Famedly on Open Source, Secure Messaging, and Digital Sovereignty in the Public Sector

As German public administration tackles technological fragmentation across 16 federal states and hundreds of municipalities, Famedly GmbH is pushing open standards and Matrix-based interoperability to the forefront. The company’s work aligns with the Deutschland-Stack to secure sovereign government communications without relying on proprietary vendor lock-in or separate virtual private networks.

Beyond “Made in Germany”: The Architectural Reality of Digital Sovereignty

Leslie Romeo, Director Public Sector Partnerships & Strategy at Famedly, argues that true digital sovereignty requires a fundamentally different engineering paradigm. As Romeo noted when outlining the firm’s philosophy, digital sovereignty cannot be defined solely by a “Made in Germany” label. Instead, true sovereignty demands robust competition, strict transparency, and radical auditability.

The core of this approach relies on openly accessible source code, Ex-ante and Ex-post controls, and interoperable architectures. Famedly operates as a distributed remote team that engineered the first certified TI-Messenger in the healthcare sector. By leveraging the decentralized Matrix protocol, the company has proven that federated, end-to-end encrypted messaging can scale inside heavily regulated environments.

The MLS Breakthrough and the Deutschland-Stack Architecture

Administrative digitization in Germany has historically suffered from proprietary APIs and isolated silos. To fix this, the IT-Planungsrat adopted Decision B-2026/03-IT, establishing the Deutschland-Stack—a binding framework comprising over 50 open standards distributed across seven distinct layers. Famedly is actively integrating into this macro-shift.

In 2024, Famedly published a concept linking Matrix-based messengers with Messaging Layer Security (MLS). Evaluated and deemed suitable by BWI GmbH, this protocol integration complies with Federal Office for Information Security (BSI) guidelines. According to BSI parameters, it enables secure communications at the VS-NfD security classification level without a separate VPN.

The broader Deutschland-Stack tackles everything from ODF document standardization and Sovereign Cloud Stack (SCS) infrastructure to advanced developer tooling like Git, CI/CD pipelines, and Software Bill of Materials (SBOM) tracking. Intriguingly, the stack’s upper layers even incorporate protocols like the Model Context Protocol (MCP) for AI agent interoperability and Post-Quantum Cryptography mechanisms such as ML-KEM.

Shaping Policy from the Open Source Trenches

While technical communities abound, the OSBA provides a platform to inject open-source realities into political and societal discourse. As an economic and industrial association for open-source software, the OSBA acts as an actor to demand and shape open-source adoption across public sector tenders.

The Road Ahead for Sovereign Infrastructure

With the Deutschland-Stack providing a standardized rulebook and Famedly adapting its secure messaging architecture for broader public sector deployment, the pieces for a cohesive IT landscape are on the table. Insular legacy systems are meeting their match in open protocols, decentralized encryption standards, and verifiable supply chains.

Photo of author

Sophie Lin - Technology Editor

Sophie is a tech innovator and acclaimed tech writer recognized by the Online News Association. She translates the fast-paced world of technology, AI, and digital trends into compelling stories for readers of all backgrounds.

Pregnancy Risks by Age: What Older Mothers Should Know

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.