Skip to content

How we protect your client data

Confidential client data demands more than standard security. Every dataset we handle follows the same principles: European infrastructure, end-to-end encryption, and independent audits.

How We Process DataAI for Public Sector

Two paths of processing

Whichever path you choose, your data stays in Europe, every access is logged, and every processing step remains documented and court-ready.

In-house processing at Sinabis

Processed directly on our premises, with no external providers and no cloud.

  • Secure handover via encrypted channels with documented chain of custody.
  • Optional dedicated review machine, eDiscovery included, fully offline.
  • Access limited to authorized staff, every action logged.
  • Metadata preserved, every step documented and court-ready.
How We Process Data

Processing via Sinacluster

SySS-tested infrastructure in our own data center in Germany, accessed over a secure VPN.

  • All traffic encrypted, sender and receiver verified by certificate.
  • VPN connects into the customer's dedicated network area.
  • Strict firewall rules block unauthorized networks.
  • Modern encryption and authentication safeguard data integrity.
About Sinacluster
Data stays in Europe
All data is stored and processed exclusively on servers within the European Economic Area. Our data center is located in Frankfurt and operated in full compliance with the GDPR.
End-to-end encryption
Your data is encrypted in transit and at rest. Handovers take place via secured channels or with a physically documented chain of custody.
Strict access control
Only authorized staff receive access, following the need-to-know principle. Every access is logged and fully auditable.
On-premise option
If you prefer, your data never leaves your premises: with the Sinabox, all processing runs fully offline in your own network, with no cloud and no data sharing with third parties.
Independently audited
Sinacluster has been penetration-tested for vulnerabilities by SySS, an independent security firm. Our SATA write blocker is officially NIST-tested.
Court-admissible integrity
Metadata is preserved and every processing step is documented. Evidence and client data remain admissible in court at all times.

Questions about the security of your data?

We are happy to explain in detail how we handle your client data and which option fits your workflow.

Get in touch

Frequently asked questions

What we get asked most often about this topic. If your question is missing, write to office@sinabis.com.

In European infrastructure; for Sinacluster processing, in German data centers. Where data must not leave the customer's premises, processing runs on-premises.

Yes, end to end. Transport is encrypted, and both sender and recipient are authenticated.

Only the people working on your engagement, and only for its duration. Access is logged.

Yes. We have our infrastructure independently reviewed; details on scope and cadence are on this page.

It is removed according to the agreed deletion concept. On request we confirm deletion in writing.