EOSC-ENTRUST

EOSC-ENTRUST Blueprint

EOSC-ENTRUST is developing a scalable, interoperable framework for secure, federated access to sensitive research data across Europe. The project is aligned with the European Health Data Space (EHDS) and the European Open Science Cloud (EOSC), and it is grounded in real-world implementation needs. The ENTRUST Blueprint defines the minimal requirements for joining a federated TRE ecosystem. It covers: - architecture specifications - legal templates - operating procedures - interface definitions for Authentication, Authorization, and Auditing Infrastructure (AAAI) This guide walks you through these components module by module. A TRE Provider Catalogue complements it by giving researchers a structured overview of available environments and their access and security specifications. Together, these outputs advance cross-border collaboration in sensitive data research. This guide is part of the EOSC-ENTRUST Training Package and helps Trusted Research Environment (TRE) providers build, operate, and maintain secure, compliant, and interoperable environments that are ready to join a federated ecosystem across Europe.

Start with fundamentals View architecture Read federation guide

At a Glance

• 6 core modules
• 9 setup steps
• Architecture, interfaces, legal, and operations guidance

Learning Objectives

• Understand TRE concepts and terminology
• Set up and configure TRE architecture
• Implement interfaces and operational procedures
• Apply legal and compliance requirements
• Integrate with federated TREs

Who is this guide for?

• TRE User: Researchers and analysts working with sensitive data -
  • They should access and use an approved TRE workspace safely and in line with training and accreditation requirements.
  • Start with M1: TRE Fundamentals
• TRE Operator: The team running a TRE day to day -
  • They should onboard users, monitor the environment, respond to incidents, and manage agreements and compliance.
  • Start with M4: Operating Procedures
• TRE builder: The technical team setting up the infrastructure -
  • They should construct infrastructure, deploy core components, install 5S-TES, configure AAAI, implement interfaces, and connect the TRE to the federation.
  • Start with M2: Architecture

Why this matters?

Researchers who want to share sensitive data across borders face several obstacles: - Sensitive research data is siloed across national boundaries, with no common framework for secure cross-border federated access. - GDPR and EHDS impose strict requirements for processing sensitive data, but leave the technical implementation largely undefined. - TRE providers show low federation readiness, with fragmented architectures and inconsistent terminology. - There are no standardised procedures for user registration, data access requests, or cross-border legal harmonisation across TREs.

The Blueprint and this guide address these gaps by giving TRE providers a common, practical path to federation readiness.

Modules

Use the Relevance Matrix to choose a reading path by TRE type and role.

Appendices and Resources

• Reference Architecture
• Resources