Frequently asked
Answers to help you decide whether ITLAB is the right fit for your company: who the service is for, what the new laws require, how the monthly fee is calculated, and how we build trust.
About the service
Can't find your question? Write to usWhich organizations is the service designed for?
Organizations without an in-house IT team, such as professional services firms and family offices, and larger organizations that need technology and security leadership on top of their internal team.
What does it mean to have an external CTO and CISO?
Technology and security leadership without hiring a full-time executive. We prioritize decisions, manage risks, and coordinate improvements, with a defined level of dedication set in the agreement.
What does unlimited support mean?
You can request assistance for operational incidents affecting the covered users and systems, within the agreed hours and conditions, without quoting each request separately.
About the laws
See how we prepare for complianceDoes the Cybersecurity Framework Law apply to all companies?
No. Its application depends on the scenarios defined by the regulation. Even so, if you provide services to obligated organizations, you are likely to be asked to implement security controls as a supplier.
When does the new personal data regulation take effect?
Law 21.719 takes effect on December 1, 2026. It is worth preparing systems and processes in advance.
Does a company with few users also need to review its data handling?
Yes. The number of employees does not reflect the volume or sensitivity of the information. A small company can handle relevant data of customers, workers, and third parties.
Does ITLAB provide legal advice?
No. Our service is technical, documentary, and operational. Anything requiring legal interpretation we coordinate with your organization's legal counsel.
Pricing and contract
Learn about the monthly support agreementHow is the monthly fee calculated?
Based on the number of users, systems, the state of the infrastructure, and the support level. With that information we present a proposal with a defined scope and conditions.
What is billed separately?
Special projects, custom development, complex migrations, and third-party licenses. Exclusions are detailed in the proposal.
How long does the agreement last?
One year minimum, with automatic renewal. The first year includes the diagnostic and organization period, which is where most of the work investment goes. Renewal and notice of non-renewal are detailed in the contract.
What happens if I want to switch providers later?
The documentation of your systems, access, and configurations is yours. When the agreement ends, we hand it over in an organized state, so you can keep operating without depending on us.
Why don't you publish client names?
Because discretion is part of the relationship with them. We share experience and authorized references in private conversations.
What happens in the first conversation?
We review your situation and priorities, see whether we can help, and what information we need for a proposal. It's free and with no commitment.
Let's start with your priorities
Tell us what you need to organize, protect, or solve. The first conversation is free: we assess whether our model works for you and what the next steps would be.
Let's talk about your company