SQACE SQACE

Data sovereignty

Auditable, sovereign, operated in Frankfurt.

An independent verification instance must not create new risk. SQACE is built so your data space stays under your control.

On-premise or EU cloud

SQACE runs in your environment or a European cloud. Your data never leaves your space.

No telemetry

No usage or content data flows out, by architecture.

Audit trail

Every run is reproducible, versioned and traceable in the audit trail.

Permissions

A role and permission model down to object level, with physically separated data spaces.

Automatic deletion

Configure retention periods; data is deleted automatically afterwards.

Made in Europe

Built and operated by FINARIS in Frankfurt am Main.

Honestly separated

Certificate, control, architecture.

Trust comes from precision, not logos. So we separate cleanly what is a certificate, what is a built-in control and what is a property of the architecture.

Certificates

We state certificates only when they exist and can be evidenced. What is still in progress we call in preparation, not certified.

Controls

Audit trail, versioning, permissions and automatic deletion are built in. They support your obligations, but do not replace your governance.

Architecture

On-premise or EU cloud and the absence of telemetry are properties of the architecture. They hold independent of certificates.

Regulatory context

What SQACE supports.

SQACE is a tool, not a compliance seal. It helps produce the evidence that regulated institutions are required to show.

BCBS 239

Traceable, reproducible checks of risk-data aggregation.

DORA

Evidence for the correctness of data-processing, reproducibly documented.

MaRisk and BAIT

Test evidence for data-processing applications, versioned and auditable.

GDPR

Data minimisation through a protected data space, permissions and automatic deletion.

Phrased deliberately as support for your obligations, not as certification.

Bring your security team.

In a demo we walk through the architecture, the audit trail and data handling, with the questions of your IT and compliance teams.