]init[ receives C5:2020 Type 2 attestation Transparent cloud security at the highest level

Since 28 July 2026, ]init[ AG holds the official C5 Type 2 attestation under the BSI standard C5:2020. The audit firm HKKG confirmed the cloud services without restrictions or conditions: a fully positive attestation.

About C5:2020

C5 stands for Cloud Computing Compliance Criteria Catalogue and is a recognized security standard issued by the BSI. It was specifically developed to ensure the transparency and security of cloud services – particularly for business-critical and sensitive data. The C5:2020 Type 2 version confirms that the control system fully meets the requirements over a defined period (6–12 months), including organisational, technical, and legal security measures.

Logo C5-Testat

Verified safety, transparent standards

With the successful C5 Type 2 attestation, ]init[ demonstrates that its cloud infrastructure meets the high requirements of the German IT security landscape. Customers, partners, and stakeholders can rely on the fact that the services:

  • have been proven to be secure and compliant,
  • meet all minimum information security requirements,
  • and have been fully documented and audited with regard to data protection, emergency preparedness, access rights, and control mechanisms.

We want to be a proactive security partner for customers, partners, and stakeholders — one that consistently meets the highest standards. Nowhere is this more important than in public administration and healthcare. Wherever particularly sensitive tasks and data are involved, the highest security standards must apply. With the C5 Type 2 attestation for our georedundant operating platform, we provide verifiable proof that our security measures are not only appropriately designed but also effective in daily operation. This is how we build the trust that a secure eSociety depends on.

Julia Läkemäker

Chief Operating Officer

Our Cloud Services

  • ]init[ Hosting Platform

    The ]init[ Hosting Platform is based on PaaS and IaaS infrastructure and provides a secure, scalable platform for containers and web applications. It enables the easy deployment, management, and operation of modern web applications and business processes – supported by development frameworks, database services, and middleware. Stable and secure operation is guaranteed thanks to highly available data centers with certified infrastructure.

  • ]init[ Secure Cloud Brokerage 

    The Secure Cloud Brokerage Service from ]init[ acts as a trusted intermediary between customers and external cloud services. Using state-of-the-art encryption technologies, the platform ensures that only authorized parties have access to the data – either ]init[’s operations staff or, optionally, the customer alone. This ensures the secure operation of hybrid cloud infrastructures.

  • ]init[ Collaboration Services

    These services are based on product solutions and enable customers and specialist teams to collaborate in shared development and operational environments. In addition to collaboration tools, secure communication, documentation, and sharing solutions are also used to support effective project work across organizational boundaries. The systems are certified under the IT Baseline Protection standard in accordance with ISO 27001 and are operated in compliance with the GDPR.

  • ]init[ Continuous Integration Platform

    This CI platform is part of ]init['s PaaS strategy and forms the foundation for automated build, test, and deployment processes (CI/CD). It integrates security mechanisms based on the "security by design" approach and is operated by experienced DevOps teams. The platform enables fast and secure software delivery, particularly in the context of government specialist systems and business-critical applications.

  • ]init[ Tailored App Solutions  

    As part of this SaaS offering, ]init[ develops custom business applications and information portals that are precisely tailored to customer requirements. The solutions are designed, developed, documented, and operated in accordance with the C5 catalog – with a focus on data protection, IT security, and regulatory compliance. The applications run with high availability on ]init[ AG’s virtualized or containerized infrastructure.

  • ]init[ Housing Service

    Our Housing Service provides secure accommodation and operation of your own hardware within a professional data centre environment, including power supply, climate control, physical security, and standardised connectivity. On request, we also take on defined operational services such as monitoring and remote hands. A georedundant setup across two separate data centre locations is available as an option to increase availability and resilience.

  • ]init[ Backup Service

    We offer comprehensive backup services for data from external infrastructure, private cloud environments, and Microsoft 365 (Exchange Online, SharePoint, and Teams, including channels and chats). Backups can be stored in a central backup environment or as an offsite copy in Azure Blob Storage or a separate external infrastructure. This ensures automated, monitored backup and reliable data recovery. Optionally, we also support file-based storage via a ShareFile storage zone where centralised, controlled data exchange is required.

  • ]init[ SOCaaS

    Our SOCaaS (Security Operations Center as a Service) provides continuous monitoring of your IT and cloud environments for the early detection, analysis, and prioritisation of security incidents. On request, we also provide defined services such as use case management, alert triage, incident response support, and regular reporting and hardening recommendations. A redundant setup across two separate SOC/operating environments is available as an option to increase availability and responsiveness.

Your point of contact for the attestation

Alexander Schultz, ]init[ AG

Alexander Schultz

Director Information Security

+49 30 97006 218

Current Topics and Projects

Person arbeitet am PC-Arbeitsplatz

Information Security for Government Agencies and Organizations

Information security is a key factor in the success of government agencies and businesses. Our modular security portfolio offers tailored solutions. We take a holistic approach and optimize security strategies from analysis through implementation.

IT security portfolio at all levels
Stefan Maiwald of STACKIT, Julia Läkemäker, and Gregor Költzsch of ]init[

Partnership with STACKIT for data-sovereign cloud platforms

With STACKIT, we’re opening up new options for our customers to operate complex digitalization platforms. Our offering combines our 25 years of experience with STACKIT’s modern cloud architecture.

Background on the strategic partnership
Logo Kooperation ]init[ und Deutsche Cyber-Sicherheitsorganisation GmbH

]init[ and DCSO Launch Partnership

]init[ and the DCSO (German Cyber Security Organization) have launched a strategic partnership and a joint service offering. The goal is to provide sustainable protection for public administration against cybercrime.

Strong Together for IT Security
Person arbeitet am PC-Arbeitsplatz

]init[ and IONOS are working together to drive cloud transformation

We have entered into a strategic partnership with the German cloud specialist IONOS. By combining our expertise, we are forming a highly effective team dedicated to delivering cloud solutions for the public sector.

A Strong Partnership for a Self-Sovereign Administrative Cloud
A woman with a coffee cup in her hand is talking to a colleague. Both are looking at a tablet.

Ready for the sovereign management cloud

With our BSI-certified private cloud, we are implementing the future-proof standards of tomorrow today. We offer cloud services operated in Germany, Europe, or worldwide, and manage your projects using an end-to-end approach. 

Here's how we're getting the German Government Cloud up and running