Managed IT services / Google Workspace
Google Workspace,
without friction.
Accounts, permissions, security and collaboration properly administered. We take care of your Google Workspace console so your team works together without friction and your data stays under control: Gmail tuned, Drive tidy, 2FA on and backups that actually exist.
What it is
Your Workspace console,
properly governed.
Managing Google Workspace is far more than creating mailboxes. It is administering the Admin Console, security, data governance and support for people: who has an account, with which permissions, what they can share, how information is protected and what happens when someone joins or leaves the company.
The difference between having Workspace and having it well managed shows up exactly when something goes wrong: an email that slips through, a document that leaves the domain, an account still alive after a departure. We operate it as a system: organisational units with logic, active security policies, controlled sharing and real backups. It is part of our managed IT services practice, with the same voice as always: reliability, continuity and fewer surprises.
In practice, that means a single place where it is decided who can do what, policies that apply themselves when someone changes team and a console we document so nothing depends on one person’s memory. When an audit arrives or a client asks about your security, the answer is already written.
Problems it solves
What happens when
no one administers it.
Most of these problems don’t show their face until it’s late. They are silent leaks of time and security that pile up as the business grows:
Messy accounts and permissions
Users created by hand, no organisational units, permissions inherited from who-knows-when. Nobody has a clear picture of who can access what, or why.
No two-step verification (2FA)
The password as the only barrier. One successful phishing attempt and the account —and every Drive file hanging off it— is exposed to anyone.
Documents shared without control
“Anyone with the link” folders, files still shared with former employees, sensitive information travelling outside the domain without anyone knowing.
Email full of spam and phishing
The inbox fills with junk and, worse, with impersonation attempts that slip through because Gmail is not properly tuned and SPF, DKIM and DMARC are missing.
Insecure offboarding
Someone leaves and their account stays active for weeks. Sessions and devices no one revokes, data lost with the account, access left wide open.
No backups
Workspace is not a backup. An accidental deletion or ransomware over synced files can take documents and email with no way back.
What we manage
The whole console,
end to end.
We handle the levers that really matter in the day-to-day of Workspace:
- Users and organisational units
- Gmail: routing, aliases and anti-spam (SPF, DKIM, DMARC)
- Drive and shared drives: permissions and sharing
- Meet and Chat: configuration and policies
- Security and two-step verification (2FA)
- Endpoints and devices (mobiles and computers)
- DLP, retention and compliance (Vault)
- Workspace backups
Cases by scenario
Depending on your
company’s moment.
Not every company needs the same thing on the same day. We adapt the scope of the service to where you are:
| Scenario | What we do | Result |
|---|---|---|
| Getting started with Workspace | Domain, users, email and baseline policies properly configured | An orderly, secure starting point from day one. |
| Email migration | We bring email, contacts and calendars from another provider | A switch with no data loss and no downtime for the team. |
| Fast growth | Organisational units, templates and a joiner/leaver process | Consistent onboarding and offboarding with no forgotten access. |
| Security audit | Access review, mandatory 2FA, DLP and logs | A demonstrable, documented security posture. |
| Data scares | Independent Workspace backup and retention with Vault | Recovery is possible and there is a legal audit trail. |
In one line
Good collaboration starts with good configuration.
Benefits and outcomes
What you can
expect.
Orderly collaboration
Drive, shared drives and permissions with logic, so people find what they need without asking for access every time.
Security by default
2FA, alerts and Gmail protection enabled and maintained, not left to the default configuration.
Access control
You know who accesses what, with least privilege and periodic reviews. Improper access stops being an unknown.
Compliance (GDPR)
Retention, DLP and auditable logs that help you demonstrate compliance to clients and auditors.
User support
When someone can’t log in, loses a file or needs a permission, there is someone to call and it gets resolved fast.
Licences under control
We review editions and licences so you pay for what you use, with no ghost accounts or extra editions.
Our focus
Where we put
the attention.
Every Workspace lever has its detail. We leave them configured, documented and maintained, not just “switched on”.
The CPPA method
From an improvised console
to a governed system.
Audit of your Workspace
We review the console, users, permissions, security and licences. We know what is there and what is missing before touching anything.
Design the target configuration
We define organisational units, security policies, sharing and a joiner/leaver process tailored to you. Documented and repeatable.
Rollout and migration
We apply the configuration, migrate if needed and enable 2FA, DLP and backups, without disrupting your operation and with a rollback planned.
Ongoing management and support
We run the console day to day, support your users and review access and security regularly. Fewer incidents, more continuity.
Examples of work
How it looks
in practice.
These are routine jobs, exactly as we run them: step by step, with a rollback planned and without disrupting your operation.
Migration to Workspace
- Inventory of email and users
- Domain setup and verification (SPF, DKIM, DMARC)
- Create users and units
- Migrate email, contacts and calendars
- MX cutover and validation
- Basic training for the team
Security hardening (2FA)
- Review of the current state
- Enable two-step verification
- Enrol users and security keys
- Enforce per organisational unit
- Alerts and access logging
Drive and permissions clean-up
- Map current folders and access
- Design shared drives
- Migrate the content
- Review external links
- Sharing policies
Secure offboarding
- Suspend the account
- Revoke sessions and devices
- Hand over Drive and email
- Reassign or retain the data
- Release the licence
Risks and mitigation
What can go wrong
and how we prevent it.
Managing Workspace is as much about enabling the good as it is about closing what exposes you. These are the risks we see most and how we handle them:
Improper access
Compromised accounts or excess permissions. Mitigation: mandatory 2FA, least privilege and periodic access reviews.
Data leakage
Sensitive information leaving the domain through links or attachments. Mitigation: DLP, sharing controls and permissions per unit.
Data loss
Accidental deletions or ransomware over synced files. Mitigation: independent Workspace backup and retention with Vault.
Careless offboarding
Accounts still active after someone leaves. Mitigation: a defined leaver process that suspends, hands over and revokes in order.
Phishing and impersonation
Malicious email slipping into inboxes. Mitigation: advanced Gmail protection and email authentication (SPF, DKIM, DMARC).
Unmanaged third-party apps
Apps with OAuth access to your data that no one approved. Mitigation: review and approval of connected applications.
Frequently asked questions
Is Google Workspace secure by default?
Do I need backup if it is already in the cloud?
Can you migrate from another email provider?
Google Workspace or Microsoft 365?
Is two-step verification (2FA) mandatory?
Is it GDPR-compliant?
Related services
Keep exploring.
Microsoft 365 management
Working with —or weighing up— the Microsoft ecosystem? We manage 365 with the same care: email, Teams, security and backups.
View →
Cybersecurity
A well-configured Workspace is one layer; cybersecurity adds endpoints, email, access and training, with detection and response.
View →
IT support
When a user can’t log in or loses a file, a helpdesk with clear SLAs resolves it fast, leaving no one stranded.
View →Is your Google Workspace well governed?
Request a proposal →Want to see how we think about a connected system end to end? Read ourCPPA X-RAY on 100 Montaditos.