A system that handles public-sector documents has to be explainable to the people who answer for the data. This is what is in place, what we publish, and what we are adding.
Compute, web and data run on separate machines we operate in Europe, joined by a private encrypted WireGuard network. A standby site holds a copy.
TLS 1.2 or newer everywhere, older versions disabled, HSTS on, certificates verified.
A firewall that denies everything except what is needed. Internal services are reachable only inside the private network. Automatic blocking of repeated attackers.
Named accounts, eID sign-in where the client uses it, single-use access links, and timestamped audit records.
Uploads are encrypted with AES-256-GCM and processed only to produce the finding that was asked for. Retention is set per client agreement.
Data protection impact assessment, consent framework and a clear notice of what is measured and why.
Vendor questionnaires are welcome: write to damir@rinet.one.
Register once, free, and the architecture and live demo open for 30 days. Payment is only for the reference code.
Register — free →Six reference modules in textbook form: access, telemetry, payment, self-improvement, grounded retrieval, consent-first measurement.
Open the door — EUR 100 incl. VAT →