Onboarding Gaia-X and the Interoperable Ecosystem
How Enterprises onboard Gaia-X via GXDCH validation, gaining Verifiable Credentials for trusted EU data access and compliance.
An enterprise typically onboards the Gaia-X ecosystem and utilizes a Gaia-X Digital Clearing House (GXDCH) by following a structured, multi-step process that focuses on digital identity verification and service compliance.
The GXDCH acts as a "one-stop shop" for obtaining Gaia-X compliance. The process is designed to be largely automated and relies heavily on verifiable credentials.
Step 1: Preparation and Prerequisites
Before formal onboarding, an enterprise needs:
A Digital Identity:
The enterprise must possess a secure digital identity, typically an X.509 certificate or, in the future, an eIDAS certificate, which acts as a "Trust Anchor" (a verified source of identity).
Understanding the Framework:
The enterprise should be familiar with the Gaia-X Trust Framework rules and guidelines regarding data governance, security, and interoperability.
Defining Business Value:
Understand how the enterprise will benefit from joining a specific data space (e.g., in the Aerospace sector the COOPERANTS Data Space for Aeronautics & Space).
Step 2: Verification and Credential Issuance
This is where the GXDCH plays its core role.
Request a Verifiable Credential (VC):
The enterprise (the "actor") requests a VC, which is a tamper-proof digital assertion of its identity and attributes, from a GXDCH.
GXDCH Validation:
The enterprise sends its identity proof (e.g., the eIDAS certificate) to the GXDCH. The GXDCH validates this proof by checking its formal correctness and confirming it against recognized external Trust Anchors (like state-recognized certification authorities).
Issuance of Gaia-X VC:
If the verification is successful, the GXDCH issues a Gaia-X Participant Credential to the enterprise. This credential confirms the verified identity and compliance of the participant within the Gaia-X ecosystem.
Step 3: Service Compliance (if applicable)
If the enterprise wants to offer services within the Gaia-X ecosystem:
Service Credential:
The enterprise must also demonstrate that its specific data services or products comply with the Gaia-X rules. The GXDCH verifies the service's "self-description" against the mandatory criteria (transparency, security, etc.) and issues a specific Service Credential.
Step 4: Connection and Operation
Once certified:
Joining a Data Space:
The enterprise can use its new VCs to join any Gaia-X-compliant data space (e.g., the Pontus-X network).
Ongoing Monitoring:
The GXDCH Compliance Engine continuously verifies ongoing adherence to the rules, ensuring that trust is maintained throughout the operation.
Summary
An enterprise effectively "onboards" by using a GXDCH as their gateway to validate their digital identity and services, resulting in the issuance of a Verifiable Credential that grants access to the trusted European data ecosystem. The GXDCH ensures that all participants operate under the same, verifiable rules, enabling secure and sovereign data exchange.
The Gaia-X Labels and the role of ASD-X as a Trusted GXDCH Services Provider.
Gaia-X provides a tiered labeling system to express trustworthiness and compliance with European values, ranging from basic conformity to the highest level of data control.
The Four Gaia-X Labels
Standard Conformity:
A universal baseline set of rules that all participants must meet, regardless of their location, focusing on transparency and basic data protection principles.
Label Level 1:
Extends standard conformity with additional requirements for data protection in accordance with EU legislation. It offers increased security and transparency.
Label Level 2:
Involves an even higher level of data protection and security. Cybersecurity criteria are verified by impartial third parties (Conformance Assessment Bodies).
Label Level 3:
The highest level of compliance. It requires that the consumer's data is processed and shared exclusively within the European Economic Area (EEA), and often specifies that the provider's headquarters must also be located within the EU.
ASD-X GXDCH: Your Gateway to European Data Trust, streamlining your entry into the ecosystem.
Onboarding:
We guide enterprises through the initial process of verifying their identity using methods like eIDAS.
Certification & Verification:
We onboard new participants and use the automated Compliance Engine to check services against the strict criteria of all four Gaia-X labels.
Guaranteed Compliance:
Our service ensures you achieve the necessary label seamlessly, guaranteeing your compliance "by design" and giving you access to trusted European data spaces.
Our Services
Learn how ASD-X GXDCH and our Gaia-X services can support your sovereign transformation and onboard your organisation to the Aerospace Ecosystem:
Compliance by Design
Understanding how Compliance by Design is embedded into the Gaia-X Trust Framework:
Learning Center
ASD-X provides an educational blog covering the European Digital Transformation, Gaia-X, eIDAS, Compliance by Design, and much more.
join the aerospace ecosystem
Register for ecosystem onboarding
Register for our newsletter and receive more information about Onboarding the Aerospace Ecosystem.