Einführung von Ki in der Eingangsverarbeitung

TENDER DESCRIPTION

Continuation of the description of the services being tendered from Section 2.1 of this notice. Operations, data sovereignty and security: The solution is to be operated in a sovereign cloud environment. Storage and processing of all data must take place exclusively in data centres within the European Economic Area (EEA). Any transfer of data to third countries is excluded, as well as any access from third countries, including as part of support and administration, and any access based on non-European legal provisions with extraterritorial effect (in particular US CLOUD Act); the corporate-law interlinking of the tenderer/contractor is also decisive. The data must be encrypted using customer-managed keys (HSM), without the cloud provider having access to the keys. Persistent or administrative access by personnel of the contractor to plaintext data is excluded. The data may not be used for training, model improvement or telemetry. All parties involved in the service must be disclosed. Among other requirements, a BSI C5 certificate is required for the cloud service, as well as an ISO/IEC 27001 certification of the data centre operator and of all sub-contractors processing data,…

TENDER BRIEF

TENDER DOCUMENTS