Credentials
What it takes to be admissible in Germany
German federal cloud procurement filters on admissibility before it filters on capability. These are the certifications, clearances, and structural prerequisites we hold ourselves to — and prepare clients against.
Service offering
Differentiation: US vendor experience under FedRAMP High mapped onto BSI C5 — roughly 70% control overlap.
- C5:2020 compliance gap analysis
- Technical control implementation
- Documentation and policy framework development
- Pre-audit preparation and remediation
- IT-Grundschutz alignment
Operational prerequisites
EU establishment
Mandatory for German public contracts. Routes considered per engagement: German GmbH, EU subsidiary, or branch office.
Physical presence
Kick-off within two weeks of contract award, SÜ clearance interviews, and on-site audits at German data centres.
Certification posture
BSI C5:2020 attestation or a documented path to it, alongside IT-Grundschutz alignment for the operating organisation.
Insurance and clearance
Professional liability cover of €5M minimum; SÜ clearance for all personnel accessing BSI sites.
Counterparties
- BSI
- Certification authority, audits
- govdigital eG
- DVC operator, vendor contracts
- FITKO
- Strategic coordination
- US Commercial Service
- US vendor navigation support
Deutsche Verwaltungscloud 2.0 runs 2026–2029 across four workstreams — Infrastructure, Portfolio, Frameworks, and Secure Networks. Vendor onboarding routes through govdigital eG under BSI certification.
Open the secure gateway