IT42
IT Consulting · Hamburg

No talking. Delivering.

We plan, migrate, and operate Microsoft, VMware, and Proxmox environments for companies with 1 to 250 employees — including compliance with NIS-2, GDPR, and the EU AI Act. No buzzwords, just a clear timeline.

Project · ongoing
Exchange → Exchange Online
Wave migration · 340 mailboxes
Pilot complete
Architecture
Proxmox VE · HA-Cluster
3-node Ceph · 48 TB usable
Compliance
NIS-2 scope assessment
Art. 21 measures · roadmap Q2
Hypercare
Intune Autopilot
Rollout live for 14 days
Microsoft 365Entra IDIntune VMware vSphereProxmox VEHyper-V Conditional AccessDefender SuiteActive Directory Exchange OnlineAzure ArcNIS-2 DSGVOEU AI Act Microsoft 365Entra IDIntune VMware vSphereProxmox VEHyper-V Conditional AccessDefender SuiteActive Directory Exchange OnlineAzure ArcNIS-2 DSGVOEU AI Act
01 · Services

Five disciplines. No grey zones.

We work in clearly scoped work packages with effort estimates, timelines, and defined responsibilities. No consultant-speak, no scope surprises.

01 / Microsoft+

Microsoft ecosystem · on-prem & cloud

Windows Server, Active Directory, Exchange, SQL — or the path to Microsoft 365, Entra ID, and Intune. Hybrid, not hybrid-confused.

M365Entra IDIntuneDefender
02 / Virtualization+

VMware, Hyper-V, Proxmox VE

Feeling the Broadcom aftershocks? We assess your licensing strategy both technically and commercially and guide migrations cleanly through to the failover test.

vSphereProxmoxHyper-VCeph
03 / Endpoint Management+

Windows, macOS, Linux from a single source

Autopilot zero-touch deployment, MDM for Apple devices in Microsoft environments, Linux workstations in mixed-OS operations.

AutopilotJamfConfiguration Manager
04 / Project Management+

Project management & architecture consulting

From current-state assessment through risk analysis and roadmap to delivery and hypercare. Classic or agile — we choose what fits the project, not the methodology fad.

Current-state analysisMigration conceptRollback planHypercare
05 / Compliance+

NIS-2 · GDPR · EU AI Act

Scope assessments, technical and organizational measures, incident reporting, AI risk classification. Pragmatic, not binder-heavy.

TOMsDPIAAI Governance§ 8a BSIG
02 · Approach

We write down
what we will do. And then do it.

Binding proposals with work packages, explicitly named non-deliverables, and realistic effort estimates. Even when they are uncomfortable.

/ 01

Clear

We name products, versions, and standards exactly. Never vague "IT solutions".

/ 02

Pragmatic

Efforts, risks, and dependencies are on the table early, not in a change request.

/ 03

Committed

Who does what by when. Client responsibilities belong in the proposal, not in the dispute.

/ 04

Hands-on

Concept AND implementation from one team. Still reachable during hypercare after go-live.

03 · Regulatory

Compliance without paragraph panic.

Regulatory requirements are not a PDF collection. They are architecture decisions, permission models, and reporting processes — translated into technical measures.

NIS-2
Scope assessment & measures

Article 21: risk management, hardening, reporting obligations. Implemented per state of the art.

GDPR
TOMs, DPIA, processor agreements

Technical and organizational measures that hold up in an audit.

AI Act
AI risk classification & governance

Classifying your AI systems, transition periods, governance framework with proportion.

This content is provided for general information and does not constitute legal advice. For a binding legal assessment of your specific situation we recommend consulting a law firm specialized in IT law.
04 · Technologies

What we work with daily.

Not a fantasy matrix — the technologies we actually use in current projects.

Microsoft 365 Entra ID Intune Azure IaaS / PaaS Azure Arc Exchange Online Exchange Server Active Directory SQL Server Defender Suite Purview VMware vSphere VMware ESXi Proxmox VE Ceph Hyper-V Failover Cluster SCVMM Autopilot Configuration Manager Jamf Conditional Access Microsoft Teams PowerShell

Clarify the timeline.
Let's do IT.

Tell us in 20 minutes where you stand. You'll get an honest assessment — and if we're not the right fit, a recommendation for someone who is.

Send email