Two instances that know each other exchange documentation, without an intermediary
Tenants at isidaten usually live on separate installations. Anyone wanting to pass a policy to a subsidiary, an association or an advised municipality therefore shares between two instances that have to know and trust each other. Trust is established directly: one instance generates a one-time invitation code, the other redeems it, both exchange their public keys, and an administrator confirms the other side’s fingerprint. From then on every request is signed with the sender’s Ed25519 key and bound to time and nonce. That also works for installations in your own data centre without a connection to the isidaten hub.
The invitation code contains address, public key and a one-time secret, is valid for 48 hours and is stored nowhere. It is passed to the other side’s administrator over a trusted channel, and both sides confirm the fingerprint before anything flows.
A recipient rejects object types it does not know instead of half-adopting them. In this stage policies are handed over; documents, checklists, risks and measures follow through the same interface.
A handed-over policy is an independent copy. People, responsibilities and internal references are anonymised before sending by default; the recipient accepts or rejects and acknowledges.
Documentation moves between two organisations the way it should: as a copy, signed, with consent on both sides.
Schedule a no-obligation demo – we will show you the module with your own use cases.
