Book an IT reviewOngoing IT support under subscription
Business systems
Data and AI
Our apps
Shared passwords to company accounts given to people and groups, with a change history. Single sign-on to the applications running on your servers, with a second factor. Set up so that an employee leaving does not require changing every password in the company.
Passwords to the domain panel, bank account, online shop or supplier portal often sit in a spreadsheet on a shared drive or in one person's notes. When that person is on holiday, the company waits. When they leave, nobody knows which passwords they knew.
A team password manager sorts this out without changing habits: a password is entered once, and access goes only to the people and groups who need it. After an employee leaves, you can see what they had access to and know which passwords to change.
The second part is sign-in to the applications themselves. When a company has several systems on its own servers, shared sign-in with a second factor replaces separate accounts in each of them. Disabling an account in one place closes access everywhere.
A business password manager has to let you grant access to groups and withdraw it with one click. A solution for one person will not do that.
We agree what happens when an employee forgets their master password. Some solutions have account recovery only in the paid edition, and without it the data may be unrecoverable.
Integration with a user directory is often in the paid edition. You know this before choosing.
A solution with a vendor and audits behaves differently from a community project. Both can be sensible, but with passwords we say so plainly.
The password vault backup and the keys needed to restore it must not sit on the same server. We agree the restore plan before deployment.
Every description of features, licences and limits comes from the vendor's materials, read on 2 October 2026. For each application we add our assessment of when it fits. We make the final choice after talking about your case.
A good starting point for most companies
Storing and sharing passwords in a team, with access granted to people and groups.
Our assessment: We provide independent technical support for Passbolt CE. We choose it most often for companies that share passwords in teams.
We deploy it when it fits the case
An unofficial server compatible with the Bitwarden apps, developed by the community.
Our assessment: It stores particularly sensitive data, so we always compare it with the official server from the vendor of the apps.
We deploy it when it fits the case
A single sign-in platform for the company's applications.
Our assessment: We deploy it when a company has several applications on its own servers and wants single sign-on with a second factor.
We deploy it when it fits the case
An identity and sign-in platform for applications and users.
Our assessment: We choose it when sign-in also has to cover applications for the company's customers, not just employees.
For many small businesses, the vendor's cloud password manager makes more sense than a server of your own: the vendor is responsible for availability and updates, and you pay a monthly subscription. If there's no reason to keep the vault in-house, that's what we'll advise.
Your own server makes sense when company policy or client requirements don't allow passwords to be stored with an outside provider, or when single sign-on has to run on your servers anyway.
We list shared accounts, their owners and the people who know the passwords today. Without this list, the vault quickly drifts away from reality.
We design groups that match the teams and the rules: who adds passwords, who shares them, who has emergency access.
A separate environment, HTTPS, sign-in with a second factor for administrators and users.
Import from spreadsheets, removal of old password files and short training on the browser extension.
An encrypted backup outside the server, a restore test and a written access procedure for when the server is down.
The server, domain and vendor licences are in your company's name. We record response time and fix time separately in the contract, and state the restore time after a test. Service terms
That is why the backup is outside the server and the restore procedure is tested. For critical accounts we also set up emergency access, described in the recovery plan.
Yes, through a mobile app or a browser, if the chosen solution supports it. We enable phone access together with a second sign-in factor.
It depends on the edition of the chosen tool, because integrations with cloud directories are often paid. We check this for your case before quoting.
Yes. An access review is part of ongoing care, and we carry it out periodically or after changes in the team.
Other needs
Free · 60 minutes online · no obligation
office@nexait.plMessage us on WhatsApp
We don't use a contact form, but we answer the phone and reply to emails and WhatsApp messages during working hours.