ES Technical meeting
Menu

Bring your data to AI.
With European security.

The semantic data layer that makes AI answer with the truth of your business: every answer traceable to its source data, every access governed and recorded, inside your private cloud.

In your cloudYour dataYour knowledgeNo access fees


The semantic data and security layer for the AI era.

Opendome is a platform that organizes mixed data — structured and unstructured — into a semantic graph, built on open source, with a security dome and access logging. The result: your AI behaves as if it were trained on all your data. To get there, it solves three key challenges:

Challenge 1

AI-ready data

All your structured and unstructured data, centralized, connected in a semantic graph, and described. AI understands it instantly: higher-quality answers at a fraction of the cost.

−80%fewer tokens per query with prepared datasame question · same AI · no model change
Challenge 2

Governed access

Every AI query against company data is compiled and filtered against the defined access policies. The access event is written to an immutable log, ready for audit.

Challenge 3

Data sovereignty

Your company owns its data, not the hyperscaler hosting it. Opendome deploys in your cloud, in an open format: no provider dependency and no fee to access what is already yours. And under European jurisdiction, beyond the reach of the US CLOUD Act.

Why most AI projects never move beyond proof of concept.

This is not a model problem. It is a problem of how data is organized and secured.

01 — Effectiveness

Results are unreliable and difficult to predict.

The same "customer" is a different object in every system, and fields with similar names can carry different meanings. The same applies to tools. AI works with inconsistent information, fills gaps through inference, and returns generic or incorrect answers that no one trusts. Exposing MCPs does not solve it: the fragmentation remains.

95%

of generative AI pilots fail to deliver measurable P&L impact.

MIT · The GenAI Divide, State of AI in Business 2025
02 — Cost

Costs escalate and become unpredictable.

Without prepared data, AI reconstructs context for every task: it fills the context window, launches multiple calls and queries, and spends tokens inferring what it should be able to read directly. At scale, the overhead is substantial, rising, and difficult to budget.

≥50%

of generative AI projects will exceed their budget because of poor architectural decisions.

Gartner · Hype Cycle for Generative AI 2026
03 — Security

You cannot guarantee who accesses which data.

Roles work for people because human judgment provides the constraint: a person may have broad access but decides which data to use in each case. AI does not make that judgment; it uses everything the role grants. A role is therefore not enough: AI needs the exact data for the exact task, enforced by infrastructure. Nothing more.

97%

of organizations that experienced an AI-related breach lacked AI access controls.

IBM · Cost of a Data Breach Report 2025
04 — Compliance

You cannot audit who accessed which data, when, and for what purpose.

If GDPR, DORA, or EU AI Act compliance is a requirement for your organization, you need an atomic record of every access. Without that traceability, compliance cannot be demonstrated.

35 M€ / 7%

of global turnover: the maximum EU AI Act penalty, in force since 2024 and being phased in.

Regulation (EU) 2024/1689

How successful organizations deploy AI the right way.

Organizations that achieve real outcomes build a secure, semantic data layer first, then deploy AI on top of it with complete control.

Layer 1

Semantic data graph: all your data, ready for AI.

Structured and unstructured data, from transactions and contracts to calls, emails, and meetings, unified, connected, and semantically described. Everything that actually happens in your business, available to AI instantly.

Solves effectiveness and cost: reliable results using only the tokens required.

Layer 2

Security and observability dome: secure, auditable access.

Atomic control over which data AI can access, for which task, and at what time. Every access recorded. Security enforced at the point of access.

Solves security and compliance: every answer contains exactly what the task justifies, and every access can be demonstrated to the regulator.

A business entity is more than fields in a database. It is its entire context.

Pre-AI transactional systems reduce the world to fields. But they do not understand the call where a customer raised concerns, the email where they made a request, the contract they signed, or the meeting where they changed their mind. Opendome brings data and content together to create exceptionally rich semantic graphs.

Proprietary innovation

Opendome brings structured data and every type of content together in a single semantic graph. The full context of every entity. Together.

Semantic graph Corpus ↔ entity anchoring

Everything an enterprise needs before deploying AI, in a single solution.

Opendome is the only platform that integrates the complete stack: from data centralization and semantic modeling to atomic access control and auditable observability.

Layer 1 · Data lake

Data centralization and relationships

Every system, including CRM, ERP, and financial platforms, connected in a single data lake. Start with a customer identifier and instantly access any relevant data.

Layer 1 · Data lake

Unstructured data

Calls, video calls, emails, notes, and documents. Opendome unifies them with your structured data, adding the real-world context no form can capture.

Layer 1 · Data lake

Semantic layer for AI

AI works with data whose relationships, context, and meaning are explicit, instantly and without additional instructions or ambiguity across system naming conventions.

Layer 2 · Dome

Cell Model: atomic security

Every access is authorized across four dimensions: identity, task, entity, and exact field. One unique key per interaction. Enforced by infrastructure, not by a prompt.

Layer 2 · Dome

Auditable, immutable observability

Every action is recorded with its complete context. Append-only logging and full traceability. Compliance with regulations such as DORA and the EU AI Act by design.

The foundation

100% open source, with no vendor lock-in

Built on the same open-source technologies that power the internet and much of the US hyperscaler stack. No proprietary licenses. Your data remains in your cloud.

From fragmented data to governed knowledge, in eight stages.

The complete journey through both layers: data enters through connectors and is transformed with lineage along two parallel paths, identities for structured data and corpus plus metadata for content, which converge in a single data lake. There, knowledge is connected in the semantic graph and consumed under the dome through API and MCP, with policies already enforced.

01 · Connectors 02 · Data pipeline 03 · Identities 05 · Data lake 06 · Semantic graph 07 · Dome 08 · Consumption STRUCTURED DATA UNSTRUCTURED DATA ≡ API MCP person · AI · system answers with data lineage 04 · Corpus + metadata
View the complete flow, stage by stage →

A security dome designed for Europe's most demanding regulatory framework.

Data remains in your infrastructure. It never leaves your jurisdiction. Access logging is auditable by design, with no additional configuration.

GDPR

Privacy

Data residency in your jurisdiction and access minimization by design.

DORA

Resilience

Auditable access logging for financial entities and their technology providers.

EU AI Act

Artificial intelligence

Traceability and human oversight for high-risk AI systems.

ISO 27001

Security

Information security management aligned with the international standard.

ENS

Spain

Spain's National Security Framework for public bodies and their suppliers.

✕AGT-208scope · ticket.status+ GRANTEDAGT-X92scope · admin.payroll× DENIEDGDPR · DORA · EU AI Act · ISO 27001 · ENS

What US hyperscalers cannot give you.

Dominant solutions were built for a different world: data for human users. Opendome was designed from the ground up for the AI era and to meet European law.

Sovereignty

True data sovereignty, not a claim.

In the dominant model, data lives in the vendor's cloud, under its license and jurisdiction, and has been subject to the CLOUD Act since 2018. With Opendome, data resides in your infrastructure in an open format: sovereignty is a verifiable technical property, not a contract clause.

Cost

Predictable cost, no access toll.

Major vendors are shifting to headless models: they expose your system through APIs and charge for every operation AI performs against your own data. Entry is cheap; operation and exit come at a cost. With Opendome, data lives in your cloud in an open format, with no access toll or exit lock-in.

Compliance

Compliance by design, not by configuration.

On platforms designed before the EU AI Act, compliance is a configuration layer that someone must build and maintain. In Opendome, GDPR, DORA, and the EU AI Act are embedded in the architecture: atomic control and auditable logging exist without requiring configuration.

Architecture

Designed for AI, not retrofitted.

Existing platforms were designed for human users and have added AI layers on top. Opendome starts with the right question: what does AI need to operate autonomously on enterprise data?

Works with the AI you choose.

Opendome does not create or orchestrate AI. It is the platform that ensures your data is always deduplicated, described, connected, protected, and under your control.

The questions we get most.

Quite a few: the concepts first, then what usually decides a purchase, and the technical detail last.

What exactly is Opendome?

A data platform that deploys in your cloud, designed specifically so you can use your data with AI securely and with European regulatory compliance guarantees. It centralizes data from all your systems — structured and unstructured —, deduplicates it, connects it, describes it in a semantic graph and protects it. The result: your AI behaves as if it were trained on all your data and always answers with the truth of your business, with answers traceable to the source data, atomic access control and under maximum security.

What is a security dome?

The layer that compiles your security policy into every query, designed to work with AI. It authorizes by identity and delegation chain, and goes down to the exact row, column, document and redacted version. It is enforced in the infrastructure, rewriting the query before it touches the data, never through instructions to the model; and when in doubt, it denies. Every query is traced end to end under a single audit identifier.

What is a semantic graph? Why do I need one?

A layer that describes what each piece of data is and how it relates to the rest: what customer means, which contracts belong to it, which conversations go with which. You need it because a database stores fields, not meaning: the same customer is a different object in every system, and fields with similar names carry different senses. With the graph, AI does not have to work it out on every query: it reads it. Without it, the model fills the gaps by inference, and that is where the errors appear.

How does Opendome relate to my CRM, my ERP and the rest of my systems?

Opendome takes data from the CRM, the ERP, financial platforms and the rest of your sources, and deduplicates it, connects it, describes it and protects it. From a customer identifier you reach any related data, whether it sits in one system or another. Your systems remain the source.

Does it work with the AI we already use?

Yes, and not only with that one. Opendome does not integrate with a specific model: it exposes the data through API and MCP, so it can serve any LLM or orchestrator. What changes is how the data arrives: because it is deduplicated, connected and described, whoever asks resolves it in a single query, without chaining calls across systems or inferring what is missing. The answer comes from the source data, not from a reconstruction.

Does my data travel to an LLM?

Yes, in the sense that the model receives the data the query authorizes: without that it cannot answer. What is not needed is sending it to an external provider. Opendome offers the model as a service hosted in a private cloud, so inference happens inside your perimeter and under European jurisdiction, and the data never leaves your control.

Where does my data live?

In your own infrastructure and in an open format, within your jurisdiction. It is not copied to a provider's cloud, so control over it is technically verifiable and does not depend on a contractual clause. Remaining under European jurisdiction, it stays beyond the reach of the US CLOUD Act.

Why is AI cheaper with Opendome?

Because the model stops reconstructing context for every task. Without prepared data, AI fills the context window, launches several calls and spends tokens inferring what it should be able to read directly. With data deduplicated, connected and described, the same question resolves in a single query: around 80% fewer tokens, with the same question and without changing model.

What is the pricing model? Do I pay to access my data?

There is no charge for accessing your data or for each operation AI performs against it. It is the opposite of the headless shift the large vendors are adopting: they expose your system as an API and bill every call an agent makes against your own information, so cost grows with use. In Opendome the core is open source and the data lives in your cloud, so accessing it carries no charge.

How soon can I start using my AI securely?

No company-wide project is needed before seeing results. Opendome is deployed by business domain — what we call galaxies: sales, finance, people, logistics — and each one moves on its own. A galaxy can be running with agents in two or three months, with governed access and compliant with European regulation. The next ones build on what is already there.

Does Opendome provide services or is it only technology?

Opendome provides services and develops technology. The base of that technology is open source, and on top of it we have a commercial solution that simplifies and automates the administration of the system. In any case, services are part of our DNA: we get involved in the projects and support the deployment from start to finish.

Does it handle unstructured data: emails, reports, calls, minutes?

Yes. To do it, Opendome has created two unique technologies, developed on that same open base. One generates compiled versions of the content by security policy, hiding in each version the information that policy requires to protect. The other anchors each fragment of content to the structured entity it belongs to: the customer, the contract, the project. The result is far richer context than a transactional system's, because what was said in a call stays linked to the customer it was said about.

What is a redacted version of an unstructured data item —a report, an email, a call, a meeting—?

The same piece of content, generated as many times as access policies affect it. Each version hides what that security policy requires to protect and the rest stays intact. Whoever queries does not receive the original filtered on the fly, but the version that corresponds to them. Each one is indexed separately, with its own embeddings, so not even a semantic search can retrieve what was hidden.

My systems already have MCPs and APIs. Why do I need Opendome?

For security and compliance, quality of results, traceability and cost. With MCPs there are as many doors as systems, each with permissions inherited from a model designed for people, and no common record of what the AI queries. An MCP gives access to a system, but does not say what a customer is in each one or which holds the correct data, so the agent works it out and fills the gaps by inference. Nor does the answer keep a reference to the source data, so there is no way to check where it came from. And reconstructing context on every query consumes tokens that prepared data would not need.

Do I need a memory system for my agents?

No. Business memory already exists: it is in the data. Memory systems rebuild it separately, out of summaries and inferences, and summarizing loses the link to the data that produced it: the recollection can no longer be checked. It is also a copy, so it ages; when the data changes, the summary does not. With Opendome semantic and episodic memory stay where they are, in described and connected data, and only procedural memory belongs to the agent: how to do things.

How is it decided who can access which data from AI?

Every query is authorized by identity and delegation chain, and the effective security policy is compiled down to the exact row, column, document and redaction version. It is not a matter of filtering the answer after reading the data: the security policy travels inside the query, so denied data does not leave — not even through the vector index, because each redacted version is indexed with its own embeddings. The system denies by default: without explicit permission, there is no access.

How do you guarantee data governance and sovereignty?

On an open source base. The core is Apache 2.0, with no proprietary licenses: you can audit the code, check what it does with your data and operate it yourself, with no black box in between.

Access policies are yours, applied in your infrastructure and leaving an auditable record of every query. Sovereignty stops depending on trusting a provider and becomes something you can verify.

Resources for teams making data and AI decisions.

Analysis, technical guides, and perspectives on data, AI security, and European regulatory compliance.

Blog

AI memory is in the data

Business memory already exists: it lives in the data. The only memory that should belong to the agent is procedural.

Read
Blog

I'm an agent. This is what you do to me when you give me fifty tools

Connecting an agent to too many MCPs doesn't make it more capable: it makes it more expensive and less reliable. Half its capacity goes to loading tools, it chooses worse the more it has, and what we call "hallucinations" is almost always a data gap filled with inference. The key isn't more access: it's better data.

Read
Blog

You'll pay to access your own data

With agents that hold no seat and open no screens, per-user licenses stop making sense. Salesforce, SAP, and Microsoft are shifting to consumption pricing: charging for every operation an agent runs against the data. The problem is that you generated that data, and now operating on it costs.

Read

Data infrastructure for the agentic era.

The safest strategy to make your AI feel trained on your data.

Controller: OPENDOME, S.L. · Purpose: to handle your request and get the document to you; if you authorise it, to contact you and send you content. Legal basis: performance of your request and, for later sends, your consent. Retention: until you ask for erasure or withdraw your consent. Rights of access, rectification, erasure, restriction, portability and objection in the privacy policy. The form is processed on our own infrastructure hosted in the European Union and sets no cookies.