Sovereign data spaces · IDSA · Gaia-X

Share your data without giving up control. XDATASHARE by Gradiant: a sovereign data space platform.

Born from Gradiant's research into data spaces, XDATASHARE is the platform for creating and operating federated, sovereign data spaces. Publish, negotiate and transfer data assets under your own rules, with decentralised identity and end-to-end traceability — all built on open European standards.

Request a demo → See how it works
Built on Eclipse EDC Data Space Protocol W3C Verifiable Credentials Cloud Native
The shared-data challenge
Sharing data between organisations often means giving up control. XDATASHARE resolves that dilemma.

Data value chains are held back by a lack of trust: who can access what, under which conditions and with which safeguards? Centralised solutions create dependency, silos and regulatory risk.

XDATASHARE provides the essential software components for creating a data space compliant with the specifications of the IDSA (International Data Spaces Association) and Gaia-X. It is based on the Eclipse Dataspace Components (EDC) connector, the open-source reference implementation.

The result is a data exchange in which every participant retains full sovereignty over its assets, defines its own policies and maintains trust without an intermediary controlling the data.

XDATASHARE is the result of Gradiant's research into data spaces: years of applied R&D transformed into production-ready technology.

Why XDATASHARE

Sovereignty, standards and trust in one platform

Everything you need to participate in Europe's data economy, without reinventing the infrastructure or becoming tied to a single provider.

Data sovereignty

Your data never leaves your control. You decide who can access each asset and under which policy, evaluated during every negotiation and throughout the transfer.

Standards-based interoperability

Communication through DSP, DCP and DCAT. Compatible with any participant in the IDSA and Gaia-X ecosystem, without bespoke integrations.

Decentralised trust

Decentralised identities (DIDs using the did:web method) and W3C Verifiable Credentials 2.0. Identity and compliance are proven, not assumed.

No technical barriers

The Participant Portal provides a graphical interface for browsing the catalog, negotiating contracts and transferring data. No technical expertise is required to operate the data space.

Cloud-native and technology-agnostic

Deployed on Kubernetes and independent of the underlying technology. It runs on premises or in the cloud and integrates with your storage systems.

Open, with no lock-in

Built on the EDC framework (Apache 2.0 licence), the reference implementation maintained by the community. No dependency on a proprietary provider.

From catalog to transfer

How a data exchange works

Every data asset follows a policy-governed flow compliant with the Data Space Protocol. Push and Pull are two ways of delivering the same agreement.

1

Publishing

The provider defines an asset and its access and contract policies, then publishes it in the catalog (DCAT).

DCAT · Asset
2

Discovery

The consumer browses the catalog and finds the offers whose policies it satisfies.

Catalog Offer
3

Negotiation

The contract is negotiated through DSP. The policy engine evaluates the verifiable credentials.

Contract Negotiation
4

Agreement

Both parties sign a Contract Agreement that enables and governs the transfer.

Agreement
5

Transfer

The Data Plane delivers the asset over HTTP in Push or Pull mode, with real-time monitoring.

Push / Pull · EDR
The Authority issues verifiable credentials (VCs) to participants
DATA SPACE AUTHORITY Issuer Service · ParIS CATALOG · DCAT Dataset · clinical Dataset · agriculture Dataset · imaging PROVIDER EDC Connector Asset · Policy VC ✓ CONSUMER EDC Connector Agreement · EDR VC ✓ DSP
0 · Credentials 1 · Publishing 2 · Discovery 3 · Negotiation 4 · Agreement 5 · Transfer
Who it is for

Designed for organisations that orchestrate trusted data

01

Industry consortia

Healthcare, industry, mobility and energy ecosystems that need to share data securely across organisations.

02

Public administrations

European common data space initiatives aligned with Gaia-X and data regulation.

03

Platform providers

Operators seeking to offer a turnkey data space to their customer ecosystem.

04

Data innovation teams

Teams that monetise or exchange data assets while maintaining regulatory compliance.

Solution architecture

One connector per participant, one governance authority

Each organisation deploys its own connector and portal. The Data Space Authority governs identities, participants and shared trust.

Participant

EDC Connector + Web Portal

Control Plane

Resource management, DSP contract negotiation with its own policy engine, and catalog and transfer control. The API is protected by an API key.

Data Plane

Secure HTTP transfer in Push mode, a proxy for Pull downloads, and monitoring of active transfers against the agreed policies.

Identity Hub

Management of verifiable credentials (W3C VC 2.0), identification through DID did:web, and credential exchange using the Eclipse DCP 1.0 standard.

Authority

Data Space Governance

Authority Portal

Participant onboarding, updates and removal; data space administration and monitoring; and use-case management.

Issuer Service + ParIS

Issuance of verifiable credentials and participant registration through the Participant Information Service, enabling discovery between connectors.

Logging + Vocabulary Hub

Activity traceability and publication of semantic elements — taxonomies, ontologies and vocabularies — in accordance with IDSA RAM 4.0.

Standards and technology

Compliance by design

XDATASHARE is not a black box: every layer uses open, verifiable protocols aligned with the European data strategy.

ProtocolDSP IdentityDCP CatalogDCAT PoliciesODRL W3CVerifiable Credentials 2.0 W3CDID · did:web FrameworkIDSA · Gaia-X CoreEclipse EDC OrchestrationKubernetes
In production today

Real data spaces already running on XDATASHARE

Public and private organisations trust XDATASHARE to build sovereign data spaces, particularly in the healthcare sector.

Complete data spacesEnd-to-end platforms deployed with XDATASHARE
CESGA · Centro de Supercomputación de Galicia

OneHealth DataSpace

A multisectoral data space based on the One Health approach, promoted by the DATAlife demonstration centre to enable secure and interoperable data sharing.

dataspace.cesga.es ↗
Hospital U. Puerta de Hierro

Health Data Space

A healthcare data space that enables the governed exchange of clinical information for care and research while preserving patient data sovereignty.

healthdataspace.es ↗
Top Doctors · TopHealthTech

Global HDS

A global health data space connecting healthcare providers and platforms under shared rules for trust and data sovereignty.

eds.tophealthtech.ai ↗
IDARA · Hospital de Pontevedra

AIDATAMED

A European data space focused on generating synthetic patient data for medical research while preserving people's privacy.

aidatamed.idara.health ↗
IDARA · Hospital de Pontevedra

GIFT

A data space supporting AI-assisted medical decision-making in gastroenterology.

gift.idara.health ↗

Will yours be next?

Bring your sector into a sovereign data space with Gradiant's support.

Let's talk ↗
Data space connectorsOneHealth DataSpace participants

Organisations can join a data space by deploying an XDATASHARE connector, without having to operate an entire data space. This also applies to R&D projects and strategic consulting engagements. They are grouped below by collaboration model.

Clients · Direct procurementA connector integrated with internal systems and tailored policies

Cruz Roja Española

A connector integrated with its internal data systems and equipped with custom policies tailored to its use case.

cruzroja.es ↗

DIH DATAlife

A connector integrated with its internal data systems and equipped with custom policies tailored to its use case.

dihdatalife.com ↗
Projects · SEDIA programmeConnectors deployed under Spain's Data Spaces Acceleration Plan

CELIASPACE

Universidade de Vigo. A connector deployed as part of a project funded through the SEDIA programme (Spanish State Secretariat for Digitalisation and Artificial Intelligence).

DATIACARE

I4LIFE. A connector deployed as part of a project funded through the SEDIA programme (Spanish State Secretariat for Digitalisation and Artificial Intelligence).

FMLDATA

In collaboration with Multiverse. Integration of federated learning (FL) techniques in a data space as part of a project funded through the SEDIA programme.

cred.digital.gob.es ↗
Consulting and strategySupport for integrating existing solutions into a data space

Mestrelab

Technology consulting to define an integration strategy for the company's existing solutions within a data space.

mestrelab.com ↗

Agrolinera

Technology consulting to prepare its systems and deploy a connector, enabling the organisation to join a data space with full guarantees.

agrolinera.com ↗
Certifiable trust

Ready for the CRED Trusted List

Data spaces created with XDATASHARE are ready to join the Data Space Trusted List managed by CRED (Spain's Data Spaces Reference Centre), the official registry that identifies data spaces in Spain which pass its technical, interoperability and governance assessments in accordance with UNE Specification 0087:2025.

This includes Global HDS, a data space built on XDATASHARE.

View Global HDS ↗

Trusted data space

CRED manages the Trusted List, an official, voluntary registry that awards a seal of excellence to data spaces which ensure shared data is used securely, ethically and transparently, in alignment with European standards.

UNE 0087:2025 Order TDF/1207/2025 IDSA · Gaia-X SEDIA · Acceleration Plan

Launch your sovereign data space.

Talk to the Gradiant team for a personalised XDATASHARE demonstration and an assessment of your use case.

Request a demo →