On 14 October 2026 the OpenChain Project welcomed Kibersigurnost EOOD, the publisher of Romfeya UBP, to its Community of Conformance. The company has self-certified that its programme for compliance with the licences of the open-source software used in Romfeya UBP meets ISO/IEC 5230:2020. The company is listed in the public OpenChain list, and the programme’s badge is shown on the home page.
What OpenChain is
OpenChain is a Linux Foundation project. It develops the OpenChain specification, also published as ISO/IEC 5230:2020 – the international standard for open-source licence compliance programmes. Among other things, the standard requires: a written open-source policy; roles, competence and awareness of the people involved, and time and resources for their work; a declared scope of the programme; a record of the open-source components in the supplied software within that scope and a review of the obligations under their licences; a process that fulfils those obligations when the software is supplied; and a publicly announced way for anyone to make an enquiry. The standard says what must be in place, not how to do it – every company applies it at its own scale.
How a company joins
By self-certification: the company answers the OpenChain questionnaire and confirms that its programme covers all the requirements of the standard.
By independent assessment: it can be obtained from a partner of the project through a short audit.
Conformance lasts 18 months from acceptance – in our case until 14 April 2028; to claim it beyond that, a new self-certification must be submitted or a new audit carried out.
We recommend the standard to every software company that uses open source – small ones included. The questionnaire is on the OpenChain page for ISO/IEC 5230, and the free Linux Foundation course “Introduction to Open Source License Compliance Management” (LFC193) is a good starting point – our own preparation went through it.
What it means for Romfeya UBP customers
Romfeya UBP is built partly on open-source components. The ISO/IEC 5230 programme means the company knows which they are and under which licences, fulfils the obligations under those licences and answers enquiries about them. Please send enquiries about the licences of the open-source components in Romfeya UBP through the contact form, stating “Licences” in the message.