Skip to content
Insights
Outsight obtains the ENS Certification

Outsight obtains ENS certification for its Spatial Intelligence Platform

Spanish public operators of airports, rail stations, hospitals and smart cities can now deploy Outsight under the national security framework they must comply with.

Outsight, the pioneer and global leader in Infrastructure-based Physical AI, has obtained certification under the Esquema Nacional de Seguridad (ENS), Spain’s National Security Framework.

The certification covers the SHIFT Spatial Intelligence Platform and its associated cloud and edge services.

What is the Esquema Nacional de Seguridad

The ENS is the security framework that every Spanish public sector entity must apply to protect the information and services it manages electronically.

It is currently regulated by Royal Decree 311/2022, which updated the original 2010 framework to reflect today’s threat landscape, cloud services and the European cybersecurity context. The Centro Criptológico Nacional (CCN) is the authority that develops its guidance and oversees its application.

How the framework works

The ENS sets a structured and auditable approach to security, built on three principles:

  • Five security dimensions: confidentiality, integrity, traceability, authenticity and availability, each assessed for the information and services in scope
  • Three categories: Básica, Media and Alta, chosen according to the potential impact of a security incident on the organisation and the citizens it serves
  • Three groups of measures: an organisational framework (policies, roles and responsibilities), an operational framework (planning, access control, operations, monitoring and continuity) and protection measures applied to facilities, people, equipment, communications, information and services

For systems in the Media and Alta categories, conformity must be confirmed by an independent audit carried out by an accredited certification body, and renewed at regular intervals.

Why ENS matters for Spatial Intelligence

Outsight’s Spatial Intelligence Platform runs inside some of the most sensitive environments of a country: airports, rail stations, hospitals, ports, iconic tourism sites, sport venues and road infrastructure.

Outsight crosses 280 million passengers under real-time measurement, from the busiest US hubs to Singapore Changi

More than 280 million annual passengers now travel under real-time measurement by Outsight’s Spatial Intelligence Platform, from the busiest US hubs to Singapore Changi.

Read article →

Many of these sites in Spain are operated by public entities or by companies working on their behalf.

Outsight, Sice and FGV partner to use 3D Spatial Intelligence for Train Stations in Spain

Ferrocarrils de la Generalitat Valenciana (FGV), has launched a LiDAR-Based pilot project for rail stations in collaboration with Outsight and SICE, a leader in infrastructure management.

Read article →

For them, the security posture of every software provider is a procurement requirement, assessed as early as the tender stage.

The certification also strengthens a principle built into the platform from day one. Outsight’s Physical AI, based on 3D LiDAR and fused with data from any other source including cameras, Wi-Fi, boarding pass information or POS, is Anonymous by Design: it measures the position, movement and interactions of people, vehicles and robots without capturing faces or any biometric identifier.

Anonymous vs. Anonymized: learn the difference

Understanding Anonymity in Sensor Data: discover the inherent privacy characteristics of each type of Sensor data and the potential risks associated with anonymizing sensitive information

Read article →

ENS now adds a certified security framework around how that data is processed, stored, accessed and monitored.

A complete security and compliance portfolio

ENS joins a set of certifications that together cover the main security expectations of Outsight’s customers across regions and industries:

  • ISO 27001, the international standard for information security management
  • SOC 2, covering the controls of service organisations handling customer data
  • TISAX, the information security standard of the automotive industry, required for factory and mobility deployments
  • BASt, which makes Outsight the only company worldwide certified by the German Federal Highway Research Institute for highway truck parking monitoring with native 3D sensors

Each certification answers a different procurement gatekeeper. Together, they allow airport authorities, rail operators, hospitals, city administrations and industrial groups to adopt Spatial Intelligence with a security baseline they already recognise.

A long-term commitment to Spain

Spain is a key market for Outsight, with a team based in Alicante and Spatial Intelligence deployments all across the country.

“Our customers trust us with a live, site-wide view of how their infrastructure is used. That trust has to be earned and verified,” said Raul Bravo, President Founder, Outsight. “ENS certification confirms that our Spatial Intelligence Platform meets the security standard Spain sets for its own public services, and it opens the way for Spanish public operators to make real-time Spatial Intelligence a foundation of how they run their airports, stations, hospitals and cities.”

What this means for operators

Spanish public operators and their contractors can now integrate Outsight’s Spatial Intelligence Platform into ENS-governed systems, with a certified provider and the documentation their own audits require.

To receive Outsight’s ENS certificate and statement of applicability, or to discuss a deployment, contact our team.

Related Articles

SECURITY

Outsight Attains ISO 27001 Certification

We are thrilled to announce the achievement of ISO 27001 Certification, marking a commitment to top-tier information security.
SECURITY

Outsight Secures TISAX Certification

We are thrilled to announce that we have successfully obtained the TISAX Certification, which serves as a testament to our dedication to the highest standards of information security.

Let's connect

Send us a Message

Drop your email and we'll get back to you as soon as possible.

Frequently Asked Questions

  • What is the Esquema Nacional de Seguridad and who does it apply to?

    The Esquema Nacional de Seguridad (ENS) is Spain's national cybersecurity framework, governed by Royal Decree 311/2022 and overseen by the Centro Criptológico Nacional (CCN). It applies not only to Spanish public sector entities but also to private companies supplying software or services to those entities. For a technology vendor, ENS conformity is therefore a procurement prerequisite, not an optional credential: it must be in place before a Spanish public transport, health, or urban infrastructure body can legally contract for the service.

  • What are the three ENS security categories and how are they assigned?

    The ENS classifies systems into three impact-based categories: Básica, Media, and Alta. The category is determined by the potential damage a security incident would cause to the organisation and to the citizens whose data or services are affected. Systems rated Media or Alta require conformity to be verified by an accredited independent audit body, and that conformity must be renewed periodically. The classification is specific to the information and services in scope, so a single vendor may hold certifications across different categories depending on the deployment context.

  • How does ENS certification differ from ISO 27001 for a software vendor selling to public infrastructure operators?

    ISO 27001 is an international standard for information security management systems, recognised globally. ENS is a Spanish national framework with legal force inside Spanish public procurement: contracting authorities are required to verify ENS compliance specifically, and ISO 27001 alone does not satisfy that obligation. The two standards are complementary rather than interchangeable. A vendor that holds ISO 27001, SOC 2, and ENS together addresses international enterprise expectations and Spanish public-sector procurement requirements with a single security portfolio, rather than having to choose between them.

  • What is TISAX certification and why would a spatial intelligence platform need it?

    TISAX (Trusted Information Security Assessment Exchange) is the information security standard of the automotive industry, developed by the VDA (German Association of the Automotive Industry) and operated by ENX Association. Original equipment manufacturers and their Tier 1 and Tier 2 suppliers are typically required to hold it before exchanging sensitive project data. For a spatial intelligence platform deployed inside vehicle production facilities, such as the BMW factory deployments that use infrastructure-based 3D LiDAR from Outsight for worker safety and robot coordination, TISAX certification is the security baseline the customer's procurement team checks before contract award.

  • What does BASt certification cover and why is it relevant to truck parking?

    BASt is the German Federal Highway Research Institute (Bundesanstalt für Straßenwesen). Its certification program for truck-parking monitoring systems validates that a sensor-based solution meets Germany's federal technical and safety requirements for highway rest-area occupancy detection. Outsight is currently the only company worldwide that has obtained BASt certification using native 3D LiDAR sensors for this application, which qualifies the platform for deployment on German federal highway infrastructure without requiring camera-based alternatives that raise data-protection concerns.

  • Can a Spatial Intelligence platform certified under ENS still be anonymous by design?

    Yes, and the two properties address different layers of a security architecture. Anonymous by design refers to the sensor layer: 3D LiDAR measures position, shape, and motion without capturing faces, license plates, or any biometric identifier, so no personal data is ever recorded. ENS certification addresses the processing layer: how the data that is captured, however anonymous, is stored, accessed, transmitted, and monitored. A platform can satisfy both simultaneously, with the LiDAR backbone ensuring no personal data enters the pipeline, and the ENS-certified infrastructure ensuring that the spatial data which does flow through the system is protected to the standard Spain's public sector requires.