Service · Cybersecurity

VPN and encryption

Whether an incident is an inconvenience or a disaster often comes down to encryption. Consider a building contractor headquartered in Murska Sobota, with a materials yard nearby and a project office in Maribor. The tunnel joining the sites uses a dated protocol set up long ago by a former IT provider, foremen log in to the ERP from site cabins with one VPN account they all share, and not one notebook is encrypted. One stolen bag from a van and out go tenders, bills of quantities, subcontractor records and every password the browser remembered. With an encrypted drive, it would have cost only the hardware. This service makes your information unreadable to outsiders, whether it is travelling or stored: secure tunnels between locations, verified access for staff working off site, whole-drive encryption on laptops and protected channels for confidential paperwork. We put special effort into the part everyone forgets, which is where recovery keys live and who can retrieve them. Everything is configured remotely on the kit you already own.

BitLocker
and FileVault across all laptops
Recovery keys
held centrally rather than on paper
WireGuard or IPsec
replacing legacy tunnels
Two-step sign-in
required for each VPN user

Scope of the service

We pick the technique to fit the need. Remote work does not always require a full tunnel, and individual files rarely need encrypting one by one.

Check the scope with an engineer

Links between locations

Gateway tunnels linking HQ with depots, branches and production sites. Outdated cipher suites are retired, and you are alerted if a link goes down.

Working away from the office

An individual VPN login with two-step sign-in for each person on the road or at home. Where possible, people only reach what they need, for example the ERP, not the entire LAN.

Encrypted drives

BitLocker for Windows and FileVault for Macs, made mandatory via Intune. Recovery keys sit in Entra ID, with every retrieval logged.

Protecting email

Server-to-server mail always encrypted in transit, and Purview or a similar product protecting the most sensitive messages. Recipients need no special software.

Sharing files safely

Time-limited, password-protected links replace attachments, while recurring traffic with bookkeepers, solicitors or freelancers moves into its own logged area.

Certificate housekeeping

A register of certificates for web, mail and remote access, every one with an end date and auto-renewal. Few outages are as annoying as one caused by a certificate that lapsed unnoticed.

How the work runs

Encryption seldom fails technically; lost keys are the usual culprit, which is why key handling is settled first.

01

Inventory

Which machines are encrypted, where keys are held, how each tunnel is configured, who owns a VPN login and which of those accounts anyone still uses.

02

Design

Methods are chosen, along with where keys are stored, who can retrieve them and who owns each part. A lost-key procedure is part of it.

03

Rollout

Laptops encrypt in the background during normal use; link and remote-access changes happen out of hours, and staff receive a one-page guide.

04

Evidence

A report on the encryption state of every device, useful for insurers, client questionnaires and your written GDPR safeguards.

If an encrypted laptop vanishes, you replace hardware. If an unencrypted one vanishes, you may be reporting a breach. What separates those outcomes is often a single setting plus a recovery key filed correctly, yet a surprising number of companies discover the switch was only ever flipped on some machines.

Your questions answered

Modern processors encrypt in hardware, so users rarely notice any difference. Initial encryption happens quietly while people keep working, though very old machines may take a little longer the first time.

Usually not. When everything lives in the cloud, device compliance and access policies beat a tunnel. Where staff must reach an office ERP or file server, we provide a VPN or per-application access. Your application mix decides.

Then the encrypted data is effectively gone, which is precisely what encryption is meant to achieve against thieves. So we escrow every key, normally in Entra ID, keep a log of who views them and test that each one can genuinely be found.

No. Encryption keeps content private to the recipient; a qualified signature proves who signed. They solve different problems. Qualified certificates come from issuers such as SIGEN-CA or Halcom, and we make sure yours can be used safely on your devices.

Protect data in transit and on the road

Share the number of sites, remote workers and laptops, and you will receive an encryption roadmap based on today's position.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.