Загрузка…
Fines for personal data leaks have grown several times over, and an inspection starts with a simple question: where is the data stored and who can see it. We answer it technically: we check the system, close down access, encrypt, keep a log and collect consents on the website. A lawyer prepares the documents, and we work alongside them.
from22 000₽
The total depends on the number of systems that hold personal data, where they are located and whether the data has to be moved to Russia
A lower bound, not a final price. We work out the exact sum after breaking the problem down and fix it before the work starts.
A list of work, not a description of an approach. The scope is adjusted to the job: anything unnecessary comes off and anything missing goes on at the estimate stage.
Where customer and employee data is stored, who can access it and where it flows.
Services exposed to the internet, weak passwords, vulnerable dependencies.
Every employee sees only what they need. Access is tracked continuously.
Passwords and keys live in a vault, not in the code and not in chats.
Forms collect consent to processing with a log: you can see who gave it and when.
Who accessed the data and when, and backups verified by restoring them.
Tick the work you need and see the order of magnitude. The estimate goes along with your enquiry.
| Include in estimate | Work | Price |
|---|---|---|
| Security reviewAccounts, password storage, vulnerable dependencies, services exposed to the internet. | 22 000–350 000₽ | |
| Infrastructure and backupsWhat it runs on, who owns the accounts, and whether the system comes back if the server disappears today. | 17 000–275 000₽ | |
| Basic server hardeningUnnecessary ports closed, key-based sign-in, brute-force protection, separated permissions. | 8 000–100 000₽ | |
| Secrets managementPasswords and keys in a secure store, not in the code and not in a chat thread. | 22 000–350 000₽ | |
| Secure access for staffRemote work over a protected channel: each person has their own access, revoked when they leave. | 13 000–250 000₽ | |
| Firewall and access rulesRules are documented and justified, rather than accumulated over the years on the principle of "whatever made it work". | 17 000–300 000₽ | |
| Consents to data processingForms collect consent with a log: who gave it and when. | 10 000–175 000₽ | |
| Data access logLogs from every service in one searchable place, instead of SSH across the servers. | 25 000–450 000₽ | |
| BackupsOn a schedule and verified by restoring. An unverified backup is the same thing as no backup. | 18 000–350 000₽ | |
| Access registerWho has access to what is written down and kept current. An employee leaving does not turn into a hunt for passwords. | 4 000–20 000₽per month |
This is an order-of-magnitude estimate, not a costed quote and not an offer. Bundled together, some work gets cheaper and some gets more expensive depending on the specifics: the exact sum is worked out after we break the problem down, and it is fixed before the work starts.
Verifiable facts instead of claims about ourselves. There is not a single invented case in this catalogue.
We cover the technical side of the law; a lawyer prepares the legal documents. This section does not promise what only a lawyer does.
The check commits you to nothing: the data map and the list of risks stay with you even if you close them yourselves.
You only need documents: a policy, consents, a notice to the regulator.
That is a lawyer's job; ours is the technical side.
Tell us what is happening now. We reply within one business day, and the first conversation commits you to nothing.