SciTransfer
TREDISEC · Project

End-to-End Cloud Data Protection That Lets You Search Encrypted Files

digitalTestedTRL 5

Imagine putting all your company's sensitive files in a storage locker, but the storage company can peek inside whenever they want. TREDISEC built a set of locks and tools so your data stays encrypted the entire time it's in the cloud — yet you can still search through it, compress it, and remove duplicates without ever unlocking it. Think of it like being able to find a specific letter in a sealed envelope without opening it. The project brought together 10 organizations across 6 countries to make cloud storage both secure and efficient at the same time.

By the numbers
EUR 4,412,063
EU funding for development
10
consortium partners
6
countries in consortium
7
industry partners out of 10
24
total deliverables produced
70%
industry ratio in consortium
The business problem

What needed solving

Companies moving sensitive data to the cloud face a painful trade-off: either encrypt everything and lose the ability to search, compress, or deduplicate data efficiently — or keep data accessible and accept the security risk. After major data breaches and surveillance revelations, enterprise customers demand end-to-end encryption, but cloud providers struggle to deliver efficient services on data they cannot read.

The solution

What was built

The project delivered a packaged software implementation of the TREDISEC system — a set of integrated security tools that enable encrypted cloud storage with support for searchable encryption, data compression, data deduplication, and integrity verification. This was accompanied by a generic test cloud environment and 24 deliverables covering the full technical scope.

Audience

Who needs this

Cloud service providers adding end-to-end encryption to their offeringsBanks and financial institutions migrating sensitive data to the cloudHealthcare organizations needing encrypted but searchable patient records in the cloudGovernment agencies requiring sovereign cloud data protectionEnterprise IT departments evaluating zero-trust cloud storage solutions
Business applications

Who can put this to work

Financial Services
enterprise
Target: Banks and insurance companies storing customer records in the cloud

If you are a bank dealing with strict data protection regulations and the risk of breaches when moving customer data to the cloud — this project developed encryption technology that keeps data fully protected even from the cloud provider itself, while still allowing efficient search and deduplication across encrypted records. The system was built by a consortium of 10 partners including 7 industry players.

Healthcare IT
mid-size
Target: Health data platform providers and hospital IT departments

If you are a healthcare IT provider dealing with patient record confidentiality while needing cloud scalability — this project developed techniques to store and process medical data in encrypted form in the cloud, ensuring that even if the cloud infrastructure is compromised, patient records remain unreadable to attackers. The technology supports data compression and deduplication, reducing storage costs for large medical datasets.

Cloud Infrastructure
enterprise
Target: Cloud service providers and managed security service providers

If you are a cloud provider dealing with enterprise customers who demand end-to-end encryption but also need efficient storage — this project built a packaged software implementation that combines confidentiality, integrity verification, searchable encryption, and data deduplication into a single integrated system, tested in a generic cloud environment. This addresses the traditional trade-off between security and storage efficiency.

Frequently asked

Quick answers

What would it cost to implement this technology?

The project received EUR 4,412,063 in EU funding over 3 years to develop the full system. Licensing or integration costs would depend on negotiations with the consortium partners, particularly coordinator ATOS SPAIN SA, which is a major IT services company with existing commercial channels.

Can this work at industrial scale with large data volumes?

The technology was specifically designed to handle cloud-scale data, with built-in support for data compression and deduplication — both critical for managing large volumes efficiently. The packaged software was tested in a generic cloud test environment, though production-scale deployment data is not available from the project deliverables.

Who owns the intellectual property and how can I license it?

The IP is distributed among the 10 consortium partners across 6 countries. ATOS SPAIN SA as coordinator would be the first point of contact. Given that 7 of 10 partners are industry players, there is likely a commercialization path already considered.

Does this meet GDPR and data protection regulations?

The project directly addresses data confidentiality and integrity in the cloud, which aligns with GDPR requirements for data protection. The technology ensures that only end-users and authorized parties have access to their data. However, specific GDPR certification would need to be verified with the consortium.

How long would integration take with our existing cloud setup?

The TREDISEC deliverables include a packaged software implementation with a supporting test cloud environment, suggesting it was designed for integration. Based on available project data, the system is a set of software elements that could be adapted to existing cloud infrastructure, though integration timelines would depend on your specific setup.

Is this still maintained after the project ended in 2018?

The project closed in March 2018. Post-project maintenance depends on whether consortium partners — particularly ATOS, a large IT services company — continued development commercially. The project website at www.tredisec.eu may have updates on current status.

Consortium

Who built it

This is an industry-heavy consortium with 7 out of 10 partners (70%) coming from the private sector, led by ATOS SPAIN SA — one of Europe's largest IT services companies. The remaining partners include 2 universities and 1 other organization, spread across 6 countries (Switzerland, Germany, Greece, Spain, France, UK). The strong industry presence and a major IT company as coordinator suggest the project was built with real-world deployment in mind, not just academic research. For a business buyer, ATOS as the lead partner adds credibility and provides a clear commercial contact point.

How to reach the team

ATOS SPAIN SA is the coordinator — reach out through their enterprise security solutions division

Next steps

Talk to the team behind this work.

Want an introduction to the TREDISEC team? SciTransfer can connect you with the right technical contact at ATOS and help assess fit for your use case.