Executive summary
From data availability to decision-grade data
“We are moving from data availability to decision-grade data. The next phase of growth will not be defined by higher resolution alone, but by the ability to translate complex, multi-source geospatial inputs into outputs that leaders can trust, defend, and act upon.”
Space reserved for a short foreword from John Renard, Chair, WGIC Data Committee — to follow.
The geospatial sector is moving from measurement-based trust, where we believed maps because we knew how they were made, to model-based trust, where data is inferred, synthesised, and generated at scale by AI systems whose workings are hard to inspect. This shift creates enormous value alongside new, largely invisible risks: silent errors, untraceable lineage, and blurred accountability when decisions go wrong.
This is not a challenge unique to geospatial: every sector deploying AI faces the same questions of provenance and accountability, and these expectations are increasingly written into law, regulation, and contract across industries. But the impact may be more consequential for geospatial data, given decades of established practice that must now be retrofitted. And no technology alone, however well designed, can enforce this: metadata, provenance, and governance require a supporting legal framework of clear rights and obligations, not just better tooling.
- Four foundations of trust — Provenance · Governance · Metadata · Accountability
- Three priority actions — Embed provenance and machine-readable metadata now · Define contractual liability across the data chain · Convene an industry-wide governance umbrella
Measurement-based trust
surveyed · documented · clear responsibility
Model-based trust
inferred · opaque pipelines · blurred accountability
This paper argues that trust must be rebuilt on four foundations (provenance, governance, metadata, and accountability) delivered through emerging standards, federated architectures, and governance-ready Geospatial Foundation Models. Chapter 2 develops these foundations into six linked properties of decision-grade data — source and capture, integrity and authenticity, provenance and lineage, quality and uncertainty, rights and governance, and fitness for decision — using consistent terminology throughout. WGIC, whose members span every stage of the geospatial value chain, is uniquely placed to convene that effort.
This paper is organised around three questions: what has changed, what makes geospatial data decision-grade, and what organisations and WGIC should do next.
- Chapter 1: From Measurement to Models — how trust was built, and what cloud and AI changed.
- Chapter 2: What Makes Data Decision-Grade? — the framework at the centre of this paper.
- Chapter 3: Building Trust into the Data Lifecycle — metadata, lineage, hashing, and human review.
- Chapter 4: Sovereignty, Transparency and Control — jurisdiction, licensing, federation and Article 50.
- Chapter 5: Governance by Design — what changes for GFMs.
- Chapter 6: WGIC Action Agenda — who acts, when, and what WGIC should lead.

Chapter 1
From Measurement to Models
In one sentenceWe trusted maps because we knew how they were made; cloud and AI now generate geospatial data at a scale and speed that make that link harder to see.
How trust was built
For most of the twentieth century, geospatial data was trusted because its origins were understood. National mapping agencies, hydrographic offices, and specialist survey firms operated within well-defined professional and legal frameworks. Data was captured deliberately: surveyors established control points, aircraft flew calibrated missions, and cartographers interpreted imagery by eye. Every step left a trace, and responsibility was clear.
Because capture was costly and labour-intensive, major surveys were conducted periodically rather than continuously. Users worked with authoritative datasets whose age, accuracy and update limitations were generally known. Trust emerged not from novelty or volume, but from repeatability, professional judgment, and institutional memory. The map was a stable artefact, grounded in physical measurement and documented workflows. That trust was relative, not absolute: traditional mapping could still embed outdated information or institutional bias. What distinguished it was that its production process was inspectable. The same quality architecture principles still apply today, now formalised in standards such as ISO/IEC 25024 and ISO 5725 [1][2] alongside ISO 19157-1 [16], even where a document does not name them individually.
What changed: cloud and AI at scale
Cloud computing and AI have lowered the barriers to creating and distributing geospatial data while changing how it is produced. Cloud platforms can process imagery, LiDAR and sensor data at a scale that was previously impractical, and AI now automates feature extraction and change detection at a pace no human team could match. Near-real-time flood extent maps, for example, can be produced during extreme weather using automated classification [3]. Two open building-footprint datasets illustrate the scale involved: Microsoft's Global ML Building Footprints, generated by deep learning from satellite imagery, reports approximately 1.4 billion detected buildings derived from imagery acquired between 2014 and 2024 [4], while Google's Open Buildings dataset reports over 1.8 billion building footprints across a 58-million-square-kilometre area covering Africa, South Asia, Southeast Asia, Latin America and the Caribbean [5]. Cloud-native columnar formats such as Parquet and GeoParquet support efficient large-scale analytics and storage, but do not by themselves provide the dataset-level lineage, version governance and provenance controls required for decision-grade use. Organisations therefore need to implement those controls around the format.
This scale comes at a cost: many datasets are no longer the result of deliberate, expert-led cartography, but of opaque pipelines where algorithms make millions of micro-decisions that are difficult to inspect. Data once never consumed on a map (commercial activity, IoT sensor streams) is now being “mapified” at unprecedented volume, extending the reach and the risk of geospatial products beyond the traditional geospatial community.
The flood-map journey
One recurring example threads through this paper: a flood map, tracked from measurement through to use. Each stage adds capability, and a new way for trust to break.

| Stage | What happens | What can fail | Control required |
|---|---|---|---|
| 1. Measured | Flown and surveyed after the event by a national agency, checked by hand, accuracy class printed in the margin. | Slow to produce; may be out of date by the time it is used. | Declared accuracy and documented survey method. |
| 2. Generated | Classified from satellite imagery by a model within hours, fused with third-party layers in the cloud, continuously overwritten. | Temporary floodwater misclassified as permanent; version silently changes underneath the user. | Explicit uncertainty communication and validation against ground truth. |
| 3. Secured | Hashed at creation, timestamped, carrying machine-readable lineage from sensor to classification. | Tampering or substitution goes undetected without cryptographic proof. | Cryptographic hashing and trusted timestamping (RFC 3161). |
| 4. Governed | Source pixels remain in-country while authorised federated processing supports cross-border analysis; derived outputs and intermediate artefacts remain governed. | Licensing or jurisdictional rules ignored downstream. | Federated architecture and GeoDCAT-AP metadata. |
| 5. Used | Ingested by a GFM; authenticity and sovereignty gates check its lineage, licensing and jurisdiction before it informs a decision. | Provenance lost inside the model; decision-maker cannot trace what informed the output. | Authenticity and sovereignty gates, with an audit trail into the decision. |
The hierarchy of trust
What is needed is a transition model in which AI-derived outputs are continuously validated against physical evidence, trusted reference data and documented provenance. This provenance-linked reliability creates a hierarchy of trust in modern mapping:
| Level | Domain | What it governs |
|---|---|---|
| 1 | Hardware | Physics and calibration: sensor state at the moment of capture. |
| 2 | Geometry | Spatial integrity: coordinate reference systems and positional accuracy. |
| 3 | Semantics | Context and material: what the data is classified or labelled as. |
| 4 | Decisions | Logic and provenance: how the output was used to inform an action. |
“If I can't explain how AI was used at each step of a process to get a certain output, then I can't use it.”
The traditional signals of trust (named surveyors, declared accuracy, documented workflows) are increasingly absent or hard to observe. And geospatial data is no longer a niche market: through open standards such as the OGC APIs, it is woven into mainstream, non-geospatial products, so the consequences of unclear provenance now reach far beyond the traditional geospatial community.
Recommendations
- 1
Producers and platforms
Document where and how AI enters every step of a data production workflow: if it cannot be explained, it cannot be trusted.
Outcome: Restores an inspectable production process for AI-derived data.
- 2
All members
Adopt the four-level hierarchy of trust (hardware, geometry, semantics, decisions) as an audit framework for modern pipelines.
Outcome: Gives every pipeline a common language for where trust can break.
- 3
Platforms
Communicate dataset versions and update cycles explicitly, so users know which data informed which decision.
Outcome: Prevents decisions being made on silently superseded data.
Chapter 2
What Makes Data Decision-Grade?
In one sentenceDecision-grade data rests on six linked properties, none of them sufficient alone.
This chapter sets out the framework that runs through the rest of this paper. It expands the four foundations introduced in the Executive Summary — provenance, governance, metadata, and accountability — into six linked, operational properties. Each property below is necessary; none is sufficient alone: a dataset can be authentic and untampered while still being the wrong vintage, the wrong resolution, or unlicensed for the use in question.
- 1. Source and capture — Accuracy, calibration and currency of the original measurement or acquisition.
- 2. Integrity and authenticity — The data is what it claims to be and has not been tampered with since capture.
- 3. Provenance and lineage — Transformations, versions, and model use are traceable end to end.
- 4. Quality and uncertainty — Completeness, bias, confidence and known limitations are documented.
- 5. Rights and governance — Licensing, sovereignty, access and lawful use are established.
- 6. Fitness for decision — Use case, timeframe, consequence level and accountable owner are matched to the data.
Figure 3. The decision-grade data framework: decision-grade data = fit, traceable, lawful and defensible for a specified decision.
What each control proves, and does not prove
These properties must not be mistaken for one another, or for proof of truth. They form a sequence: authenticity establishes that data is what it claims to be; integrity, that it has not been altered; provenance, where it came from and how it was transformed. None of them guarantees that the original measurement was accurate, or that the data suits the decision at hand.
| Control | Proves | Does not prove |
|---|---|---|
| Authenticity | The data is what it claims to be. | That it is accurate. |
| Integrity | It has not been altered. | That the source was correct. |
| Provenance | Where it came from and how it changed. | That it fits the decision. |
| Quality | Accuracy, completeness and consistency. | That use is lawful. |
| Uncertainty | The limits and confidence of the output. | Who bears responsibility. |
| Fitness for purpose | Suitability for a specified use. | Suitability for every use. |
Where this breaks in practice
These issues become acute when poor geospatial data contributes to catastrophic failure, raising hard questions about liability. If an autonomous system crashes because it relied on flawed cloud-processed maps, who is responsible: the data provider, the model developer, the platform operator, or the end user who trusted the output? Traditional regimes assumed clearer lines of authorship, supported by accuracy statements and professional standards; in an AI-driven ecosystem those lines are blurred. Contracts and licensing terms may allocate or limit liability across the value chain, including by transferring some risks downstream.
| Actor | Control they hold | Risk if the control fails |
|---|---|---|
| Data provider | Source accuracy, calibration, declared limitations. | Undetected error propagates into every downstream product. |
| AI model developer | Training data selection, model validation, output uncertainty. | Silent or systemic bias propagating across downstream outputs. |
| Cloud platform operator | Version control, update cycles, access logging. | Users cannot trace which version of the data informed a decision. |
| End user / deployer | Fitness-for-purpose assessment before acting on the output. | Output used outside its valid context or consequence level. |
Illustrative scenario: the phantom road
A logistics operator relying on automatically updated navigation data routes vehicles onto roads that no longer exist. What failed: no visibility of which dataset version informed the decision. What would have prevented it: version lineage and provenance tracking.
Illustrative scenario: the trap road
Not every failure is accidental: some maps deliberately include fictitious features (trap streets or trap roads) inserted to detect unauthorised copying. Ingested by an AI pipeline without that context, a deliberate fabrication can be mistaken for real infrastructure. What failed: no mechanism to flag known deliberate anomalies before ingestion. What would have prevented it: provenance metadata that records known trap features alongside genuine ones.
Illustrative scenario: the flood that never receded
An AI classifier labels temporary floodwater as permanent water bodies, and downstream plans treat it as ground truth. What failed: a visually convincing output masked uncertainty. What would have prevented it: explicit uncertainty communication and validation against ground truth.
Data ageing, coverage and human competence
Data quality is time dependent. A dataset that was decision-grade when captured may become progressively less reliable as terrain, infrastructure or population patterns change; metadata should record not only capture date and update cycle, but the conditions under which the data should be reassessed. Geographic coverage must also be evaluated for bias: densely populated, commercially important areas tend to have richer, more frequently updated data than rural or underserved regions, which can distort AI-derived outputs. As geospatial capabilities become embedded in mainstream analytics, users without specialist training may produce or interpret output without understanding coordinate systems, scale, resolution, or fitness for purpose; governance must address competence and review, not only model performance.
Recommendations
- 1
Data producers
Pair every AI-derived product with explicit uncertainty information and rigorous validation for safety-critical uses.
Outcome: Reduces the risk that visually convincing outputs mask underlying error.
- 2
Legal and procurement
Define responsibility contractually across the chain: provider, model developer, platform, and end user.
Outcome: Clarifies contractual responsibility when derived data contributes to harm.
- 3
All members
Record data age, update cycle, and reassessment triggers in metadata, and flag known coverage bias by geography.
Outcome: Lets users judge whether ageing or uneven-coverage data still fits their decision.
The next three chapters trace trust through three layers of the geospatial data lifecycle: trust in the data itself (Chapter 3), trust in who controls and governs it (Chapter 4), and trust in the models trained on it (Chapter 5).
Chapter 3
Building Trust into the Data Lifecycle
In one sentenceAuthenticity becomes infrastructure through machine-readable metadata, verifiable lineage, and cryptographic integrity, validated by people who understand the data.
For users across logistics, real estate, insurance, autonomous systems, and location intelligence, the integrity of geospatial data is directly tied to liability exposure, SLA compliance, and competitive differentiation. A robust authenticity framework must go beyond compliance on paper and address the full data supply chain from acquisition to consumption.
Metadata standards
Metadata standards should be evaluated through the lens of machine-readability and pipeline integration. DCAT and GeoDCAT-AP [6][7] enable automated cataloguing and federated discovery across commercial marketplaces, reducing onboarding friction when sourcing third-party datasets. Schema.org markup [8] can improve the discoverability of geospatial assets within broader enterprise data ecosystems, including cloud-native platforms, though it does not by itself certify quality or licensing. ISO 19115-1 [9] retains value for regulated procurement, but commercial products increasingly favour standards that integrate natively with REST APIs and modern data-mesh architectures. ISO/IEC 22989 [10] gives the industry a shared vocabulary for AI systems and data, though it does not itself prescribe a geospatial metadata-readiness framework. National implementations and profiles also matter. In the United States, the FGDC endorses ISO 19115-1 and related ISO geospatial metadata standards while continuing to support its earlier CSDGM legacy standard [11]. Separately, Australia and New Zealand's ANZLIC metadata profile provides a broadly comparable framework outside the EU [32].
Lineage, hashing and versioning
Lineage tracking via W3C PROV [12] is foundational for any organisation managing provenance at scale, particularly where datasets underpin automated decision-making or model training. Cryptographic hashing and RFC 3161 trusted timestamping [13] can support governance and due diligence by producing auditable, tamper-evident records, though they attest to data integrity from the point of hashing, not to the accuracy of the underlying measurement. For B2B licensing and resale, decentralized identifiers (DIDs) and verifiable credentials [14] can support verifiable identity, claims and chain-of-custody evidence, but do not by themselves prove legal ownership or a complete chain of custody. These controls map onto the hierarchy of trust from Chapter 1: calibration metadata secures Level 1, coordinate standards Level 2, classification metadata Level 3, and lineage and audit frameworks Level 4.
| Standard | What it does | Maturity |
|---|---|---|
| ISO 19115-1 | Geographic metadata for regulated procurement contexts | Established |
| ISO 19157-1 | Principles for describing, evaluating and reporting geographic data quality | Established (ISO/TC 211) |
| DCAT / GeoDCAT-AP | Dataset cataloguing and federated discovery across marketplaces | Established (W3C / EU) |
| W3C PROV | Lineage and provenance tracking at scale | Established |
| STAC | Structures and enables discovery of spatiotemporal assets and metadata | OGC Community Standard |
| OGC API: Records | API-based publication and querying of metadata records | OGC Standard |
Contracts and human review
Standards close the technical gap; contracts and review close the accountability gap. As AI capabilities advance, organisations must improve their governance, validation and accountability practices at a comparable pace. Liability should be defined contractually across the chain (provider, model developer, platform, and end user) rather than left to be disclaimed downstream. And because non-specialist users increasingly consume geospatial outputs without training in coordinate systems, scale or uncertainty, review processes need a named, competent reviewer before AI-derived data reaches a safety-critical or high-consequence decision.
These expectations are increasingly appearing in procurement, contracts and risk-management practice rather than remaining the best voluntary practice. In the United States, current GSA guidance for AI acquisition calls for contracts to address issues such as data ownership and intellectual-property rights, access to necessary system components, and vendor handling of government data [15]. Insurance markets are also beginning to examine AI-specific governance and controls in underwriting and coverage design. Liability for AI-generated outputs remains highly context-specific and continues to develop, making contractual clarity an important complement to technical controls.
Recommendations
- 1
Data producers
Select metadata standards by function: ISO 19115-1 and ISO 19157-1 [16] for metadata and quality; DCAT/GeoDCAT-AP for catalogue interoperability; STAC [17] and OGC API: Records [18] for discovery and access; W3C PROV for lineage.
Outcome: Matches the standard to the job instead of adopting one standard for everything.
- 2
Platforms
Make W3C PROV lineage, cryptographic hashing, and RFC 3161 timestamping standard practice for data feeding automated decisions.
Outcome: Produces tamper-evident, auditable records by default.
- 3
Data licensors
Use DIDs and verifiable credentials for B2B licensing where provable chain of custody is a differentiator.
Outcome: Enables verification without a centralized registry or intermediary.
- 4
Legal and procurement
Require a named, competent human reviewer before AI-derived geospatial data reaches a safety-critical decision.
Outcome: Closes the gap that pure technical standards cannot: judgment and accountability.
Chapter 4
Sovereignty, Transparency and Control
In one sentenceSovereignty, licensing and user-facing transparency are not obstacles to trust; handled well, they are how trust crosses borders.
What sovereignty means in practice
Data sovereignty sits at the crossroads of national regulation, organisational responsibility, and the practical realities of modern data ecosystems. It concerns the legal and practical authority governing data, which may depend on far more than where data is collected or stored, a reality that grows more complex as organisations adopt cloud services and operate across borders. Precision matters: data sovereignty (whose law governs), data residency (where data is physically stored), data localisation (requirements to keep it in-country), jurisdiction (which authorities can compel access), and organisational control (who administers it) are distinct concepts. Indigenous and community data sovereignty adds a further dimension increasingly recognised in global geospatial practice.
Satellite imagery adds a distinct sovereignty dimension of its own: collection may occur over one jurisdiction, processing and hosting in another, and distribution or use in several others. Applicable controls may include remote-sensing licences, restrictions on commercial distribution of high-resolution imagery, sensitive-site or resolution controls, national-security rules, and contractual limits on downstream distribution.
Federation as the enabling architecture
Overly strict localisation rules can fragment data ecosystems: if every country stores and describes its datasets differently, cross-border environmental monitoring becomes impossible. Standards like DCAT-AP and GeoDCAT-AP exist precisely to let datasets remain sovereign while staying discoverable and usable across jurisdictions. Federated data infrastructures take this further: data stays within its jurisdiction, but authorised users can run queries or models across distributed datasets, an approach already used in health research where patient data cannot leave national boundaries. Federation is an enabling architecture, not a complete legal solution: queries, embeddings, model parameters and derived outputs may themselves reveal or transfer restricted information and require the same governance attention as the underlying data.
Jurisdiction A
national data store
Jurisdiction B
national data store
UN-GGIM's Integrated Geospatial Information Framework (IGIF) [19] offers a complementary, non-technical model for the same problem: nations retain authority over how their geospatial data is collected, processed and governed, while structured interoperability (common fundamental data themes, shared metadata standards, and the Global Statistical Geospatial Framework [35]) acts as a translation layer, so that nationally sovereign data can still be aligned and compared without forcing every country onto identical systems.
Sovereignty governs who may control, process and use geospatial data; transparency governs what people must be told when AI transforms, generates or presents it. Together, they address different dimensions of trust in cross-border, AI-enabled geospatial systems.
Transparency of AI-generated geospatial outputs
Since 2 August 2026, Article 50 of the EU AI Act [31] has imposed transparency obligations on certain interactive and generative AI systems, relevant beyond systems classified as high-risk. Providers of AI systems that interact directly with natural persons may need to ensure users are informed of the AI interaction, while providers of systems generating or manipulating synthetic image, audio, video or text content may need to embed effective, machine-readable markings. Deployers may separately be required to disclose deepfake content or label certain AI-generated text published on matters of public interest. Whether an obligation applies depends on the system, output, intended audience, provider or deployer role, and any applicable exception. The European Commission's Guidelines and FAQ on Article 50 [20][21] are non-binding and provide practical guidance on the Commission's interpretation; authoritative interpretation of the AI Act ultimately rests with the Court of Justice of the European Union. Article 50 applies from 2 August 2026. A limited grace period applies to AI systems placed on the market before that date, and only in respect of the Article 50(2) marking and detection obligations for AI-generated or manipulated content; providers of those systems must comply with those obligations from 2 December 2026 [21][31], which is directly relevant to GeoAI providers assessing their compliance timeline.
Two examples illustrate how these obligations may apply in practice, though coverage always depends on the specific system, output, and role (provider or deployer) involved, and on any applicable exception; it should not be assumed to apply, or assumed not to apply, without that assessment. Digital twins illustrate why provenance and user-facing transparency must operate together. The European Commission's Article 50 Guidelines expressly recognise that AI-generated or manipulated digital twins may fall within the machine-readable marking obligations where their outputs take image, video, audio or text form, subject to applicable industrial, B2B and real-time-content exceptions. SAR-derived synthetic imagery may raise the same transparency questions as other AI-generated geospatial imagery where the resulting output falls within Article 50's scope. The fact that the source data is SAR does not itself trigger the obligation; what matters is how AI has generated or manipulated the output, how that output is presented or used, and whether the relevant provider or deployer conditions and exceptions apply. Governance-ready systems in both cases should retain source and model lineage internally while enabling appropriate marking or disclosure of synthetic outputs presented to natural persons.
In the United States, AI governance remains distributed across voluntary federal risk-management guidance, agency and sector-specific requirements, procurement controls, and state-level privacy or automated-decision rules. The NIST AI Risk Management Framework [22] is a voluntary cross-sector framework and is currently undergoing revision. For geospatial organisations, applicable provenance and documentation requirements may therefore depend on the use case, customer, sector, contract and jurisdiction, rather than a single horizontal AI statute.
Recommendations
- 1
Platforms and governments
Adopt federated data infrastructures, so data remains in-jurisdiction while authorised queries cross borders.
Outcome: Preserves sovereignty without fragmenting cross-border insight.
- 2
Data producers
Describe datasets with GeoDCAT-AP so they stay sovereign yet discoverable and usable across jurisdictions.
Outcome: Reduces fragmentation caused by inconsistent national description.
- 3
Policy makers
Back sovereignty with transparent access rules and auditable data-sharing agreements, not blanket localisation.
Outcome: Keeps data ecosystems usable across borders and sectors.
- 4
Providers, deployers and platforms
Assess GeoAI products against the distinct Article 50 obligations for interactive systems, synthetic-content marking, deepfake disclosure and public-interest text; preserve machine-readable markings through the distribution chain.
Outcome: Supports clear, timely disclosure at the first interaction or exposure.
Chapter 5
Governance by Design
In one sentenceGeospatial Foundation Models (GFMs) must ingest, enforce and audit trust: governance built into the architecture, not layered on top.
On 23 July 1972, NASA launched the Earth Resources Technology Satellite, ERTS-1, later renamed Landsat 1. The Landsat programme subsequently became a partnership between NASA and the US Geological Survey, and its global impact expanded dramatically after the USGS adopted a free-and-open-data policy in 2008 [23][24]. For decades satellites were largely a government domain; the rise of the commercial satellite industry accelerated the transformation Landsat started. The value is quantifiable: USGS economic studies estimated the annual benefit of Landsat imagery at USD 2.19 billion in 2011 and USD 3.45 billion in 2017 [25], rising to USD 25.6 billion in 2023 [26]. This matters for what follows: the same governance discipline that made archives like Landsat trustworthy and valuable now needs to extend to the models trained on them — otherwise the trust built at the data layer doesn't carry through to the model layer.
Long-running, consistently observed and increasingly open Earth-observation archives such as Landsat are also part of what makes today's GFMs possible. Instead of learning from isolated images, GFMs can be pretrained across large temporal and geographic archives; Prithvi, for example, is pretrained on NASA's Harmonized Landsat and Sentinel-2 dataset. In this sense, GFMs are not a break from the Earth-observation data infrastructure built over the previous five decades, but a new way of extracting and compressing knowledge from it.
GFMs are where the shift from measurement-based to model-based trust, described throughout this paper, becomes concrete. Earlier chapters addressed provenance, standards, and governance for individual datasets; a GFM compresses many such datasets into a single trained model whose internal representations and transformations are not directly inspectable in the same way as the source datasets from which it was trained. The trust questions raised so far in this paper, about origin, integrity, uncertainty, and accountability, do not disappear at this stage. They become harder to observe, and harder to correct after the fact. Understanding what GFMs do, and what governing them requires, is therefore central to this paper's argument: provenance and metadata discipline earlier in the pipeline will not be sufficient if the model layer itself cannot be governed.
GFMs ingest satellite and aerial imagery, LiDAR, SAR, DEMs, vectors, textual metadata, and mobility data. This heterogeneity makes governance harder and more essential: labels are sparse, ground truth is limited, and much of the training is unsupervised at global scale. Several GFMs illustrate the range of approaches: SkySense combines multi-modal, multi-resolution and multi-temporal inputs and reports state-of-the-art results across Earth-observation benchmarks [27]; Prithvi, developed by NASA and IBM, is pretrained on NASA's Harmonized Landsat and Sentinel-2 data and released as an open model [28]; and the Clay Foundation Model is an independently governed open-source GFM trained across multiple public satellite and aerial sources [29]. Strong benchmark performance is evidence of technical capability, not by itself proof of suitability for regulatory or decision-grade deployment. If such models mature as expected, they may become the default substrate for geo-analytics and automated geo-reasoning; governance must be designed in from the outset.
What to ask before trusting a GFM
GFM developers should document how their training data was selected, curated and transformed. Such documentation is a starting point for establishing trust, not a substitute for it. Before relying on a GFM output, users should be able to answer three questions:
- What data was the model trained on, and how was that data manipulated?
- What temporal period is represented in the training data, and where is the model being asked to interpolate or extrapolate beyond it?
- How does the model evaluate against my specific benchmarks, not just published leaderboards?
It is worth being explicit about what a GFM does to geospatial data: it compresses spatial context into a far more succinct representation. That representation is model-dependent rather than neutral: it reflects choices about training data, preprocessing, model architecture, objectives and evaluation. Reliance on the resulting representation does not by itself transfer or eliminate responsibility for decisions built on top of it.
A governance-ready GFM architecture
Metadata is not merely stored: it is queried by GFMs, validated by governance engines, and audited by regulators. The architecture below organizes this into three layers, with a single audit capability spanning all of them rather than appearing only at the end of the pipeline.

| Layer | Contains | Function |
|---|---|---|
| Data layer | Imagery, LiDAR, SAR, DEMs, vectors, text and mobility data. | The heterogeneous inputs a GFM ingests. |
| Governance layer | Metadata fabric, provenance graph, authenticity gate (rejects tampered or unverifiable data, flags synthetic content), sovereignty gate (jurisdiction, licensing, cross-border rules). | Enforces rules on data before it reaches the model. |
| Model and decision layer | Model registry, training and inference, output marking, decision-grade output. | Produces auditable, traceable outputs. |
| Audit layer (spans all three) | End-to-end inspection of provenance from data through model to decision. | Lets regulators and internal governance inspect the whole pipeline, not just its output. |
Recommendations
- 1
GFM developers
Treat metadata as something GFMs query, validate, and audit, not something merely stored: sensor physics, acquisition context, transformation lineage, and model-specific metadata.
Outcome: Makes metadata an active part of the model, not passive documentation.
- 2
GFM developers
Support GFMs with stochastic and Bayesian methods for uncertainty awareness and robustness to sparse, noisy, or missing data.
Outcome: Gives models a principled way to express what they do not know.
- 3
Legal and policy
Apply existing geospatial law early to GFM development and deployment, including remote-sensing regulation, geodata licensing, location privacy, national mapping restrictions and responsibility for spatially consequential outputs.
Outcome: Avoids treating GFM governance as legally novel where established geospatial rules already apply.
Chapter 6
WGIC Action Agenda
In one sentenceTrust will be rebuilt through provenance, governance, and accountability at industry scale, and no single stakeholder can do it alone.
This paper's core message is that the geospatial sector is moving from measurement-based trust to model-based trust, and that trust has to be rebuilt on the four foundations set out in the Executive Summary: provenance, governance, metadata, and accountability. Chapters 1–5 set out why, and what that looks like in the data lifecycle, sovereignty, and GFM architecture. This chapter turns that into an agenda: who acts, in what order, and what WGIC should lead.
A three-horizon roadmap
| Horizon | Action | Who acts |
|---|---|---|
| Now | Embed provenance tracking and explicit uncertainty in data products. | Data producers and platforms |
| Now | Adopt machine-readable metadata standards (GeoDCAT-AP, W3C PROV). | Data producers |
| Now | Assess GeoAI products against Article 50 provider and deployer obligations; implement required interaction notices, output markings and disclosures. | Providers, deployers, platforms and legal teams |
| 1–2 years | Cryptographic hashing and trusted timestamping of datasets. | Platforms |
| 1–2 years | Contractual frameworks that define liability when data fails. | Industry and legal teams |
| 2–3 years | Federated architectures that respect sovereignty while enabling sharing. | Governments and platforms |
| 2–3 years | Basic authenticity and sovereignty gates begin now; mature integration into GFM pipelines continues over this horizon. | GFM developers |
| 2–3 years | A single governance umbrella: metadata fabric, provenance graph, policy engine, model registry, audit layer. | Industry-wide; WGIC convening |
The single governance umbrella referenced above is not a new idea introduced here: it is the governance layer from Chapter 5's GFM architecture, applied at industry scale: a shared metadata fabric, a provenance graph, a policy engine, a model registry, and an audit layer that lets regulators inspect provenance end to end. It supports transparency and enforceable standards while reducing duplication and inconsistent preprocessing, and improving the detection, traceability and management of erroneous or hallucinated outputs. None of this removes the complexity of fast-changing legislation, or the legal risk attached to specific use cases.
The business case
Provenance and governance should not be read only as compliance costs. In the GeoAI era they are strategic enablers of trust, adoption and value creation: organisations that can demonstrate a dataset's origin, integrity and lineage can differentiate themselves commercially, may be better positioned for partnerships and procurement processes that require verifiable provenance, and can strengthen customer confidence.
There is an obvious objection: provenance infrastructure costs money and adds friction, while buyers do not always pay an identifiable premium for verified data. The business case will vary by sector and consequence level. Organisations should weigh implementation cost against regulatory exposure, contractual liability, rework, reputational harm, and the cost of decisions that cannot later be reconstructed or defended. Building provenance controls during system design is generally more efficient than retrofitting them after a failure or dispute.
Maturity checklist
Where does your organisation stand?
- 1Can you trace any dataset you rely on back to its original sensor and calibration state?
- 2Do you know which version of a dataset informed a given decision?
- 3Is your metadata machine-readable and standards-compliant (GeoDCAT-AP, W3C PROV)?
- 4Could you prove chain of custody for your licensed data, cryptographically?
- 5Do your AI-derived products carry explicit uncertainty information?
- 6Do your contracts define who is liable when derived data is wrong?
Mostly “no”? Chapter 3 is your starting point.
The path forward demands industry-wide coordination. No single stakeholder can ensure trust alone. WGIC, positioned across every stage of the global geospatial data value chain, can lead the development of best practices, convene expertise, and champion shared standards. Trust in geospatial data can be rebuilt, not by returning to past methods, but by focusing on well-defined use cases underpinned by modern systems that deliver transparency, accountability, and interpretability at scale.
Concretely, this depends on three distinct but complementary roles. Industry, organised through bodies like WGIC, must build transparent, auditable pipelines and treat provenance and metadata as core infrastructure, not an afterthought. Governments must set the governance frameworks, standards, and liability rules that give model-based outputs legal and institutional weight, especially where decisions affect public safety or policy. And academia must provide the independent scrutiny, methodological rigour, and training that validate AI-driven methods and prepare the next generation of practitioners. Trust in geospatial data is rebuilt through this three-way collaboration (industry building it, government regulating it, academia validating it) not by any one actor alone.
It is worth restating plainly: none of the standards, gates, or architectures in this paper create trust by themselves. They create the conditions under which people (reviewers, data producers, decision-makers) can extend trust responsibly. Trust is ultimately a human judgment, informed by evidence; it is not a property that machines or standards possess on their own.
Fewer, stronger controls, applied consistently, will rebuild trust faster than any single technology.
Now
provenance · metadata · Article 50
1–2 yrs
hashing · contracts
2–3 yrs
federation · GFM gates · governance umbrella
Appendix
Supporting Implementation Standards
These standards support the core set in Table 1 and are referenced in Chapter 3 but are moved here to keep the main chapter focused.
| Standard | What it does | Maturity |
|---|---|---|
| Schema.org | Can improve the discoverability of geospatial assets within broader data ecosystems; does not itself certify quality or licensing. | Established |
| ISO/IEC 22989 | Establishes common concepts and terminology for AI; provides a shared vocabulary rather than a geospatial metadata-readiness framework. | Published |
| RFC 3161 | Trusted timestamping; produces tamper-evident records from the point of hashing. | Established |
| DIDs + verifiable credentials | Can support verifiable identity, claims, and chain-of-custody evidence; do not by themselves prove legal ownership. | Established W3C standards; geospatial adoption developing |
| ISO 19119 | Geographic information services: describes how geospatial services (not just data) are catalogued and discovered. | Established (ISO/TC 211) |
| ISO 19110 | Methodology for feature cataloguing: defines feature types, attributes and relationships within a dataset. | Established (ISO/TC 211) |
| ISO/IEC 25024 | Data quality measurement: defines measures for evaluating data quality characteristics. | Established (ISO/IEC JTC 1) |
| ISO 5725 | Accuracy (trueness and precision) of measurement methods and results. | Established (ISO) |
| FGDC metadata standards | US federal profile; FGDC endorses ISO 19115-1 and related ISO standards while continuing to support the legacy CSDGM standard. | Established (US FGDC) |
Feature- and service-level cataloguing (ISO 19119, ISO 19110) [33][34] matters more, not less, in an AI-driven pipeline: AI systems need this metadata to assess fitness for use, but populating it well increasingly requires AI assistance itself, since the pool of specialist subject-matter experts available to do it manually is shrinking relative to the volume of data being produced.
References
References
- [1]ISO/IEC 25024:2015, Systems and software engineering, SQuaRE: measurement of data quality. https://www.iso.org/standard/35749.html
- [2]ISO 5725-1:2023, Accuracy (trueness and precision) of measurement methods and results, part 1: general principles and definitions. https://www.iso.org/standard/69418.html
- [3]Copernicus Emergency Management Service. Global Flood Monitoring (GFM), technical information. European Commission. https://global-flood.emergency.copernicus.eu/technical-information/glofas-gfm/
- [4]Microsoft. Global ML Building Footprints (living repository; accessed August 2026). https://github.com/microsoft/GlobalMLBuildingFootprints
- [5]Sirko, W. et al. (2021). Continental-scale building detection from high-resolution satellite imagery. Google Research Open Buildings. https://sites.research.google/gr/open-buildings/
- [6]W3C. DCAT 3: Data Catalog Vocabulary. https://www.w3.org/TR/vocab-dcat-3/
- [7]European Commission, SEMIC. GeoDCAT-AP 3.1.0. https://semiceu.github.io/GeoDCAT-AP/releases/3.1.0/
- [8]Schema.org. Official documentation. https://schema.org/
- [9]ISO 19115-1:2014, Geographic information, metadata, part 1: fundamentals. ISO/TC 211. https://www.iso.org/standard/53798.html
- [10]ISO/IEC 22989:2022, Artificial intelligence: concepts and terminology. https://www.iso.org/standard/74296.html
- [11]Federal Geographic Data Committee. FGDC-STD-001-1998, Content Standard for Digital Geospatial Metadata (CSDGM); FGDC news on ISO metadata standards endorsement. https://www.fgdc.gov/standards/news/fgdc-iso-metadata-standards
- [12]W3C. PROV-O: The PROV Ontology. https://www.w3.org/TR/prov-o/
- [13]IETF RFC 3161, Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP). https://datatracker.ietf.org/doc/html/rfc3161
- [14]W3C (2022). Decentralized Identifiers (DIDs) v1.0; W3C (2025). Verifiable Credentials Data Model 2.0. https://www.w3.org/TR/did-1.0/
- [15]U.S. General Services Administration (2026). CIO 2185.1C, Accelerating Responsible Use of Artificial Intelligence at GSA. https://www.gsa.gov/directives-library/accelerating-responsible-use-of-artificial-intelligence-at-gsa
- [16]ISO 19157-1:2023, Geographic information, data quality, part 1: general requirements. https://www.iso.org/standard/78900.html
- [17]OGC. SpatioTemporal Asset Catalog (STAC) 1.1, OGC Community Standard 25-004. https://docs.ogc.org/cs/25-004/25-004.html
- [18]OGC. OGC API - Records - Part 1: Core, OGC Standard 20-004r1. https://docs.ogc.org/is/20-004r1/20-004r1.html
- [19]UN-GGIM. United Nations Integrated Geospatial Information Framework (UN-IGIF). https://ggim.un.org/UN-IGIF/overview/
- [20]European Commission (2026). Guidelines on transparency obligations under Article 50 of Regulation (EU) 2024/1689, C(2026) 5054 final, 20 July 2026. https://digital-strategy.ec.europa.eu/en/policies/guidelines-transparency-ai-generated-content
- [21]European Commission. FAQ: Transparency obligations under Article 50 of the AI Act. https://digital-strategy.ec.europa.eu/en/faqs/transparency-obligations-under-article-50-ai-act
- [22]NIST (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0). NIST AI 100-1. https://www.nist.gov/itl/ai-risk-management-framework
- [23]NASA Science. Landsat 1 mission history. https://science.nasa.gov/mission/landsat-1/
- [24]U.S. Geological Survey (2018). Free, Open Landsat Data Unleashed the Power of Remote Sensing a Decade Ago. https://www.usgs.gov/news/free-open-landsat-data-unleashed-power-remote-sensing-a-decade-ago
- [25]Straub, C.L., Koontz, S.R., and Loomis, J.B. (2019). Economic valuation of Landsat imagery. USGS Open-File Report 2019-1112. https://doi.org/10.3133/ofr20191112
- [26]U.S. Geological Survey (2024). Economic Valuation of Landsat and Landsat Next 2023. https://www.usgs.gov/media/files/economic-valuation-landsat-and-landsat-next-2023
- [27]Guo, X. et al. (2024). SkySense: A multi-modal remote sensing foundation model towards universal interpretation for Earth observation imagery. CVPR 2024. https://openaccess.thecvf.com/content/CVPR2024/html/Guo_SkySense_A_Multi-Modal_Remote_Sensing_Foundation_Model_Towards_Universal_Interpretation_CVPR_2024_paper.html
- [28]NASA IMPACT and IBM Research (2023). HLS Geospatial Foundation Model (Prithvi). https://www.earthdata.nasa.gov/news/nasa-ibm-openly-release-geospatial-ai-foundation-model-nasa-earth-observation-data
- [29]Clay Foundation (2024). Clay Foundation Model: an open-source AI model for Earth, v1.5. https://github.com/Clay-foundation/model
- [30]Shumailov, I. et al. (2024). AI models collapse when trained on recursively generated data. Nature, 631(8022), 755-759. https://www.nature.com/articles/s41586-024-07566-y
- [31]Regulation (EU) 2024/1689 (Artificial Intelligence Act), consolidated text incorporating the Digital Omnibus transitional amendments. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
- [32]ANZLIC — the Spatial Information Council. AS/NZS ISO 19115.1:2015 Metadata. https://www.anzlic.gov.au/resources/asnzs-iso-1911512015-metadata
- [33]ISO 19119:2016, Geographic information — Services. ISO/TC 211. https://www.iso.org/standard/59221.html
- [34]ISO 19110:2016, Geographic information — Methodology for feature cataloguing. ISO/TC 211. https://www.iso.org/standard/57303.html
- [35]UN-GGIM. The Global Statistical Geospatial Framework (GSGF). https://unstats.un.org/wiki/display/GSGF
Acknowledgements
Acknowledgements
This paper was developed under the WGIC Data Committee, with review, feedback and technical input from the following committee members, and with support from the WGIC secretariat and editorial team.
WGIC Data Committee
John Renard
Chair, Data Committee, Airedale Advisory Limited
James Van Rens
Senior Vice President, RIEGL International
Philip Chisholm
Manager Software Engineering, TomTom
Chantal Jorawsky
Product Marketing Manager, Geospatial, Trimble
James Banting
VP Research and Strategic Projects, Sparkgeo
Deniz Karagulle
Global Community Engagement Technical Lead, Esri
Kathleen Martin
Geospatial Services and Data Analytics Practice Lead, MBS
John Bowers
Head Geointelligence New Business, MDA
Dr. Ramesh Kajrolkar
COO Mobile Mapping and International Partnerships, AI-InfraSolutions
Arjen Crince
Technical Director, iSpatial Techno Solutions (IST)
Guillermo Gutiérrez
Geospatial Technical Manager, IIC Technologies Europe
Kevin Pomfret
Partner, Pierson Ferdinand LLP
Rachel Tidmarsh
Chief Executive Officer, Bluesky, Woolpert
Rob Milicevic
Director, Glass Aftercare Ltd
WGIC secretariat
Aaron Addison
Executive Director, WGIC
Helen Gilmartin
Associate Director, WGIC
Bhanu Rekha
Communication Strategist, WGIC
Aarti Iyer
Executive Assistant, WGIC
Editing and consolidation
Kuhelee Chandel
Associate Director — Research, WGIC
Take the paper with you.
Download the PDF to share with your team — or register for the Data to Decisions webinar and it arrives automatically.

