Manuel Gutiérrez, Senior Digital Ecosystems Manager at Gaia-X
Published in the June edition of the Gaia-X Magazine
The Shift from Security to Trust
The digital economy is entering a new phase: one defined less by isolated platforms and more by interconnected ecosystems. Organisations today rarely operate within clearly bounded technological environments. Industrial companies exchange operational data with suppliers and partners in real time. Public administrations depend on external cloud infrastructures and digital service providers. AI systems increasingly rely on distributed datasets, third-party models and federated computing environments. Critical sectors such as energy, mobility, healthcare and manufacturing are becoming structurally interconnected through data-driven collaboration.
This transformation creates enormous opportunities. But it also introduces a new challenge: how to scale digital collaboration across ecosystems without losing trust, governance or control. For years, cybersecurity has been the primary mechanism for protecting digital environments. Its role has been clear: defend systems, reduce vulnerabilities, prevent fraud and ensure resilience against increasingly sophisticated threats. These capabilities remain essential, and no digital ecosystem can function without robust cybersecurity foundations. But ecosystems introduce a different dimension.
Organisations do not collaborate simply because infrastructures are secure. They collaborate because they trust the conditions under which collaboration takes place. Cybersecurity protects against malicious behaviour, while trust enables cooperation between independent actors. Security reduces risk, but trust reduces friction. In highly interconnected ecosystems, that friction increasingly becomes one of the main barriers to innovation and scale.
Many organisations already experience this operational reality. Sharing industrial data with external partners often requires lengthy onboarding processes, repeated compliance validations and complex governance negotiations. Cross-border collaboration introduces fragmented trust models, inconsistent identity mechanisms and different regulatory obligations. As organisations become increasingly dependent on external cloud providers, AI services, software components, and interconnected suppliers, trust becomes inseparable from supply chain visibility and governance.
These are no longer theoretical concerns. They are operational bottlenecks that directly affect how quickly ecosystems can innovate and scale. This challenge becomes even more visible in sectors where digital and physical infrastructures increasingly converge. In industrial and operational technology environments, organisations must coordinate cybersecurity, governance and operational trust across infrastructures where failures may have physical consequences. Energy ecosystems, manufacturing environments and critical infrastructure operators already face the complexity of coordinating multiple actors, technologies and governance models in real time.
In this context, the challenge is no longer simply securing systems. It is creating the conditions for trusted participation across ecosystems that remain operationally distributed and organisationally independent. This fundamentally changes the role of trust.
Traditionally, trust has often been understood as a social, institutional or contractual concept. But in digital ecosystems, trust increasingly becomes operational infrastructure. It becomes embedded into identity mechanisms, governance frameworks, interoperability models, compliance automation and data-sharing policies.
Organisations today already dedicate significant operational effort to validating partners, reconciling compliance requirements, verifying permissions and establishing governance assurances across digital ecosystems. As ecosystems scale, this trust overhead becomes increasingly difficult to manage manually. In other words, trust becomes something that must be designed, verified and continuously managed.
Trust as Europe’s strategic opportunity
Europe’s structural strengths have never been based solely on platform scale. Europe’s industrial fabric is deeply ecosystem-oriented, shaped by interconnected supply chains, regulated sectors, public-private collaboration and complex cross-border coordination environments. These characteristics create both complexity and opportunity.
As digital ecosystems become more interconnected, the ability to establish trusted conditions for collaboration may become one of Europe’s most important strategic assets. This is where the concept of digital sovereignty begins to evolve beyond infrastructure debates or regulatory narratives. Increasingly, sovereignty is about the ability to participate confidently in digital ecosystems while maintaining governance capacity, operational visibility and strategic autonomy.
Organisations today want more than connectivity. They want confidence in how digital ecosystems operate. They want visibility into where data is processed, how AI systems are governed, which policies apply across infrastructures and how dependencies are managed over time. Public administrations and critical sectors increasingly require assurances around interoperability, jurisdictional transparency and operational resilience before engaging in large-scale digital collaboration.
This is not about limiting openness. On the contrary, trusted ecosystems are often the ones most capable of enabling collaboration at scale because participants have confidence in the underlying rules, governance conditions and operational safeguards. Strategic autonomy, in this context, becomes an enabler of participation rather than a barrier to it.
This is one of the reasons why conversations around sovereign cloud, cybersecurity, trusted infrastructures, operational resilience and AI governance are increasingly converging. They all point toward the same structural challenge: how to create digital ecosystems that remain open and interoperable while preserving trust, governance and control.
This broader transition is increasingly visible across the European digital landscape. Initiatives such as the NIS2 Directive, the Cyber Resilience Act, eIDAS 2.0 and the emerging European Digital Identity Wallet are all addressing different dimensions of the same structural challenge: how to establish trusted conditions for participation in interconnected digital ecosystems.
NIS2 strengthens organisational resilience and supply-chain security. The Cyber Resilience Act pushes cybersecurity requirements deeper into the lifecycle of connected products and digital services. eIDAS and the European Digital Identity Wallet establish the foundations for trusted digital identity for citizens and organisations.
Taken together, these initiatives suggest something larger than regulatory evolution alone. They point toward the emergence of foundational trust layers capable of supporting interoperable, resilient and scalable digital ecosystems across Europe. Cybersecurity itself is evolving as part of this transition. Increasingly, it is no longer viewed only as a technical discipline focused on protection, but as a foundational layer of ecosystem governance and resilience.
As AI adoption accelerates and critical sectors become more interconnected, this challenge becomes increasingly strategic. The future of competitiveness may depend not only on access to infrastructure or computational scale, but also on the ability to create trusted environments for collaboration and innovation.
Operationalising Trust in digital ecosystems
This is precisely where initiatives such as Gaia-X become strategically significant. Gaia-X can be understood as an attempt to operationalise trust for the next generation of digital ecosystems. Its relevance lies in creating mechanisms that enable organisations to collaborate under transparent, verifiable and interoperable conditions across federated environments.
This includes capabilities related to trusted identity, policy-based data exchange, compliance transparency, interoperable governance and verifiable participation. While these concepts may sound abstract at first glance, they address very concrete ecosystem challenges already faced by organisations today.
Consider an industrial company participating in a multi-partner AI initiative. Data may originate from multiple suppliers, infrastructure providers and operational environments. Governance requirements may vary depending on geography, sector or contractual obligations. Partners may require assurances regarding how data is accessed, processed or reused by downstream participants. Identity validation, policy enforcement and compliance verification quickly become operational challenges rather than purely technical ones. In such environments, trust cannot rely solely on bilateral agreements or manual governance processes because the operational complexity becomes too high.
The same dynamic is increasingly evident across supply chains, where organisations depend on external infrastructure, software providers and interconnected digital services that operate beyond traditional organisational boundaries. As ecosystems scale, organisations need mechanisms capable of dynamically validating not only systems but also identities, claims, permissions, and governance conditions across distributed environments. This is one of the most important transitions currently happening in digital infrastructure: trust is becoming programmable.
The evolution of cybersecurity already points in this direction. For years, security models focused primarily on protecting organisational perimeters. More recently, approaches such as Zero Trust architectures shifted the focus toward continuously validating identities, policies and interactions rather than assuming implicit trust within internal networks.
But ecosystem environments require extending this logic even further. The challenge is no longer only securing organisations. It is enabling trusted interactions between organisations that remain operationally independent while still participating in shared digital ecosystems. This requires mechanisms capable of validating identities, enforcing usage policies, verifying compliance claims and ensuring interoperability across infrastructures without generating excessive operational friction. Trust, therefore, evolves from being a static assumption into a dynamic operational capability.
The AI Economy will depend on trusted ecosystems
AI dramatically increases both the value of collaboration and the complexity of trust. Modern AI ecosystems depend on access to distributed datasets, external services, federated infrastructures and increasingly autonomous interactions between systems. As organisations accelerate AI adoption, questions around provenance, explainability, governance and accountability become central operational concerns.
Organisations need confidence not only in the AI models themselves, but also in the ecosystems from which data, services and intelligence emerge. Trustworthy AI ultimately depends on trustworthy digital ecosystems.
This is one reason why Europe’s broader conversations around AI, cybersecurity, cloud sovereignty and trusted infrastructures are increasingly converging. The emerging strategic vision around Europe’s AI future is not limited to computational capacity or model development alone. It also concerns Europe’s ability to create trusted environments in which organisations can collaborate, innovate, and deploy AI capabilities with confidence. This may become one of Europe’s most important competitive differentiators.
The next phase of the digital economy may not be defined solely by who owns the largest platforms or the largest infrastructure. It may also be defined by who can create the most trusted ecosystems for collaboration at scale. That is a fundamentally different way of understanding competitiveness. In the ecosystem economy, organisations capable of participating in trusted environments may benefit from faster onboarding, lower governance overhead, improved interoperability and greater willingness among partners to share data and collaborate on innovation initiatives. Trust reduces friction, and reducing friction becomes economically valuable.
From this perspective, cybersecurity also evolves strategically. Its role is no longer limited to defending systems from external threats. Increasingly, cybersecurity becomes part of a broader architecture of confidence that enables organisations to interact safely across distributed ecosystems. In interconnected environments, resilience increasingly depends not only on protecting individual organisations, but also on establishing trusted coordination mechanisms across entire value chains and digital ecosystems.
This distinction matters because the future of digital ecosystems will not depend only on technological performance. It will depend on participation. Ecosystems generate value when organisations are willing to collaborate, exchange data, integrate services and co-create innovation across organisational boundaries. And participation ultimately depends on trust.
Perhaps this is the deeper significance of initiatives such as Gaia-X. They are not simply interoperability initiatives or governance frameworks. They are early attempts to build the trust infrastructure required for the next generation of digital ecosystems. Because ultimately, the ecosystems capable of generating trusted interactions at scale may become the ecosystems that attract innovation, collaboration and long-term economic value. Cybersecurity protects the digital economy from failing, but trust is what enables it to scale.