In contrast to cloud platforms that have been hardened retrospectively, the SINA Cloud can be scaled flexibly. The IT security architecture is designed in such a way that compliance with the German regulations for classified information (Verschlusssachenanweisung, VSA) is maintained when extensions and updates are made to the cloud stack. At the same time, the high level of security does not result in any restrictions in terms of functionality for cloud services and applications. The technological basis of SINA Cloud is formed by open-source components such as the proven OpenStack platform. This creates transparency and avoids vendor lock-in. The security architecture of the new cloud offering uses encryption technology that secunet also employs in its SINA IT high-security solution. For many years, SINA has been the de facto standard for authorities handling digital CI.
The multi-client capability of the SINA Cloud makes it possible to process classified data and applications from several end customers or even different levels of secrecy – in the case of open and VS-NfD (RESTRICTED) – in accordance with the requirements of the VSA on one infrastructure. This is possible because the SINA Cloud keeps this information strictly separate thanks to its security architecture. This can benefit, for example, authorities or companies that handle CI and work with several security domains or act as IT service providers for various departments, authorities or external bodies. The solution eliminates the need for physical separation, which significantly reduces administrative effort and IT costs.
The SINA Cloud will initially be available as an on-premises solution and as such will be operated directly in the customer's data centre. In addition, a SINA Cloud operated by secunet is expected to be offered as an IaaS solution from the second half of 2025. This will enable customers to save on the resources required for operation. In this variant, the solution will run in the sovereign, certified data centre infrastructure of secunet and its wholly-owned subsidiary SysEleven.
“secunet is investing heavily in the cloud sector, and the SINA Cloud is the latest result of these efforts,” says Axel Deininger, CEO of secunet. “Now we can offer our customers in the public sector and companies that handle classified information a turnkey solution that once again revolutionises dealing with classified information while also creating operational added value. Like all our cloud solutions, the SINA Cloud is also completely ‘made in Germany’ and thus strengthens digital sovereignty. The coming political upheaval in the US again shows how important this aspect is. In addition, value creation, taxes, jobs and expertise remain in Germany. We will continue to pursue this path consistently and expand our ecosystem continuously.”
The SINA Cloud Security Layer is the first technology to have successfully passed the BSI's new component approval procedure. In this process, it is not complete products that are approved for use with classified information, but individual components. In the case of the SINA Cloud, additional IT baseline protection aspects were included in the approval.
About secunet cloud solutions
As a transformation partner, secunet supports authorities and companies on their way to the cloud. A wide range of solutions is available for this purpose, which can be flexibly combined – from public to private to hybrid clouds, from Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) to Software-as-a-Service (SaaS) and Managed Services. All offerings are sovereign and open source-based. secunet is gradually expanding the cloud ecosystem and developing it further with partners and customers.
Here you will find further information and can also register for one of the webinars on the SINA Cloud planned for November and December 2024.
