FABASOFT R&D GMBH

Their core work

Fabasoft R&D is the research division of Fabasoft, an Austrian enterprise software company with a commercial cloud document management platform. Their H2020 work focuses on security certification for cloud services — building the frameworks, formal languages, and automated tooling that allow cloud providers to demonstrate continuous compliance with EU cybersecurity requirements. They bring rare industrial credibility to certification research: they are not just studying the theory but operating actual cloud infrastructure that must meet these standards. In consortia they function as the industrial cloud platform partner who translates policy-level certification concepts into implementable technical specifications.

What they specialise in

How they've shifted over time

Their first project, EU-SEC (2017–2019), addressed the broad structural challenge of building a European security certification framework — essentially the policy architecture and conceptual foundations. By the time MEDINA started in 2020, the focus had sharpened considerably: the keywords shift entirely toward implementation — continuous auditing, smart contracts, formal certification languages, and alignment with the newly enacted Cybersecurity Act. The direction is clear: from framework design toward automated, code-level enforcement of cloud compliance.

Fabasoft R&D is moving deeper into technical automation of cloud compliance — smart contracts and formal languages suggest they are building toward machine-executable certification, which is likely where EU cloud security regulation is heading next.

How they like to work

Fabasoft R&D has participated in both projects as a partner, never as coordinator — consistent with an industrial SME that contributes platform expertise rather than leading academic research programmes. Despite only two projects, they have accumulated 19 distinct consortium partners across 11 countries, which is a wide network for an SME of this size and suggests they are well-connected in the EU cloud security research community. They appear to operate as a valued industrial anchor in academically-led consortia.

19 unique partners across 11 countries from just two projects — an unusually broad European footprint for a two-project SME, indicating active engagement in multi-partner EU consortia rather than bilateral or national research collaboration.

What sets them apart

Most participants in cloud certification research are universities or national cybersecurity agencies — Fabasoft R&D is one of the few commercial cloud software vendors in this space, which gives them direct credibility when evaluating whether certification schemes are actually implementable in production environments. Their dual position — as both an R&D partner and an operator of a real cloud platform — means certification methods they help design have already been stress-tested against industrial constraints. For consortium builders, they fill the hard-to-find role of an SME that understands both the regulatory policy layer and the technical execution layer.

Highlights from their portfolio

• MEDINA
  Their largest funded project (EUR 454,875) and the most technically specific, introducing smart contract-based certification and formal compliance languages — the most forward-looking work in their portfolio.
• EU-SEC
  Their entry into H2020, contributing to the foundational European security certification framework that later informed the EU Cybersecurity Act's cloud certification provisions.