Questions and answers

We are an IT company from Szczecin, Poland, operating since 2016. We act as an external IT department for small and medium-sized companies and public bodies: helpdesk, server and network administration, Microsoft 365, ERP systems, cybersecurity and backups. We also deploy local AI models and process automation and run AI training.

On site in Szczecin and the West Pomeranian region. Companies across Poland are served mainly remotely, and we travel for implementations and planned work. We also work for clients in Germany, up to the Berlin area.

About 60 minutes of conversation and review, on site or remote. We check servers, network, backups, licences, security and NIS2 applicability. Afterwards you receive a short report with risks and recommendations. The audit carries no obligation.

Ongoing IT support is billed as a subscription based on the number of workstations, servers and the required response time. Projects such as ERP, Microsoft 365, AI or automation are quoted at a fixed price after analysis. You know the price before work begins.

Yes. Phone calls and meetings are held in Polish or English. E-mails and messages can be in Polish, English or German.

Yes. Our office in Szczecin is about 150 km from Berlin. We support companies in Berlin, Brandenburg and Mecklenburg-Vorpommern remotely and on site for planned work, including NIS2 under the German NIS2UmsuCG.

An audit is usually scheduled within a few working days. Taking over the infrastructure takes one to three weeks depending on the company's size and documentation. In urgent cases, such as an outage or incident, we respond immediately.

Yes. With ongoing IT support we have access to systems containing personal data, so we always sign a GDPR-compliant data processing agreement and commit to confidentiality.

The monthly fee depends on the number of workstations and servers, the required response time and whether on-site visits are needed. We quote after a free audit and give you a fixed monthly amount. Work outside the scope, such as designing a new network, is quoted separately before we start.

For companies with up to about 50 workstations it usually is. A full-time administrator means salary, training, tools and cover during holidays. With managed IT you pay for the time you actually need and get several specialisations at once. Larger companies often combine an in-house administrator with our support for servers, security and projects.

Response times are written into the contract (SLA) and depend on severity. Outages that stop the whole company have top priority. Most requests are resolved remotely the same day.

Yes. In Szczecin and the West Pomeranian region we come on site when an issue can't be solved remotely or hardware needs installing. Clients elsewhere in Poland and in Germany are supported mainly remotely, and we travel for implementations and planned work. Our office is about 150 km from Berlin.

All passwords, configurations and documentation belong to you. When the contract ends we hand them over formally to your new provider or staff and remove our access.

Phone calls and meetings are in Polish or English. Written communication, tickets and e-mails can also be in German.

It depends on your sector and size. Obligations usually apply to medium-sized and large companies (50 or more employees or over EUR 10 million turnover) in the sectors listed in the annexes to the law. Some entities, such as DNS providers or public bodies, are covered regardless of size. We prepare a written assessment as part of a free consultation.

For essential entities up to EUR 10 million or 2% of global annual turnover, for important entities up to EUR 7 million or 1.4%. Both the Polish and German laws also make management personally accountable. In Poland most fines can only be imposed after a two-year transition period, and some penalty provisions have been referred to the Constitutional Tribunal.

An early warning must be sent without undue delay and no later than 24 hours after becoming aware of a significant incident, an incident notification within 72 hours, and a final report within one month. That is why the procedure and responsible people must be set up in advance.

With three things: multi-factor authentication on e-mail and remote access, a backup that cannot be encrypted or deleted from the company network, and up-to-date systems. These three steps stop most of the attacks we see at small and medium-sized companies.

Yes, if it is short, practical and repeated. After training we run a simulated phishing campaign and compare results, so management sees how many people clicked before and after.

Yes, remotely and on site for planned work. We know the NIS2UmsuCG requirements and BSI registration. Calls are in English, written communication can be in German.

As often as the amount of data you can afford to lose. For accounting or ERP systems usually every hour or more often, for file servers once a day, for whole virtual machines daily or weekly. We set the schedule based on your RPO.

Microsoft keeps the service available and retains deleted items for a limited time, typically 14 to 93 days depending on the service. That is not a backup that lets you restore any state from months ago, so we recommend a separate backup of mail, OneDrive and SharePoint.

A copy that cannot be changed or deleted for a set period, even with an administrator account. It protects against attacks that delete backups first and encrypt data afterwards. It can be implemented on a NAS with the right feature or in the cloud.

From a few minutes for a single file to several hours for a whole server, depending on data volume, where the backup is stored and whether standby hardware is ready. We measure this during tests so it is not a surprise.

Yes. We use scheduled full backups plus transaction log backups during the day, copy them off the server and regularly test restores on a separate instance.

For a small trading company one to three weeks. With several warehouses, a shop integration and data migration usually four to eight weeks. Most of the time goes into cleaning data and training, not installation.

Yes, InsERT provides tools to migrate master data and documents. In practice data must be cleaned up first, you decide which historical documents to move, and the result is checked. We do this on a copy before anything changes in production.

Yes, InsERT nexo programs support issuing and receiving invoices in Poland's National e-Invoicing System (KSeF). We help configure permissions, tokens and the document workflow.

Yes. We connect InsERT with shops and marketplaces using ready integrators or via API, synchronising products, prices, stock, orders and sales documents.

We integrate and automate other systems that expose an API or database. When you are choosing a new ERP we help you compare offers independently and estimate the total cost of implementation.

For most office staff Microsoft 365 Business Standard is enough. Business Premium adds Intune, conditional access and Defender, which we recommend for companies handling sensitive data or covered by NIS2. People who only use web mail and Teams can have Business Basic. We match licences to roles rather than giving everyone the same one.

With a well-planned migration the interruption is limited to the DNS switch, usually in the evening or at the weekend. Mailbox history is copied beforehand, so in the morning staff find their mail in the new place, old messages included.

Microsoft stores data of European customers in data centres within the EU under the EU Data Boundary. We check the data location for your tenant in the admin centre and record it in the documentation.

It is where teams write a lot, analyse documents and hold Teams meetings. Permissions must be cleaned up first, because Copilot shows users everything they have access to. We suggest a pilot on a few licences and measure the effect before buying more.

Ideally through conditional access policies or security defaults with the Microsoft Authenticator app. We prepare staff instructions and help with the first sign-in so the change doesn't block work.

It depends on the model size and the number of concurrent users. For one department and a mid-sized model a workstation with a 16–24 GB GPU is enough. For a whole company and larger models you need a server with one or more professional GPUs. We size the hardware after the prototype, when the real load is known.

For general knowledge and the hardest tasks the largest cloud models still lead. For business tasks such as answering from documents, summarising and data extraction, a well-chosen local model gives comparable results because it answers from your data, not general knowledge. We verify quality on your examples before deployment.

Processing on your own server makes compliance much simpler, because data is not passed to an external provider or outside the EEA. You still need to define the purpose, permissions and retention of chat history. We prepare this documentation as part of the deployment.

Retrieval-Augmented Generation is a technique where the model first retrieves passages from your documents and then answers based on them, citing the source. The AI knows your procedures and prices without expensive model training, and every answer can be checked.

The cost consists of hardware, implementation work and support. The smallest deployment for one department is mainly a GPU workstation and a few days of work. We give an exact quote after the workshop, together with the expected time savings.

Usually not. Connecting documents via RAG is enough, and the model uses them for every answer. Fine-tuning is only needed in special cases, for example when the model must write in a very specific style or format.

Since 2 February 2025, Article 4 of the EU AI Act requires organisations using AI systems to ensure their staff have a sufficient level of AI literacy. The law does not prescribe the format, but training with an attendance list, programme and certificates is the simplest evidence of compliance.

Safe-use training takes two to three hours. Practical training on AI tools for office work takes one day. For IT teams we suggest two days. Custom programmes are fitted to the time available.

Yes. Every participant gets an ARITMA SOFT certificate of completion with the programme and number of hours. The company receives the attendance list and programme for its AI literacy records.

Yes. We run training in Polish and English, on site in Szczecin, at your premises or live online via Microsoft Teams.

ChatGPT, Microsoft 365 Copilot, Gemini and Claude, plus tools for working with documents and data. For IT teams also local models (Ollama), RAG and n8n automation. We focus on the tools your company uses or may use under its security policy.

n8n is an open automation tool you can install on your own server, with hundreds of ready connectors and built-in AI nodes. Power Automate is a Microsoft service and the most convenient choice inside Microsoft 365. We choose based on your systems, security requirements and licence costs.

Those that are repetitive, rule-based, frequent and prone to typing errors. Most often that means invoice workflows, order intake, periodic reports and data transfer between systems. We start with the process that costs your team the most hours per month.

It depends on the process. Before implementation we measure how long the task takes per month and compare after go-live, so we talk about real hours rather than promises.

It can be, if designed properly. Sensitive data is processed in n8n on your server with a local AI model, without being sent to external services. Every automation has logs, error handling and limited permissions.

Yes, especially where the shop floor meets the office: production reporting, OEE, downtime, material usage, planning and data transfer to the ERP. Our CEO has spent years managing operations and production, so we understand how a shift supervisor and a plant manager work.

It depends on the number of pages, languages, who writes the content and features such as meeting booking. A simple one-page site is priced differently from a site with dozens of service pages in three languages. We give a fixed price after a short workshop.

A static site is faster, cheaper to maintain and more resistant to attacks because there is no database and no plugins to update. WordPress wins when your team frequently adds content, such as blog posts. We advise based on who will change the site and how often.

A company website with a dozen or so pages usually takes three to six weeks. Preparing and approving content takes the longest, so we help write it.

We build sites according to Google's guidelines: fast, well structured, with structured data and content that answers customers' questions. The same helps with Google AI Overviews and assistants like ChatGPT. Rankings also depend on competition and time, so we don't promise first place in a week.

Yes. The amended KSC act lists public entities, including local government units, their associations and local budgetary units and establishments. The exact scope depends on the entity's classification, so we start by analysing which requirements apply to the specific unit.

The act has applied since 3 April 2026. Registration was due by 3 October 2026. Risk management, procedures and security controls must be in place by 3 April 2027. Units that missed the registration deadline should register without delay.

The KRI audit comes from the National Interoperability Framework regulation and concerns information security in entities performing public tasks, at least once a year. The KSC act adds risk management, incident handling and reporting and management accountability. We combine both into one documentation system.

Yes, provided GDPR, statutory secrecy rules and the AI Act are respected. The safest approach is to run the model on the unit's server, adopt an AI usage policy and train staff. AI prepares a draft, and the decision and signature always stay with the civil servant.

Yes. We submit offers in tenders and requests for quotation from local government units, and can help describe needs and estimate the contract value before a procedure is announced.

It may be, if it makes products from the sectors listed in the law, such as machinery, electrical equipment, computers and electronics, vehicles, medical devices, food or chemicals, and is at least a medium-sized enterprise. Such plants are usually important entities. We check based on activity codes, size and group structure.

OEE is availability times performance times quality. Automation means collecting run time, downtime, output and scrap from machines, MES or simple terminals at workstations, then calculating the indicator and showing it in a report without manual Excel work.

Yes. An AI assistant with access to machine manuals and failure history suggests likely causes and repair steps faster. We run the model on the plant's server, so technical documentation stays inside.

Through segmentation: separate VLANs, a firewall between them and rules that allow only necessary traffic, for example from MES to ERP. This limits the impact of ransomware that starts on an office PC.

The basics are multi-factor authentication, disk encryption on laptops, up-to-date systems, limited permissions and a daily off-site, immutable backup of accounting databases. Add a secure channel for exchanging documents with clients instead of plain attachments.

It can, but it shouldn't enter client data covered by secrecy into public tools. Business versions with a data processing agreement or a local AI model on the firm's server are safer. Either way you need an AI usage policy and a trained team.

Yes. We support firms across Poland mainly remotely and come on site for implementations and planned work. German firms in the Berlin region are supported in English, with written communication also in German.