GlobalOntology engineering delivered across the USA, Australia & Europe — book an AI guardrails assessment →
info@ontologyforai.com USA · Australia · Europe
Home / Industries
Domains we model

Your industry's language, encoded for AI

We start from the open standards your sector already uses, extend them with your business meaning, and add the sensitive-data rules your regulators expect.

AI & SaaS builders

Ship agents enterprises will actually approve

If you build AI products for regulated customers, their security review will ask what your agent can see, why, and how you prove it. We give your product an ontology-backed context and policy layer — a reusable semantic contract between your agents and each customer's data.

OWL 2SHACLDPVODRLMCPPROV-O

Core classes

Tenant · Agent · Tool · ToolScope · Dataset · DataClass · Purpose · Delegation · Decision

Discuss your ai use case

Competency questions the ontology must answer

  1. Which tools can this agent call on behalf of this user, in this tenant?
  2. Which datasets contain data classified as personal or confidential?
  3. Which purpose was declared when this fact entered the context window?
  4. Which decisions relied on data from a now-revoked connector?

Example data guardrails

ALLOWAgent reads tenant's product catalogue for purpose = support
MASKEmail addresses in support tickets → domain only
DENYCross-tenant retrieval — always, regardless of prompt
Insurance

Claims, underwriting and service agents with boundaries built in

Insurance data mixes policy terms, party identities, health details from bodily-injury claims and financial information. We model parties, policies, coverages, claims and loss events so that every agent — adjuster copilot, vendor portal, fraud triage — sees exactly what its role and purpose permit.

ACORD-alignedFIBO (parties)SHACLDPVPROV-O

Core classes

Party · Policy · Coverage · Claim · LossEvent · Vehicle · Property · Reserve · Vendor · Adjuster

Discuss your insurance use case

Competency questions the ontology must answer

  1. Which coverages on this policy apply to this loss event?
  2. Which open claims involve a party linked to a prior SIU referral?
  3. What evidence supports this reserve recommendation?
  4. Which facts may a repair vendor's agent receive for this claim?

Example data guardrails

ALLOWVendor agent reads vehicle, damage area and loss description
MASKClaimant name and address → initials and ZIP3
DENYInjury notes and tax identifiers outside claims-handling purpose
Healthcare & life sciences

Clinical and operational AI that respects minimum necessary

Healthcare AI must reason across patients, encounters, conditions, medications and providers while honouring consent and care relationships. We align to HL7 FHIR resources and clinical terminologies so care-team copilots, prior-authorisation agents and research assistants each get the minimum necessary context.

HL7 FHIR R4/R5SNOMED CTLOINCRxNormDPVConsent model

Core classes

Patient · Encounter · Condition · Observation · MedicationRequest · Practitioner · CareTeam · Consent

Discuss your healthcare use case

Competency questions the ontology must answer

  1. Is this practitioner on the patient's active care team?
  2. Which observations support this prior-authorisation request?
  3. Which records are excluded by the patient's consent directive?
  4. Which cohort records are de-identified enough for this research purpose?

Example data guardrails

ALLOWCare-team copilot reads active conditions and recent labs
MASKDates of service shifted; ages over 89 generalised for research
DENYBehavioural-health notes without explicit consent or care relationship
Financial services

Research, risk and client-service AI grounded in FIBO

Financial institutions need agents that understand instruments, issuers, legal entities, holdings and events — and that respect information barriers, client confidentiality and suitability rules. We ground the model in FIBO and your internal golden sources.

FIBOLEI / GLEIFISO 20022 conceptsSHACLPROV-O

Core classes

LegalEntity · Issuer · Instrument · Holding · Portfolio · Account · Client · CorporateEvent · InfoBarrier

Discuss your financial services use case

Competency questions the ontology must answer

  1. Which portfolios hold instruments issued by entities affected by this event?
  2. Which clients' data sits behind an information barrier from this desk?
  3. What is the ownership chain from this account to its ultimate beneficial owner?
  4. Which source filing supports this exposure figure?

Example data guardrails

ALLOWResearch copilot reads public issuer events and holdings aggregates
MASKClient account identifiers → hashed tokens
DENYPrivate-side deal data to public-side agents (information barrier)
Manufacturing

Agents that understand assets, parts and process — and protect IP

Manufacturing knowledge is spread across PLM, ERP, MES, maintenance logs and supplier contracts. We connect equipment hierarchies, bills of materials, suppliers and process steps so maintenance, quality and supply-chain agents reason across them while proprietary recipes and supplier pricing stay protected.

ISA-95ISO 15926 conceptsAsset Administration ShellSHACLPROV-O

Core classes

Site · Line · Equipment · Component · Part · BOM · Supplier · WorkOrder · ProcessStep · Recipe

Discuss your manufacturing use case

Competency questions the ontology must answer

  1. Which finished products depend on this single-source supplier?
  2. Which equipment shares the failing component and when was it last serviced?
  3. Which process steps changed before this quality deviation?
  4. Which recipe parameters may a contractor's agent view?

Example data guardrails

ALLOWMaintenance agent reads equipment history and spare-part availability
MASKSupplier unit pricing → price band
DENYProprietary recipe set-points to external or contractor agents
Security & defense

Threat intelligence and cyber agents with need-to-know

Security operations demand fast correlation across assets, vulnerabilities, identities and threat intelligence — and strict control over who learns what. We model the cyber domain with STIX and ATT&CK concepts and enforce classification and need-to-know on every agent.

STIX 2.1MITRE ATT&CKD3FENDUCOTLP markings

Core classes

Asset · Identity · Vulnerability · Indicator · ThreatActor · Technique · Incident · Control · Classification

Discuss your security use case

Competency questions the ontology must answer

  1. Which internet-facing assets are exposed to techniques used by this actor?
  2. Which controls mitigate the techniques seen in this incident?
  3. Which indicators are TLP:RED and must not leave the response team?
  4. Which identities had access to the compromised asset in the last 30 days?

Example data guardrails

ALLOWSOC copilot correlates indicators with internal asset inventory
MASKAnalyst names and victim identities in shared reports
DENYTLP:RED intelligence to any agent outside the incident team
Common foundation

What every domain ontology includes

Domain core

Entities, relationships and rules that answer your competency questions.

Sensitivity & purpose

DPV-aligned data classes, purposes, consents and legal bases.

Provenance

PROV-O lineage from every fact to its source system or document.

Shapes & tests

SHACL constraints and executable competency-question tests.