For data providers
Make valuable data available for research while retaining control over access, computation and the release of results.
BSDI Services · University of Bonn
Josua &
StatsDirect
BSDI provides two flexible solutions for secure research with sensitive data at the University of Bonn. Originally developed at the IDSC of IZA, Josua and StatsDirect are now being advanced in Bonn.
- Secure remote computing
- Controlled data access
- Developed at the University of Bonn
For researchers
Analyse sensitive data remotely without travelling to the provider or transferring the underlying microdata.
Secure by design
Controlled workflows, configurable filters and review processes support secure, data-protection-compliant access.
01 / Code-to-data
Josua
Researchers submit analysis code through a web interface. The code runs inside the provider’s controlled environment, and only approved results leave the system.
- Researchers work from home or the office
- Sensitive data remain within the provider’s infrastructure
- Jobs and outputs can be reviewed before execution or release
- The system scales from individual projects to larger research data centres
Built for real workflows
Core functionality
Josua combines the components needed to operate secure remote data access — from user administration to automated review and reproducibility.
01Project and job overview
02Automatic or manual job execution
03Automatic or manual output release
04Active Directory integration
05User and project management
06Compute resource management
07Input and output filters
08Email notifications
09Custom filters in any programming language
10Data-protection-compliant workflows
11Reproducible analyses at the push of a button
12Flexible deployment for different infrastructures
Controlled exchange
Filters adapt to your policy
Data providers review what enters the environment and what may leave it. Once the policy is established, configurable filters can automate recurring checks using the programming language best suited to the task.
Define the rules
The provider translates legal, contractual and disclosure-control requirements into a project policy.
Check submissions
Incoming code and files are checked manually, automatically or through a combination of both.
Release results
Only outputs that meet the provider’s rules are made available to the researcher.
02 / Hardened remote desktop
StatsDirect
StatsDirect is a hardened remote desktop environment for interactive work with sensitive research data. Researchers use familiar analysis tools inside a controlled infrastructure while the underlying data remain in the protected system.
Access is configured according to the data protection classification and the institution’s policy. A deployment can be restricted to connections from within the institution or, where the protection level permits, opened to authorised external researchers through a secured remote connection.
- PILS separates access by person, institution, legal conditions and scientific project
- Researchers can inspect and analyse the data directly on screen
- Imports and exports pass through a controlled gateway
- Authorised reviewers approve results before they leave the environment
Your tools, securely available
Software availability is configured by each operator.
python
Josua & StatsDirect in action
Trusted in research practice
Josua supports secure data access at established research data centres and institutional partners.
IAB FDZ
IQB FDZ
FDZ Wissenschaftsstatistik
Former IDSC at IZA
The service was retired after the IDSC closed at the end of 2025.
From the community
Research without distance
Data providers and researchers value the flexibility of remote access while sensitive data remain protected.
Note: The English translations of the testimonials were generated with AI.
1 / 3
Good to know
Frequently asked questions
Answers for researchers and data providers considering a secure remote-access workflow.
How do data providers control incoming code and outgoing results?
Every submission and every result can pass through a configurable review process. Providers decide whether checks are manual, automatic or combined and define the rules for each project.
Can activity inside the system be documented?
Yes. Josua keeps project and job activity traceable, supporting transparent review and reproducible research workflows.
Can researchers add external data or aggregate statistics?
Yes, subject to the provider’s policy. Incoming files can be reviewed and filtered before they enter the secure environment.
Can additional libraries or software packages be used?
The environment can be extended by the operator. Packages and software are made available in a controlled way that fits the security requirements of the data provider.
University of Bonn
Talk to the team
Planning secure access to sensitive research data? Contact the person responsible for the service that fits your workflow.
