Data space

GLOBAL DATA CARE

A governed network where organizations, hosts, professionals and individuals exchange data services through verifiable identities, explicit authorization and traceability. The test network and formal production adhesion are separate journeys.

Controller access Open observatory Adhesion at globaldatacare.es

Root CA

Publishes the trust anchor and governance controllers. It is not an adhesion form and grants no clinical access.

ICA

Verifies organization and representative evidence and issues credentials within its authorized scope.

Hosts

Operate gateways and services for organizations. Each host has its own governed environment, operator and scope.

Hyperledger Fabric

Peers, orderers and channels record identity, governance and evidence. Technical membership does not replace business authorization.

Participation

Three journeys that must remain separate

Each journey has a distinct purpose, evidence and outcome. Test-network participation is not production data-space adhesion.

Staging

Test-network integration

A free isolated environment where approved partners test identity, credentials, gateway, catalog and transactions before applying for production.

Synthetic data or data expressly prepared for testing.
Credentials and permissions limited to staging.
Access through a test-network host, not through a public peer.
Positive and negative tests with operation identifiers.

The request remains subject to controller verification and operator approval. It does not automatically grant channel access.

Production

GLOBAL DATA CARE adhesion

Formal adhesion is handled at globaldatacare.es using a signed PDF, ICA verification and the applicable governance decisions.

Verified legal identity and representation.
Electronically signed adhesion PDF.
Verifiable credentials issued by the ICA.
Later admission to the expressly approved host and channels.

The signature and credentials are identity evidence. Fabric membership is configured later through a separate governance operation.

Planned

UNID Professional partners

A dedicated adhesion journey is planned for the future host-professional.unid.online using a signed host-service authorization PDF.

The Professional host is not deployed yet.
The dedicated PDF has not been published in this portal.
It must identify the host, provider, country, controller and public-key commitment.
Possession of the private key will be proven in a later operation.

This journey is not presented as operational until the host, approved PDF contract, TLS, gateway and end-to-end verification exist.

Organization controllers

Planned test-network request journey

The portal authenticates the person, while organization authority must be evidenced by credentials and verified by the governance backend.

1
Sign in through an identity provider that verifies the controller email.
2
Provide the organization credential and evidence binding the controller.
3
Choose the staging host and declare the integration, sector, jurisdiction and test purpose.
4
The operator reviews the request and issues access limited to test-network.
5
Complete testing and later apply for production adhesion through the applicable channel.

The transactional form is not enabled yet: durable request ownership must be assigned either to ICA/governance, the recommended option, or to a manual portal Firestore queue. The UI will not pretend access was granted before that authority exists.

Peers and orderers

Peers use internal Kubernetes DNS. The public gateway is the integration boundary and reaches Fabric through private connectivity.

Do not create public A records for peers, Fabric CAs, CouchDB or chaincodes.
Use service.namespace.svc.cluster.local names inside the network.
Publish only HTTPS, sanitized observability and governed gateways.

UNID host status

host-test.unid.online: The staging gateway is deployed at 34.158.165.169. DNS, TLS for the new hostname and completion of the request flow remain pending.
host-personal.unid.online: Reserved for production. No production gateway or final IP was found.
host-professional.unid.online: Planned. There is no service, IP, TLS or published dedicated PDF yet.
host-partners.unid.online: Pending a decision on whether this is a technical host or only a partner onboarding portal.