Specifically, the future offering provides a curated, protected Runtime as a Service for AI applications that is compliant with the legal requirements for classified information (Verschlusssachen - VS). This model offers maximum flexibility and scalability for customers. The product combines the trustworthiness and sovereignty of a national cloud service provider – secunet cloud – with globally leading technology. To this end, the consortium partners are joining forces.
The future offering combines the technologies and competencies of the four partners into an end-to-end approach for the secure and sovereign use of modern AI. The special requirements for the protection and processing of classified information are an integral part of the architecture. Open technologies and standardized interfaces create the technological foundation for this.
secunet acts as the cloud service provider and contributes its decades of expertise in classified IT as well as its experience as the operator of the highly secure, classified-information-compliant SINA Cloud.
Red Hat is the global pioneer and leading player in the field of open-source operating systems and Kubernetes architectures, providing the Red Hat AI Factory with NVIDIA platform, which integrates NVIDIA technology.
deepset brings a global standard for AI agent orchestration into play with Haystack, provided sovereignly from Germany and specially designed for protected environments.
Architecture combines performance and high security
Technologically, the proven security architecture of secunet's SINA Cloud forms the foundation of the new solution. It is built directly on the NVIDIA BlueField-3 DPU (data processing unit). By offloading and strictly isolating security tasks at the hardware level, the solution fulfills the requirements of the Classified Information Instructions (Verschlusssachenanweisung - VSA) for handling classified data. Building on this, Red Hat AI Factory with NVIDIA ensures high-performance, containerized cloud operations and maximizes the efficiency of the NVIDIA AI infrastructure and the NVIDIA Nemotron open models deployed on it, which guarantee full transparency and adaptability.
The security components of the underlying SINA Cloud are authorized by the German Federal Office for Information Security (BSI) for use with classified information. This facilitates the classified information approval of specific implementations of the solution.
Digital sovereignty through openness and control
Digital sovereignty is a central design principle of the new offering. Authorities and organizations should be able to retain control over which models, data, applications, and technologies they use and how they are operated. The modular structure allows components to be further developed or exchanged and the architecture to be supplemented with additional technologies and applications.
Voices of the partners
"The use of modern AI in conjunction with classified information requires performance, security, and sovereignty to be considered together from the very beginning. Our cloud solution for AI, which we are developing with our strong partners and will offer as part of the secunet cloud portfolio, meets this demand." Andreas Rückriegel, Vice President Cloud Services, secunet
"Open technologies create freedom of choice and transparency and form an essential foundation for digital sovereignty. With Red Hat AI Factory with NVIDIA, we are bringing an open platform for the development and productive operation of AI into the new classified-information-compliant offering. Together, we combine openness and scalability with the special requirements of security-critical application areas." Christof Orth, Director Sales Federal, Local States Government and HealthCare, Red Hat GmbH
"The concrete benefit of generative and agentic AI arises in applications that connect models with relevant knowledge, data, and tools. With Haystack, we are bringing an open technological foundation for the development and orchestration of such applications into the new offering and creating the prerequisites for making RAG and agentic applications usable even for use cases with classified information." Milos Rusic, CEO and co-founder, deepset
Next steps and expansion of the partner ecosystem
The technological foundation for the new AI cloud offering has already been laid. In the next step, the components will be integrated and their interaction for the intended deployment scenarios will be validated. In parallel, the partners are concretizing the offering built upon it. Following successful integration and validation, as well as the necessary approval and release procedures, secunet will provide the offering.
