In application
REMIT: Amended wholesale market integrity rules in force
Inside information platforms, algorithmic trading notifications and stronger ACER powers.
Energy & Utilities
Grid, meter and asset data that operators can act on.
What we build for grid operators, utilities and energy producers: integration on a common grid data model, metering and flexibility data platforms, knowledge for field crews, and IT/OT security designed for NIS2 and the network code on cybersecurity.
For transmission and distribution system operators, suppliers and producers working across several EU Member States, with one grid to keep stable and many national rulebooks.
13 June 2024
Network code on cybersecurity in force
Sector rules for entities whose operations affect cross-border electricity flows.
SourceDelegated Regulation (EU) 2024/1366 (opens external site)
17 July 2026
Critical entities identified
Member States designate the critical entities in energy and other sectors, which then assess risks and take resilience measures.
2 December 2027
AI Act duties for critical infrastructure
AI used as a safety component in the supply of electricity, gas or heating is high-risk; application date as amended in 2026.
What is changing for grid operators and utilities
Connections outpace grid reinforcement
Heat pumps, charging points, batteries, solar and wind all ask for capacity faster than lines and substations can be built. The 2024 electricity market reform adds national assessments of flexibility needs, flexible connection agreements and a duty for system operators to publish the capacity available for new connections.
Flexibility becomes a market product
Distribution system operators are expected to procure flexibility from aggregators, storage and demand response before they reinforce. That depends on reliable metering data, forecasts and data exchange between system operators, suppliers and aggregators.
SourceDirective (EU) 2019/944
OT is now inside cyber law
NIS2 lists energy among the sectors of high criticality, from producers and suppliers to transmission and distribution operators. The network code on cybersecurity adds sector rules for cross-border electricity flows, and IEC 62443 gives engineering teams a shared vocabulary for zones and conduits.
SourceDirective (EU) 2022/2555
Assets age, and so does the expertise
Much of the network was built decades ago, and the engineers who know its quirks are retiring. Asset decisions need condition data, maintenance history and that expertise in one place, searchable by the next generation of crews.
Challenges and what we build
- The challenge
GIS, SCADA, asset management and billing each describe the network differently.
Our responseIntegration on the IEC Common Information Model (IEC 61970 and IEC 61968) with an event backbone, so planning, operations and market processes share one network model instead of nightly file transfers.
- The challenge
Connection requests wait while nobody can say where capacity is left.
Our responseA data product that combines metering, SCADA measurements and the connection pipeline into load and congestion forecasts per grid area, with stated accuracy and the assumptions behind every published figure.
- The challenge
Smart meter data arrives in volumes and under access rules that older systems were never designed for.
Our responseA metering data platform that validates, stores and serves interval data, with consent handling, role-based access and logging for suppliers, aggregators, customers and the grid operator itself, aligned with GDPR and national data access rules.
- The challenge
Every new data flow from OT to IT widens the attack surface.
Our responseIT/OT architectures with zones and conduits following IEC 62443, brokered one-way data paths where the risk calls for them, central identity and the logging that NIS2 incident reporting depends on.
- The challenge
Field crews search drawings, procedures and work history across several systems.
Our responseA knowledge assistant for crews and control room staff over procedures, asset records, inspection reports and past work orders, citing document and revision. It informs; it never issues a switching instruction.
- The challenge
Contact centres are overwhelmed during outages, tariff changes and connection peaks.
Our responseService assistance that answers outage, connection and invoice questions from the source systems and hands anything consequential to staff, plus document intelligence that checks connection applications and installer certificates before they reach an engineer.
Grid IT/OT reference landscape
The control levels stay intact. A grid data integration layer, built on CIM and events, makes operational data available above the zone boundary, where analytics, knowledge and reporting services use it.
Illustrative example
Operational data crosses the zone boundary once, through the integration layer, and is reused by every service above it.
Read the diagram as text
The diagram shows five levels from top to bottom: level 4 the enterprise with ERP, asset management, customer and billing systems; level 3 grid operations with ADMS or EMS, outage and work management and the meter head-end; level 2 supervisory control with SCADA and substation automation based on IEC 61850; level 1 control and protection with RTUs, IEDs and relays; and level 0 the primary equipment: lines, transformers, switchgear, generation and storage.
A zone boundary based on IEC 62443 separates level 4 from the levels below.
Levels 1 to 4 deliver data to a grid data integration layer built on CIM and events. That layer feeds a grid, metering and asset data platform, which supports congestion, load and asset health analytics, a knowledge assistant for crews and control room staff, and regulatory reporting and market data exchange.
The control room decides
Analytics and assistants read. Switching, setpoints and protection settings stay with the ADMS or EMS and the operator on duty.
Zones and conduits
Segmentation follows IEC 62443, with documented conduits and, where the risk calls for it, one-way data transfer out of the control zone.
One network model
CIM is the shared vocabulary between GIS, grid operations, planning and market processes, so a change to the network is recorded once.
Forecasts with measured accuracy
Load, congestion and asset health models report their error. Where the data cannot support a forecast, we say so.
The regulatory timeline for grid operators and utilities
Cybersecurity, market design and resilience rules arrive in quick succession. Network codes and national transposition add dates of their own.
In application
Network code on cybersecurity: Network code enters into force
Risk assessment cycles and the identification of high-impact and critical-impact entities follow in stages.
In application
Electricity market design: Market reform in force
Flexibility needs assessments, flexible connection agreements, energy sharing and contract choice for customers.
In application
NIS2: National NIS2 rules apply
Electricity, gas, hydrogen, oil and district heating are in scope.
In application
Electricity market design: Transposition deadline for most Directive provisions
In application
Demand response: ACER proposes a network code on demand response
Market access for smaller flexibility providers and closer coordination between distribution and transmission operators. Adoption by the Commission is the next step.
In application
Metering data access: National practices for access to metering data reported
Member States describe how their procedures map onto the EU reference model.
In application
European Grids Package: Commission presents the European Grids Package
Proposals on infrastructure planning and permitting, with guidance on timely grid connections.
In application
CER Directive: Member States identify critical entities
Identified entities then carry out risk assessments and take resilience measures.
In application
Hydrogen and gas package: Transposition deadline for most provisions of the gas Directive
Common rules for the internal markets for renewable gas, natural gas and hydrogen.
Status as of 12 October 2026
Upcoming
AI Act: High-risk obligations apply
Including AI used as a safety component in the supply of electricity, gas or heating, as amended in 2026.
Regulation and standards reference
The instruments that most often shape data, integration and AI work for grid operators and utilities, and what each means for a delivery programme.
This overview supports planning conversations. It is not legal or regulatory advice, and national transposition and network codes add their own requirements. Dates reviewed on 12 October 2026.
- NIS2 for energyScopeEU-wide
Energy is a sector of high criticality. In electricity, that covers suppliers, distribution and transmission system operators, producers, nominated electricity market operators, market participants offering aggregation, demand response or storage, and operators of recharging points. District heating, oil, gas and hydrogen are in scope too. Duties include risk management, incident reporting and supply-chain security.
What it means for your programmeOT security, supplier assurance and incident processes need evidence, not only policy. We design platforms and integrations with access control, logging and incident data in place from the start.
SourceDirective (EU) 2022/2555, EUR-Lex (opens external site)
- Network code on cybersecurityScopeEU-wide
Delegated Regulation (EU) 2024/1366 sets sector-specific rules for the cybersecurity aspects of cross-border electricity flows. It introduces recurring cybersecurity risk assessments at Union, regional and national level, identifies high-impact and critical-impact entities, and requires those entities to apply minimum and advanced cybersecurity controls, including in their supply chain.
What it means for your programmeIf you are a high-impact or critical-impact entity, the products and services you buy become part of your risk assessment. We document architecture, components and controls so that they map onto it.
SourceDelegated Regulation (EU) 2024/1366, EUR-Lex (opens external site)
- Electricity market design reformScopeEU-wide
Regulation (EU) 2024/1747 and Directive (EU) 2024/1711 amend the electricity market rules. Flexibility needs are assessed nationally on data from system operators, who can offer flexible connection agreements and must publish the capacity available for new connections with high spatial granularity. Customers gain rights to energy sharing and to both fixed-price and dynamic price contracts.
What it means for your programmeFlexibility, connection capacity and tariff choice are data products. We build the forecasting, publication and settlement data flows behind them.
SourceRegulation (EU) 2024/1747, EUR-Lex (opens external site)
- Smart metering and data accessScopeEU-wide
The Electricity Directive sets functional requirements for smart metering systems and requires efficient, secure data management with non-discriminatory access to metering and consumption data. Implementing Regulation (EU) 2023/1162 adds interoperability requirements and procedures for that access, which Member States describe in their national practices.
What it means for your programmeMetering data platforms need consent handling, standardised interfaces and access logs. We design them against your national data access procedure.
SourceDirective (EU) 2019/944, EUR-Lex (opens external site)
- REMITScopeEU-wide
The Regulation on wholesale energy market integrity and transparency prohibits market manipulation and insider trading, and requires market participants to disclose inside information and report transactions to ACER. The 2024 amendment requires disclosure through inside information platforms, adds a notification duty for algorithmic trading and strengthens ACER's investigation powers.
What it means for your programmeUnavailability and capacity data in operational systems can be inside information. We design the data flows so that disclosure and reporting are timely and traceable.
SourceRegulation (EU) No 1227/2011, EUR-Lex (opens external site)
- Critical Entities Resilience DirectiveScopeEU-wide
The CER Directive covers the physical and organisational resilience of critical entities, with energy among its sectors. Member States identify critical entities by 17 July 2026; those entities then assess risks and take technical, security and organisational measures.
What it means for your programmeContinuity planning spans cyber and physical events. The systems we build come with documented dependencies and tested recovery paths.
SourceDirective (EU) 2022/2557, EUR-Lex (opens external site)
- AI Act and critical infrastructureScopeEU-wide
AI systems intended as safety components in the management and operation of the supply of water, gas, heating or electricity are high-risk under Annex III. Under the Act as amended in 2026, these duties apply from 2 December 2027.
What it means for your programmeWe classify each use case early. Assistants and analytics that inform people are designed and documented differently from systems that act on the grid, which stay out of scope unless the high-risk regime is planned for.
SourceRegulation (EU) 2024/1689, EUR-Lex (opens external site)
Illustrative use cases
Illustrative exampleSwitching and maintenance knowledge in the field
Crews ask in their own language and get the procedure, the asset history and the relevant drawings, with sources. Switching stays under control room authority.
Connection application intake
Applications, single-line diagrams and installer certificates read and checked for completeness; engineers review every exception.
Outage and invoice questions at peak times
Customers get the current outage status and answers about their bill from the source systems; staff take over for complaints and payment difficulties.
Billing and market messaging behind APIs
A legacy customer information system wrapped in documented APIs and replaced process by process, while national market messages keep flowing.
Inspection findings into asset records
Inspection and thermography reports read, matched to the asset and proposed as maintenance notifications for an engineer to confirm.
Platforms in energy and utilities
SAP
Gold PartnerSAP S/4HANA Utilities for meter-to-cash and market roles such as supplier, distribution system operator and meter operator, with SAP asset management for networks and plants.
Salesforce
Summit PartnerConnection requests, customer service and field service for utilities and energy service companies, integrated with billing and the customer information system.
Odoo
Gold PartnerProjects, field service, inventory and invoicing for installers, energy service companies and smaller producers.
Partner levels are those held by FromNine. Product names are trademarks of their respective owners.
International
One European grid, many national rulebooks
Electricity crosses borders every second, but the rules around it are only partly European. Network codes, the market design reform, NIS2 and REMIT apply across the EU; metering data access, market messaging formats, tariff methods and national cybersecurity laws differ per Member State. Transmission system operators coordinate through ENTSO-E, distribution system operators through the EU DSO Entity, and regulators through ACER.
We build integration and data platforms on European standards such as CIM and keep national market processes in their own adapters, so a group active in several countries keeps one architecture.
Frequently asked questions
Will your software operate the grid?
No. By default, analytics and assistants only read operational data. Switching, setpoints and protection settings stay with the ADMS or EMS and the operators who are accountable for them, under your change control.
Do you work with the Common Information Model?
Yes. We use IEC 61970 and IEC 61968 for network and asset data, IEC 62325 where market communication is involved, and the ENTSO-E CGMES profiles when grid models are exchanged between transmission system operators. Systems with their own formats are mapped to CIM at the integration layer.
How do you handle smart meter data and privacy?
Interval data can reveal how people live, so we treat it as personal data under GDPR: purpose limitation, role-based access, consent where national rules require it, pseudonymisation for analysis and defined retention. Access for suppliers and aggregators follows the national data access procedure.
Can you forecast congestion or asset failures?
Sometimes. It depends on measurement coverage, history and how the network is operated. We test first, report measured accuracy and uncertainty, and recommend rule-based approaches where a model would not be reliable.
How do you support NIS2 as a supplier to an essential entity?
Our information security management system is certified to ISO/IEC 27001. We agree security requirements and incident notification in the contract, work with least-privilege, logged access to your environments, and document our components so they fit your supply-chain risk assessment.
Do we have to replace our billing or customer information system?
No. We integrate by default and modernise in steps: APIs around the existing system first, then process by process where it pays off, with reconciliation until the old path is retired.
Discuss your grid or utility programme
Integrating grid data, preparing metering data for new access rules or securing IT/OT data flows? Start with one grid area, one process or one data flow.