TL;DR: Vendor-neutral semantic metadata, consistent definitions, and portable governed results across BI and AI tools are gaining traction as Collibra’s participation in the Open Semantic Interchange points to a broader push for interoperability, according to Collibra. The real issue is not tool interoperability alone, but whether governance can survive fragmented definitions without creating new trust and accountability gaps.
At a glance
What this is: This is Collibra’s announcement about joining the Open Semantic Interchange, an open source effort to standardize semantic metadata and keep business definitions consistent across tools.
Why it matters: It matters because IAM, data governance, and AI governance teams need durable definitions and traceability if they want governed outputs to remain trustworthy across platforms and model workflows.
Context
Open semantic interchange is about standardizing semantic metadata, meaning the business definitions, metrics, and context that tell tools what data actually means. Without that layer, organizations can move data between dashboards, notebooks, and AI systems but still end up with inconsistent reporting and disputed definitions.
For identity and governance teams, the issue is not only interoperability. The deeper problem is whether governed meaning can survive tool sprawl, data product sharing, and AI consumption without creating new gaps in accountability, traceability, and trust.
Collibra’s participation in OSI frames the market shift clearly: semantic governance is moving from a local platform concern to a cross-tool control plane problem. That is typical of mature data and AI programmes, not a niche integration issue.
Key questions
Q: How should security teams govern shared data definitions across BI and AI tools?
A: Security teams should treat shared data definitions as governed assets with ownership, versioning, approval, and lineage. The key is not just making a definition portable, but proving which systems consume it and who can change it. That prevents silent drift from undermining reporting, automation, and audit evidence.
Q: Why do inconsistent semantics create risk for IAM and AI governance?
A: Inconsistent semantics cause different systems to make decisions from different interpretations of the same term. That breaks trust in access approvals, exception handling, and AI outputs because the control logic depends on the meaning of the data, not just the data itself. Governance must therefore cover definitions as well as systems.
Q: What are the signs that semantic governance is failing?
A: Common signals include the same metric being reported differently in separate dashboards, repeated disputes over field definitions, and manual reconciliation before analysis can begin. When teams keep rebuilding the meaning of data in each workflow, the governance model is too fragmented to support reliable reuse.
Q: How do organisations reduce the cost of fragmented data semantics?
A: By standardizing definitions once and reusing them across tools, organisations reduce duplicate modeling, reporting disputes, and rework in AI pipelines. The objective is not just cleaner documentation. It is to make semantic consistency a shared control that supports analytics, governance, and model operations together.
Technical breakdown
Semantic metadata exchange across BI and AI tools
Semantic metadata is the layer that defines business terms, measures, and relationships so different systems interpret the same data consistently. In practice, this is what prevents one dashboard from counting revenue differently from another or an AI model from learning on an ambiguous field definition. An open semantic interchange is trying to make those definitions portable, so the meaning travels with the data instead of living only inside one platform. That matters when organisations have multiple analytics tools, governed data products, and model pipelines that all consume the same source data.
Practical implication: govern definitions as reusable metadata assets, not platform-local documentation.
Vendor-neutral semantics and governed interoperability
Vendor-neutral semantics reduce the risk that governance rules, metric definitions, and trust signals fragment every time data moves between systems. Interoperability here is not just about format conversion. It is about ensuring the same governed meaning survives across BI, notebooks, data engineering workflows, and AI applications. Without that, teams can get technical portability while losing business consistency. Open specifications matter because they create a common contract for semantic sharing that multiple tools can implement without each vendor inventing its own interpretation.
Practical implication: evaluate whether your governance model can preserve meaning across heterogeneous analytics stacks.
AI governance depends on consistent business context
AI governance breaks down quickly when model inputs are technically valid but semantically inconsistent. If an AI system trains or reasons over data whose business meaning is unclear, outputs may be reproducible but still wrong from a governance perspective. The article’s focus on consistent metrics and definitions points to a core AI control issue: models need shared business context, not just cleaned data. That is why semantic governance sits upstream of model trust. It shapes what the model sees, what the organisation can explain, and how confidently it can reuse outputs across teams.
Practical implication: treat semantic consistency as a prerequisite for AI trust and reuse, not a post-model cleanup task.
NHI Mgmt Group analysis
Semantic governance is becoming infrastructure, not documentation. The article shows that organisations are no longer treating metrics and definitions as static reference material. They are turning semantic metadata into an exchange layer that has to survive across tools, teams, and AI systems. That shift matters because governance now has to control meaning at runtime, not merely record it after the fact. Practitioners should treat semantic models as part of the operational control plane.
The governance problem is not tool interoperability alone. Interchange without consistent definitions only moves ambiguity faster. If one platform says one thing and another platform says something else, the organisation gets the appearance of standardisation without shared truth. That is a governance failure, not an integration success. The implication is that data governance teams need to own business definitions with the same discipline they apply to access and quality controls.
Open standards create leverage only when governance is already mature. A vendor-neutral semantic layer can reduce duplication and improve reuse, but it can also expose weak ownership, inconsistent stewardship, and unresolved metric disputes. In that sense, OSI does not solve governance by itself; it makes governance gaps harder to hide. Practitioners should use the standard to tighten decision rights around definitions and lineage.
Data confidence now depends on cross-tool semantic continuity. AI programmes increasingly reuse the same governed data across BI, notebooks, and model workflows, so any semantic drift becomes a trust issue across the stack. This is why the topic belongs in AI governance discussions, not only data architecture reviews. Organisations that cannot preserve semantic continuity will struggle to produce outputs that are both reusable and explainable. Practitioners should align semantic governance with AI control objectives, not treat it as a separate catalog exercise.
What this signals
Semantic interoperability is now a governance control, not an integration convenience. Organisations that treat definitions as local implementation details will keep paying for reconciliation every time data crosses a platform boundary. The practical shift is to manage semantic metadata with the same rigor used for identity entitlements and data quality rules.
Open standards only help when stewardship is explicit. A common exchange format does not resolve disputes over meaning, ownership, or approval rights. Teams need decision rights for definitions, lineage, and downstream impact before interoperability can translate into trustworthy AI and reporting outcomes.
For practitioners
- Formalize business definitions as governed assets Create an ownership model for metrics, dimensions, and semantic metadata so changes are reviewed and versioned instead of copied into each tool independently.
- Map semantic drift across reporting and model pipelines Identify where the same business term is implemented differently in dashboards, notebooks, and AI workflows, then prioritize the highest-impact inconsistencies.
- Tie semantic governance to AI control objectives Require model owners to document which governed definitions, business context, and approved semantics the model depends on before reuse is allowed.
- Define stewardship for cross-platform definitions Assign clear accountability for who approves definition changes, who validates downstream impact, and how updates propagate across shared data products.
Key takeaways
- Fragmented data semantics create governance problems that persist even when the underlying data is technically accessible.
- Open semantic interchange is trying to make business meaning portable across BI, data engineering, and AI workflows.
- Practitioners should treat semantic definitions as governed assets if they want consistent, explainable, and reusable outputs.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 and NIST AI RMF set the technical controls, while ISO/IEC 42001:2023 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.OC-03 — Mission, Objectives and Stakeholders | Semantic definitions align shared business context across data and AI stakeholders. |
| GV.PO-01 — Cybersecurity Policy | Semantic governance needs policy and decision rights to stay consistent across tools. | |
| Recommendation — Establish common business terminology and ownership before standardizing semantic exchange. Document governance policy for metrics, definitions, and cross-tool semantic changes. | ||
| ISO/IEC 42001:2023 | GOVERN — AI Governance and Accountability | AI governance depends on stable business context and accountable control over definitions. |
| Recommendation — Tie model governance to approved semantic definitions and accountable stewardship. | ||
| NIST AI RMF | GOVERN — AI Governance and Accountability | AI programmes need governance structures for the data semantics their models consume. |
| Recommendation — Assign accountability for semantic consistency as part of AI governance oversight. | ||
Key terms
- Structured Metadata: Structured metadata is the machine-readable description of a server’s capabilities, interfaces, authentication methods, and versioning. It helps clients understand what a server can do and how to interact with it safely. In registry-driven environments, metadata is essential for discovery, interoperability, and governance.
- Vendor-neutral Specification: A vendor-neutral specification is a shared format that lets multiple tools exchange information without locking the organisation into one platform’s internal model. For governance teams, the value is consistency and portability. The risk is assuming the format itself provides trust, when authority still depends on ownership and change control.
- Data Semantics: Data semantics are the business meanings attached to data elements, metrics, and relationships. They determine whether different teams and tools interpret the same field in the same way, which is essential for trusted reporting, reusable data products, and explainable AI outputs.
- Governed Result: A governed result is an output whose underlying data, definitions, and context have been controlled well enough to support trust and reuse. It is not just a correct calculation; it is an outcome that can be explained, traced, and relied on across platforms and teams.
Deepen your knowledge
NHI governance, agentic AI identity, and machine identity lifecycle are core topics in our NHI Foundation Level course, the industry's only accredited NHI security programme. If you are building or maturing an IAM programme, it is worth exploring.
Published by the NHIMG editorial team on June 11, 2026.
Updated on October 10, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org