{"resourceId":"secunet-redhat-deepset-classified-ai-cloud-germany-20261026","versions":[{"version":"external-2b5695e6d7c6d3ec839d6cac5bd1318f71861d3cfc0cc0cb97f6aebd3d038535","resource":{"id":"secunet-redhat-deepset-classified-ai-cloud-germany-20261026","title":"secunet, Red Hat and deepset present AI offering for classified information based on NVIDIA technologies","organization":"secunet Security Networks AG (with Red Hat, deepset, NVIDIA)","sector":"Sovereign government AI cloud for classified information","geography":"Germany (international comparator for SLED)","publishedAt":"secunet press release, Oct. 26, 2026","publicationDate":"2026-10-26","eventDate":"2026-10-22","sourceName":"secunet","sourceLabel":"Milestone for digital sovereignty: secunet, Red Hat and deepset present AI offering for classified information based on NVIDIA technologies","sourceUrl":"https://www.secunet.com/en/about-us/press/article/meilenstein-fuer-digitale-souveraenitaet-secunet-red-hat-und-deepset-stellen-ki-angebot-fuer-verschlusssachen-auf-basis-von-nvidia-technologien-vor","evidenceClass":"vendor-claim","outcomeClass":"emerging","topics":["infrastructure","data-security","governance-procurement"],"finding":"Vendor claim: a consortium of secunet, Red Hat and deepset, using NVIDIA technology, confirmed at NVIDIA GTC Berlin (Oct. 20 to 22, 2026) that it is developing a classified-information-compliant AI Runtime as a Service for German authorities. secunet cloud would run it in its own German data centers. It builds on the SINA Cloud architecture on NVIDIA BlueField-3 DPUs, Red Hat AI Factory with NVIDIA for containerized AI operations, Haystack for agent orchestration and Nemotron open models. secunet says the SINA Cloud security components are BSI-authorized for classified information. The new offering itself still needs integration, validation, approval and release before secunet will provide it.","sledRelevance":"International comparator for US state and local agencies with criminal justice, tax, health or other restricted data that want AI under government-controlled, in-country or in-state operation. It shows Red Hat AI positioned as the platform layer inside a regulated sovereign service, with accreditation inherited from an existing authorized cloud. US equivalents would map to CJIS, IRS 1075 or StateRAMP rather than German VS rules.","evidence":"Read the full secunet release (dated 10/26/2026). It is a forward-looking consortium announcement: no customers, pricing, availability date or performance data. Approval for the new offering is pending, so the BSI authorization claim covers existing SINA Cloud components, not this service.","architectureImplications":"Layered design: hardware-isolated security on DPUs, then Kubernetes-based AI operations (Red Hat AI Factory with NVIDIA), then agent and RAG orchestration (Haystack), with modular, exchangeable components.","governanceImplications":"Accreditation is approached by building on an already-authorized platform. Approval of specific implementations is still required.","securityPrivacyImplications":"Security functions are offloaded and isolated at the DPU hardware level, and operation stays within national data centers under a national provider.","caveats":"Vendor consortium announcement; not yet available; non-US regulatory context; no outcomes or customers reported.","streamIds":["red-hat"],"roles":{"sales":"Sales framing: use this as an international reference architecture, not a customer win. It shows Red Hat AI as the platform layer inside a sovereign, government-operated AI service for restricted data. In SLED, the parallel conversation is with state shared-services organizations or consortia that host regulated workloads for many agencies. Position Red Hat as the open platform a trusted operator runs. Do not imply US accreditations or availability; the German service itself still awaits approval.","engineering":"Engineering framing: the design separates hardware-isolated security (BlueField-3 DPUs under SINA Cloud) from containerized AI operations (Red Hat AI Factory with NVIDIA) and agent/RAG orchestration (Haystack). For US analogues, map each layer to the relevant control framework (CJIS, IRS 1075, StateRAMP) and identify which layer carries the authorization. Expect accreditation of a specific implementation to set the schedule, not the platform build.","delivery":"Delivery framing: the release is candid that integration, validation and approval come before service launch. A comparable SLED program would need an accredited operator, an authorization plan per data class and an application onboarding process for partner solutions. Plan delivery phases around accreditation gates, and avoid committing agency use-case timelines before the platform is approved. Treat the German program as a reference only, since its own timeline is still open."},"roleDetails":{"sales":{"customerProblem":"Agencies holding restricted data cannot use public AI services and lack an accredited, government-controlled AI runtime.","stakeholders":["State CIO or shared-services director","CISO","Criminal justice or tax agency data owners","Procurement office"],"discoveryQuestions":["Which data classes block your AI use today (CJIS, FTI, health)?","Do you have a state-operated or consortium cloud that already holds authorizations?","Would agencies consume AI as a managed runtime from a trusted operator?"],"valueHypothesis":"Building an AI runtime on an already-authorized government cloud could shorten the path to approved AI use for restricted data.","potentialEngagement":"Sovereign AI runtime architecture and accreditation-mapping workshop with a state shared-services provider.","unsupportedClaims":["That the offering is available or approved","That any US accreditation applies","Any performance or cost outcomes"]},"engineering":{"fit":"Fits shared-service providers hosting regulated workloads who want an open Kubernetes-based AI platform under their own operation.","architectureIntegration":"DPU-isolated security foundation, Red Hat AI Factory with NVIDIA for AI runtime, Haystack for RAG/agents, open models such as Nemotron.","prerequisites":["Accredited or accreditable hosting environment","GPU and DPU infrastructure","Data classification and control mapping"],"constraints":["Not yet integrated or validated","German VS rules do not map directly to US frameworks","Vendor-only description of the design"],"security":"Hardware-level isolation of security functions plus in-country operation. Each implementation still needs approval.","proofOfValue":["Map each architecture layer to the target US control framework","Pilot a non-restricted workload on the same stack before restricted data","Document which controls inherit from the existing authorization"]},"delivery":{"work":"Plan a sovereign AI runtime program with accreditation gates, operator responsibilities and application onboarding.","dependencies":["Accreditation authority timelines","Hardware supply","Partner application readiness"],"ownership":"Shared-services operator, with agency data owners approving use per data class.","skillsAdoption":"Operator staff need Kubernetes AI platform, DPU and accreditation documentation skills.","governanceCheckpoints":["Authorization decision before restricted data","Per-application onboarding review","Periodic reassessment of controls"],"acceptanceCriteria":["Proposed: documented control inheritance for each layer","Proposed: authorization granted before restricted-data use","Proposed: onboarding process published for partner applications"],"risks":["Accreditation delays","Vendor lock-in despite modular claims","Uncertain demand from agencies"]}},"retrievedAt":"2026-10-30T03:09:23Z","enrichedAt":"2026-10-30T03:21:15Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Not addressed in the source.","procurementImplications":"Delivered as a managed service from a national provider, so agencies would buy a service, not a platform build. Partners are invited to add applications to the ecosystem.","operatingModelImplications":"A government-trusted operator runs shared AI runtime for many authorities, similar to a state shared-services or consortium cloud model.","sourceVerification":{"openedUrl":"https://www.secunet.com/en/about-us/press/article/meilenstein-fuer-digitale-souveraenitaet-secunet-red-hat-und-deepset-stellen-ki-angebot-fuer-verschlusssachen-auf-basis-von-nvidia-technologien-vor","referenceExcerpt":"Following successful integration and validation, as well as the necessary approval and release procedures, secunet will provide the offering.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}