2-step verification & MFA
Enforced 2SV across the org, security keys for admins, and a recovery plan that doesn't lock you out.
Specialists in Google Workspace
Google Workspace, done right — migration, security, deliverability, and AI.
We're an independent consultancy that helps teams move to Google Workspace, keep their email in the inbox, lock down the Admin console, and adopt Gemini responsibly. Bilingual engineers who hold Google certifications — careful, and finished on time.
Across every Workspace app
01 · Our core strength
Email that reaches the inbox.
Deliverability is where most Workspace problems hide. We rebuild authentication so receivers trust your mail, recover domains from blocklists, and ramp DMARC to enforcement without dropping a single legitimate send.
- SPF, DKIM & DMARC, done correctly. Records rebuilt from the ground up, with identifier alignment that passes.
- DMARC to enforcement. From p=none monitoring to p=reject — staged, watched, and reversible.
- Blocklist recovery. Delisting from Spamhaus, Barracuda, and the rest, plus the root-cause fix so you stay off.
- Inbox placement & monitoring. Ongoing DMARC reporting and reputation checks so it stays fixed.
Free, no sign-up. Paste a domain and see exactly what's wrong in about 30 seconds.
A migration your team barely notices.
From Microsoft 365, Exchange, or plain IMAP — we move mail, calendars, contacts, and Drive data with coexistence during the cutover, so your team keeps working while the switch happens underneath them.
- Full data migration. Mail, calendar, contacts, and files — verified counts before and after.
- Coexistence during cutover. Mail routing and free/busy stay intact while you transition in stages.
- Minimal downtime. Staged cutover planning so users are back at work the next morning.
- Domain & DNS handled. MX, SPF, DKIM, and DMARC configured for Workspace from day one.
03 · Admin & security
Security hardening for the Admin console.
We harden the Admin console to current best practices — so access is controlled, data stays in, and you have the audit trail to prove it.
Access & context-aware control
Context-aware access policies, OU and group structure, and least-privilege admin roles instead of one super-admin for everything.
DLP & data protection
Data-loss-prevention rules for Gmail and Drive, external sharing controls, and trust rules that match how you work.
Endpoint & mobile management
Device policies and remote wipe for laptops and phones, so a lost device isn't a data breach.
Audit logging & alerts
Admin, login, and Drive audit logs wired to alerts, with the investigation tooling configured before you need it.
Joiner / leaver hygiene
Onboarding and offboarding that runs itself: accounts provisioned cleanly and revoked completely.
Email authentication & anti-spoofing
SPF, DKIM, and DMARC taken to enforcement, with Gmail quarantine and compliance rules tuned — so nobody sends as your domain but you.
Retention & Vault
Retention policies, legal holds, and recoverable mail and files — so "someone deleted it" is an inconvenience, not a crisis.
Tools your team actually uses.
The license is only worth what people do with it. We structure Drive, set up Meet and Spaces, and run the change management that gets a team past "we still email attachments around."
- Drive & Shared Drives. A folder structure and permission model that scales past the founder's personal Drive.
- Meet & Spaces. Meeting, chat, and Spaces conventions that cut the noise instead of adding to it.
- Change management. A rollout plan that brings people along, not a memo nobody reads.
- Team training. Bilingual sessions and short docs people read.
05 · AI & Gemini
A responsible Gemini rollout.
Gemini in Gmail, Docs, Sheets, and Meet is genuinely useful — once it's governed. We turn it on with the guardrails, training, and data controls that keep it an asset instead of a liability.
- Licensing & rollout. The right Gemini tier for your team, enabled in the OUs that should have it.
- Governance & data controls. Clear rules on what AI can touch, aligned with your DLP and compliance posture.
- Adoption support. Practical prompts and workflows so people get value in week one, not month six.
- Responsible by default. We help you adopt AI carefully — review-first, with human oversight where it matters.
How we work
Independent, certified, and built to finish.
Discovery
A free 30-minute call. We look at your domain, console, and goals, and tell you plainly what's worth doing.
Plan & price
A scoped plan with fixed pricing wherever possible. You know the number before any work starts.
Execute
We do the work — migration, hardening, deliverability — and validate every step instead of handing you a deck.
Verify & hand off
Documented results, the controls in place, and a clear answer on what (if anything) needs watching next.
Guanacos Tech is an independent consultancy specializing in Google Workspace. We help you get the most out of the platform — we are not Google, and we don't claim any official endorsement.
Need infrastructure too?
Beyond Workspace, we build and modernize on Google Cloud — Gemini Enterprise, AI automations, and on-prem to cloud migrations.
Make Workspace the boring part of your week.
Migration, security, deliverability, or Gemini — bring us the problem. A 30-minute discovery call costs nothing and usually ends with a clear answer.