Technology
Can existing specialist systems be integrated without any modifications?
In many cases, yes. As our platform already has its own interface servers and standardised communication protocols, existing business processes do not usually need to be adapted.
The platform can be used as an additional digital access channel and complement existing systems.
Does the system support XÖV standards and OSCI communication?
Yes. Our platform supports standardised communication structures within the public sector.
These include, in particular, OSCI-based communication channels and data structures that are compatible with the XÖV standards.
In addition, openly documented RESTful APIs are available, which can also be used to integrate systems that are not connected via these management standards.
Can the platform communicate via the government network?
Yes. Our platform operates its own interface servers, which can access specialist procedures via the designated communication channels of the public administration.
This infrastructure enables the exchange of standardised messages using specialised procedures. This allows local authorities, towns, municipalities and other public sector organisations to connect our systems directly to their own procedures.
Communication takes place via standardised administrative protocols and interfaces.
How is the zero-trust approach implemented within the platform?
The entire platform follows a consistent zero-trust approach.
This means that, as a general rule, no component within the system is automatically considered trustworthy. Every communication and every interaction between system components is verified, logged and secured.
This approach applies, amongst other things, to:
- the device architecture
- Interface server
- Management platforms
- Communication channels
- Archiving and documentation systems.
This architecture enables high security requirements to be met.
Does the system comply with the technical guidelines issued by the Federal Office for Information Security (BSI)?
Yes. The platform complies with the relevant technical guidelines issued by the Federal Office for Information Security.
In particular, the system supports procedures for secure document verification and identity verification that can match the level of security provided by the physical presentation of an identity document.
Furthermore, the system architecture has been designed to be compatible with the technical and organisational requirements of modern IT security standards.
Does the platform comply with the requirements of the eIDAS Regulation?
Yes. Our systems have been designed to be compatible with the requirements of the European eIDAS Regulation.
The platform can support identification processes that can be used in the context of qualified trust services. These include, for example, procedures for secure identification, for documenting identity processes, and for integrating qualified electronic signatures or seals.
This means that our systems can also be used in regulated environments.