What we work with — and what is replaceable.
Every tool with its role, data location and the answer to what happens if you replace us. No lock-in is a promise that must be verifiable.
What we work with — and what is replaceable.
Every tool with its role, data location and the answer to what happens if you replace us. No lock-in is a promise that must be verifiable.
| Area | Tool | Role | Data location | Replaceable by |
|---|---|---|---|---|
| RMM, patching, remote access | RMM-Plattform | Agent on every device: monitoring, patch distribution, automations, remote access | EU instance | any RMM |
| Service portal | Corevatis Serviceportal | Tickets per ITIL (incident, request, change, problem), asset management with contracts and licences, knowledge base, client access | operated by us, Germany | data portable via export/API |
| User experience (DEX) | Eigene Auswertung auf OpenSearch | Sign-in duration, crashes, device health — trends per device, proactive outreach | operated by us, EU | open format |
| Identity → | Entra ID / Active Directory | Your directory, hybrid via Entra Connect; MFA, Conditional Access | your tenant / your server | — |
| Portal sign-in | SSO-Dienst (Open Source) | Sign-in to the service portal, connected to your Entra ID | operated by us, Germany | open source |
| Endpoint protection (EDR) → | Microsoft Defender for Endpoint | Detection and response on workplaces and servers — already included in Microsoft 365 environments, otherwise an equivalent EDR | your tenant (EU region) | another EDR |
| Logs and detection → | Wazuh | Log collection, rules, detection across devices and servers (Managed SIEM) | operated by us, EU | open source — rules and data are yours |
| Backup servers → | Veeam · Proxmox Backup Server | VMware/Windows via Veeam, Proxmox via its own backup server; immutable copy | your site + off-site copy EU | any product with an immutable target |
| Backup Microsoft 365 | M365-Backup (EU-Anbieter) | Mailboxes, SharePoint, OneDrive, Teams — own retention | vendor EU data centre | any M365 backup with export |
| Firewall → | Gängiger Hersteller | For new purchases an established vendor with a support contract — or we run what you have | your site | client's existing kit |
| Zero Trust access → | Cloudflare Zero Trust | Access to internal applications without VPN, identity- and device-based | EU regions configurable | another ZTNA solution |
| Virtualisation → | VMware · Proxmox · Hyper-V | We run your platform; Proxmox is our proposal for new builds | your site | — |
| Cloud and licences → | Microsoft-Lizenzen · Azure · Hosting | Microsoft licences via a licensing agreement; Azure built in a structured way; alternatively other cloud or German hosting providers where it pays off | EU regions | licences are transferable |
| Documentation | Serviceportal + Übergabe-Dokument | Assets, network plans, credentials encrypted in the portal; handover as a readable document — it is yours | Germany | export any time |
Four rules for selection.
Data location
Anything containing client data lives in Germany or the EU. Every tool states where.
Replaceability
For every tool we state what happens if you replace us: export, open format or an equivalent product.
Existing kit first
Firewall, virtualisation, directory: we run what you have. Our standard applies to new purchases.
No forced Microsoft world
Defender, Intune and Entra ID are building blocks where present — Wazuh, Proxmox and Cloudflare work without them.
Let's talk about your IT.
An intro call is free and non-binding. We listen, we ask — and we'll say openly whether we're the right people for you.