Leading Regulatory Compliance for Open Source | Open Regulatory Compliance Working Group

Bringing together the open source ecosystem, industry, and regulatory stakeholders to make the Cyber Resilience Act, the AI Act, and other emerging regulations workable for open source.
New EU regulations affect the entire software supply chain, including the open source it depends on.
The Open Regulatory Compliance Working Group (ORC WG) brings together manufacturers, small and medium enterprises, research institutions, open source foundations, and maintainers. Together, they interpret the rules, contribute to standards, and produce free resources that make obligations actionable.
9 November 2026Community news
What’s new: ENISA consultation on vulnerability disclosure, ENISA SBOM advisory, Mapping the CRA and the AI Act, OCX 2027 call for proposals and the AI Policy and Compliance SIG.
26 October 2026Community news
Open Community Experience (OCX) returns to Brussels from 13 to 15 April 2027.
19 October 2026Announcement
Registration for Open Community Experience (OCX) 2027 is now open. OCX is the Eclipse Foundation's flagship annual open source developer conference, bringing together developers, maintainers and open source communities from across Europe and beyond.
The Apply AI Summit will gather high-level stakeholders – from industrial representatives, policymakers and startups – to accelerate AI implementation in strategic industries.
In this 40-minute technical session, SECURE invites the EU-funded OCCTET project to break down the legal obligations of open-source stewardship under the CRA and demonstrate how to automate compliance. Attendees will see how the ORT Server (OSS Review Toolkit) and the OCCTET …
In 6 years, Open Source Experience has become the essential annual open source event for digital sovereignty and the resilience of businesses and communities.
Copyright © Eclipse Foundation AISBL. All Rights Reserved.