Eleven engineering services, one team
Six disciplines and five specialised infrastructure and compliance services. Each works on its own; combined, they share design, documentation and a single accountable lead.
Web design
Design, development and maintenance of corporate websites and web applications, hosted on managed cloud with the security of a critical environment.
- Corporate sites and e-commerce, accessible (WCAG 2.1 AA)
- Dedicated or shared VPS hosting on Azure, AWS or European data centres
- Anti-DDoS protection with HAProxy, TLS rated A+ and regular backups
- Azure / AWS
- VPS
- HAProxy
- TLS A+
- CIS Benchmarks
Enquire
Cybersecurity
Systematic hardening of Linux and Windows Server systems with CIS Benchmarks and SCAP assessment, or with whichever guide applies to each client, without degrading operations.
- Hardening to CIS Benchmarks, with automated SCAP assessment
- Audit and compliance for NIS2 and the applicable guide; CCN-STIC and ENS for the public sector
- Expert report signed with a SHA-256 hash
- CIS Benchmarks
- SCAP
- CCN-STIC / ENS (public sector)
- RHEL · Rocky · Debian
- Windows Server
Enquire
Artificial intelligence
Sovereign AI: local models and assistants that work on your data without sending it to external providers.
- Local open-source LLMs (Llama 3, Mistral, DeepSeek) on your own servers or private clouds
- RAG over internal knowledge bases, with role-based access control
- AIOps agents and an AI Gateway that anonymises personal data (EU AI Act and GDPR)
- On-premise LLMs
- RAG
- vLLM / Ollama
- Qdrant / pgvector
- EU AI Act
Enquire
Home automation
Smart homes and buildings on open protocols, which keep working without depending on a single manufacturer.
- Lighting, climate, access and energy
- Open protocols such as KNX and Matter
- Local control, with the cloud as an option
Enquire
Automation
Automation as code: declared, Git-versioned and reproducible infrastructure, with no manual changes on servers.
- Ansible and Terraform with idempotent remediation (zero-drift)
- CI/CD pipelines and GitOps, with the Git repository handed over to the client
- Workflows and application integration through APIs
- Ansible
- Terraform
- PowerShell
- GitOps
- CI/CD
Enquire
Electrical
Design, supervision and commissioning of electrical installations, connected from day one to every other system.
- Projects and technical documentation
- Switchboards and structured cabling
- Energy efficiency and self-generation
Enquire
Hybrid cloud and classified networks
High-security network perimeters with a dual firewall line (Fortinet and multi-vendor environments), large-scale Microsoft Azure deployments and secure connection to on-premise data centres through encrypted IPsec tunnels.
- VLAN segmentation and high availability with HAProxy and Keepalived
- Azure deployments of more than 9,000 servers
- Classified networks with redundant IPsec
- Microsoft Azure
- Fortinet FortiGate
- Classified networks
- Redundant IPsec
- VLAN
Enquire
Observability, immutable backup and resilience
Distributed monitoring with Elastic Stack, Grafana, Prometheus, Nagios and PRTG, and backups isolated from the main domain, with immutable WORM retention and contingency plans (DRP).
- Backups out of ransomware's reach, segregated from the main domain
- Disaster recovery plans (DRP) verified through drills
- Integration with the support desk (ITSM) for a coordinated 24/7 response
- Elastic Stack
- Grafana
- Prometheus / PRTG
- WORM backup
- Off-domain segregation
Enquire
Multi-level support and operations (L1, L2, L3)
End-to-end incident and infrastructure management under ITIL v4, with service level agreements (SLAs) from 1 hour.
- L1: first-contact technical desk with first-call resolution
- L2: advanced administration of Linux, Windows Server, hypervisors and networks
- L3: direct escalation to senior engineers, kernel tuning and root cause analysis (RCA)
- L1 · L2 · L3
- ITSM / ITIL v4
- 24/7 monitoring
- SLA from 1 h
Enquire
VeriFactu and electronic invoicing (Spanish Tax Agency)
Consulting and implementation of the integrity, traceability and submission requirements for invoicing under Royal Decree 1007/2023 and Order HAC/1177/2024.
- Code audit of invoicing software systems (SIF)
- SHA-256 record chaining, XAdES/XMLDSig signature and regulatory QR code
- API gateway to the Tax Agency (AEAT) and the responsible declaration (Declaración Responsable)
- VeriFactu RD 1007/2023
- Order HAC/1177/2024
- SHA-256
- XAdES / XMLDSig
- AEAT API Gateway
Enquire
CE marking and Cyber Resilience Act
Conformity and cybersecurity assessment of embedded devices, network equipment, IoT gateways and industrial servers, under the low-voltage and electromagnetic compatibility directives and the Cyber Resilience Act.
- Technical file and EU Declaration of Conformity
- LVD 2014/35/EU and EMC 2014/30/EU directives
- SBOM, signed firmware and secure OTA updates
- CE marking
- Cyber Resilience Act
- LVD
- EMC
- IoT / Edge
Enquire