responsible-use: add SANE reference

docs/responsible-use.qmd

@@ -147,7 +147,7 @@ For longer-living workspaces, UU requires use of scanning tools to scan active V
 A VRE is not backed up. The user is responsible for backing up the (processed) data and/or configuration of the VRE. Make sure to regularly synchronize data and scripts with approved platform like Yoda, Research Drive and GitHub.
 
 ## Sensitive data
-If you want to process data that is classified as sensitive or higher according to UU standards, consult a local data manager and VRE supportITS VRE research engineering. Potentially a DPA should be arranged with SURF and not all workspace types are suitable for this.
+If you want to process data that is classified as sensitive or higher according to UU standards, consult a local data manager and ITS [research engineering](contact.qmd). For highly sensitive data, SURF offers a high security environment within ResearchCloud called [SANE](https://www.surf.nl/en/themes/research-infrastructure/sane-secure-environment-for-analysing-sensitive-data) that needs to be activated on request. We can advise you on whether this is necessary and suitable for your project.
 
 ### Data classification Service VRE 
 Surf Research Cloud is suitable for the data classification below. However, custom workspaces in proof of concept state or manual installations may compromise the suitability.