The initial effort for an Enterprise contract is considerably higher than for regular maintenance. The onboarding includes:
As a doctor, lawyer, tax advisor or therapist, you carry a double responsibility: the GDPR and the protection of professional secrets under criminal law (Sect. 203 StGB). If an IT service provider undermines this responsibility with infrastructure abroad, unclear access rights or incomplete documentation, you are personally liable – under professional, civil and criminal law.
Our standard maintenance contracts are designed for commercial clients and use efficient tools with infrastructure outside the EU. That is perfectly fine for most companies, but not permissible for those bound by professional secrecy. The Enterprise contract closes this gap.
Processing special categories of personal data (Art. 9 GDPR) such as health data, religious beliefs or client information puts your IT service provider in a position of special responsibility. We take this responsibility seriously – with documented processes, infrastructure exclusively in Germany and a deputy arrangement that protects your website and your data even if we are unavailable.
Unlike large IT service providers, we work as a specialised one-person agency with a clearly defined circle of colleagues. That is a deliberate choice: your website is not looked after by a changing ticket system team, but by specialists who have known Joomla for more than a decade.
Instead of a 4-hour response guarantee that offers no real security in an emergency anyway, we rely on fixed, plannable services: regular security checks at defined intervals, automated backups with verified restorability, monthly reports and personal availability during business hours.
If something happens, we are there – as quickly as possible. Should direct access ever not be possible, the named deputy colleague takes over. In an emergency, you also have the emergency kill switch in your hands and can take your website offline within minutes.
This is not an SLA promise. It is better than an SLA promise.
Because it is honest, because it works, and because you, bound by professional secrecy, work the same way: with care, expertise and personal responsibility – not with a stopwatch.
German infrastructure
All tools and backups we use are hosted exclusively on infrastructure of German providers. No transfer to third countries.
Individual DPA
Data processing agreement under Art. 28 GDPR with a complete list of sub-processors.
Sect. 203 StGB
Written confidentiality declaration from us and our deputy colleagues.
TOM documentation
Technical and organisational measures under Art. 32 GDPR – ready for your compliance file.
DPIA support
Working out your data protection impact assessment under Art. 35 GDPR together.
Deputy arrangement
A named Joomla colleague stands in for us during holidays, illness or outages – with their own professional liability insurance and duty of confidentiality.
Emergency kill switch
Your emergency brake. You can take the website offline yourself within minutes – one call, one code, and the site is closed.
Verified backups
Every backup is restored and checked automatically. A backup that cannot be tested is not a backup.
Joomla security check
A thorough check for vulnerabilities, suspicious files and unusual access patterns. Signed PDF report.
Joomla updates
Updates of core and extensions after approval, tested on staging before going live.
Service time
A flexible monthly time budget for advice, questions and support as needed – for GDPR questions, coordination with your data protection officer or technical questions.
Incident response
A defined process for emergencies: kill switch, root cause analysis and support with the 72-hour notification under Art. 33 GDPR.
Personal contact
One fixed contact person, no ticket system. You know us, we know your website.
Compliance documentation
An annual maintenance certificate and complete documentation of all measures for your file.
Joomla hacked?
Joomla 6 migration
Blog
References
About us
Prices
Contact