Sovereign Cloud Infrastructure for the Federal Government, States, and Municipalities
In the Day-to-Day Work of Government
Digitalization is determined by individual cases, not by strategy papers
Whether a cloud strategy works for a government agency isn’t determined by a concept paper, but by specific situations in day-to-day work. Three of these situations recur in nearly every government agency.
A specialized process must be migrated without interrupting ongoing operations. secunet.cloud enables a phased, documented transition, ensuring that citizen services remain available at all times.

A funding portal or selection tool generates a high volume of traffic in the short term that is difficult to predict. Resources scale automatically, eliminating the need to maintain capacity on a permanent basis for exceptional circumstances.
A government agency handles classified information up to the VS-NfD level and must be able to provide complete proof of compliance. SINA Cloud meets the certification requirements without sacrificing the benefits of the cloud.

Regulatory Context
Requirements Applicable to the Public Sector
The requirements vary depending on the administrative level and data classification. NIS2 mandates minimum standards for network and information security; BSI C5 is the assessment catalog for cloud providers; and VS-NfD governs the handling of classified information. In addition, there are the GDPR, the KRITIS Regulation for critical infrastructure, and the BSI’s IT-Grundschutz as a modular framework for information security management. secunet.cloud covers the entire spectrum, from public websites to classified information.
Sovereignty
Public funds deserve public oversight
Anyone who uses taxpayer money for digitization must still be able to explain, even ten years from now, where the data is stored, who can review the code, and how to reverse the process if necessary.
Readable Code Instead of a Black Box
secunet cloud is based on Kubernetes and OpenStack. What needs to be tested can actually be tested—it’s not just a contractual promise.
A change is still possible
Workloads are not tied to a specific hardware platform or manufacturer. RFP requests remain open to other vendors.
Rollback planned from the start
The transition back to our own infrastructure is part of the operational plan; it is not an issue that is only raised when the contract is terminated.
On-premises, if necessary
The same cloud stack also runs in the agency's own data center. The cloud is an option, not a requirement.
Operations in Germany
If secunet takes over operations, this is done exclusively in certified data centers located in Germany.
From public websites to classified information: a platform for four levels of security needs

For websites, portals, and specialized applications that do not handle classified information. Full scalability with operations based in Germany.

The only cloud platform for classified information up to the “VS-NfD” level. For ministries, subordinate agencies, and security-related specialized procedures.

A self-sufficient infrastructure for AI models and AI-related business processes, without sharing data with external providers.
Projects & References

A highly secure infrastructure for classified communications (VS) has been successfully implemented, enabling encrypted voice and video communications over government networks and the Internet. This solution ensures the secure processing and transmission of sensitive information and is being gradually rolled out to all federal agencies.

PHOENIX WebInnovation provides air traffic controllers with a web-based solution that enables them to access air situation data flexibly and from any location, as well as to create electronic flight strips. This technology frees operators from dependence on specific hardware and operating systems, which significantly simplifies the IT infrastructure and allows for the use of centralized maintenance strategies.

As a federal technology company, Bundesdruckerei relies on a cloud solution designed from the outset for maximum security (security by design). The highly available and resilient system architecture meets the most stringent availability requirements while ensuring the use of modern applications with complete control over the data.
Zertifizierungen & Standards






Discuss a cloud strategy for your government agency
Whether it’s the public cloud, VS-NfD classification, or managed services:
We’ll work with you to assess your needs.
Resources