# Where we could reinforce each other

### Sensitive and top-secret data, Secure Cell, scalable transactions — and how we partner

**Which data.** We classify in five levels and work on the top two. *Level 4 Sensitive*, in our classification: personal data under the GDPR — national identity numbers, medical and HR records, passport scans. *Level 5 Top Secret*: mission-critical secrets — key vaults, pre-publication results and deal records, core source code. Most of a company's data is not here; the small share that is decides the company, often only for a while: quarterly figures are secret until published.

**Cloud Secure Cell.** Level 5 lives in a Secure Cell: a separate cloud subscription with its own small operations team, built as three blocks — interface (outbound-only connections), stateless service, double-encrypted data. Because the cell carries only top-secret work, every data flow is specified in advance and anything unknown is dropped; the cell has no route to the internet, and workloads run in memory only. The owner can revoke access instantly, and a document that leaves the cell into someone else's custody stops being secret for everyone — the lifecycle is governed, not hoped for. Decoupled from the legacy estate, a cell is deployable in weeks.

**Quantum-ready M2M and certificate management.** Our processes bind to M2M sessions, never to certificates, and organisations keep their own certificate estate after quantum through an in-house multi-CA farm with short-lived, frequently swapped certificates — one page on both: *M2M and certificate management*.

**Scalable transaction systems.** Every transaction is a single-use process with a unique identifier and four logged states — prepare, pool, execute, clean up — authenticated over M2M. For weighty transactions the pool runs several in parallel; the first valid outcome wins, the trailing ones feed anomaly analytics. Authorisation is always independent: a transaction never approves itself but asks a central service, the method set per business rule from none to board level, waiting governed by heartbeat, not timeout. Built for real-time operations where resilience and audit both matter.

**Access, physical and logical.** Unlocking a server follows the same cryptographic path as opening a door: an encrypted code on door or screen, the smartphone as proxy, a central decision — one audit trail for both.

**How we partner.** Two readings, both open. We work as a niche security-architecture specialist inside a programme your firm leads — phased: block bulk copying in days, isolate the sensitive data in weeks, then simplify. Or your firm is the client, for its own sensitive and top-secret material. Either way we deliver half-products completed with the client's own standards, hand over the source code and never operate. No introductions asked; a conversation is enough.

*Wols CA — security architecture for sensitive and top-secret assets. Classification levels are ours, not a statutory scheme.*