A Sovereign Cloud Infrastructure for Digital Healthcare

Cloud speed with German data sovereignty—as reliable for patient data as it is for telematics infrastructure and medical technology.
syseleven.de has become secunet.cloud. You are already on our new website. The platform, services and contacts remain the same.

In Everyday Clinical Practice
Digital Care Is Decided at the Bedside, Not in the Data Center

Whether a cloud strategy in healthcare is successful is evident in specific, recurring situations: connecting to the telematics infrastructure, networked devices, and the growing number of apps.

Role

Clinical systems must be highly available while also meeting strict data protection and KRITIS requirements. secunet cloud securely migrates business-critical applications to the cloud without compromising security.

Role

Connected medical devices generate and transmit sensitive data in real time. The underlying infrastructure must reliably secure this connection, from the edge to the cloud.

Role

A new digital application is rapidly gaining users, and the infrastructure must be able to scale accordingly. Cloud and Kubernetes platforms scale along with the application without compromising security.

Regulatory Context
Requirements Applicable to the Healthcare Sector

Health data is classified as a specially protected category of data. GDPR Article 9 imposes stricter requirements on health data, while BSI C5 remains the compliance checklist for cloud providers. Hospitals exceeding certain case volumes, as well as many medical device manufacturers, are classified as important or particularly important entities under NIS2, with their own reporting and documentation obligations. For hospitals exceeding the KRITIS thresholds, § 75c SGB V regarding IT security in hospitals also applies. Connection to the telematics infrastructure requires gematik certification of the components used; medical devices and networked devices are subject to the MDR (Medical Device Regulation), while digital health applications are governed by the BfArM’s DiGA Regulation. secunet cloud covers this entire spectrum, from administrative applications to IT connectivity.

Sovereignty
Patient data deserves more than just a server location in Germany

Sovereignty in healthcare means: traceable code, no dependence on a single provider, and a planned path back, should it ever become necessary.


Runs on standard hardware without being tied to a specific manufacturer. Switching providers remains technically feasible.


A path back to our own infrastructure or to another provider is part of the operational concept. Especially when it comes to patient data, this must not be left open.


The same cloud stack runs on-premises, in the public cloud, or in a hybrid environment. The decision is made during setup, not by the provider.


If secunet takes over operations, this is done exclusively in certified data centers located in Germany.


From scheduling appointments to AI-powered diagnostics: three operational stages

Not every healthcare application requires the same level of performance. The classification is based on how critical a system is to patient care.
Public Cloud

For patient portals, appointment scheduling, and administrative systems. Fully scalable with operations based in Germany.

Managed Kubernetes

A highly available platform for clinical and business-critical applications, with operational expertise rather than self-management.

Private Cloud AI

A self-contained infrastructure for AI-powered diagnostics and analysis, without sharing patient data with external providers.

Zertifizierungen & Standards

IT-Grundschutz
ISO 27001
ISO 27017
ISO 27018
BSI C5 Type 2
Contact request

Let's talk about your TI integration

Whether it’s a TI gateway, a clinical application, or Managed Kubernetes: We’ll work with you to assess your needs.

I acknowledge that I have the right to object to the processing of my data at any time, with effect for the future. Further information on the processing of your personal data can be found at: https://www.secunet.cloud/en/privacy-policy.