The Open Source Secure Data Infrastructure (OSSDIP) is centered around the principle of data visiting: data is never passed on to researchers, but researchers visit isolated and completely shielded compute environments (virtual machines in a shielded network) via remote desktop. All interactions are strictly monitored, the desktop screen is recorded with subsequent share to the data owner and export of data is blocked. The infrastructure never provides direct access to the air-gapped Data Node, instead, data subsets are copied and fingerprinted at the Analyst-VM along with the analysis tools required to directly work with the data set.