AI Agents for enterprises in Barcelona and Spain

Barcelona is Spain’s tech capital - but Spanish AI supervision decides in La Coruna

Anyone building Enterprise AI in Barcelona works inside one of the densest innovation corridors in Southern Europe and at the same time in a market where the regulatory decisions fall 1,100 kilometres further north. The 22@Barcelona district concentrates CaixaBank, Cellnex Telecom, Mango, Desigual, Damm and pharma giant Grifols with its plasma business. In the industrial belt, Seat builds the Cupra range in Martorell, Naturgy runs its port logistics, and Banco Sabadell serves mid-market clients across Catalonia. Pier01 and ESADE Creapolis pull talent into the city - Barcelona is Spain’s innovation laboratory. The regulatory reality, however, is shaped at AESIA headquarters in La Coruna and sharpened in Madrid. That split between where engineering happens and where supervision is defined is the single most important fact for any organisation building auditable AI on the Mediterranean coast.

The three regulatory hurdles for AI in the Catalan market

First, AESIA (Agencia Espanola de Supervision de la Inteligencia Artificial). Spain is the first EU country to stand up a dedicated AI supervisor, with headquarters in La Coruna, and it intends to set the benchmark for national EU AI Act enforcement across the Union. From 2026, AESIA systematically audits high-risk systems and can issue operating bans. Anyone shipping models in Barcelona has to document for an AESIA audit from day one - to the standards set out in the Sandbox programme.

Second, AEPD (Agencia Espanola de Proteccion de Datos) together with the LOPDGDD (Ley Organica 3/2018), Spain’s GDPR transposition law with a stricter overlay. The AEPD is known EU-wide for the toughest reading of Article 22 GDPR - fully automated decisions are effectively only admissible in Spain with a documented human final decision. For any AI system touching personal data this means: the Decision Layer with Human-in-the-Loop is not optional, it is a compliance prerequisite.

Third, the CNMV (Comision Nacional del Mercado de Valores) and Banco de Espana for every financial institution. Since 2024 the CNMV has required a complete Audit Trail for AI-driven investment recommendations and reviews model explainability. Alongside this, the Comite de Empresa enforces consultation rights under Article 64 of the Workers’ Statute whenever AI systems make decisions affecting employees.

Typical deployment scenarios in Barcelona

CaixaBank runs one of the largest branch networks in Spain and needs SME credit assessment models that remain reproducible under AEPD supervision - every rejection must be explainable within 14 days. Grifols documents plasma donation chains across hundreds of US and EU centres, where the FDA requires an unbroken Audit Trail and the EMA mirrors the requirement. AI-supported plausibility checks here are not innovation, they are compliance. Cellnex Telecom operates tens of thousands of telecommunications towers across Europe and uses predictive maintenance to prioritise field interventions - every automated triage decision has to remain defensible towards the tower owners, who are frequently institutional investors. Seat plans the Cupra production runs in Martorell and needs AI for capacity planning across multiple plants - the models must withstand VW group audits.

In each of these cases the Decision Layer sits as a governance layer between model and business process, enforcing Audit Trail, escalation paths and Governance by Design - exactly what AESIA, AEPD and CNMV want to see at the same time. Sector-specific requirements add further pressure: pharmaceutical firms like Grifols operate under EMA supervision and must document AI-assisted quality decisions in a GMP-compliant way. Telecoms operators like Cellnex sit under CNMC oversight and must be able to disclose market-power implications of their algorithms. In the automotive sector, the VW group expects a risk assessment on every AI tool running in Seat plants, to the same standard applied in Wolfsburg or Ingolstadt.

How Gosign serves Catalonia and Spain from Barcelona

Gosign operates its own office in Barcelona (gosign.es) with a Spanish and Catalan team - native speakers, local project management, direct contact with AESIA, AEPD and CNMV. The Barcelona office is the regional hub for the entire Iberian Peninsula: discovery workshops, sprint reviews and steering meetings happen on site at client premises in the 22@ district, at Pier01, or inside the corporate headquarters of CaixaBank, Cellnex, Mango, Damm and Grifols. For Banco Sabadell, Seat in Martorell and Naturgy, workshops in Spanish or Catalan are standard, compliance documentation is delivered bilingually (ES and CA), and the Comite de Empresa sits at the table from the outset. Escalations up to Hamburg only happen for core architectural questions or for connections into German or Swiss parent groups - day-to-day operations, client communication and regulator contact run inside the Barcelona team. The Catalan engineering ecosystem is deep enough to recruit talent directly and anchor it inside the project.

Why Barcelona is a strong starting point for Enterprise AI

Spain is riding a double wave: AESIA supervision and EU AI Act enforcement move into live operation at the same time. An organisation that builds a Cert-Ready by Design pilot in Barcelona has a reference case that will hold up under both AEPD and AESIA standards - and that will then be immediately defensible in Madrid, Bilbao, Valencia and Milan. The 22@Barcelona cluster, Pier01 and the BStartup programme run by Banco Sabadell deliver talent, pilot partners and investor access. The city is close enough to Madrid and Brussels to react quickly to regulatory developments, and far enough away to hold its own technological character. We bring from the German market the experience of building AI systems that remain productive under strict supervisory regimes - with EU AI Act compliance as the baseline and an Audit Trail down to SQL level. Barcelona is the right market in which to scale that discipline across Southern Europe.