Gaia-X · EHDS · Data Act

Share data without losing control

We design and deploy federated data spaces: each organisation keeps its data, decides who uses it and for what, and artificial intelligence learns from many without anything being centralised.

Catalogue and common rules Hospitalnode + connector Dental clinicnode on Azure Industrynode + connector AI developerconsumer University
What it is

A data space is a set of rules, not a warehouse

There is no big central database. There are organisations that recognise one another, a catalogue of what each one offers and contracts that state exactly what can be done with each piece of data.

Sovereignty

Data stays with whoever holds it. They decide who accesses it, for what and for how long.

ODRL contracts

Terms of use are written so that a machine can enforce them. No contract, no access.

Gaia-X trust

Each organisation identifies itself with verifiable credentials issued by trust services.

AI without moving data

Models are trained where the data is (federated learning and confidential computing).

How it works

From source to result in six steps

1
Connecta connector on each member's node
2
NormaliseFHIR, DICOM, OMOP or other sector models
3
Publishoffer in the catalogue (DCAT, HealthDCAT-AP)
4
Contractnegotiation with an ODRL policy
5
Computethe algorithm goes to the data
6
Auditwho, when, what and under which contract

“Web 2” family

Eclipse EDC · Tractus-X
  • Dataspace Protocolcatalogue, negotiation and transfer
  • Identity Hubverifiable credentials for organisations
  • Kubernetes deploymentHelm and Terraform, on any cloud or on-premise

“Web 3” family

Pontus-X · Gaia-X
  • Compute next to the datathe algorithm travels, the data stays
  • Distributed ledgertraceability of every access
  • Traceable monetisationpay-per-use of data
Track record

Proven in three real data spaces

The Software in a Box team has taken part in the technology development of three data spaces co-funded by Spain's SEDIA between 2024 and 2026.

HEALTH

Global Data Care

Health data space on Pontus-X and Gaia-X, including compliance work for the Trust List of the Spanish data spaces programme.

PROCUREMENT

PROCUREDATA

Procurement management data space with Eclipse connectors and integration with existing ERP systems.

CIRCULAR ECONOMY

EcoDataNet

Waste and circular-economy traceability with usage policies and verifiable credentials.

GDPREHDS (Regulation (EU) 2025/327)Data ActData Governance ActAI ActNIS2 · ENSGaia-X Trust Framework
First vertical

A data space for dental clinics with AI on Microsoft Azure

A network of clinics that trains and improves diagnostic AI without patient data ever leaving each clinic. Microsoft inside the node; open standards at the border.

What it includes

  • A data node per clinic on Azure: medical records in FHIR and imaging in DICOM, pseudonymised at source.
  • Diagnostic support AI: interproximal caries and periodontal bone loss on X-rays, validated by the dentist.
  • Patient file assistant: summary of the history and a reviewable draft treatment plan.
  • Eclipse EDC connector, HealthDCAT-AP catalogue and ODRL contracts between members.
  • Federated training across clinics with confidential computing.
3 + 3months of MVP and pilot
3–5clinics in the pilot
0clinical data outside the clinic

Why now

26/03/2027General application of the EHDS
02/08/2028AI Act for AI in medical devices
26/03/2029Secondary use of health data under a permit
2031Medical imaging in MyHealth@EU
Partner programme · Microsoft Azure

A health data space your team can sell

We are looking for Microsoft partners, technology integrators and software developers who want to offer their customers a federated data space on Azure. We bring the network, the data model and neutral operation; you sell, deploy and operate.

Partner briefing · about 6 minutes · in English

No R&D of your own

A reference architecture on Azure (FHIR, DICOM, Fabric and AI) and Eclipse connectors already proven in three real data spaces.

Recurring revenue

Deployment per customer, Azure consumption, managed services and compliance with the EHDS and the AI Act.

A neutral operator

We operate the network edge. The customer, the contract and the relationship stay yours.

Microsoft partnersTechnology integratorsSoftware developers
Articles and videos

Understanding where data spaces are heading

We select videos and write articles on the regulation, standards and technology shaping European data spaces.

Video

The geopolitics of data standardisation

The European Commission, CEN/CENELEC JTC 25, ETSI TC DATA, IDSA and the DSSC explain the Data Act, trusted data transactions and the standards every data space will need to speak.

Loads from YouTube in privacy-enhanced mode when you click. Watch on YouTube

Data standards: who sets the rules
Article · 9 min

The geopolitics of data standards: what is being decided in Europe and why it matters

The Data Act and the Digital Omnibus, the data product, ODRL, verifiable credentials and DCAT, and whether Europe can export its model. Our annotated summary of the webinar.

Read the article →
LibraryThe 5 IDSA core assets: articles, videos and researchOver 50 hand-picked resources on the reference model, the Dataspace Protocol, the Rulebook, training and certification, with scientific papers and standards.Open the library →

Do you want to create or join a data space?

We help you define the rules, deploy the nodes and put AI to work on data that remains yours.

Or write to emilio.mulet@softwareinabox.eu · +34 601 398 868