · IT security

VPN and encryption

Encryption sounds like mathematics, but day to day it comes down to very practical questions. What happens when a field sales rep has her laptop stolen from the car? Can someone on hotel Wi-Fi read along while a colleague connects to the server? How does a law firm send a draft contract to a client without it crossing several mail servers in the clear? And who actually holds the recovery key when BitLocker suddenly demands it after a firmware update? We make sure data is protected both in transit and on the device, in a way that does not get in the way of work and never leaves anyone locked out in an emergency. That covers everything from the encrypted tunnel between head office and a branch, to remote access for home workers, to the question of how keys are stored and withdrawn when someone leaves. All configuration is carried out remotely.

Send an enquiry Inclusions overview
BitLocker
and FileVault on every laptop
Recovery keys
held centrally, not on a scrap of paper
WireGuard or IPsec
in place of outdated protocols
Multi-factor
on every VPN login

Everything this covers

We pick the method to suit the purpose. Not every remote connection needs a full VPN, and not every document needs encrypting individually.

Settle the details with an engineer

Site links

Site-to-site tunnels between the firewalls at head office, branches and warehouse, using current ciphers and rules on which networks may reach each other.

Remote access

A VPN client with multi-factor sign-in for home and mobile workers, or access that exposes individual applications only. Old connections based on a shared key are replaced.

Disk encryption

BitLocker on Windows and FileVault on macOS, enforced through Intune, with recovery keys stored centrally. Servers holding sensitive data and external backup drives are encrypted as well.

Email encryption

TLS between mail servers as the baseline, plus Microsoft Purview message encryption or S/MIME for content that must stay protected at the recipient end.

Secure file exchange

Shares with expiry dates and passwords instead of attachments; encrypted archives only as an exception. Separate exchange areas for law firms and medical practices handling especially sensitive files.

Certificates and key handling

An overview of TLS certificates for website, mail server and VPN with their expiry dates, and automatic renewal wherever possible, so nothing lapses unnoticed.

Our working method

Encryption rarely fails on the technology; it fails on forgotten keys. That is why key management comes first with us.

01

Stocktake

Which devices are encrypted, where keys are kept, which tunnels and remote connections exist, and which protocols and certificates are in use.

02

Concept

Agreeing methods, key storage and responsibilities, including who may release a recovery key in an emergency.

03

Implementation

Encrypting devices while they stay in use, moving tunnels and remote access over during maintenance windows, and short guides for staff.

04

Proof

A report on the encryption status of every device, suitable for your insurer, a customer or your GDPR records.

An encrypted laptop turns a data breach into mere property loss. When an unencrypted device holding customer data is stolen, the question of notifying the Data Protection Authority arises quickly. If it is demonstrably encrypted and the key is safely stored, the assessment usually looks very different. The evidence comes from a report in your device management console.

Frequently asked questions

On current hardware you will hardly notice, because processors accelerate encryption in hardware. The initial encryption runs in the background while people carry on working.

Not for email, Teams and SharePoint, which are encrypted already and protected by multi-factor and conditional access. A VPN or application gateway remains necessary for terminal servers, on-premises business software or a file server in the office.

If the device is registered in Entra ID or Active Directory, the key is usually stored there. Write to support@apply.at or helpme@apply.at and we will retrieve it remotely from the admin portals. If it truly is missing, the data on that device is lost, which is why we arrange central storage beforehand.

For recipients without their own certificates, an encrypted Microsoft 365 message opened with a one-time passcode is simpler than S/MIME, as is a download link with an expiry date. We set it up so it takes your team a single click.

Related work in the same area

Open the full area page
Service GDPR and data protection Data map, permissions, audit logs and a plan for the first 72 hours Service Security policies and documentation A policy, a risk assessment and procedures that people actually follow Service Security solution roll-out Choosing, piloting and deploying tools remotely Service Infrastructure security Perimeter, network segments and safe remote access

Encrypt what travels and what can go missing

Describe your sites, home working and devices. We will show where unencrypted data is sitting and the order in which we would protect it.

Availability
Monday to Friday, 8:00-17:00 Austrian time (CET/CEST), reply within one working day
Meetings
By video on Microsoft Teams or Google Meet

We only use cookies that are technically required: to run the website and to remember the location you picked. There are no advertising or tracking cookies. Details are in the privacy notice.