CRA FAQ

All FAQs Categories Pending Guidance

How are security attestations and due diligence related?

This FAQ is a draft - it hasn't been reviewed by the FAQ Task Force. The answer may be incomplete or incorrect.

About

The CRA Hub is a community resource of the Open Regulatory Compliance (ORC) Working Group. It is built by UnlockOpen with direct funding from the Eclipse Foundation.

Website last updated on Monday, 3 November 2025 at 09:01 UTC.

Privacy

This website does not collect any personal information beyond what is collected by GitHub Pages for hosting purposes and Fathom Analytics for privacy-first website analytics.

Licenses & Trademarks

Copyright ORC WG Contributors.
Content: CC-By 4.0.
Source code: Apache License 2.0.
ORC WG logo and Orc Mascot are trademarks of the Eclipse Foundation (see policy).

Community Resources

CRA FAQ GitHub Repository
FAQ Task Force
Website source code
Website Style Guide
Open Regulatory Compliance WG
Contributors
Show admin info Hide admin info