In my post Seminar “Open-Source Management in Software Supply Chains” five weeks ago, I wrote that the “TÜV is working on […] an external certification but it is not ready yet.” TÜV Süd was busy and became the first third-party authority to certify OpenChain compliance. TÜV Süd certified Hitachi that they have a process in place to ensure that their products comply with FOSS licenses.
So far, companies could only certify themselves according to the OpenChain Specification. Now, companies are certified by a third-party authority.