[{"data":1,"prerenderedAt":529},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fabout":188,"sections:\u002Fabout":465,"feed:\u002Fabout":92,"fragment:collaborate-with-us":466},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"body":192,"breadcrumbTitle":191,"breadcrumbs":455,"date":456,"description":457,"extension":458,"featuredFooter":455,"header":191,"keywords":191,"meta":459,"navigation":92,"path":460,"redirectUrl":191,"rssFeed":191,"seo":461,"seoTitle":191,"socialImage":191,"stem":462,"typography":236,"visibility":191,"width":463,"__hash__":464},"pages\u002Fabout\u002Findex.md","About the Open Regulatory Compliance Working Group",null,{"type":193,"value":194,"toc":452},"minimark",[195,231,251,297,355,423,448],[196,197,198,202,208,217],"hero-split",{},[199,200,201],"p",{},"The Open Regulatory Compliance (ORC) Working Group is a global, industry-led collaboration helping organisations understand and implement open source compliance strategies under evolving regulations like the Cyber Resilience Act (CRA) without compromising open source innovation. We unite manufacturers, open source stewards, and maintainers to create practical, community-driven best practices for secure and resilient software.",[203,204,206],"template",{"v-slot:eyebrow":205},"",[199,207,53],{},[203,209,210],{"v-slot:actions":205},[211,212,215],"button-link",{"color":213,"href":8,"size":214},"secondary","large",[199,216,7],{},[203,218,219],{"v-slot:media":205},[220,221,224],"media",{"corners":222,"ratio":223},"medium","4:3",[199,225,226],{},[227,228],"img",{"alt":229,"src":230},"ORC Working Group members collaborating","\u002Fabout\u002Fimages\u002Fhero-front.webp",[232,233,241,246],"page-section",{"spacingBottom":222,"spacingTop":234,"titleStyle":235,"typography":236,"background":237,"decoration":238,"anchor":239,"titleAlign":240},"x-large","heading","editorial","light-teal","bubbles-top","what-we-do","center-narrow",[203,242,243],{"v-slot:title":205},[199,244,245],{},"What we do",[203,247,248],{"v-slot:intro":205},[199,249,250],{},"ORC helps organisations understand regulatory requirements for their open source software, prepare for key milestones, and implement risk-based security practices without slowing innovation. Our members collaborate to define clear, practical guidance tailored to the realities of open source development.",[232,252,254],{"spacingBottom":234,"spacingTop":222,"titleStyle":235,"typography":236,"background":237,"decoration":253},"bubbles-top-inset",[255,256,257,262,270,273,283,286],"media-split",{},[258,259,261],"h2",{"id":260},"a-community-for-today-and-tomorrows-challenges","A community for today and tomorrow’s challenges",[199,263,264,265,269],{},"While the CRA is our current focus, the ORC Working Group is structured to take on emerging compliance topics. Through ",[266,267,268],"a",{"href":60},"Special Interest Groups"," (SIGs), members can explore new regulatory domains as they arise, ensuring the community remains agile and responsive as global requirements evolve.",[199,271,272],{},"Examples of future SIG topics include:",[274,275,276,280],"ul",{},[277,278,279],"li",{},"Emerging AI regulations",[277,281,282],{},"Sector-specific compliance for automotive, industrial, and IoT",[199,284,285],{},"This structure ensures that ORC remains a long-term, future-proof collaboration.",[203,287,288],{"v-slot:media":205},[220,289,291],{"corners":222,"ratio":223,":elevated":290},"true",[199,292,293],{},[227,294],{"alt":295,"src":296},"A group of four people collaborating in a room. One person wearing an ORC sweater is writing stuff down on a whiteboard.","\u002Fabout\u002Fimages\u002Fcommunity.webp",[232,298,301,350],{"spacingBottom":234,"spacingTop":234,"titleStyle":235,"typography":236,"background":299,"anchor":300},"light-teal-to-white","whos-involved",[302,303,305,322,336],"grid",{":animate":290,"gap":214,"width":304},"bleed",[306,307,309,314,319],"card",{"variant":308},"minimal",[199,310,311],{},[227,312],{"alt":205,"src":313},"\u002Fabout\u002Fimages\u002Ficon-manufacturers.svg",[315,316,318],"h3",{"id":317},"manufacturers-software-vendors","Manufacturers & software vendors",[199,320,321],{},"Whether they build physical devices, integrate software into products, or deliver digital services, manufacturers bring critical real-world perspectives on how open source is used across products, platforms, and supply chains. Their perspectives ensure ORC’s work remains grounded in real-world production needs.",[306,323,324,329,333],{"variant":308},[199,325,326],{},[227,327],{"alt":205,"src":328},"\u002Fabout\u002Fimages\u002Ficon-stewards.svg",[315,330,332],{"id":331},"open-source-stewards-foundations","Open source stewards & foundations",[199,334,335],{},"Open source stewards and foundations provide essential insight into the governance, sustainability, and community dynamics of OSS projects. Their leadership ensures that regulatory approaches remain compatible with open source principles and support the long-term health of the ecosystem.",[306,337,338,343,347],{"variant":308},[199,339,340],{},[227,341],{"alt":205,"src":342},"\u002Fabout\u002Fimages\u002Ficon-developers.svg",[315,344,346],{"id":345},"open-source-developers-maintainers","Open source developers & maintainers",[199,348,349],{},"Developers and maintainers contribute deep technical knowledge of how open source is created, reviewed, and improved. Their experience ensures that best practices are realistic for contributors, respectful of community workflows, and supportive of secure, high-quality software development.",[203,351,352],{"v-slot:title":205},[199,353,354],{},"Who’s involved",[232,356,358,407],{"spacingBottom":234,"spacingTop":234,"titleStyle":235,"typography":236,"decoration":357},"bubbles-bottom",[359,360,361,371,379,387,395],"staggered-grid",{":animate":290},[306,362,364],{"variant":363},"tinted",[199,365,366,370],{},[367,368,369],"strong",{},"Provides an open forum for members"," of the open source community to organise, share, document, and develop best practices, and support each other.",[306,372,373],{"variant":363},[199,374,375,378],{},[367,376,377],{},"Collects and shares input and feedback"," in relevant legislative and standardisation processes.",[306,380,381],{"variant":363},[199,382,383,386],{},[367,384,385],{},"Develops specifications"," that can be transformed into standards recognised by legislators through relevant standardisation organisations.",[306,388,389],{"variant":363},[199,390,391,394],{},[367,392,393],{},"Creates additional materials to help with compliance",", such as guidelines, educational content, and specifications not designed for further standardisation.",[203,396,397,401,404],{"v-slot:intro":205},[258,398,400],{"id":399},"orcs-purpose","ORC’s purpose",[199,402,403],{},"The Open Regulatory Compliance working group supports all open source actors in understanding and meeting regulatory requirements. Our purpose is to strengthen the security, resilience, and long-term sustainability of the open source ecosystem through open, community-driven collaboration.",[199,405,406],{},"To achieve this, ORC:",[203,408,409],{"v-slot:footer":205},[199,410,411,412,415,416,422],{},"ORC strives to develop artefacts and best practices that help open source actors comply with regulatory requirements across jurisdictions.",[413,414],"br",{},"\nFor detailed information about our mission and governance, please refer to our ",[266,417,421],{"href":418,"rel":419},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fworkinggroups\u002Fopen-regulatory-compliance-charter.php",[420],"nofollow","Working Group Charter",".",[232,424,425],{"spacingBottom":234,"spacingTop":222,"titleStyle":235,"typography":236},[306,426,428,431,434],{"variant":427},"promo",[258,429,7],{"id":430},"get-involved",[199,432,433],{},"The ORC community is open to anyone committed to strengthening open source security and compliance.",[274,435,436,442],{},[277,437,438,441],{},[266,439,440],{"href":78},"Become a member"," to help shape shared best practices and guide the working group’s strategic direction.",[277,443,444,447],{},[266,445,446],{"href":8},"Contribute to our projects and SIGs"," to support practical guidance, tooling, and collaborative work that benefits the entire ecosystem.",[449,450],"content-fragment",{"name":451},"collaborate-with-us",{"title":205,"searchDepth":453,"depth":453,"links":454},2,[],"hidden","2026-04-17","The Open Regulatory Compliance (ORC) Working Group unites manufacturers, open source stewards, and maintainers to create practical, community-driven best practices for secure and resilient software.","md",{},"\u002Fabout",{"title":190,"description":457},"about\u002Findex","full","g1ItDcJgkNxJWbjQFjh7BdfzkESqC2xAutR-e2zTjPw",[],{"id":467,"title":468,"body":469,"description":191,"extension":458,"meta":524,"navigation":92,"path":525,"seo":526,"stem":527,"__hash__":528},"fragments\u002Ffragments\u002Fcollaborate-with-us.md","Collaborate with us",{"type":193,"value":470,"toc":522},[471],[472,473,475,478,482,495],"call-to-action",{"anchor":451,"variant":474},"fade",[199,476,477],{},"The Open Regulatory Compliance (ORC) Working Group is a neutral forum for the open source community — including foundations, maintainers, vendors, users, package managers, among others — and the broader software industry to facilitate CRA compliance.",[203,479,480],{"v-slot:title":205},[199,481,468],{},[203,483,484,490],{"v-slot:actions":205},[211,485,487],{"color":213,"href":78,"size":486},"responsive",[199,488,489],{},"Join the working group",[211,491,492],{"color":213,"href":8,"size":486},[199,493,494],{},"Participate",[203,496,497],{"v-slot:media":205},[498,499,500],"scrolling-carousel",{},[199,501,502,506,510,514,518],{},[227,503],{"alt":504,"src":505},"Members of the ORC community collaborating around a whiteboard.","\u002Fimages\u002Fcollaborate\u002Fcollab-1.webp",[227,507],{"alt":508,"src":509},"A speaker from the Eclipse Foundation welcoming an audience to the Code and Compliance Community Day.","\u002Fimages\u002Fcollaborate\u002Fcollab-2.webp",[227,511],{"alt":512,"src":513},"People navigating through the Code and Compliance event.","\u002Fimages\u002Fcollaborate\u002Fcollab-3.webp",[227,515],{"alt":516,"src":517},"An ORC booth where two people are talking to each other.","\u002Fimages\u002Fcollaborate\u002Fcollab-4.webp",[227,519],{"alt":520,"src":521},"A room full of people listening to a public speaker.","\u002Fimages\u002Fcollaborate\u002Fcollab-5.webp",{"title":205,"searchDepth":453,"depth":453,"links":523},[],{},"\u002Ffragments\u002Fcollaborate-with-us",{"title":468},"fragments\u002Fcollaborate-with-us","gG8FIA8I-TtZ0l99aIoCxIuORhd5DQl1COHOX3owFoQ",1792684537924]