Google Workspace, 5–50 people

Do you know who can get into your company’s mail and Drive?

An app authorised and forgotten, a former employee or contractor who still has access, fake emails sent in your name, licences paid for people who’ve left: if nobody looks after your company’s Google mail as their job, nobody notices. Write to us in a couple of lines: within one working day we tell you where to start and what it costs.

€49 a month for maintenance, up to 10 users

Write to us in a couple of lines Prices and limits

Check-up at €190read-only, up to 25 users
Everything in writingby email, no phone calls

The questions worth asking yourselves

For small businesses whose company mail is on Google (Gmail with your own domain, Drive, Calendar: it’s called Google Workspace) with nobody looking after it as their job.

Who gave an app access to everyone’s mail or Drive?

If anyone can authorise any app, one click from a single contractor is all it takes. And a permission given for one job, for example to move some mail, stays in place until somebody removes it.

Could someone send fake emails in your name?

If your domain has no DMARC (the setting that tells mail servers to reject fake emails sent in your name), or only has it in monitor-only mode, a fake email with your address can reach clients and suppliers looking just as real as yours.

Can a former employee or contractor still get in?

Does someone who has left still have an active account? Who’s an administrator, and with what protection: two-factor verification, or just a password?

Are you paying for licences nobody uses any more?

Accounts for people who have left, or a plan more expensive than you need: that’s money going out every month.

How it works

The check-up
Read-only: within 2 working days we tell you what to do this week, who does it and what it costs.
We fix it
The problems found, at a fixed price, only with your written yes on the plan.
We look after it
Every month: starters and leavers, licences and a security check, with a one-page report.

Prices, and the limits stated up front

The exact price is written in the plan, before we start, and it does not change from there.

Workspace maintenance

We look after your Workspace.

Monthly fee

€49 a month up to 10 users

Beyond 10 users, €3 a month for each extra user: a company of 15 people pays €64 a month. Up to 50 users; beyond that, the fee is set after the check-up.

Every month

Starters and leavers: we set up the user, groups, licence and department; on departure, suspension on your written request and a list of what to transfer and delete, which you delete yourselves
Groups, aliases, licences, service rules
Security check: two-factor verification, suspicious sign-ins, newly authorised apps, external sharing, DMARC reports
A one-page report, in Italian
Up to 1 hour of interventions included; beyond that, €60 an hour with a quote first

When it starts: After a check-up, or after security hardening.
Payment and cancellation: Month by month, paid in advance, by bank transfer. Monthly cancellation.

Ask about maintenance

Security hardening and migrations

Fixing what the check-up found, or moving your mail to Google.

Security hardening

€190 up to 3 hours of work

The problems found by the check-up, at a fixed price in the plan: the check-up already writes the hours and the price for each one. Beyond 3 hours, the fixed price is calculated at €60 an hour: for example, a 5.5-hour plan costs €340. We start only with your written yes on the plan.

Migrations

quote after the analysis

To Google Workspace from another mail provider, or between two Workspace accounts. We first analyse the source and destination: mailboxes, storage, domains, aliases and groups, calendars and Drive, who uses what. Only then a fixed-price quote. Google’s own migration tool moves the mail; we never read it. The access the tool needs is authorised for the length of the job and removed once it’s done.

Payment: Interventions are paid on order, by bank transfer.

Describe the job to us

Prices are in euro. No VAT is charged (flat-rate regime, regime forfettario); a 4% surcharge for INPS, Italy’s social security institute (rivalsa INPS), is added to the invoice. For example, €49 a month becomes €50.96. You pay your own Google licences to Google. “Fixed price” means the job never costs more than what is written.

The ground rules, stated up front

They apply to every job, check-up included.

We work with a dedicated IS4ICT account in your Workspace, no passwords or keys exchanged, with permissions you can see in your own console and remove whenever you like. For the check-up we add a read-only permission on the security settings: once the work is done we tell you how to remove it and check it has been done.
We never read the mail or the content of the files. From the logs we can see the names of files shared outside the company, because it matters for compliance, never their content; we never open the Gmail log.
We delete nothing: you delete users, groups and data yourselves, after we have told you what and how. Suspending a user, removing an alias or a member from a group: only on your written request.
A new user, with their password, is created by your own administrator: half a minute, with a password change on first sign-in. We finish the rest right afterwards.
The domain’s security settings (two-factor verification, passwords, sharing, apps) are applied by a person: your own administrator following our instructions, or one of our technicians with administrator access you give us. You choose which beforehand, and either way the price is clear before we start. We prepare them and check they have been applied.
No support for computers or phones, no on-call cover at night or on public holidays. Reply within one working day.
Everything in writing, by email: no phone calls.
You pay your own Google licences to Google.
The check-up is not a certification (GDPR, NIS2).
For now we only work with Google Workspace. Using Microsoft 365? Write to us anyway: we’ll reply in writing whether and when we can take it on.

To start with: the check-up

It answers the questions at the top of this page before anything happens: who can get in and with what protection, which apps can see the mail and the Drive, whether anyone could write in your name, how many licences you’re paying for and not using. Read-only: we look at the settings, not the mail, and we touch nothing.

We tried it on ourselves first

A forgotten permission, given for an old mail migration, that opened everyone’s mail
Anyone could authorise any app
DMARC only in monitor-only mode, and domains with no DMARC at all

That’s why the permission we ask for is read-only, and once the work is done we check it has been removed.

What we look at

Security: Administrators, two-factor verification, suspicious sign-ins, authorised apps and the permissions they hold.
Compliance: External sharing, open groups, DMARC, SPF and DKIM.
Costs: Licences and plan, wasted licences, storage.

Workspace check-up

€190 up to 25 users

No VAT (flat-rate regime, regime forfettario); the 4% INPS surcharge (rivalsa INPS) is added to the invoice: €197.60. Paid on order, by bank transfer.

What you receive

A report in Italian
What to do this week and who does it, on the first page
For each problem: the evidence, the risk, what to do and the hours, at a fixed price

Access: Two authorisations, both read-only: a dedicated IS4ICT account with a purpose-built role, and a permission that lets us read the security settings only (Google only grants this as “domain-wide delegation”; it opens neither the mail nor the files). Once the work is done, we tell you how to remove them and check it has been done.
From you: About half an hour of your administrator’s time: Google shows some settings only in its own console. We send a written guide with the pages to open, and they send us the screenshots by email.
Timing: 2 working days from the moment the access works.
Scope: Google Workspace, up to 25 users; beyond that, a quote first.

Ask for the check-up

Frequently asked questions

What’s worth knowing before you write to us.

Do we need a phone call to get started?

No, everything is in writing, by email. You write to us in a couple of lines: how many people you are and what worries you about your Workspace; we reply within one working day.

Do you read our mail or our files?

No. We never read the mail or the content of the files. From the logs we can see the names of files shared outside the company, because it matters for compliance, never their content; we never open the Gmail log.

Do we have to give you a password?

No. We work only with a dedicated IS4ICT account, no passwords or keys exchanged, with permissions you can see in your own console and remove whenever you like. For the check-up we also need a read-only permission on the security settings, which Google calls domain-wide delegation: it opens neither the mail nor the files, and we check it has been removed once the work is done.

Do you delete users or data?

No. You delete users, groups and data yourselves, after we have told you what and how. Suspending a user, removing an alias or a member from a group: only on your written request.

How much does maintenance cost if we’re more than 10 people?

€49 a month up to 10 users, plus €3 a month for each user beyond that: a company of 15 people pays €64 a month. Up to 50 users; beyond that, the fee is set after the check-up. Monthly cancellation.

Can you help us move to Google Workspace?

Yes, from another mail provider or between two Workspace accounts. We first analyse the source and destination, then send you a fixed-price quote. Google’s own migration tool moves the mail; we never read it. The access the tool needs is authorised for the length of the job and removed once it’s done.

Do you also support computers and phones?

No: no support for computers or phones, and no on-call cover at night or on public holidays. We reply within one working day, everything in writing.

Is the check-up a certification?

No, it is not a certification (GDPR, NIS2). It is a read-only check of security, compliance and costs, with a report in Italian within 2 working days from the moment the access works.

Write to us about what worries you in your Workspace

A couple of lines are enough: how many people you are and what you want to know or fix. Within one working day we reply by email, with prices and timings.

progetti@is4ict.com

Remote, across Italy

Write to us Ask for the check-up