Enterprise

Fruits of the Walled Garden

Marc Andrusko and Alex Rampell Posted October 9, 2025

Fruits of the Walled Garden Table of Contents

When Infrastructure Climbs the Stack

When generative AI first broke into the mainstream, companies like OpenAI and Anthropic were understood primarily as infrastructure providers. Developers were encouraged to build on top of them, with the promise that AI models would be the foundation layer of a vast new ecosystem of applications. But today, these same companies are climbing further up the stack.

Take OpenAI’s recent release of Sora2, a consumer-facing app for video generation. What was once just a raw capability (text-to-video) is now packaged into an end-user experience, competing head-on with startups that thought they’d have room to build applications. Similarly, Anthropic has launched Claude Teams, not just offering API access to Claude models but delivering a ready-made productivity suite for enterprises.

Think of the model companies as farms. They used to sell ingredients to restaurants — the startups — who turned them into meals. Now the farms are running restaurants too. To stand out, you can either cook better with the same ingredients or source ones no one else can.

A graphic comparing traditional business arrangement vs. an integrated model with exclusive data access.

This raises a key strategic question: how can startups build defensible businesses when their infrastructure providers are also their fiercest competitors?

Our answer: by planting seeds in walled gardens of data. In this case, walled gardens of data are domains where access to information is restricted, proprietary, and highly valuable — and where exclusivity itself creates a moat. These datasets are typically:

  • Proprietary: not freely available on the open web
  • Regulated or sensitive: requiring compliance, licensing, or credentials to gain access
  • Dynamic and curated: constantly updated and validated

With that definition in mind, let’s review two examples: VLex in law and OpenEvidence in medicine.

VLex and OpenEvidence: Case Studies in Data Moats

VLex, a legal software company in Spain, began in 2000 as an ambitious effort to “revolutionize legal information access” by building a comprehensive legal content platform and applying new technologies to legal research. Spanish court decisions, statutes, and regulations were historically scattered across fragmented regional jurisdictions and often not available in machine-readable formats. Over the years, VLex systematically acquired, licensed, and digitized this content — effectively creating one of the most comprehensive legal databases in Europe. The result is something akin to LexisNexis + Westlaw + Bloomberg Law, specifically for Spanish legal history.

By the time generative AI models became viable, VLex had already amassed a proprietary corpus of legal data spanning decades of judgments and commentary. This gave it a defensible wedge to build AI-native legal research tools: unlike general-purpose models, VLex’s system can actually reason over authoritative, complete, and current legal texts. Its moat isn’t the model — it’s the painstakingly assembled dataset that no one else has.

Said differently: a lawyer crafting the best possible brief or argument needs access to every legitimate matter of precedent. A general-purpose model — even one as powerful as OpenAI’s — might produce a sophisticated-sounding legal argument, but missing even a few critical historical cases could be the difference between winning and losing.

If the stakes are high in law, they’re even higher in medicine. OpenEvidence pursued a parallel strategy to VLex, but in healthcare. While health information is plentiful online, most of it is unvetted or consumer-grade (think WebMD articles or forum posts). Clinicians, by contrast, rely on peer-reviewed literature, systematic reviews, and clinical guidelines — much of which sits behind paywalls like Elsevier or is restricted to medical institutions.

OpenEvidence spent years building partnerships, licensing agreements, and ingestion pipelines to create a structured database of vetted medical research. With that foundation, its AI can answer complex clinical questions with evidence-backed precision, rather than hallucinating or relying on incomplete public data. In medicine, where trust and accuracy are existential, this walled garden is not only a moat but also provides a far superior user experience to that offered by general-purpose models. If you’re researching a personal ailment, you’d much rather get scientifically grounded advice than spiral into WebMD doom-scrolling.

These stories show the power of owning unique, hard-to-access data. But the opportunity doesn’t stop at law or medicine. Across industries, fragmented datasets remain unclaimed — waiting to be cultivated into walled gardens that could anchor the next wave of AI-native companies. Let’s examine a few.

Potential “De Novo” Walled Gardens

1. Supply Chain & Logistics

  • Today: Shipping manifests, port records, customs filings, and trucking/rail logistics are fragmented and poorly digitized.
  • Opportunity: A startup that aggregates and cleans proprietary global trade data could build an AI layer for predictive supply chain management, trade finance, or geopolitical risk modeling.
  • Why it’s open: Maersk, Flexport, and others each see a slice — no one owns the full global corpus.

2. Local & Municipal Government Records

  • Today: Permits, zoning applications, environmental impact studies, inspection records — scattered across thousands of local jurisdictions.
  • Opportunity: A startup could systematically crawl, digitize, and normalize this data into a walled garden for real estate, infrastructure, and energy developers.
  • Why it’s open: LexisNexis and Westlaw own case law, but no one has consolidated local regulatory data at scale.

3. Frontier Science Domains

  • Today: Fields like synthetic biology, quantum materials, or advanced chemistry publish research in disparate journals and lab repositories.
  • Opportunity: Aggregate experimental results and preprints into structured datasets to train AI that accelerates R&D.
  • Why it’s open: Unlike medicine (where Elsevier and PubMed dominate), frontier sciences are less centralized and still up for grabs.

4. Cultural & Creative Archives

  • Today: Museums, historical societies, and cultural archives have vast but fragmented collections (images, manuscripts, recordings). Much of it isn’t digitized or is locked in individual silos.
  • Opportunity: A company could license and structure these datasets to power AI models for cultural preservation, education, or entertainment (e.g. historically accurate immersive experiences).
  • Why it’s open: Most of this remains under-monetized, sitting in primarily offline institutions without AI ambitions.

5. Niche Industry Workflows

  • Today: Many industries generate proprietary but unstructured datasets (e.g. veterinary records, construction blueprints, niche manufacturing specs).
  • Opportunity: Startups can target verticals too small for incumbents but where data exclusivity creates defensibility.
  • Why it’s open: Incumbents may not view these niches as large enough to pursue walled gardens — but AI could make them valuable.

6. Climate & Environmental Data

  • Today: Fragmented across government agencies, NGOs, and scientific institutions, often in PDFs or inaccessible formats.
  • Opportunity: A company could license and unify emissions data, supply-chain carbon intensity, or local climate risk data into a proprietary corpus. Structured properly, this data could power AI products for compliance (e.g. SEC climate disclosures), risk underwriting, or clean-energy development.
  • Why it’s open: No Bloomberg-equivalent exists yet for climate.

Why This Matters: The Path to Defensibility

The model companies will always command bigger models, more compute, and more distribution–those are hard games for startups to win. But there’s an opening in ecosystems where high-quality data has historically been fragmented, sensitive, or difficult to access — places where sovereignty and trust matter more than raw capability.

Building new walled gardens isn’t easy: it requires significant upfront investment and often painstaking groundwork, striking deals across companies, governments, and institutions. Yet when it works, the result is nearly impossible to replicate, offering one of the rare durable edges in an increasingly competitive AI landscape.

Are you building a new walled garden? We’d love to hear from you.

Want More a16z Enterprise?

News and resources for navigating the world of B2B technology, from AI and data, to security and SaaS, and more.

Learn More
Recommended For You

Want More Enterprise?

News and resources for navigating the world of B2B technology, from AI and data, to security and SaaS, and more.

Sign Up On Substack

Views expressed in “posts” (including podcasts, videos, and social media) are those of the individual a16z personnel quoted therein and are not the views of a16z Capital Management, L.L.C. (“a16z”) or its respective affiliates. a16z Capital Management is an investment adviser registered with the Securities and Exchange Commission. Registration as an investment adviser does not imply any special skill or training. The posts are not directed to any investors or potential investors, and do not constitute an offer to sell — or a solicitation of an offer to buy — any securities, and may not be used or relied upon in evaluating the merits of any investment.

The contents in here — and available on any associated distribution platforms and any public a16z online social media accounts, platforms, and sites (collectively, “content distribution outlets”) — should not be construed as or relied upon in any manner as investment, legal, tax, or other advice. You should consult your own advisers as to legal, business, tax, and other related matters concerning any investment. Any projections, estimates, forecasts, targets, prospects and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Any charts provided here or on a16z content distribution outlets are for informational purposes only, and should not be relied upon when making any investment decision. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. In addition, posts may include third-party advertisements; a16z has not reviewed such advertisements and does not endorse any advertising content contained therein. All content speaks only as of the date indicated.

Under no circumstances should any posts or other information provided on this website — or on associated content distribution outlets — be construed as an offer soliciting the purchase or sale of any security or interest in any pooled investment vehicle sponsored, discussed, or mentioned by a16z personnel. Nor should it be construed as an offer to provide investment advisory services; an offer to invest in an a16z-managed pooled investment vehicle will be made separately and only by means of the confidential offering documents of the specific pooled investment vehicles — which should be read in their entirety, and only to those who, among other requirements, meet certain qualifications under federal securities laws. Such investors, defined as accredited investors and qualified purchasers, are generally deemed capable of evaluating the merits and risks of prospective investments and financial matters.

There can be no assurances that a16z’s investment objectives will be achieved or investment strategies will be successful. Any investment in a vehicle managed by a16z involves a high degree of risk including the risk that the entire amount invested is lost. Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by a16z is available here: https://a16z.com/investments/. Past results of a16z’s investments, pooled investment vehicles, or investment strategies are not necessarily indicative of future results. Excluded from this list are investments (and certain publicly traded cryptocurrencies/ digital assets) for which the issuer has not provided permission for a16z to disclose publicly. As for its investments in any cryptocurrency or token project, a16z is acting in its own financial interest, not necessarily in the interests of other token holders. a16z has no special role in any of these projects or power over their management. a16z does not undertake to continue to have any involvement in these projects other than as an investor and token holder, and other token holders should not expect that it will or rely on it to have any particular involvement.

With respect to funds managed by a16z that are registered in Japan, a16z will provide to any member of the Japanese public a copy of such documents as are required to be made publicly available pursuant to Article 63 of the Financial Instruments and Exchange Act of Japan. Please contact compliance@a16z.com to request such documents.

For other site terms of use, please go here. Additional important information about a16z, including our Form ADV Part 2A Brochure, is available at the SEC’s website: http://www.adviserinfo.sec.gov.