VOGO® eBS ECM
VOGO eBS — Enterprise Content Management System. AI powered.
VOGO® eBS ECM AIAO — Enterprise AI Automation and Orchestration Platform
EUIPO EUTM 019103505VOGO® eBS ECM AIAO — Enterprise AI Automation and Orchestration is the enterprise platform for intelligent automation and end-to-end orchestration of organisational operations. It brings AI agents, models, data, applications and human intervention together in one ecosystem, built on a common core with an append-only audit, tenant isolation and deny-by-default authorisation. The architecture is secure, scalable and portable, with AI governance, full traceability and compliance with European requirements and standards.
Core modules
The platform’s 19 modules, with their description from the application — from portal, orders and production to identity, security, integration and AI.
Portal
The users’ entry point into the platform: the start page with the module cards, favourites, recent documents and the day’s operations.
Orders
Taking in, validating and forwarding shop orders to production.
Production
Network demand, the production plan, batches and deliveries: what has to be made today and for whom, actual against plan.
BI & ETL
Network indicators for the chosen period: order count and value, cost structure, distribution by county.
Projects
Integrated management of investment projects (Project Office Integrated Management): the portfolio of funded projects.
Documents
Managing the organisation’s documents across their whole life cycle: the electronic registry, numbered per register.
AIAO
VOGO AI Automation and Orchestration Platform: case handling, workflows, AI automation and integrations.
IAM – Identity & Access Management
Identity and access management: accounts, created only through the identity API of the application.
PAM – Privileged Access Management
Privileged access management: administrative rights are granted only when needed and for as long as needed (just-in-time).
ROeID – Citizen identification
Citizen identification through ROeID, with access to every feature after sign-in and the account created automatically.
Administration
Platform configuration: network shops, units of measure, the product nomenclature and categories, the working calendar, alerts.
VOGO AI
The platform’s intelligent assistant: a conversational agent with retrieval over your own documents, trained on the organisation’s procedures.
Audit & Compliance
The platform’s audit trail: it receives events from every module, validates them, stores them and makes them available.
SIEM – Security events
Collecting, storing, normalising, correlating, analysing and visualising security events, with dashboards, alerts and retention.
IDS – Intrusion detection
Intrusion detection system: real-time traffic analysis, data analysis, attack signatures and alert generation.
Support & Help Desk
Tickets opened from the application, by email or from mobile, with the context attached; ticket flow with tiered escalation.
Mobile
The mobile application’s backend: a versioned, secure API with OAuth2/OpenID Connect sign-in through IAM and ROeID.
Integration
The single point of data exchange with external systems — the organisation’s, the state’s and partners’: the integration catalogue.
DNSH – Resources and environment
Monitoring and reporting energy, water and other resource use, plus energy-efficiency and environmental initiatives.
Verified digital identity
Native integrations with national and European electronic identification systems — no redundant manual data entry.
ROeID
Digital identification of individuals, with data from the ROeID profile pre-filled automatically in forms and the personal ID number masked.
eIDAS
Recognition of electronic identity at European level, for users from across the Union.
ONRC / SPV
Company data obtained automatically — name, tax ID, legal representative — by selecting it from SPV.
Accounts differentiated by profile
Citizen, veterinarian, company — each profile with its own features and information.
Flexible access, simple upgrade
Sign-in with your own username and password or anonymously, with the option to upgrade to a verified ROeID account.
A complete digital flow
An intuitive multi-step wizard with a visual progress indicator, taking any request from opening to official confirmation.
Description
Deadlines, costs and required attachments, set out clearly before you start.
Form
Fields pre-filled automatically from ROeID and ONRC, with an integrated GIS map for location.
Preview
A full check of the completed, signed form before submission.
Submission
Automatic registration number, signed PDF and real-time tracking of the request status.
Releases & support
VOGO eBS follows a standard support policy for major releases. We recommend updating to the latest minor releases of the active branches. The maintained and notable major releases are:
Releases reach End of Life under the support policy, after which access to the official releases is maintained. Follow the exact dates in the release history & roadmap.
How the product has evolved from the registration of the trade mark with the EUIPO until today — new features and better performance in every release.
The first production release, launched together with the registration of the VOGO.me trade mark with the EUIPO (EUTM 019103505).
Features
- Electronic registry with atomic numbering and legal traceability
- Document management — versions, renditions, dynamic metadata
- Workflow and case management (files, assignments, deadlines)
- Identity & access (RBAC / ACL), tenant isolation
Performance & platform
- Append-only audit with hash-chain
- Data access through parameterised PDO, a SQL-first model
- Transactional outbox for safe event emission
- Multi-tenant architecture by design
The second major iteration — electronic archiving, signing/dispatch and multi-database portability.
Features
- Electronic archive (AIP / WORM) + archival nomenclature + retention
- Electronic signature and dispatch with proof of delivery
- Official documents generated from templates (PDF / PDF-A)
- Versioned org chart, historically reconstructable
Performance & platform
- MariaDB ↔ PostgreSQL portability (schema dialects)
- Indexing and optimisation on the registry and documents
- Lower latency on review / approval flows
- Docker containerisation, reproducible deployment
The third major iteration — AI on documents, secure search and full compliance (GDPR / INFOSEC).
Features
- Secure search filtered by rights + OCR / AI on content
- Agentic AI (RAG, LangChain / LangGraph, MCP) on documents
- PII / GDPR / DPO and classified information / INFOSEC
- Integration — event bus, HMAC webhooks, connectors; low-code reporting
Performance & platform
- Secure lexical index for fast search at scale
- Independent integrity verification, in Merkle batches
- OWASP ASVS hardening (PenTest target with no Critical/High)
- Cluster-ready on Kubernetes
The latest minor release — performance and security hardening, fixes across all modules and improved deployment on Kubernetes.
Features
- Fixes and minor refinements across all modules
- Improved deployment on Kubernetes (Helm, autoscaling)
- UX refinements on the registry, documents and search
- Connector and integration updates
Performance & platform
- Security hardening (patches, dependencies)
- Performance and latency optimisation
- Extended observability (metrics, structured logging)
- Greater stability under load / at scale
Public roadmap
The medium- and long-term strategic direction — with the emphasis on maximum AI, future technologies and adaptability to modern datacentres.
- Agentic ECM — autonomous classification, routing and triage of documents, with human-in-the-loop
- Sovereign on-prem LLMs — private models entirely in the datacentre, zero data egress
- Semantic archive — multilingual OCR + semantic search filtered by rights
- Confidential computing — encrypted-in-use processing (TEE / enclave) for classified documents
- Autonomous multi-department flows — AI agents that negotiate and complete processes
- Predictive records management — anticipating retention and compliance risk
- Post-quantum cryptography for the audit hash-chain, signatures and archive
- Adaptive placement across heterogeneous datacentres (GPU / ARM / neuromorphic), workload-aware
- Knowledge-graph core — reasoning over documents as a knowledge graph
- Cyber-swarm-ready — integration with decentralised, self-defending security fabrics
- Continuous autonomous compliance — self-auditing that adapts to changing regulations
- Zero-trust, self-healing infrastructure on any datacentre substrate
Managed collaboratively, on GitHub
How features evolve, prioritisation, requirement traceability and community contributions — across several releases.
User stories & issues
Requirements are tracked as user stories and issues, broken down by module and release.
Prioritisation
Prioritisation through labels & milestones (Now / Next / Later), aligned with the public roadmap.
Traceability
Full traceability from requirement to commit to release, through references and version tags.
Community contributions
Open pull requests and discussions, across several releases.
Trade mark registered with the EUIPO
The product’s trade mark is public in the EUIPO register — the official time reference for release 1.0.
The Digital Registry - VOGO Orchestration and Automation Platform
The component through which the institution keeps its document registers. The system does the numbering, a registered entry is never deleted, and every operation goes into the audit log.
Numbering inside the transaction
The system issues the registration number, per year and per register, each register with its own sequence. An incomplete form consumes no number.
Multiple registers
Every register has its own code and its list of accepted document types, checked on the server rather than in the browser.
Sender and recipient
Chosen from the institution’s org chart or from the list of external people and companies.
Response deadline
The date by which the answer is due sits on every entry in the register.
Cancellation and correction
Both stay in the register, with the reason and the person who made them. A consumed number is never reused and an entry is never deleted.
Audit log
Every operation is written to the institution’s audit log.
Role-based rights
Viewing, registering and cancelling are separate rights, configurable per register.
20 predefined registers, configured according to the law
The institution can define additional registers, each with its own code, its own yearly sequence and its own accepted document types.
Statutory reports generated from the registers
Annual report on access to public-interest information
The number of requests, administrative complaints and court actions. Article 27 of the rules under Law 544/2001.
Information bulletin and activity report
The bulletin is updated yearly; the report is published by the end of April of the following year. Article 10 of the same rules.
Half-yearly analysis of petitions
Petitions resolved on time, extended, redirected and closed. Article 14 of Government Ordinance 27/2002.
Whistleblower report statistics
Kept separate from the content of the reports. Article 7(1) of Law 361/2022.
Every report is generated with date and time, archived as a document and stays reproducible for inspection. No data is entered twice.
Multi-Vector Secure File Transfer and Share Hub with built-in CDR file sanitization
Enterprise-grade platform providing secure and automated file collaboration. It enforces zero-trust policy on all file-based data flows through deterministic Content Disarm and Reconstruction (CDR) file sanitization technology, providing detection-independent prevention against known, unknown, and zero-day file-borne threats.
Stops threats before they get in
CDR neutralises known, unknown and zero-day attacks on the spot, without waiting for signature updates.
Scaling without downtime
Large file volumes, with nodes added on the fly and no downtime.
Productivity without friction
Users work as usual in network folders, in the browser, in Outlook and with USB sticks, while sanitisation happens transparently.
Fewer products, lower cost
One platform instead of several point solutions, with unified control over every file channel.
Provable compliance
Immutable logs and SIEM integration, for auditors and regulators.
Deploy where you choose
On-premises, private cloud or SaaS, to suit the organisation’s infrastructure and requirements.
Technical specifications
Workstation integrations
GateScanner for Web Browsers
An extension for Chrome, Edge and Firefox. It intercepts browser downloads, sends them for sanitisation and delivers the rebuilt file, neutralising malicious web content.
GateScanner for Outlook
A VSTO add-in. It uploads the attachment to a vault in one click and replaces it with a sanitised link, gets past the mail server’s size limit and stops exfiltration.
GateScanner Virtual USB Kiosk
Turns a workstation into a secure point for importing from removable media, with a single permitted flow: selecting the files and sanitising them.
Let’s see VOGO at work
Fill in the form and we will come back with a demo built on your use case.
Note: The services are provided in line with the European DNSH principle – “Do No Significant Harm”, in accordance with Article 17 of Regulation (EU) 2020/852 on the establishment of a framework to facilitate sustainable investment and with the European Commission’s technical guidance on the application of the DNSH principle, C/2023/111.