software & system
critical configuration data

OVADO is a RATP qualified and extensible tool dedicated to the formal validation of data.

Why use OVADO? Purchase
The OVADO tool

Formally Prove Model Properties on Data

Critical systems are complex and become more and more configurable. Assuring their behavior and their safety level requires to validate the consistency of several hundreds of thousands of values of configuration data. These validation tasks, particularly tedious and expensive, are often subject to very tight schedule as they are performed in the final phase of development.

OVADO offers an innovative approach to data validation based on the separation of the validation tool from the properties to validate.

The modeling team formalizes unambiguously the properties identified by domain experts.

Using this set of properties, OVADO checks automatically data conformity. The non-compliance of a data set is characterized by the extraction of counterexamples.

OVADO, a Tool Offering High Performances


  • Formal verification that data comply with their requirements
  • Exhaustive production of counterexamples for each elementary cause of non-compliance with a requirement
  • Interactive evaluation of expressions used during requirements modeling and counterexamples analysis

Costs Reduction and Shorter Validation Time

  • Expressiveness of the OVADO language
  • Carry-over of a common set of properties from one project to another
  • No need for a new qualification of the validation tool
  • Significant reduction of delay and cost of the safety case and its approval by an ISA
  • Quick and easy validation replay for each new data set

Increased Validation Quality

  • Shared unambiguous language between domain experts and modelers
  • Exhaustive mathematical check of the properties on the configuration data
  • Readability and traceability of validation activities
  • Data validation through two independent and diversified toolchains
  • OVADO is certified T2 SIL4 according to the EN 50128 standard

Easy to Operate and Maintain

  • No need to write dedicated programs anymore
  • Easy allocation of independent tasks to users
  • Compatibility, via plug-in, with any configuration data format (XML and Microsoft Office Excel available by default)
  • Automatic generation of validation reports
  • Counterexample analysis
  • Standard environment based on the Eclipse platform

Standard Compliance

Formal validation of configuration data is recommended by some safety standards and is an integral part of the system or software validation process.
OVADO is certified T2 SIL4. It fully complies with the requirements of the EN 50128 standard.

Use Case

OVADO® has been used by RATP in double-checking activities for Paris subway lines L1, L3, L4, L5, L6, L9, L10, L14, etc. The OVADO version, T2 SIL4 certified, has been used successfully by Systerel for validating Paris L13 data.

Originally designed for the railway sector, this tool suits industrial projects using configuration data. It may be used in various sectors such as the aeronautics, space, defense, automotive, health or bank sectors.

They Trust Us

Among all companies trusting us we can name: ALSTOM, CNES, THALES, etc.

How to Get OVADO?

OVADO is a RATP tool distributed and partly designed by Systerel.
To get more information on how to get OVADO, please contact us by mail at or via the contact form.


OVADO is based on open source software, most notably the Eclipse and Rodin platforms, without which its development would not have been possible.

OVADO is also based on the ProB model checker.

We would like to thank here all the contributors to OVADO.