The data is then forwarded from the network server to the Brunata Minol Cloud and decrypted there. The data is then available for use in the various Brunata Minol applications. For example, Brunata Minol's billing software also retrieves consumption data from the Brunata Minol Cloud, as does the Minol direct customer portal.

Data Centers

• Hosting in ISO 27001 certified data centers. – ISO 27001 is an international standard for information security and has become a global standard.
• Regular certification reviews ensure a consistently high standard of security.
• The data centers meet a high level of physical security with the help of burglar alarm systems, monitoring systems, etc.
• They have an established risk management system for identifying, analyzing, assessing, monitoring, managing and controlling information security risks.
• Update and patch management, change and release processes, data backup and recovery processes, monitoring and alerting.

Security for online customer platform (EMT application security)

• Secure login and secure authentication and authorization mechanisms.
• Certified security for user and rights management.
• Secure storage and processing of passwords (e.g., using bcrypt as a hash algorithm).

Privacy Policy

• Compliance with data protection requirements according to GDPR and BDSG (Federal Data Protection Act).
• Data storage and application hosting take place exclusively in European data centers.

Communication security

• Encrypted and authenticated communication in accordance with the BSI (Federal Office for Information Security) specifications for Smart Metering PKI (SM-PKI).
• Protection of the measurement data transmitted by households is ensured through mutual authentication of communication partners and through encrypted and integrity-protected communication channels.

Secure operating environment and technical security of the operating environment

• Hardening the system landscape based on "best practices" such as the Center for Internet Security (CIS) benchmarks.
• Separation of network segments and implementation of restrictive firewall rules.
• Deployment of Intrusion Detection Systems (IDS) and monitoring of the system and application landscape.
• Ensuring data backup and recovery.
• Regular professional penetration tests to verify the level of technical security.