We're an IT service provider with offices in Berlin and Basel, working with startups and SMEs that run mostly or entirely on Apple hardware. Our focus areas are Apple device management as well as IT security and compliance, including ISO 27001, TISAX®, and NIS2.
From confidential automotive launches to architecture studios protecting client blueprints — here's what we've actually delivered.
Set up and secured their entire Apple device fleet with Mosyle MDM, to protect digital blueprints and confidential client files.
More on Apple IT for architecture firms →
Rolled out Apple MDM and moved them to a scalable cloud setup, hosted in the EU.
Fully modernized their security setup: Apple device management, Mosyle MDM, and a hardened Google Workspace configuration.
Robust security concept for handling and transmitting sensitive visual data — complete confidentiality of all pre-release assets.
More on TISAX® for automotive →Comprehensive data security strategy safeguarding confidential artist and production information throughout the global campaign lifecycle.
Complete information security for the global launch of the BMW XM — pre-release data and marketing materials protected against unauthorized copying or leaks.
Full information security for the world premiere of the all-electric MINI Aceman, protecting all design data from conception to reveal.
ISO 27001-based security audits and technical measures to classify and protect sensitive project data for international film productions.
More on Apple IT for creative agencies →Everything in between, handled by one team — not a separate vendor for device setup, network security, and compliance.
Using Apple Business Manager and Mosyle MDM, new Macs and iPhones enroll and configure themselves the moment they're unboxed — no IT staff needed to set up each device by hand, and new employees can start working the same day their hardware arrives.
More on Mosyle MDM → More on Apple IT Consulting →We assess where you currently stand, write the required policies, build the security management system auditors expect to see, and guide you through the actual audit — led by a certified Lead Auditor.
More on ISO 27001 → More on TISAX® →We set up Google Workspace and Mail if that's your team's choice, European alternatives like Nextcloud and Proton for Business if you'd rather keep data in the EU, or Apple's own business tools — configured to meet GDPR and NIS2 requirements either way.
Ongoing risk assessments, clear rules for who can access which data, protection against accidental data leaks, and training so your team can recognize a phishing attempt before it becomes a breach.
More on IT Security Consulting →We set up and monitor your office network — routers, switches, and Wi-Fi access points from Ubiquiti — with separate zones for guest and internal traffic, so a compromised device can't automatically reach everything else.
Setting up new employees and removing access when they leave, keeping software licenses from piling up unused, and monitoring your systems around the clock — so IT stays handled without you having to think about it.
More on Managed IT Services →Simulated phishing emails, short targeted training sessions, and a clear onboarding process — most breaches start with one person clicking the wrong link, and this is how you reduce that risk.
Roughly 29,500 companies have been under BSI supervision ever since — and about half do not yet know they are meant. We determine your scope, complete a missed registration, and build the measures under Section 30 BSIG so they hold up as evidence.
More on NIS2 consulting → Check your scope yourself →NIS2, ISO 27001, and TISAX® all ask for a designated responsibility for information security. We take it on as your external information security officer, with a fixed reporting line to executive management — typically one to four days a month.
More on the vCISO retainer →AI for architecture firms and hands-on guides to Apple IT, security and compliance.
Your team describes a task in one sentence, and the assistant carries it out in the model or the layout. Routine work that takes days today is done in hours. Following DIN, ÖNORM and SIA, BIM-ready and, if you wish, fully on-premises on Mac Studio.
More on AI for architecture firmsJF Agency provides comprehensive IT security consulting including Apple enterprise architecture, Mosyle MDM deployment, ISO 27001 and TISAX® certification consulting, cloud security integration (Google Workspace, Nextcloud, Proton), network management (Ubiquiti UniFi), and managed IT services for startups and creative businesses.
Yes, JF Agency is an Apple Certified Technical Partner and specializes exclusively in Apple enterprise architecture, managing the complete lifecycle of Apple devices from deployment to maintenance using advanced MDM platforms like Mosyle.
Yes, JF Agency provides end-to-end consulting for ISO 27001 certification and TISAX® Assessments (Levels 1-3). The founder Josef Floesser is a certified ISO/IEC 27001:2022 Lead Auditor with expertise in building Information Security Management Systems (ISMS).
JF Agency has provided IT security consulting and integration services for Porsche, BMW, MINI, Sunst Studio, UNDPLUS, Ilmer Thies Architekten, Rekorder Film Production, and other creative businesses and architecture studios.
Everything from automatic device setup to network security, in one connected system.
Managing the entire device lifecycle via Apple Business Manager, Apple Configurator, Automated Device Enrollment, and centralized fleet management for startups and enterprises.
As Mosyle Certified Administrators and MSP Partner, we deploy Mosyle Fuse for zero-touch enrollment, automated compliance, app management, and endpoint security across your Apple fleet.
Setup and integration for Google Workspace and Mail, EU-based alternatives like Nextcloud and Proton for Business, or Apple's own business tools — whichever your team runs on, with strong identity management and multi-factor authentication in place.
Specializing in the Ubiquiti UniFi ecosystem — gateways, switches, and access points with VLAN segmentation, threat management, and proactive monitoring.
Proactive endpoint security, zero-trust architecture, DLP policies, security awareness training, and incident response planning — keeping your organization resilient against modern threats.
End-to-end certification consulting — gap analysis, ISMS implementation, policy documentation, and audit preparation by a certified Lead Auditor.
I'm a cybersecurity expert and Apple IT integrator, running JF Agency between Berlin and Basel. My approach is shaped by design: solutions should be simple enough that people use them as intended.
