OpenChain is a simple and effective standard defined by The Linux Foundation to ensure organizations have quality open source compliance programs. It provides requirements for policies, processes, training, and documentation for both inbound and outbound open source. While originally a de-facto industry standard, OpenChain will soon undergo formal standardization through the ISO PAS process to spread its adoption more widely and easily throughout global supply chains within 9 months instead of 3 years.

1. OpenChain as a Standard
OpenChain Project - The Linux Foundation
Available under the CC Attribution-NoDerivatives 4.0 International license.

2. The OpenChain Project defines the key requirements
for a quality compliance program.
2

3. OpenChain is a simple, effective standard for of all sizes
organizations in all markets.
3

4. 4
Training
Policy
Process
Inbound Outbound

5. Companies have the flexibility to decide the content of
each specific process, policies and training.
5

6. Today OpenChain is a de-facto industry standard.
6

7. Beginning in Q2 2019 OpenChain will move into formal
standardization via the ISO PAS Process.
7

8. This reduces the time for formal standardization from
36 months to around 9 months.
8

9. This process will assist in our mission to spread
OpenChain throughout the global supply chain.
9

10. We aim to make it as easy as possible for OpenChain to
be included in procurement contracts.
10

11. One member said “instead of four pages of open
source requirements in contracts I want to request
companies to be OpenChain Conformant.”
11