OpenChain – Building Trust In The Supply Chain Since 2016

OpenChain has an extensive global community of over 1,000 companies collaborating to make the supply chain more trusted, more effective and more efficient. Everyone is invited to be part of what we do. There are no restrictions to join our mailing lists, our calls and most of our events.
OpenChain is also a gateway into the larger governance and management ecosystem for open source. We work with our sister projects at The Linux Foundation like SPDX (SBOM), OpenSSF (Security), TODO Group (OSPO) and CHAOSS (Metrics) to improve business management of open source. Examples include collaboration with OpenSSF on the Global Cyber Policy Working Group and integration with the Open Source Project Security Baseline (OSPS Baseline), or with TODO Group for OSPOlogy Live events.
You can learn more n our Frequent Questions page.
The international standard for open source license compliance programs
The industry standard for open source security assurance programs
Whether you want to adopt the industry standard processes for open source license compliance or open source security assurance, we are here to help. The OpenChain Project provides free, simple checklists to help you self-certify for ISO/IEC 5230 (license compliance) or ISO/IEC 18974 (security assurance). These are suitable for organizations or projects of all sizes in any industrial sector.
We understand that implementation can be a challenge for any process. While our standards do not dictate that you follow one implementation path, we have worked with our community for many years to provide you with plenty of examples. These are designed to help support and inspire your journey to more effective open source management.
Check out the OpenChain Reference Library on GitHub
We use CC-BY-4.0 for our specifications We use CC-0 for reference material We use The Linux Foundation anti-trust policy We use The Linux Foundation Events Code of Conduct
© 2026 OpenChain. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page. Linux is a registered trademark of Linus Torvalds. Privacy Policy and Terms of Use