Personal Data Intermediary: Enable controlled and ethical personal data sharing

The VisionsTrust data space solution offers native integration of a personal data intermediary — a true trust layer enabling secure, sovereign, and compliant personal data sharing. This key feature empowers your users to retain control over their data while opening the door to innovative use cases.

Open-source based solution, fully aligned with MyData architecture and standards developed within DSSC, Gaia-X, IDSA and Prometheus-X.

registered organisations

projects in progress

available data and services

What is a personal data intermediary?

A personal data intermediary is a trusted, technical and legal entity that facilitates the exchange of personal data between services or organisations. It provides both organisations and individuals with tools to manage GDPR rights and consent. This concept is defined and regulated by the European Commission under the Data Governance Act (DGA).

The objective? To establish a new model for personal data management based on transparency, traceability, rights management, and explicit consent.

The intermediary ensures that every data sharing action is based on informed and explicit user consent — within a secure, ethical and legally compliant framework. Unlike traditional models where users lose control, the intermediary puts individual sovereignty at the heart of the process.

VisionsTrust: The first personal data intermediary in Europe

VisionsTrust’s personal data intermediary transforms how personal data is handled — enabling innovation while protecting individual freedoms.

Consent management:

Collecte du consentement explicite pour chaque traitement de données via des pop-ups intégrés directement dans vos plateformes.

Contract management:

Manage data usage with digitally signed and traceable contracts, detailing rights, obligations, durations, allowed usages and responsibilities.

Data & Services Catalog:

Access a structured catalog of available data, services, and infrastructures. Each item includes a detailed description, source, usage terms, access conditions and potential pricing.

GDPR Rights Management:

Provide users with a simple tool to exercise their rights at any time. They can view, manage, or revoke consents in a few clicks, track usage history, see who accessed their data, and receive personalised recommendations.

Identity Management:

Use interoperable, secure ID systems where users and entities can be authenticated across services. Access is restricted based on roles and permissions, ensuring privacy by design.

Information Governance:

Structure, trace, and ensure transparency throughout the entire data lifecycle.

VisionsTrust Intermediation Protocol: Transparency, trust and interoperability

To guarantee personal data sharing that is secure, ethical and compliant, VisionsTrust relies on a robust intermediation protocol. This protocol structures every step around core principles: contractualisation, informed consent, traceability, and GDPR compliance.

1/Agreement between parties

A digital contract is established between the data rights holder and the data user, formalising terms of access, use, and data security guarantees.

2/Consent generation

Based on this contract, the intermediary generates a GDPR-compliant, readable and traceable consent document.

3/User consent

The data subject gives explicit permission for the proposed exchange or processing. Consent can be withdrawn at any time, ensuring continuous control.

4/Data exchange

Data is exchanged securely via the Prometheus-X Data Space Connector, in line with defined access policies and user consent.

Why use a personal data intermediary?

For users

  • Decide who can access their data, for what purpose, and for how long.

  • Give or revoke consent directly via a dedicated platform or integrated service interface.

  • Act with confidence in digital environments that respect their rights.

For organisations

  • Launch compliant data projects
  • Build a transparent and ethical data framework for users
  • Enable cross-sector data portability (education, employment, health, etc.)
  • Unlock personal data value without compromising user trust

A consent-driven data exchange architecture

With VisionsTrust, each user has a personal data intermediary account, serving as their reference identity within the data space. This account consolidates identity information across the services and organisations they interact with.

Thanks to a secure correlation mechanism, services never access the user account directly. Instead, dynamic identifiers are generated to authorise and trigger exchanges — protecting identity, simplifying flows, and ensuring full compliance.

Looking for a trusted personal data intermediary?

Discover how VisionsTrust can help you securely simplify personal data and AI service exchanges. Contact our experts to learn more!

VisionsTrust: A recognised leader in Data Spaces

VisionsTrust leverages open digital commons governed and developed by Prometheus-X, ensuring a secure and interoperable infrastructure.

Adopted by Data Space for Skills, it stands as a leading solution for data spaces. Additionally, VisionsTrust actively contributes to international consortia and standards, reinforcing its commitment to open and interoperable data and AI governance.

The VisionsTrust data space service applies the MyData architecture, implementing the principles and technical specifications defined by the MyData initiative for privacy, security, and interoperability in personal data management and user control.

In line with Gaia-X standards, VisionsTrust creates a secure and interoperable data infrastructure, enhancing data sovereignty and user trust while adhering to security, privacy, and governance criteria.

VisionsTrust integrates the rulebook into its contracting service by using agreement templates that encompass the legal, commercial, technical, and administrative aspects of data exchange. To ensure compliance, it also offers model codes of conduct to govern the responsibilities and obligations of organizations.

The VisionsTrust solution applies the DS4Skills blueprint as a framework for configuring use cases. It also guides the proposed business models, the development of governance, technical architecture, and the user experience (UX) of the platform, ensuring optimal use of the data space.

Discover the other key features of VisionsTrust!

Publication of data products and AI services

Exploration of data products and AI services

Project configuration: governance and business model

Contracting data exchanges

Transaction and data sharing management

Personal Data Intermediary