Frequently Asked Questions

Answers to the most common questions about our IT services and technologies.

Services

Webentwicklung

How long does it take to build a web application?‹
That depends on the complexity of the project. A straightforward website is ready in four to six weeks, while complex web apps can take three to six months. We put a realistic schedule together once the requirements analysis is done.
Which technologies do you use for web development?‹
Primarily React and Next.js as the frontend framework, TypeScript for type safety, Tailwind CSS for modern styling, and GraphQL or REST APIs for backend communication. The technology choice is always matched to your specific project.
Can you modernise an existing web application?‹
Yes. We modernise existing web applications — from a gradual migration to modern technology through to a complete rebuild. We keep downtime to a minimum and make the handover seamless.
Do you also offer maintenance and support afterwards?‹
Yes, we offer ongoing support and maintenance: security updates, performance monitoring, bug fixes and extending the application with new functionality. SLAs are agreed individually, based on your requirements.

Backend

Which database technologies do you use?‹
We work with both relational and NoSQL databases: PostgreSQL for complex relational data with ACID transactions, MongoDB for flexible document structures, MySQL for classic web backends and Redis as in-memory cache and session store.
How do you ensure the security of my data?‹
We implement multiple security layers: JWT authentication with refresh token rotation, role-based access control (RBAC), input validation against injection attacks, encrypted database connections, secrets management via environment variables and rate limiting against brute-force.
Can your backend systems handle high load?‹
Yes, we explicitly develop backend systems for high load. Strategies: horizontal scaling with load balancer, Redis caching for frequent database queries, connection pooling, database indexes and query optimization, asynchronous processing with job queues (BullMQ).
How do you integrate the backend with existing systems?‹
Integration is a core competency: REST APIs for standard integrations, webhooks for event-based communication, GraphQL for flexible data queries, message brokers for microservices. We integrate legacy systems via adapter pattern without modifying existing code.

Mobile Apps

Should I develop a native app or a cross-platform app?‹
We recommend Flutter (cross-platform) for most projects — one codebase for iOS and Android, 90% native performance, significantly cheaper development. Native (Swift/Kotlin) when: iOS-exclusive features, maximum performance for compute-intensive apps.
How long does mobile app development take?‹
Simple MVP app: 8-12 weeks. Standard business app with backend integration: 3-6 months. Complex enterprise app with many features: 6-12 months. We create a detailed project plan after requirements analysis.
Can you update or redesign my existing app?‹
Yes, app modernization is a frequent project. We analyze the existing app, identify technical debt and UX issues and develop a migration plan. Flutter migrations from native apps and complete UI redesigns are typical projects.
How are app updates handled after publication?‹
We distinguish between OTA updates (Over the Air) for JavaScript changes via Expo EAS Update — without store review, live within minutes. For larger updates requiring native code changes, the app goes through the normal review process.

Infrastructure

Which cloud providers do you support?‹
We support all leading cloud providers: AWS, Microsoft Azure and Google Cloud Platform. We help you choose the right provider for your needs or develop a multi-cloud strategy. Our architects are certified in all three platforms.
How can I optimize my infrastructure costs?‹
We analyze your existing infrastructure and identify savings potential. Typical measures: right-sizing of resources, reserved instances for predictable workloads, auto-scaling for variable load, spot instances for batch jobs. Our customers save an average of 30-40% of cloud costs.
How do you ensure the security of my infrastructure?‹
We implement a multi-layered security concept: network segmentation and firewalls, Identity & Access Management (IAM) following the least privilege principle, encryption at rest and in transit, security scanning in CI/CD pipelines and regular penetration tests.
Can you migrate my existing infrastructure to the cloud?‹
Yes, cloud migration is one of our core competencies. We follow a structured migration process: assessment of existing infrastructure, selection of migration strategy (rehost, replatform or refactor), gradual migration with minimal downtime and post-migration optimization.

Consulting & Planning

How does a typical consulting process work?‹
A consulting project starts with a 1-2 hour initial meeting (free of charge). Then: detailed as-is analysis, development of recommendations and strategy, presentation and alignment, support during implementation.
How can I ensure my project is successful?‹
Project success starts with clear requirements and realistic expectations. We help you define scope precisely, set measurable success criteria, identify risks early and ensure regular stakeholder communication.
How do you choose the right technologies for my project?‹
Our technology evaluation follows a structured process: prioritize requirements, identify candidates, define evaluation criteria, conduct proof-of-concepts and document the decision. We are vendor-independent and always recommend what best fits your specific situation.
How do you support us with requirements analysis?‹
We use proven requirements engineering methods: stakeholder interviews, user story mapping, event storming for domain modeling, prototypes for requirements validation. The result: a complete, prioritized backlog with accepted user stories and clear acceptance criteria.

Software Architecture

When do I need explicit architecture consulting?‹
When your system is growing, development is slowing down, or you are facing a major extension. For new projects of medium complexity upwards we also recommend a structured architecture phase.
Microservices or monolith — which is better?‹
That depends on team size, scaling requirements and complexity. Many systems start as a monolith and evolve step by step. We advise based on your data, not on dogma.
Can you also improve existing architectures?‹
Yes — an architecture assessment analyses weaknesses in the existing system and delivers concrete measures for step-by-step improvement, without a big-bang rewrite.
How long does an architecture project take?‹
An assessment takes one to two weeks, a complete architecture concept two to four weeks depending on system complexity.

DevOps

What does DevOps bring me concretely?‹
DevOps reduces time from code commit to production deployment from weeks to minutes. Automated tests prevent regression bugs. Our customers typically report 70-90% shorter release cycles and 50-80% fewer production-critical errors.
Which tools do you use?‹
We use proven open-source tools: GitHub Actions or Jenkins for CI/CD, Docker and Kubernetes for containerization, Terraform and Ansible for Infrastructure-as-Code, Prometheus and Grafana for monitoring, ArgoCD for GitOps and Vault for secrets management.
Can DevOps be integrated into existing processes?‹
Yes, DevOps adoption is always a gradual process. We typically start with a 'quick win' — e.g. automated tests or a simple CI/CD for one project, then expand step by step. First measurable improvements are visible within the first few weeks.
How secure are automated deployments?‹
Automated deployments are more secure than manual ones because they are consistent and reproducible. We implement blue-green deployments or canary releases for zero-downtime and easy rollback.

API-Entwicklung

What is the difference between REST and GraphQL?‹
REST is resource-oriented — each URL represents a resource. Simple to understand and cache. GraphQL is query-oriented — the client defines exactly what data it needs, avoiding over- and under-fetching. We recommend REST for simple CRUD APIs and public APIs, GraphQL for complex, connected data and mobile apps.
How is my API secured?‹
We implement multiple security layers: JWT bearer tokens for stateless auth, OAuth2 for delegated authorization, API keys for internal service communication, rate limiting against DDoS/brute-force, HTTPS-only, input validation and CORS configuration.
Do you also offer integration with third-party systems?‹
Yes, third-party integration is an important part of our API work: payment providers (Stripe, PayPal), CRM systems (Salesforce, HubSpot), ERP systems, email services (SendGrid, Mailgun), cloud storage (AWS S3) and many more.
How do you document the interfaces?‹
We use OpenAPI 3.x (Swagger) for complete API documentation. In NestJS, endpoints are documented with decorators — Swagger UI generates automatically. We also create Postman collections for manual testing. Versioning via URL paths ensures backward compatibility.

Data Analysis

What data sources can you analyze?‹
We process almost all data sources: SQL databases, NoSQL databases, cloud warehouses (BigQuery, Snowflake), ERP systems (SAP), CRM systems (Salesforce), IoT sensor data, web analytics (Google Analytics 4), Excel/CSV files and REST APIs.
How do you handle incomplete or incorrect data?‹
Incomplete data is the norm, not the exception. Our approach: data quality audit first, then missing value treatment (imputation, deletion or flagging depending on context), outlier detection and treatment, deduplication and normalization.
Can I also analyze real-time data?‹
Yes, real-time analytics is an important use case. We use Apache Kafka for streaming data, InfluxDB for time-series IoT sensor data, Grafana for real-time dashboards and Spark Streaming for complex real-time transformations.
Are the analyses GDPR-compliant?‹
Yes, GDPR compliance is a central part of our work. Measures include: pseudonymization and anonymization of personal data, access control following the least privilege principle, documentation of data processing, encryption at-rest and in-transit, EU-server data residency and deletion concepts.

IT-Sicherheit

How does a security audit work with you?‹
A security audit begins with an inventory of your IT landscape and security goals. We review technical configurations, access rights, network architecture and organizational processes. The result is a prioritized action plan with concrete recommendations and risk assessment.
Do you also conduct penetration tests?‹
Yes, penetration tests are a core offering of our IT security services. We conduct web application pentests (OWASP Top 10), API security tests, network pentests and social engineering tests. All tests are authorized with defined scope agreements.
How do you train our employees?‹
We offer security awareness training in various formats: interactive online courses, live workshops, phishing simulations and regular micro-learnings. Content covers phishing detection, secure passwords, social engineering and GDPR-compliant behavior.
How do we stay secure in the long term?‹
Security is not a state but a continuous process. We recommend regular audits, monthly vulnerability scans, continuous SIEM monitoring, quarterly employee training and a documented incident response plan.

Generative Engine Optimization (GEO)

What is the difference between GEO and SEO?‹
SEO optimizes for classic search engine rankings (the link list on Google). GEO (Generative Engine Optimization) optimizes for being cited in the answers of generative AI systems such as ChatGPT, Perplexity, Google AI Overviews and Gemini. Both complement each other: GEO builds on many SEO fundamentals (structured data, high-quality content) but targets the AI answer instead of the link.
Which companies benefit from GEO?‹
GEO is worthwhile for any company whose audience increasingly uses AI assistants for research — especially in B2B, for consulting-intensive services and products that need explanation. Appearing as a source in AI answers builds trust and generates qualified inquiries before competitors become visible there.
How do you make content visible to AI answer engines?‹
Through citable, clearly structured content: unambiguous definitions, FAQ and How-To formats, Schema.org markup (JSON-LD), consistent entities (name, offering, location), trust signals (E-E-A-T) and technical accessibility for AI crawlers such as GPTBot and PerplexityBot. We structure your content so that LLMs can reliably extract and correctly attribute it.
Can GEO success be measured?‹
Yes. We regularly test real prompts in ChatGPT, Perplexity, Gemini and Google AI Overviews and document whether and how your brand appears, which content is cited and how presence develops over time. We additionally analyze referral traffic from AI systems in your analytics.

Search Engine Optimization (SEO)

How long does it take for SEO results to become visible?‹
SEO is a long-term investment. First measurable improvements are typically visible after 3-6 months, significant ranking improvements after 6-12 months. We rely on sustainable, white-hat SEO methods for lasting results.
Which SEO measures are most important?‹
The most important SEO factors are: technical foundation (loading times, mobile-first, Core Web Vitals), high-quality content that fulfills user intent, E-E-A-T, backlink profile and structured data (JSON-LD).
Can you also perform local SEO optimization?‹
Yes, local SEO is an important part of our offering. This includes Google Business Profile optimization, local citations, local keyword strategy, NAP consistency and location-specific landing pages.
How do you measure the success of SEO measures?‹
We measure SEO success by KPIs: organic sessions (Google Analytics), keyword rankings, click-through rate from Search Console, Core Web Vitals, conversion rate from organic traffic and ROI. Monthly reports transparently show what works and where we optimize.

Network Solutions

What network speeds can you achieve?‹
We plan and install networks with up to 10 Gbit/s in the LAN area (10GbE switching) and up to 9.6 Gbit/s in the WLAN area (WiFi 6E). For most business applications we recommend 1 Gbit/s LAN with WiFi 6 access points.
Can you set up WLAN for large buildings?‹
Yes, enterprise WLAN for large buildings, campuses and industrial sites is one of our specialties. We conduct a professional radio coverage analysis (site survey), plan access point placement and configure central WLAN management.
How secure are your network solutions?‹
Security is at the heart of every network solution: VLAN segmentation separates network areas, Next-Generation Firewalls with UTM/IDS/IPS protect against attacks, 802.1X authentication secures network access and WPA3-Enterprise for WLAN.
Can you expand or modernize existing networks?‹
Yes, network modernizations and expansions are common projects for us. We analyze existing infrastructure, identify bottlenecks and security gaps and develop a migration plan with minimal downtime.

IoT Solutions

Can you also supply or connect hardware?‹
We are not hardware manufacturers, but we have many years of experience integrating common IoT hardware: Raspberry Pi, Arduino, ESP32/ESP8266, industrial PLCs and sensors from various manufacturers. We advise you on hardware selection and develop the software layer.
How does data security work with IoT solutions?‹
IoT security is multi-layered: TLS-encrypted communication, device authentication via X.509 certificates or tokens, network segmentation (separate VLAN for IoT devices), regular firmware updates, secure OTA updates and intrusion detection for anomalous device behavior.
How does predictive maintenance work?‹
Predictive maintenance uses sensor time-series data (vibration, temperature, current, runtime) and machine learning models to detect patterns shortly before failures. Customers typically report 40-75% reduced unplanned downtime.
Can your solutions be integrated into our existing infrastructure?‹
Yes, integration is a core component of our IoT work. Typical integrations: ERP systems (SAP, Navision) via REST API, SCADA/HMI systems via OPC-UA or Modbus, existing databases and data warehouses, cloud services (AWS IoT Core, Azure IoT Hub) and existing monitoring tools.

IT System Management

What response times do you offer for problems?‹
Our response times depend on the booked package: Basic Support: response within 8 hours during office hours. Professional Support: response within 4 hours (Mon-Fri until 8pm). Enterprise Support: response within 1 hour, 24/7.
Can you also provide remote support?‹
Yes, the majority of our support services are provided remotely – efficiently, quickly and without travel time. We use secure remote access software. On-site service is bookable for all packages and included in Professional and Enterprise packages.
Which systems can you manage?‹
We manage a wide range: Windows Server, Linux servers, VMware and Hyper-V virtualization, Microsoft 365, Active Directory, network hardware and cloud infrastructures (AWS, Azure, GCP).
How is security ensured for remote access?‹
Remote access is exclusively via encrypted, authenticated connections: VPN with MFA for server access, session recording for compliance, time-limited access sessions and a complete audit log of all actions.

Workplace Services

Can you also manage Mac workplaces?‹
Yes, we manage Windows and Mac workplaces equally. For macOS we use Jamf Pro or Microsoft Intune — both offer zero-touch deployment via Apple Business Manager. We also manage mixed environments with Windows, Mac and mobile devices from a central management console.
How does support for home office workplaces work?‹
Home office support is provided entirely remotely via secure VPN connections and remote desktop tools. For configuration changes and software distribution we use Microsoft Intune or SCCM — these work even without VPN over the internet.
What software can you automatically distribute?‹
Via Microsoft Intune or SCCM we can automatically distribute any software: Microsoft 365, Adobe Creative Cloud, individual business software and industry-specific applications.
How quickly can new employees be equipped?‹
With zero-touch deployment via Windows Autopilot or Apple DEP, a new workplace is ready in 1-2 hours — fully pre-configured with all required apps and security policies. The new employee just needs to switch on their PC and log in.

Cloud Migration

Which cloud providers do you support?‹
We work with all three major cloud providers: AWS (our focus), Microsoft Azure and Google Cloud Platform. Depending on requirements we recommend the right provider and support multi-cloud and hybrid-cloud setups.
How long does a cloud migration take?‹
Duration depends heavily on complexity: simple applications (lift & shift): 2-4 weeks. Medium systems with database migrations: 2-3 months. Complex enterprise migrations with refactoring: 6-12 months.
What happens to our data during migration?‹
Data security has the highest priority during migration. Our approach: full backup before migration, encrypted data transfer, parallel operation until validation, rollback plan if problems occur, and post-migration validation of all critical data.
How does my cloud infrastructure stay secure?‹
Cloud security is not a one-time topic but a continuous process. We implement: IAM following least privilege principle, network segmentation via VPC/subnets, encryption at-rest and in-transit, security groups and WAF, audit logs for all actions.

Hardware Service

Which hardware manufacturers do you work with?‹
We work vendor-independently with all leading providers: Dell, HP, Lenovo, Cisco, Ubiquiti, Fortinet and many more. Through our partner status with several manufacturers our customers receive attractive conditions.
Do you also offer leasing models for hardware?‹
Yes, we support you in selecting leasing and financing models for hardware. Benefits: constant monthly costs instead of large one-time investments, always current hardware through short leasing cycles, no balance sheet impact with operating leasing.
How quickly can you respond to hardware failures?‹
Our response times depend on the service package: Basic: next business day. Professional: 4-8 hours (business hours). Enterprise: 4-hour response 24/7. For critical server infrastructure we recommend the Enterprise package with on-site spare parts storage.
Do you also handle data transfer during hardware changes?‹
Yes, secure data migration management is part of our hardware service. For workstation upgrades: full data migration including applications, settings and user profiles. For server replacement: coordinated migration with minimal downtime and GDPR-compliant deletion from old hardware.

Digital Transformation

Where do you start with digital transformation?‹
With an honest assessment of where you are: which processes cost the most time? Where do most errors happen? Which information is missing for good decisions? The roadmap follows from those answers.
How long does a digital transformation take?‹
It is not a one-off project but a continuous process. We typically achieve first measurable results within three to six months. Fully transforming a mid-sized company takes one to three years.
How do you handle resistance among staff?‹
Change management is a fixed part of our transformation projects. We involve staff early, communicate transparently and train in a hands-on way — because the best technology is worthless without acceptance.
Can we keep using our existing systems?‹
Usually yes — we integrate existing systems through interfaces rather than rebuilding everything. A big-bang rewrite is rarely necessary and carries risk. Step-by-step modernisation is the more proven route.

E-Commerce

Custom shop or Shopify — what do you recommend?‹
Shopify suits a quick start with standard functionality. For individual requirements, complex product catalogues or strong growth we recommend custom development with a headless approach — more freedom, better performance, no monthly licence model.
How is payment processing integrated?‹
We integrate all common payment providers: Stripe (recommended), PayPal, Klarna, SEPA direct debit, Apple Pay and Google Pay. All solutions are PCI DSS compliant.
Can the shop be connected to our ERP or inventory system?‹
Yes — we integrate your shop via API with common ERP systems (SAP, Sage, Odoo and others) as well as with logistics providers for automated order fulfilment.
How long does it take to build an online shop?‹
A standard shop with bespoke design takes six to twelve weeks. More complex platforms with ERP integration take three to six months. With a starter solution we can go live in four weeks.

AI Integration & LLM

Which AI models do you use?‹
Depending on the requirement: OpenAI GPT-4/o1, Anthropic Claude, Google Gemini or local open-source models such as Llama 3, Mistral or Phi-3. For data protection-sensitive applications we prefer on-premises solutions.
Does AI integration make sense for smaller companies?‹
Yes — SMEs benefit particularly, because AI lets them automate processes that would otherwise incur staff costs. Chatbots, email classification and document processing are quick wins.
How is our data protected?‹
We implement to data protection requirements: GDPR-compliant API usage, optionally fully on-premises without any cloud transfer, and no sharing of training data with model providers.
What is RAG and why does it matter?‹
Retrieval-augmented generation lets an AI model work with your own documents, knowledge bases or product data — without the expense of retraining the model.

Technologies

1Password

How secure is 1Password really?‹
1Password uses AES-256 encryption combined with a secret key that stays local. Even in the event of a server breach, the data is useless without that secret key. It has been examined independently by security researchers several times and found to be secure.
1Password or Bitwarden?‹
1Password offers a better user experience and more business features (travel mode, 1Password Secrets). Bitwarden is open source and has a more generous free tier. For teams we recommend 1Password; for private individuals with security expertise, Bitwarden is excellent too.

3CX

Can 3CX run in the cloud and on premises?‹
Yes. 3CX can be hosted, run in a supported cloud or operated on your own infrastructure. The choice depends on responsibilities, availability, network, privacy and the desired operational effort.
Does 3CX work with existing phone numbers?‹
Usually, yes. Phone numbers or number blocks are ported to or connected through a compatible SIP trunk provider. Before cutover, we verify porting, emergency calling, fax, special destinations and transition rules.
Which devices does 3CX support?‹
3CX supports web, desktop and smartphone apps as well as many provisionable SIP phones. Existing devices are checked against the current support list, firmware and required features.
How is a 3CX outage mitigated?‹
We plan backups, monitoring, provider fallbacks, alternative destinations and documented recovery procedures. Depending on requirements, redundant internet links, separate voice paths or emergency routing can be added.

AMD

AMD or Intel for servers?‹
AMD EPYC has more cores (up to 192) and more PCIe lanes than Intel Xeon at the same price. Intel has better single-thread performance and specialised accelerators (AVX-512, QuickAssist). Cloud providers rely heavily on EPYC. For new data centres, EPYC is often the better choice.
AMD or NVIDIA for AI?‹
NVIDIA dominates through CUDA — almost every AI framework is optimised for it. AMD ROCm works but is less mature. The NVIDIA A100/H100 have no real competition for LLM training. The AMD Instinct MI300X is competitive for inference and for certain HPC workloads.

AWS IoT

AWS IoT or Azure IoT?‹
AWS IoT for: strong Lambda/serverless integration, lower prices, greater maturity. Azure IoT for: Microsoft environments, Azure Sphere for secure hardware, Windows IoT Enterprise. Google Cloud IoT has been discontinued. For new IoT projects we recommend AWS IoT Core.
What does AWS IoT Core cost?‹
Messaging: $1 per million messages (the first 250K a month are free). Connectivity: $0.08 per device per month for actively connected devices. Rules Engine: $0.15 per million executions. For 1,000 devices sending every 10 minutes: around $50 a month.

Azure IoT

Azure IoT Hub or AWS IoT Core?‹
Azure IoT Hub for: Microsoft/Azure environments, Windows IoT, C#/.NET teams, Azure Sphere hardware. AWS IoT Core for: a larger serverless ecosystem, lower prices, stronger MQTT broker features. Both are production-ready.
What are device twins?‹
Device twins are JSON documents that mirror the state of an IoT device in the cloud. Desired properties: the configuration the device should have (a reporting interval, for instance). Reported properties: the actual state the device reports. Tags: metadata for queries. Together they enable bidirectional device communication.

Bitwarden

Is Bitwarden suitable for enterprises?‹
Yes. Bitwarden provides organizations, collections, groups, policies and, depending on the plan, additional administration, identity and reporting features. We configure the platform for your organization and security requirements.
Should we use Bitwarden Cloud or self-host it?‹
Cloud operations reduce administrative effort. Self-hosting offers greater control but requires reliable administration, updates, monitoring and backups. We assess privacy, availability, costs and internal resources with you.
Can SW Business Solutions migrate existing passwords?‹
Yes. We plan imports from supported password managers, browsers or structured files, remove duplicates and establish a clear vault and permission structure.

BullMQ

What is the difference between BullMQ and Bull?‹
BullMQ is the modern successor to Bull with TypeScript support, better scalability and a redesigned API. SW Business Solutions uses exclusively BullMQ in new projects.
How reliable is BullMQ during server restarts?‹
BullMQ stores all jobs in Redis, so they are automatically reprocessed after a restart. Running jobs are re-queued.
How does BullMQ integrate with NestJS?‹
Via the official @nestjs/bullmq package, BullMQ can be seamlessly integrated as a module. Queues, workers and processors are defined as NestJS injectable services.
Can BullMQ be scaled horizontally?‹
Yes, multiple worker instances can process the same Redis queue in parallel. SW Business Solutions uses this for compute-intensive background tasks.

ElevenLabs

What is ElevenLabs suitable for in business projects?‹
Typical applications include voice agents, automated voiceovers, accessible audio versions, transcription and multilingual dubbing. A clear process for approvals, privacy and quality assurance is essential.
Can ElevenLabs be used in real time?‹
Yes. The API supports streaming speech synthesis and can be used for interactive applications. Perceived latency also depends on the selected model, application, network and any additional AI services.
How is ElevenLabs integrated technically?‹
Integration is handled server-side through the REST API or official SDKs. SW Business Solutions implements authentication, streaming, error handling, usage monitoring and connections to existing web, app or telephony workflows.
What should be considered for privacy and voice cloning?‹
Voices should only be used with documented authorization and transparent notice. The intended purpose, retention, data processing terms, data region and disclosure obligations must also be assessed for each use case.

Google Maps

Which Google Maps APIs are needed for a website?‹
The Maps JavaScript API is usually the foundation for interactive web maps. Depending on the feature set, Places adds search and autocomplete, Geocoding resolves coordinates and addresses, and Routes calculates journeys and travel times.
Is embedding Google Maps free?‹
Google Maps Platform uses usage-based billing. Costs depend on the enabled products and number of requests. We restrict API keys, define budgets and prevent unnecessary calls.
How can Google Maps be embedded with privacy in mind?‹
The map is loaded only after any required consent because data may be transferred to Google. The implementation also includes an appropriate privacy notice, consent management and a review of contractual requirements.
How are Google Maps API keys protected?‹
Keys are restricted to specific APIs and approved domains, apps or server IP addresses. Server-side keys remain outside frontend code, while usage and anomalies are monitored in the Google Cloud project.

Infisical

How is Infisical different from a password manager?‹
Password managers primarily serve people and interactive sign-ins. Infisical focuses on technical secrets for applications, machines, CI/CD pipelines and infrastructure, delivering them automatically at runtime.
Can Infisical be self-hosted?‹
Yes. Infisical offers self-hosting as well as a cloud service. Architecture, updates, backups, encryption, availability and secure administrator access must be planned for self-hosted operations.
How are secrets delivered securely to applications?‹
Depending on the environment, secrets can be delivered through the CLI, SDK, API, agent, Kubernetes Operator or other integrations. We select a method that keeps secrets out of source code and unprotected configuration files.

IONOS

What types of projects are suitable for IONOS?‹
IONOS is suitable for business websites, web applications, virtual servers, container platforms, backups and database-driven systems. Product selection depends on load, availability, data residency and operational effort.
What is the difference between IONOS Hosting and IONOS CLOUD?‹
Traditional hosting provides preconfigured packages for websites, domains and email. IONOS CLOUD offers flexible infrastructure such as compute, networking, storage, Kubernetes and databases for more customized applications.
Can an existing application be migrated to IONOS?‹
Yes. We assess dependencies, data volumes, DNS, certificates and outage risks, build the target environment in parallel and switch over with backups, testing and a documented rollback plan.
How is an IONOS environment secured?‹
The baseline includes minimal network exposure, role-based access, multi-factor authentication, regular updates, encrypted connections, separate backups, monitoring and alerting.

Microsoft

Which Microsoft services does a mid-sized business need?‹
This depends on working practices and protection needs. Microsoft 365, Teams, Exchange Online, SharePoint, OneDrive and Entra ID often form the foundation. Intune, Azure, Power BI or Power Platform are added depending on devices, applications and processes.
How does a Microsoft 365 migration work?‹
Accounts, domains, data, permissions and dependencies are inventoried first. The process then covers target design, pilot migration, technical cutover, user training and a controlled handover with documentation.
How is a Microsoft environment secured?‹
Core measures include multi-factor authentication, Conditional Access, minimal administrator roles, device compliance, phishing protection, centralized logging and tested retention and backup processes.
Can existing business applications be integrated?‹
Yes. Depending on the system, we use Microsoft Graph, Teams apps, Power Automate, webhooks or Azure integration services. Data flows, permissions, failure scenarios and responsibilities are defined beforehand.

Mongoose

Why Mongoose instead of native MongoDB driver?‹
Mongoose offers schema validation, type-safe models and an elegant query API that surpasses the native driver for most use cases.
How does Mongoose work with NestJS?‹
The @nestjs/mongoose package offers first-class integration with decorators for schema definition.
Does Mongoose support transactions?‹
Yes, since MongoDB 4.0 and Mongoose 5.2, multi-document transactions are supported.
How does Mongoose handle database migrations?‹
Mongoose itself does not offer a migration solution, so SW Business Solutions uses migrate-mongoose or manual migration scripts.

Nvidia

Why does Nvidia dominate the AI market so strongly?‹
Nvidia’s dominance rests on a decade’s head start: CUDA (2006) made GPUs usable for general-purpose computing long before AI went mainstream. The CUDA ecosystem is deeply integrated into every AI framework. AMD and Intel are catching up, but software compatibility and developer habits create a powerful network effect.
H100, H200 or Blackwell — what is the difference?‹
H100 (Hopper, 2022): 80 GB HBM3, the standard for LLM training. H200 (2024): same architecture as the H100, but 141 GB HBM3e and 4.8 TB/s bandwidth — 45 % more memory for even larger models. B200 (Blackwell, 2025): an entirely new architecture with 20 petaflops FP4 and 192 GB HBM3e — for the next generation of LLMs and real-time AI.
Do AI applications strictly require Nvidia GPUs?‹
For training large models: in practice yes — the H100 and H200 are the standard, with the AMD MI300X as an alternative. For inference, AWS Inferentia, Google TPUs or Apple Silicon are often cheaper for particular workloads. For smaller models and fine-tuning, consumer GPUs such as the RTX 4090 work too. The choice depends on model size, latency requirements and budget.
What is CUDA and why does it matter so much?‹
CUDA (Compute Unified Device Architecture) is Nvidia’s platform for GPU computing. It allows code to run on the GPU. All the AI libraries (cuDNN, cuBLAS, NCCL) are written in CUDA, and PyTorch and TensorFlow use it directly. Without CUDA, today’s AI boom would not have taken this form. AMD’s ROCm is the open-source alternative, but far less widespread.

Railway

What distinguishes Railway from Heroku?‹
Railway offers more modern container technology, lower prices, private networks and zero-downtime deployments.
How does automatic deployment work?‹
On every push to the configured branch, Railway automatically builds a new Docker image and deploys it without downtime.
Is Railway GDPR compliant?‹
Yes, Railway offers EU West as a deployment region (Google Cloud in the Netherlands).
Does Railway support Docker deployments?‹
Yes, custom Dockerfiles can be used in addition to automatic Nixpacks builds.

SQLite

Is SQLite suitable for production use?‹
Yes. SQLite is among the most widely deployed databases of all and sits inside browsers, mobile phones and aircraft systems. What matters is the use case: one machine with its own data, not many write operations across a network.
What happens during a power failure?‹
In WAL mode with synchronous=FULL the data stays consistent: a transaction is either written in full or not at all. There are no half-finished states.
How are backups created?‹
VACUUM INTO produces a consistent copy in a new file while the system is running — without stopping the program. That file can simply be copied away.
SQLite or PostgreSQL?‹
SQLite when the data stays local and nobody should have to maintain a server. PostgreSQL as soon as several users write over the network at the same time, or the data has to live centrally.

Socket.io

When should I use Socket.io instead of pure WebSockets?‹
Socket.io is recommended when automatic reconnect, room management and fallback support are needed.
How does Socket.io scale in production environments?‹
With the Redis adapter, Socket.io can scale across multiple server instances.
How does Socket.io integrate with NestJS?‹
NestJS offers first-class integration via @nestjs/websockets and @nestjs/platform-socket.io.
Does Socket.io support authentication?‹
Yes, JWT tokens can be validated during connection establishment via middleware.

Vaultwarden

What is the difference between Vaultwarden and Bitwarden?‹
Bitwarden is the official product from Bitwarden, Inc. Vaultwarden is an independent, resource-efficient open-source implementation of the Bitwarden server API. It works with official Bitwarden clients but is developed and maintained by a separate community project.
Is Vaultwarden suitable for business use?‹
Vaultwarden can be a good self-hosting option for small and medium-sized teams. Secure configuration, clearly assigned administration, timely updates and a tested backup and recovery plan are essential.
Can SW Business Solutions manage ongoing operations?‹
Yes. We can handle deployment, HTTPS security, updates, monitoring, backups and documented recovery, or support your internal IT team with these responsibilities.

Zod

What is the difference between Zod and Joi?‹
Zod is TypeScript-first and automatically derives types, while Joi does not generate native TypeScript types.
What is the bundle overhead of Zod?‹
Zod has no external dependencies and is very compact with tree-shaking support.
Can Zod be used with NestJS validation pipes?‹
Yes, via nestjs-zod or manual ZodValidationPipe, Zod integrates seamlessly into the NestJS validation workflow.
How does the integration with React Hook Form work?‹
With @hookform/resolvers/zod, a Zod schema is used directly as a resolver for React Hook Form.

easybell

What is an easybell SIP trunk?‹
A SIP trunk connects an IP phone system to the public telephone network over the internet. It provides phone numbers, extensions and a defined number of simultaneous calls for systems such as 3CX.
Can existing numbers be ported to easybell?‹
Yes. Individual numbers and number blocks can often be transferred. Correct contract data, sufficient lead time and a coordinated cutover and test plan are important.
Does easybell work with 3CX and Microsoft Teams?‹
easybell offers compatible SIP trunks for 3CX and a Teams Connector for business telephony in Microsoft Teams. The right option depends on the phone system, licenses, number plan and required features.
What happens during an internet or phone-system outage?‹
Depending on the plan and architecture, alternative destinations, forwarding or separate internet paths can be prepared. We define emergency routing and test how incoming calls continue during outages.

JavaScript

JavaScript or TypeScript for new projects?‹
TypeScript for every professional project — static typing catches errors at development time, improves IDE support and keeps large codebases maintainable. JavaScript remains relevant for small scripts and quick prototypes. TypeScript compiles to JavaScript and is fully compatible.
What is the event loop in JavaScript?‹
JavaScript is single-threaded — it runs in a single thread. The event loop enables asynchronous behaviour: callbacks, promises and async/await pause only the current context without blocking the thread. I/O operations are delegated to the runtime (browser or Node.js). That makes JavaScript ideal for many parallel, non-CPU-intensive tasks.
Which modern JavaScript features matter most?‹
Destructuring, the spread and rest operators, arrow functions, template literals, optional chaining (?.), nullish coalescing (??), async/await, Promise.all() and ES modules (import/export). These features are available in all modern browsers and in Node.js 18+ without transpilation.
How does JavaScript differ from Java?‹
Despite the similar name, JavaScript and Java have little in common: JavaScript is dynamically typed, prototype-based and runs in the browser. Java is statically typed, class-based and runs on the JVM. JavaScript was created at Netscape in 1995 and given the Java name for marketing reasons — the languages were developed entirely independently.