What Findata – Finnish Social and Health Data Permit Authority does

Findata is a Finnish government authority (tietolupaviranomainen) operating under the performance guidance of the Ministry of Social Affairs and Health, established in 2019 under the Act on the Secondary Use of Health and Social Data. Headquartered in Helsinki with approximately 30 employees, Findata functions as a single-window permit authority granting regulated access to Finnish social and health data held by multiple public controllers — including THL, Kela, DVV, Statistics Finland, Fimea, the Finnish Centre for Pensions, and 22 wellbeing services counties — plus Kanta Services and certain private-sector data. The authority consolidates what would otherwise be fragmented multi-controller data access into a unified application, decision, and pre-processing workflow.

The core technology stack comprises the Kapseli® secure remote-desktop processing environment (browser-accessible, with Duo Mobile two-factor authentication, hosting R, Python, SPSS, SAS, Stata, and QGIS), the Tunneli encrypted file-transfer service, and the Supertunneli API-based transfer service supporting transfers up to one terabyte. Supporting infrastructure includes the Data Resources Catalogue (aineistokatalogi.fi) for dataset discovery, a Data Resources Editor for controllers, and the Vinkkeli AI assistant chatbot powered by OpenAI's API. Technical infrastructure and system maintenance are handled by CSC (Tieteen Tietotekniikan keskus Oy). Findata also productizes ready-made datasets such as FinRegistry and COVID-19 datasets for faster reuse. A new integrated e-service is scheduled for launch in autumn 2026.

Revenue mechanics are fee-based and decreed by the Ministry of Social Affairs and Health: fixed decision fees for data permits range from €250 (thesis) to €3,000 (non-EU/EEA applicant), amendment permits from €230-€700, and statistical data requests from €250-€2,600. Recurring revenue comes from Kapseli subscription packages (€141-€587/month depending on tier S/M/L/XL and OS choice) with 25.5% VAT, plus usage-based data processing at €151/hour, Tunneli transfer fees starting at €302, and storage subscriptions at €7.60/month per 0.5 TB. Customer segments include academic and scientific researchers (primary), government authorities and wellbeing services counties (primary), students working on theses, and R&D entities using anonymous statistical data. Go-to-market is sales-led through digital channels (e-service portal, website, Teams consultations, training portal) with EU/EEA regional reach.

Name

Findata – Finnish Social and Health Data Permit Authority

Legal name

Findata – Finnish Social and Health Data Permit Authority

Website

https://findata.fi

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Findata is a Finnish government authority that grants permits for the secondary use of social and health data, consolidating access across all major Finnish data controllers into a single-window service with secure processing via Kapseli and fixed-fee permits priced €250 to €3,000.

Ownership category

akta.pro rank

Product category

Health Data Permit Services

NAICS

Web Search Portals, Libraries, Archives, and Other Information Services (5192)

SIC

Services-Computer Processing & Data Preparation (7374), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Loss Prevention (DLP) & Sensitive Data Discovery (PHI/PII) (HLACAJAC)

akta.pro secondary industries

Dataset Discovery, Marketplaces & Licensing (HDAAALAE), De-identification, Tokenization & Privacy-Preserving Data Platforms (HLACAIAK)

Keywords

• Health data permits
• Secondary use data
• Secure data processing
• Government data authority
• Pseudonymisation services

Headquarters

HQ city

Helsinki

HQ country

Finland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations

Revenue model

1. Data Permit Fees: Fixed-fee decision fees for data permits based on category: thesis permit (€250), limited permit (€300), normal permit (€1,600), researcher-driven research permit (€800), outside EU/EEA (€3,000). No VAT charged.
2. Amendment Permit Fees: Fees for amendments to existing permits: minor changes (€230) or other changes (€700). No VAT.
3. Data Request Decision Fees: Fees for statistical data requests: thesis (€250), researcher-driven research (€1,300), standard requests (€2,600). No VAT.
4. Kapseli Processing Environment Subscriptions: Monthly/annual subscription fees for secure processing environment with tiered packages (S/M/L/XL) ranging from €141-€587/month. VAT 25.5% applies.
5. Data Processing Hourly Fees: Hourly fees for data combining, pre-processing, pseudonymisation, anonymisation, and transfer services at €151/hour. Minimum one hour.
6. Data Storage Service: Storage fees for long-term data retention: €486 setup fee plus €7.60/month per 0.5 TB, billed semi-annually.
7. Software Licenses: Fees for additional software: SAS license €166.25/month, user licenses for over 10 users €17.50/month per user, MS Office installation €93/hour.

Pricing tiers

Go-to-market motion1 record

Distribution channels5 records

Marketing channels9 records

Core offering

Findata is the Finnish government authority that grants permits for the secondary use of social and health data from multiple public controllers, private sector and Kanta Services. After issuing a permit, Findata compiles, combines, and pre-processes the data (including pseudonymisation/anonymisation) and provides the Kapseli® secure cloud-based processing environment where approved users analyse individual-level data. The offering also covers amendment permits, statistical data requests, secure data transfer (Tunneli/Supertunneli), ready-made datasets, and the Data Resources Catalogue for dataset discovery.

Product overview

Findata operates as a centralized data permit authority offering a platform of interconnected services for the secondary use of Finnish social and health data. The core offering centers on the data permit service (granting permits for individual-level data) and data request decisions (for anonymous statistics), supplemented by Kapseli, a secure cloud-based processing environment where permitted data is analyzed. Supporting infrastructure includes Tunneli and Supertunneli for secure data transfers, the Data Resources Catalogue and Editor for discovering and describing datasets, and ready-made datasets (FinRegistry, COVID-19) for expedited access. Additional services include amendment permits, data storage, and pause services for Kapseli environments. The AI-powered Vinkkeli chatbot provides website assistance. The portfolio operates under the Finnish Act on the Secondary Use of Health and Social Data, with services being modernized through the upcoming new e-service launching in autumn 2026.

Differentiator

Problem solved

Functional benefit

Brands

• Kapseli®: A secure processing environment provided by Findata for the processing of individual-level data accessible with a data permit.
• Tunneli
• Supertunneli
• FinHITS

Products and services

• Data Permit Service Statutory permit service granting researchers, organisations and authorities the right to access individual-level Finnish social and health data from multiple controllers. Includes application processing, data compilation, pre-processing, pseudonymisation and delivery of data into Kapseli.
• Amendment Permit Service Service to amend previously issued Findata permits, covering changes such as extending validity, adding authorised persons, changing data controllers, or adding variables to data collections.
• Data Request Decisions (Statistical Data) Decisions on access to anonymous statistical data from controllers within the scope of the Secondary Use Act. Produces aggregated statistics where individual persons cannot be identified.
• Kapseli® Secure Processing Environment Cloud-based secure remote desktop where approved permit holders analyse pseudonymised individual-level social and health data. Accessed via web browser with Duo Mobile MFA, offering Linux/Windows virtual machines with statistical software including R, Python, SPSS, SAS, Stata and QGIS. Available in tiered subscription packages (S/M/L/XL).
• Tunneli Data Transfer Service Secure encrypted file transfer service used by data controllers to deliver extracted datasets to Findata and by permit holders to transfer their own files into the Kapseli environment. Supports transfers up to 4 GB per zip file.
• Supertunneli Data Transfer Service API-based secure data transfer service for large datasets up to 1 terabyte, allowing sending and receiving organisations to transfer data programmatically with free joining and usage for authorised organisations.
• Ready-made Datasets Pre-compiled and pre-processed thematic datasets (including FinRegistry and COVID-19 datasets) provided by Findata for faster access without requiring separate cost estimates or extractions from data controllers.
• Data Resources Catalogue (aineistokatalogi.fi) National online catalogue where Finnish data controllers publish standardised descriptions of health and social data resources, enabling researchers to discover and assess the suitability of datasets for secondary use.
• Data Storage Service Long-term storage service for research data after analysis completion, available for Kapseli users (e.g., during peer review). Data can be restored to Kapseli or transferred to another approved secure processing environment.
• Kapseli Pause Service Service allowing temporary suspension of a Kapseli processing environment for 2–12 months while maintaining the data permit, reducing costs during periods when active work is not needed.

Quantifiable outcome

• 87% positive decision rate on data permit applications
• +3 more outcomes

Named customers9 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability3 records

Feature5 records

Partnerships

Nine partnerships are on record, tiered core.

• Tieteen Tietotekniikan keskus Oy (CSC)coreTechnology or IntegrationCSC serves as the technical infrastructure provider for Findata's systems, handling system maintenance and development for data permit management systems and secure processing environments.
• European Health Data Space (EHDS)coreStrategic or Co-development PartnerFindata is preparing for EU-wide health data space implementation. EHDS regulation entered into force March 2025 with secondary use provisions applying from March 2029. Findata will integrate with HealthData@EU infrastructure.
• Suomi.fi Authentication ServicecoreTechnology or IntegrationFinnish government digital identity service used for strong authentication in Findata's e-service and Kapseli access. Provides identity verification for application submissions.
• Digital and Population Data Services Agency (DVV)coreStrategic or Co-development PartnerDVV is both a data controller and member of Findata's steering group. Provides basic personal details, family relations, and building data for secondary use under the Secondary Use Act.
• National Supervisory Authority for Welfare and Health (Valvira)coreStrategic or Co-development PartnerValvira is both a supervisory authority for Findata's operations and a member of the steering group. Monitors secure processing environments and oversees controller compliance.
• Data Protection OmbudsmancoreOthersSupervisory authority for data protection compliance. Findata submits annual reports on health and social data processing and log data to the Data Protection Ombudsman.
• Finnish Institute for Health and Welfare (THL)coreStrategic or Co-development PartnerTHL hosts Findata as part of its organisation while maintaining separate operations. THL is both a major data controller and member of Findata's steering group.
• 22 Wellbeing Services CountiescoreStrategic or Co-development PartnerRegional health authorities that serve as data controllers under the Secondary Use Act. Include HUS, Varha, Pirha, and 19 other counties providing patient and social welfare data.
• Kanta ServicescoreTechnology or IntegrationNational e-health platform containing patient data used in secondary research. Findata grants permits for Kanta-stored client data under the Secondary Use Act.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Statistics Netherlands (CBS): Dutch national statistical office providing access to microdata for research under secure conditions. Comparable as a national statistical authority with secure remote access (ODISSEI) environments for researchers.
• NHS England (Health Data Access): UK NHS body administering health data access frameworks including the Data Access Request Service (DARS). Comparable in providing centralised health data access for research and planning within a national public health system.

Regional players

• E-hälsomyndigheten (Swedish eHealth Agency): Swedish government agency managing e-health infrastructure and health data interoperability. Comparably positioned as a Nordic national authority on health data access and digital health services.
• Helsedirektoratet (Norwegian Directorate of Health): Norwegian government agency responsible for health data stewardship and the Norwegian Health Data Service (Helsedata). Comparable as a Nordic national health data authority managing secondary use permissions.

Others

• CSC (Tieteen Tietotekniikan keskus Oy): Finnish state-owned IT centre providing computing and data management services for research and government. Directly comparable as the technical infrastructure partner powering Findata's Kapseli environment and similar secure processing platforms.
• TEHDAS (Joint Action Towards the European Health Data Space): EU joint action developing principles for the secondary use of health data across member states. Directly relevant to Findata's EHDS implementation work via FinHITS and represents the policy/coordination layer above national health data authorities.

Direct peers

• Health Data Research UK (HDR UK): UK's national institute for health data science, coordinating access to biomedical and health data for research. Comparable as a national-level health data access body facilitating secondary use of sensitive health data for research purposes.
• Sundhedsdatastyrelsen (Danish Health Data Authority): Danish national authority administering health data including Danish personalized medicine and clinical quality databases. Closely comparable in mandate as a Nordic government health data access authority with secure processing environments.
• Health Data Hub (France): French national health data platform enabling secure access to pseudonymous health data for research projects. Directly comparable as a national health data access authority with pseudonymisation and secure processing capabilities.

Emerging players

• Genomics England: UK government-owned company providing controlled access to whole genome sequence data for research via a secure research environment. Comparable in operating a secure data access model for sensitive genomic and health data under government mandate.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xbsky.app/profile/findata.bsky.social
• LinkedInlinkedin.com/company/findatafi

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Findata – Finnish Social and Health Data Permit Authority