OVADO 2® is RATP’s automated validation tool for critical configuration data, distributed and partially designed by Systerel. It is aimed at safety-critical systems, with the core goal of using formal methods to verify whether large volumes of configuration data meet requirements, and to extract counterexamples when they do not. The text explicitly states that it has been used for data review, validation, and generation on multiple Paris Métro lines, so its positioning is clearly oriented toward railways and high-safety industrial projects.
Functionally, OVADO 2® separates the “verification tool” from the “properties to be verified”: domain experts identify the properties, modeling teams formalize them unambiguously using the OVADO 2® language, and the tool then automatically checks the consistency of configuration data. It also supports generating data from formal models and uses counterexamples to help analyze the root cause of each basic non-conformance. The tool can interactively evaluate requirement-modeling expressions and counterexamples, and automatically generate verification reports. For data formats, it supports arbitrary configuration data formats via plugins, with XML and Microsoft Office Excel supported by default. Technologically, it is based on Eclipse, Rodin, and the ProB model checker.
The key value of OVADO 2® lies in the safety certification context: the text states that it complies with EN 50128:2011 and is qualified for T2 SIL4 use; under an appropriate process, it can also be used as a T3 tool for SIL4. No public pricing is listed on the page—only a Purchase option is shown, and users are asked to contact [email protected] or use the contact form for more information. As a result, procurement timelines and cost transparency are limited.
Its strengths are rigorous and traceable formal verification, reusable project property sets, support for data generation, and reuse of verification modeling work, making it suitable for reducing costs related to safety cases and ISA approval. Counterexample extraction and automated reporting are also helpful for audits. The downsides are limited public documentation, with no clear information on API/SDK availability, CI/CD integration, licensing model, or whether it is open source. In addition, formal modeling usually requires specialized expertise, so it is not ideal for general-purpose configuration checks or lightweight development teams.
It is better suited to organizations in rail, aerospace, defense, automotive, medical, banking, and other sectors involving critical configuration data and safety certification. The text provides no information about access from China, so the status is unknown. Payment methods are also not disclosed and will likely require business communication. If you only need general formal modeling or model checking, alternatives or complementary tools such as ProB, Rodin, TLA+ Toolbox, and Alloy are worth considering.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on ovado.fr official site.
ovado.fr is an France Dev Tools provider. TG4G tracks its product information, an overall rating of 6.0/10, and a China-accessibility score of Limited (proxy recommended). Click "Visit Official Site" to reach ovado.fr directly.