Skip to content

AI Agents for enterprises in Barcelona and Spain

On your infrastructure. Under your control.

Airbus Volkswagen Shell Renault Evonik Vattenfall Philips KPMG

Barcelona is Spain’s tech capital - but Spanish AI supervision decides in La Coruna

Anyone building Enterprise AI in Barcelona works inside one of the densest innovation corridors in Southern Europe and at the same time in a market where the regulatory decisions fall 1,100 kilometres further north. The 22@Barcelona district concentrates CaixaBank, Cellnex Telecom, Mango, Desigual, Damm and pharma giant Grifols with its plasma business. In the industrial belt, Seat builds the Cupra range in Martorell, Naturgy runs its port logistics, and Banco Sabadell serves mid-market clients across Catalonia. Pier01 and ESADE Creapolis pull talent into the city - Barcelona is Spain’s innovation laboratory. The regulatory reality, however, is shaped at AESIA headquarters in La Coruna and sharpened in Madrid. That split between where engineering happens and where supervision is defined is the single most important fact for any organisation building auditable AI on the Mediterranean coast.

The three regulatory hurdles for AI in the Catalan market

First, AESIA (Agencia Espanola de Supervision de la Inteligencia Artificial). Spain is the first EU country to stand up a dedicated AI supervisor, with headquarters in La Coruna, and it intends to set the benchmark for national EU AI Act enforcement across the Union. From 2026, AESIA systematically audits high-risk systems and can issue operating bans. Anyone shipping models in Barcelona has to document for an AESIA audit from day one - to the standards set out in the Sandbox programme.

Second, AEPD (Agencia Espanola de Proteccion de Datos) together with the LOPDGDD (Ley Organica 3/2018), Spain’s GDPR transposition law with a stricter overlay. The AEPD is known EU-wide for the toughest reading of Article 22 GDPR - fully automated decisions are effectively only admissible in Spain with a documented human final decision. For any AI system touching personal data this means: the Decision Layer with Human-in-the-Loop is not optional, it is a compliance prerequisite.

Third, the CNMV (Comision Nacional del Mercado de Valores) and Banco de Espana for every financial institution. Since 2024 the CNMV has required a complete Audit Trail for AI-driven investment recommendations and reviews model explainability. Alongside this, the Comite de Empresa enforces consultation rights under Article 64 of the Workers’ Statute whenever AI systems make decisions affecting employees.

Typical deployment scenarios in Barcelona

CaixaBank runs one of the largest branch networks in Spain and needs SME credit assessment models that remain reproducible under AEPD supervision - every rejection must be explainable within 14 days. Grifols documents plasma donation chains across hundreds of US and EU centres, where the FDA requires an unbroken Audit Trail and the EMA mirrors the requirement. AI-supported plausibility checks here are not innovation, they are compliance. Cellnex Telecom operates tens of thousands of telecommunications towers across Europe and uses predictive maintenance to prioritise field interventions - every automated triage decision has to remain defensible towards the tower owners, who are frequently institutional investors. Seat plans the Cupra production runs in Martorell and needs AI for capacity planning across multiple plants - the models must withstand VW group audits.

In each of these cases the Decision Layer sits as a governance layer between model and business process, enforcing Audit Trail, escalation paths and Governance by Design - exactly what AESIA, AEPD and CNMV want to see at the same time. Sector-specific requirements add further pressure: pharmaceutical firms like Grifols operate under EMA supervision and must document AI-assisted quality decisions in a GMP-compliant way. Telecoms operators like Cellnex sit under CNMC oversight and must be able to disclose market-power implications of their algorithms. In the automotive sector, the VW group expects a risk assessment on every AI tool running in Seat plants, to the same standard applied in Wolfsburg or Ingolstadt.

How Gosign serves Catalonia and Spain from Barcelona

Gosign operates its own office in Barcelona (gosign.es) with a Spanish and Catalan team - native speakers, local project management, direct contact with AESIA, AEPD and CNMV. The Barcelona office is the regional hub for the entire Iberian Peninsula: discovery workshops, sprint reviews and steering meetings happen on site at client premises in the 22@ district, at Pier01, or inside the corporate headquarters of CaixaBank, Cellnex, Mango, Damm and Grifols. For Banco Sabadell, Seat in Martorell and Naturgy, workshops in Spanish or Catalan are standard, compliance documentation is delivered bilingually (ES and CA), and the Comite de Empresa sits at the table from the outset. Escalations up to Hamburg only happen for core architectural questions or for connections into German or Swiss parent groups - day-to-day operations, client communication and regulator contact run inside the Barcelona team. The Catalan engineering ecosystem is deep enough to recruit talent directly and anchor it inside the project.

Why Barcelona is a strong starting point for Enterprise AI

Spain is riding a double wave: AESIA supervision and EU AI Act enforcement move into live operation at the same time. An organisation that builds a Cert-Ready by Design pilot in Barcelona has a reference case that will hold up under both AEPD and AESIA standards - and that will then be immediately defensible in Madrid, Bilbao, Valencia and Milan. The 22@Barcelona cluster, Pier01 and the BStartup programme run by Banco Sabadell deliver talent, pilot partners and investor access. The city is close enough to Madrid and Brussels to react quickly to regulatory developments, and far enough away to hold its own technological character. We bring from the German market the experience of building AI systems that remain productive under strict supervisory regimes - with EU AI Act compliance as the baseline and an Audit Trail down to SQL level. Barcelona is the right market in which to scale that discipline across Southern Europe.

Why do most AI projects fail?

Not because of technology – but because of missing governance. Without clear rules defining who makes which decision, every AI agent stays a pilot project.

That is why we build every agent exclusively with a Decision Layer. It breaks down every business process into individual decision steps and defines for each step: human, rule engine, or AI. No agent goes into production without this layer.

Decision Layer in detail →

Three agent types for your department

Document Agents

Understand documents through real language comprehension. Recognition of type, content, and context – not template matching. Every extraction verified through the Decision Layer.

Document Agents in detail

Workflow Agents

Steer business processes across multiple systems and decision points. One agent, complete orchestration. Every step in the audit trail.

HR AI Agents

Knowledge Agents

Answer questions from enterprise knowledge – with source reference, rule version, and validity date. No verified source, no answer.

Knowledge Agents in detail

Governance by Design

Auditable. Compliant. Enterprise-grade.

Human-in-the-Loop architecturally enforced – not optional

Complete audit trail for every agent decision

GDPR compliant by design – all data on your infrastructure

Works council compatible – agreements as constraints in the Decision Layer

EU AI Act compliant by design – transparency, explainability, human oversight

Model-agnostic – no vendor lock-in, you own the source code

From PoC to platform

1

Discover

1 week

Process analysis, understand rule sets, prioritise use cases.

2

Build

3–4 weeks

Productive PoC. One agent, one process, live on your infrastructure.

3

Scale

Continuous

More agents, more processes. Same governance, same auditability.

After 12–18 months, you operate your agents independently. Source code, prompts, and rule sets are yours.

Go deeper

Analysis and insights on enterprise AI, governance, and agent architecture.

Why AI Projects in HR Fail
HR & People Operations

Why AI Projects in HR Fail

Most AI projects fail not because of technology but because nobody defined the rules. Why the operating model matters more than the language model.

“Even as a global market leader, you want to keep moving forward. It is reassuring to have the technological expertise and infrastructure experience of Gosign on our side.”

Arletta Korff

Head of Innovation, Sony Music Entertainment

“Gosign is not just about speed. It's about how much essential work happens in this time.”

Truels Dentler

Head of Customer Service & Technical Support, Libri GmbH

Frequently Asked Questions

Does Gosign have an office in Barcelona?

Yes. Our Barcelona office (gosign.es) provides local project management and client support across Spain.

How is GDPR compliance handled?

GDPR compliant by design. All data remains on your infrastructure. No data transfer to third parties. The EU AI Act is directly applicable in Spain.

What role does AESIA play?

AESIA (Spanish Agency for the Supervision of Artificial Intelligence) oversees EU AI Act compliance in Spain. Our agents meet the transparency, explainability, and human oversight requirements that AESIA enforces.

Are the agents compatible with the Works Committee?

Yes. In Spain, the Works Committee (Comite de Empresa) holds information and consultation rights under Article 64 of the Workers' Statute for the introduction of AI systems. The Decision Layer with Human-in-the-Loop architecturally enforces human review for decisions affecting workers.

Which process should your first agent handle?

Talk to us about a specific use case in your organisation.

Schedule a consultation