Trusted environments for sensitive data management in EOSC

EOSC-ENTRUST is an Horizon Europe project funded by HORIZON-INFRA-2023-EOSC-01-06 grant 101131056 (Trusted environments for sensitive data management in EOSC) and lead by ELIXIR Hub at EMBL-EBI.

The mission of EOSC-ENTRUST is to create a European network of trusted research environments for sensitive data and to drive European interoperability by joint development of a common blueprint for federated data access and analysis.

Countries and institutions have made significant investments in secure and trusted data environments to meet the need for research and policy-driven analysis of sensitive datasets such as people’s health and socio-economic status, the habitats of vulnerable species and geo-spatial locations of protected sites. There are now a large number of such secure environments in operation – linked to national centres, individual organisations or specific research communities. This fragmented landscape poses challenges for both users and providers: researchers are faced with a large number of different systems and access procedures; providers need to manage federated access across multiple, potentially incompatible, technology and governance frameworks.

EOSC-ENTRUST brings together providers of operational Trusted Research Environments (TREs) from 15 European countries with a shared goal to implement, validate and promote their capabilities through a common European framework using shared standards and common legal, operational and technical language. This blueprint for interoperability is anchored in the EOSC Interoperability Framework spanning the four dimensions of Legal, Organisational, Technical and Semantic interoperability.

EOSC-ENTRUST has identified four driver projects covering Genomics, Clinical trials, Social science, and public-private partnerships to benchmark capabilities, inform blueprint design and demonstrate secure data analysis using federated workflows:

Targeted outreach activities will expand this open network with further providers and develop policy papers and guidelines for the full range of stakeholders to create a long-term operational TRE framework within the European Open Science Cloud.


  1. Create a European network of Trusted Research Environments, linked to EOSC and EuroHPC, to enable transnational collaborative research on sensitive or restricted data.

  2. Trusted Research Environment providers implement, validate, and promote their capabilities through a European framework using common standards and shared legal, operational and technical language.

  3. National funders and governments understand the network of TRE capabilities serving their needs, and how TREs support their national priorities and their contributions to selected transnational programmes.

  4. The European Network of Trusted Research Environments (ENTRUST) is embedded in the European Open Science Cloud and the European Data Spaces and fosters an ecosystem of public, private and joint-venture providers of TRE services.

eScienceLab involvement

For the eScience Lab this project builds on our earlier work on TRE-FX and will align with our work on HDR UK Federated Analytics. In EOSC-ENTRUST we will particularly working with contribute with our expertise on RO-Crate and the Five Safes RO-Crate profile.

UNIMAN contributions :

  • WP7A: RO-Crate and workflow processing - Establishing a common terminology and approach (leads: BSC, UNOTT)
    • Task 7A.1: Use-cases for the deployment of Five Safes RO-Crate
    • Task 7A.2: Workflow engine processing a Five Safes RO-Crate
    • Deliverable D7A.1: Deployable Demonstrator of Digital Objects & Workflows Developments
  • WP7B: RO-Crate and workflow processing - Deployment (leads: BSC, UNOTT)
    • Task 7B.1: Verifiable Five Safes RO-Crate.
    • Task 7B.2: Handling data security and data curation with workflow orchestrator.
    • Deliverable 7B.1: Deployable Demonstrator of Digital Objects & Workflows Developments, Second Version
  • WP7C: RO-Crate and workflow processing - Demonstrating Impact (leads: BSC, UNOTT)
    • Task 7C.1: Wrapping federated analytics within a Five Safes RO-Create
    • Task 7C.2: Developing a technical blueprint for federated analytics implementation
    • Deliverable 7C.1: Deployable Demonstrator of Digital Objects & Workflows Developments, Final Version