convenor

Available (40)

Showing 1 - 12 per page



Alpo Värri

Description of Activities

CEN/TC251 Health Informatics is a standards delivery organisation, meaning that it approves standards in Europe, but the standards do not have to be created in Europe. In fact, many of them come from the global health informatics committee ISO/TC215. For this reason, it is important to monitor and contribute to the standards prepared in ISO/TC215. This is what the purpose of this fellowship was about.
ISO/TC215 has around 10 working groups (WGs) and CEN/TC251 has two. I am the convener of the second one and I try to follow those ISO/TC215 WGs that operate within the scope of my WG in CEN/TC251. This is not always easy because the ISO/TC215 WG meetings take place at the same time. In ISO/TC215 I participate mainly in interoperability, information security, and health software development areas.
Artificial Intelligence (AI) is coming to healthcare, too. As I have AI experience through my doctoral studies and projects that followed, it has been natural for me to follow AI standardisation, too. The ISO/TC215 meeting in Toronto in October 2025 made it clear that the number of AI related work items is increasing in ISO/TC215. ISO/TC215 has a joint working group 3 (JWG3) with JTC1/SC42 Artificial Intelligence. The idea is that the ISO/TC215 AI work items are developed in this JWG3. Attendance in JWG3 is important also because I am a member of the CEN Strategic Advisory Group on AI in healthcare.
During the ISO/TC215 Toronto meetings in October 2025, SC42 held its meetings in Sydney, Australia. After the working day was over in Toronto, work began in Sydney in Toronto evening time. I participated in particularly the healthcare AI standards development JWG3 and SC42/WG4 Use Cases meetings virtually in Sydney. Attendance in JWG3 meetings was important to motivate the ISO/TC215 initiated standardisation projects to the SC42 leadership. Through my participation, the other parties became more aware of European values in AI standardisation.
 

Country
Finland
Impact on SMEs (9th Open Call)
Due to my background in the university, I look for opportunities to commercialise the results of our research projects in a start-up company. When I have this approach in my mind, I try to contribute to the standards in such a way that that their implementation does not require a large organisation. For example, this week I commented in a AI Risk Management System standard comment resolution meeting that this form of requirements means that the company has to have at least four people to be able to comply with the standard.
Impact on society (9th Open Call)
Information technology supports the delivery of healthcare, making it safer, more effective and patient-friendly by making the personal health information accessible to the patients themselves. The standardisation work in ISO/TC215 supports these developments.
Open Call
Organisation type
Organization
Tampere University
Portrait Picture
Alpo Värri
Proposal Title (9th Open Call)
Participation in the ISO/TC215 Health Informatics meetings in Toronto October 2025
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Topic (9th Open Call)

Ismael Arribas

Description of Activities

This fellowship supports my role as a convener of ISO TCC307 WG3. The priority is to organise the appropriate ballots and meetings to allow the experts to discuss and reach a consensus based on the comments received for the projects in ISO TC 307 WG3. Another priority is to complete the norms with the attendance list and verify that all experts in the meeting were duly registered in the portal and authorised to participate in the meetings.

One of the main challenges of this work has been overcoming the cultural barriers and language differences encountered during this period, particularly through various meetings and ad hoc meetings for the three projects, which are ongoing in preparation for the final stage to publication. 

Country
Spain
Impact on SMEs (9th Open Call)
Smart contracts are a fundamental enabler for developing with other technologies. In particular, the taxonomy and classification of smart contracts will contribute to understanding the scope within the Data Act and avoid confusion with some smart contracts that are not limited to the scope of the Data Act, thereby making it more comprehensive for the Digital Single Market and future strategy. The context of the EUDIC, EBSI, and other advancements for smart communities will gain a clear perspective with the technical specification TS 18126 (Taxonomy and classification for smart contracts).
In addition, the Sustainable Development Goals, which many projects of SMEs and other European societies are pursuing, will have guidance on how smart contracts are contributing to achieve the SDGs; this will be a Publicly Available Specification (PAS) 24874 (Guidance on the use of smart contracts in contributing to the Sustainable Development Goals (SDGs)).
Open Call
Organisation type
Organization
kunfud
Portrait Picture
Ismael Arribas
Proposal Title (9th Open Call)
ISO TC 307 Convenor WG3 Smart Contracts and its applications
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026

Kira C. Lemke

Description of Activities

In the framework of this fellowship, I worked on a Technical Report (TR) that addresses critical gaps and challenges in the international standards landscape for digital content identification and binding mechanisms.
The absence of a common terminology across standardisation communities poses a major challenge. Different communities use inconsistent language when describing how content is connected with its metadata or other associated information. Whereas the C2PA initiative uses its own distinct terminology, other standardisation communities (e.g. W3C or OAIS) have different interpretations of what bindings mean. This terminological divergence leads to interoperability and mutual understanding barriers. The TR is establishing a comprehensive taxonomy that provides a neutral reference framework for multiple standardisation efforts, facilitating clearer communication across standardisation communities.
A gap the TR is addressing, is the limited comprehension of how binding mechanisms respond to content transformations. Digital content undergoes frequent alterations through compression, format conversion, and editing. Traditional identifier systems often fail when these changes occur, particularly when embedded metadata is stripped. The Working Group systematically analyses characteristics and limitations of different binding approaches, from cryptographic hashing to robust fingerprinting to watermarking techniques. This analysis will help stakeholders to make informed architectural decisions tailored to their specific requirements.
Moreover, the fellowship further contributes to positioning the recently published ISCC standard (ISO 24138:2024) within a broader global context. The TR serves as an educational resource, helping stakeholders understand how similarity-preserving identification methods complement established identification systems and address emerging needs in content provenance and authenticity verification, particularly relevant with current growth of AI-generated content.
 

Country
Germany
Impact on SMEs (9th Open Call)
The TR will guide SMEs in understanding binding mechanisms: structural (metadata embedding), semantic (descriptive relationships), algorithmic (hashes, content-derived identifiers), and resolvable (URLs, DOIs).
In terms of applications, an Italian start-up, amlet.ai, adopted ISCC (one algorithmic binding approach examined in the TR) for their TDM registry. Also, Dutch liccium.com implements ISCC for decentralized content registration and rights management. Estonian valunode.com uses ISCC in their decentralised content management solutions. These implementations exemplify relevance across AI/TDM, rights management, and digital content workflows.
In terms of Impact, the TR clarifies how embedding, watermarking, fingerprinting, and cryptographic approaches differ in robustness and workflow requirements, helping SMEs make informed decisions and build expertise. Content-derived methods computing identifiers locally enable GDPR-compliant implementations without centralised tracking, supporting digital sovereignty.
Impact on society (9th Open Call)
I can see several societal impacts for this work, including:
Digital Trust and Information Integrity: The TR systematically documents capabilities and limitations of different content binding mechanisms and enables an informed selection of appropriate trust mechanisms, critical for democratic processes and media trust in the AI era.
Data Sovereignty and Privacy: The analysis of decentralised identification methods directly supports European digital sovereignty principles and GDPR compliance. By documenting alternatives to centralised tracking, the work enables implementations where rightsholders maintain control over digital assets while supporting privacy-by-design standards, addressing fundamental European values around data protection.
Open Call
Organisation type
Organization
Craft AG
Portrait Picture
Kira C. Lemke
Proposal Title (9th Open Call)
ISCC and other methods for binding in information identification
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026

Nicolas Treves

Description of Activities

This was a short-term fellowship supporting my convernorship. During the period, I contributed to the following activities: 
Ensuring the sustainability of the standards developed within the IEC/JTC1/SC7/WG19 working group,
Identifying existing difficulties and proposing solutions to resolve them,
Raising awareness among the various members of the working group of the need to use OSD in future standards development,
Coordinating actions with the WG19 secretary and reporting to the SC7 secretariat.
 

Country
France
Impact on SMEs (9th Open Call)
The standards considered in WG19 are of great interest to the EU airspace, transportation, aviation, defence, energy and telecommunications industries, as well as for the universities that have contact with IT tools development companies in the area of systems formal verification. The use of these standards could have an impact on EU SMEs, particularly on IT tools editors, but it is not a priority.
Open Call
Organisation type
Organization
RDT Consulting
Portrait Picture
Nicolas Treves
Proposal Title (9th Open Call)
Coordinate the ISO-IEC/SC7 Standards in the area of Techniques for Specifying IT Systems
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Topic (9th Open Call)

Emilia Tantar

Fellow's country
Impact on SMEs (7th Open Call)
A clear, actionable EN AI Conformity Assessment standard makes compliance with the EU AI Act far easier and less costly for smaller companies. With a coordinated set of standards instead of a fragmented landscape, SMEs save time, reduce legal uncertainty, and avoid investing in multiple overlapping compliance tools. This streamlined approach supports faster product deployment, lowers administrative burden, and enables SMEs to build trustworthy AI solutions that meet European requirements from day one.
Impact on society (7th Open Call)
A unified set of AI conformity standards strengthens public trust in how AI systems are developed, assessed, and deployed. By making risk management transparent and consistent, these standards help ensure that AI used in critical domains is safe, fair, and reliable. A coordinated framework also enables early detection and mitigation of societal risks, fostering a resilient AI ecosystem where innovation happens responsibly and benefits reach citizens, public services, and the broader European economy.
Open Call
Organisation type
Organization
Luxembourg House of Cybersecurity
Portrait Picture
Emilia Tantar
Proposal Title (7th Open Call)
Progress and lead deliver to enquiry of EN AI Conformity assessment and supporting standards
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Topic (7th Open Call)

Monika Heyder

Fellow's country
Impact on SMEs (7th Open Call)
The work supports the better integration and alignment of two key European ambitions under the Green Deal: becoming climate-neutral and advancing digital transformation. Our local and regional governments (LRG) are at the heart of this transformation. LRGs are responsible for organizing the topic of smart cities in spin-offs, and LRGs are the places that use our society.Also, our goal is to build and consolidate synergies with existing European initiatives, programs, and platforms focused on advancing climate-neutral and smart cities.Such as , engagement with ClimateView that is a Stockholm-based climate tech SME founded in 2018. The company provides ClimateOS, a software platform that supports municipal governments in planning, modeling, monitoring, and financing climate-neutral and smart city transitions.
Impact on society (7th Open Call)
The work supported the societal impact of standardisation by helping to anchor the twin transitions, digital and climate, in the real needs of cities and communities, where societal change is most visible and immediate. Cities are the spaces where challenges are experienced firsthand and where solutions must be effectively implemented. By strengthening their involvement in the standardisation process, we ensure that the resulting standards are not only technically sound but also socially relevant and fit for purpose. Local knowledge is essential for identifying practical needs and streamlining resources, enabling standards that deliver real value and promote efficiency. This approach also strengthens Europe’s global leadership by aligning strategic innovation with on-the-ground implementation.

The continued and active participation of representatives from associations, cities, and communities underscored the strong interest in and perceived relevance of this work to address pressing challenges. Beyond the core topics of digitalisation and climate change, we also addressed issues such as procurement, nature-based solutions, and the nature-positive economy. A representative from the Tiliria Region (Cyprus) highlighted the importance of recognising and integrating historical knowledge as a distinct asset for addressing energy and water shortages and building more resilient societies. Inspired by these debates, the Cypriot Mirror Committee will launch a new standardisation project to develop a standardised Climate City Contract for Cyprus, which will serve cities and communities in creating broad coalitions and help address climate change more systematically.
Open Call
Organisation type
Organization
ICLEI Europe
Portrait Picture
Monika Heyder
Proposal Title (7th Open Call)
CEN/TC 465 Ad hoc Group “Climate-Neutral and Smart Cities
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Topic (7th Open Call)

Maxime Lefrançois

Fellow's country
Impact on SMEs (7th Open Call)
The contribution may have an indirect but positive impact on both European SMEs and societies. For SMEs, especially those in IoT or data interoperability, improvements to the SAREF framework and tools could simplify the reuse of standards and reduce the effort to contribute new domain-specific content. By streamlining documentation and validation workflows, the project may lower technical barriers and help smaller organizations align with semantic standards. For European societies, SAREF is used in domains of public interest—such as energy efficiency, smart cities, and environmental monitoring. Enhancing its quality and maintainability may support more interoperable and sustainable digital solutions over time. Though effects are not immediate, the project strengthens infrastructure that can benefit societal initiatives based on interoperable data.
Impact on society (7th Open Call)
The SAREF ontology suite suffers from inconsistencies across extensions, due to historically parallel development efforts. While recent STFs (641, 653) addressed these through new ontology patterns and a revised framework, important steps remain unfunded: publication of updated documentation, integration of conformance checks, and automation of ETSI specification generation.
With this fellowship, I directly support the ICT Rolling Plan's "Key Enablers – Data Interoperability" priority. This activity enhances semantic interoperability in IoT contexts, ensuring continuity in the evolution of a foundational European ontology standard (SAREF). It also aligns with EC expectations for faster standard evolution and broader stakeholder involvement, notably in sectors such as smart cities, energy, and digital twins.
The main challenge is sustainability: reducing the manual effort needed to maintain and extend SAREF. The current publication workflow lacks automation and centralization, leading to delays and fragmentation. The revision of the SAREF Pipeline software and the automation of specification generation are technically complex due to the lack of existing tools for parsing OWL ontologies into ETSI-compliant documents. This proposal addresses these challenges through targeted, expert-driven development efforts, based on proven tools and methods already piloted in past STFs.
Open Call
Organisation type
Organization
MINES Saint-Étienne
Portrait Picture
Maxime Lefrançois
Proposal Title (7th Open Call)
Improving the ETSI TC SmartM2M SAREF publication framework and workflow
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Topic (7th Open Call)

Torbjörn Lahrin

Description of Activities

Local Digital Twins will be a fundamental building block for CitiVerse. It will also play a crucial role for anyone in the public sector who wants to fully utilize the usage of AI.
Today, cities, regions and countries all over the world are building Local Digital Twins using various tools and approaches. Game engines, CAD tools, GIS, AR/VR/XR tools, Urban Digital Platforms, CIM and other visualisation tools are used. Thus a wide spread of technologies and standards. 
Interoperability for Local Digital Twins (LTD) is crucial. They need to fit horizontally and vertically. Horizontally is to put a LDT of one city next to a LDT of another city and make them align. Vertically, by example, a LDT produced by a city must fit LDT from public transportation and LDT by the energy company for the same geographical area, etc. 

European CitiVerse will be built upon Local Digital Twins. If separate Local Digital Twins in Europe don't fit together it will be impossible to create a seamless CitiVerse. It will also be difficult with interoperability between LDT:s. The LDT also needs interoperability versus dataspaces and IoT. For a LDT:s to be useful for officials and others, LDT:s need interoperability with the business operating systems used by officials on a daily basis. 

In this sense, in the framework of my fellowship, my JWG has sent a survey to many major LDT projects around the world, and we are now gathering the results and statistics.  The result will be a gap analysis and a technical report, which will enable advice to all relevant major SDO:s on how to develop or change their standards to fit better together. 

Fellow's country
Open Call Topics
Impact on SMEs (7th Open Call)
Investing in Local Digital Twins and CitiVerse is today rather challenging. All technologies for creating LDT:s or CitiVerse have their strengths and weaknesses. Any investment made today is therefore associated with a rather high degradation of uncertainty. Still, the SME:s and Europe must invest already now in these technologies to have a chance to be “on the train” and ahead in the competition. However, this also comes with a large risk that European SME:s and, in the broader scope, the European societies to some extent might find themselves investing in the “wrong” direction with techniques and methods that will not be long lasting.
To know what other actors are doing all around the world will help stakeholders to navigate and to invest in “right” directions with long term safer investments. Once we get an international reference architecture for LDT:s in place this will give even more security for those parties following the international standard.
Impact on SMEs (9th Open Call)
Investing in Metaverse and CitiVerse is today rather challenging. All technologies for creating Metaverse, CitiVerse and underlaying Local Digital Twins have strengths and weaknesses. Such investments are therefore associated with a rather high degrade of uncertainty. Still, the SME:s and European societies must invest already now in these technologies to have a chance to be “on the train” and ahead in the competition. Also for implementing various parts of CitiVerse related to EU calls. However, this come with a large risk investing in the “wrong” direction with technique and methods that will not be long lasting.
Because of this European SMEs and societies will benefit from the creation and coordination of standards for Metaverse. They will also benefit from gaining knowledge about the international standardization, as such knowledge will help SME:s and societies of Europe to navigate and to invest in “right” directions with long term safer investments.
Impact on society (9th Open Call)
The work is laying the foundation for uniting the world in how to build Local Digital Twins (Urban Digital Twins and City Information Modelling) and how to make these interoperable with each other both horizontal, vertical and towards underlaying data sets and daily operation systems of cities and other authorities. It is also paving the road for how Local Digital Twins can be used as the foundation for building CitiVerse.
Open Call
Organization
Lahrin i Hajstorp AB
Portrait Picture
picture
Proposal Title (7th Open Call)
GAP Analysis, Reference Architecture and Ontology for Local Digital Twins
Proposal Title (9th Open Call)
JTC1 CG2 - Strategic Coordination Group on Metaverse
Gap analysis, reference architecture and ontology for local digital twins
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Year
Topic (7th Open Call)
Topic (9th Open Call)

Caroline Thomas

Description of Activities

The priority aims to support the development of European and international standards for DLT/blockchain technologies to ensure transparency in sustainable financing. This contribution brings together the financial, reporting and new technologies to address the gaps between these three sectors.
The challenge for sustainable finance is to minimise the risk of 'greenwashing’ and provide better reporting for the Sustainability sector, ESG investment and Net Zero climate goals and new EU Reporting regulations.
It includes standards development to combine blockchain/DLT Use Cases reflecting sustainable solutions, while the sustainable finance standards cover Terminology and reporting guidelines, and the financial services consider digital currencies and tokenisation.

This contribution aligns with the European Standardisation initiatives, including the effective delivery of ESG investment strategy and Net Zero climate goals, along with the new EU Climate and Sustainable Reporting legislation in 2024 /2025.
 

Fellow's country
Impact on SMEs (7th Open Call)
This contribution brings together the financial, reporting and new technologies that impact European societies, and bring opportunities for SME innovation. Examples include:
Climate resilience: Extreme weather events across Europe and globally in 2024/25 saw a seismic shift in climate impacts on societies. B/DLT technologies provides a track record of immutable data sources to help historical measures and help European societies and governments to plan for future climate resilience.
New technologies: The accelerating shift in global tech eg: AI and crypto-currencies, is setting revolutionary opportunities and challenges to European laws, ethics and societies. B/DLT enables immutability, trust in distributed systems and change management in mass data storage.
New Regulations: New standards in Terminology and B/DLT technologies contribute to the new EU Sustainable Reporting legislations, by providing ESG traceability eg: accurate carbon emissions for businesses.
Impact on society (9th Open Call)
This new work is necessary to address the urgent shift in international technology advances, such as AI. tokenisation and crypto-currencies, that may provide potential challenges to European laws, ethics and societies. Standards can provide trust in an environment of AI-generated fake news.
For example, the work on ISO/AWI 24982 Digital currencies — Vocabulary helps define a common international language for business and societies, to create an interoperable financial system in digital currencies. Or the work on — ISO/WD TS 32219 Sustainable Finance — Terminology helps define a common international language for business and societies, across these regulations and business reporting.
This Standards work in blockchain and DLT can help inform businesses, SMEs and societies by providing insights in guidelines to enable adoption, trust and scale in their businesses and networks.
Open Call
Organization
ISO
Portrait Picture
picture
Proposal Title (7th Open Call)
Standards development in blockchain and DLT that contribute to Sustainability
Proposal Title (9th Open Call)
Standards development in blockchain and DLT and finance that contribute to Sustainability
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Year

Jean-Pierre Quémard

Description of Activities

In this fellowship the original objective is to start to prepare a NWI to address the age approriate topic and start the standard development. The aim is to improve the benefits and reduce the risks in the digital world for young users up to the age of 18. The solution is to adapt the content delivered by online products and services according to the age of users. Moreover, the process requires establishing the age/capacity of users, including age verification and age estimation. The CWA does NOT define age estimation and verification processes (Out of scope) but requires to select an appropriate age assurance tools/approach in conformity with established standards and official guidance.

Fellow's country
Impact on society (7th Open Call)
Need for an EN: Many organizations engage with children intentionally; others engage with children in the course of their general activities. In each case the organization has a responsibility to that child to provide an age-appropriate service. This is not a marginal market, as one in three users is under 18.
The target stakeholders of this standard are society-wide: governments and policymakers; international institutions and civil society organizations; business and tech sector especially digital service providers; parents, teachers, and children.
The protection of children in the ICT world is a key issue and three domains are to develop complementary; including, age appropriate this work item, Age Assurance and Age verification. The two last topics are managed at ISO/IEC/JTC1/SC27/WG5 level the delineation between the three topics is important
Open Call
Organisation type
Organization
Kuzul An Traezehnn
Portrait Picture
Jean-Pierre Quémard
Proposal Title (7th Open Call)
Age appropriate standardisation
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Year

Mohamed Khemakhem

Description of Activities

 It aims to develop technical specifications and standards to efficiently manage terminology work ensuring seamless information exchange, minimizing misunderstandings, and enhancing both human-human and human-AI interactions.

Fellow's country
Impact on SMEs (6th Open Call)
My contribution benefits European SMEs and societies by advancing the integration of TM and AI, addressing challenges in communication, efficiency, and inclusivity while aligning with global standards like ISO. For SMEs, this project provides at this stage guidelines and recommendations for accessible AI techniques that are aligned with TM standards and practices, enabling cost-effective automation of terminology processes and improved productivity. SMEs in specialized sectors (e.g., biotech, fintech) and transversal fields (e.g. translation, interpretation) gain better insights for handling domain-specific terminologies, enhancing competitiveness in European and global markets.
Impact on SMEs (7th Open Call)
For SMEs, this work reduces adoption barriers by clarifying AI-related standards (e.g. AI Act, GDPR, ISO/IEC), mapping practical use cases, and addressing gaps in tools, skills, and compliance knowledge. This helps smaller organizations implement trustworthy AI solutions aligned with European norms without needing large technical teams.
Impact on SMEs (8th Open Call)
Yes, my contribution positively impacts both European SMEs and societies. The Technical Report ISO/AWI TR 25896 provides practical, standards-aligned guidance on integrating AI into terminology workflows, helping SMEs—especially in language services, translation, and AI-adopt advanced technologies efficiently and responsibly. It lowers technical barriers, supports scalability, and promotes competitiveness across multilingual markets.
Impact on society (6th Open Call)
For European societies, the project addresses ethical AI concerns like bias and transparency, ensuring responsible adoption in domains like healthcare, law, and education.
Impact on society (7th Open Call)
For European society, we foster ethical, transparent AI integration in sectors like healthcare, governmental services and justice. By involving diverse stakeholders, we ensure solutions address real needs, safeguard rights, and reflect EU values. Our approach supports innovation while reinforcing public trust in AI, making deployment more inclusive and impactful across communities.
Impact on society (8th Open Call)
This initiative helped position WG 6 as an essential platform at the crossroads of AI and linguistic standardization. It supported Europe’s role in leading the development of valuedriven digital standards aligned with ethical principles, interoperability needs, and the goal of a multilingual digital space. For European societies, the TR encourages trustworthy and ethical AI adoption by addressing issues like explainability, data quality, and inclusiveness. It supports transparency and linguistic accuracy in domains such as healthcare, public services, and education, aligning with core European values and fostering public trust in AI-driven tools.
Organisation type
Organization
MandaNetwork
Portrait Picture
Mohamed Khemakhem
Proposal Title (6th Open Call)
Exploration of the mutual benefits between Terminology Management (TM) and Artificial Intelligence (AI)
Proposal Title (7th Open Call)
Support for activities as the Convenor of AFNOR/X03A GE IA “IA, Langues, Langage et Terminologie”
Proposal Title (8th Open Call)
Support for activities as the Convenor of the ISO/TC 37/SC 3/WG 6 “Terminology Management and AI”
Support for activities as the Project Leader of the TR “AI for Terminology Management”
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Year
Topic (6th Open Call)
Topic (7th Open Call)

Philippe Ombredanne

Description of Activities

The gaps that this fellowship enables me to address has been to dedicate solid time first for the ECMA meetings that I convened, but also for the community background work that needs support and attention. The priorities are to users the creation of the core specifications for ECMA approval, which has been challenging because of the influx of attention on PURL for SBOM and CRA compliance. The challenge from PURL getting increased attention meant needing to cater to new contributors and supporting long debates and addressing objections, in particular on topics like character encoding.

Fellow's country
Impact on SMEs (7th Open Call)
PURL makes it easier to integrate multiple SBOM tools for CRA compliance, lowering the costs of compliance for SMEs.
Impact on society (7th Open Call)
The expected impact of this project to usher PURL standardization will significantly improve the accuracy of how free and open source software packages are identified and reported in SBOMs. Software developers - both of open source projects and commercial software vendors - will be able to rely on a stable and widely-accepted international standard, across tooling and data for Software Composition Analysis (SCA), SBOMs, and open source compliance. This will greatly improve the overall security posture of any software using free and open source software packages which itself is the vast majority of software. As a universal identifier for packages, PURL enables the exchange of software inventories across partners in the software supply chain and SCA and SBOM tooling and data. This makes PURL the foundation of all SBOM and VEX standards, which are critical for cybersecurity and essential for compliance with upcoming regulations like the European Union's Cyber Resilience Act. Any recipient of an SBOM can rely on PURL as the unique identifier to query vulnerability databases for package metadata and other information about the package used in the software product or service.
Open Call
Portrait Picture
Philippe Ombredanne
Proposal Title (7th Open Call)
Standardize Package-URL (PURL): From community de-facto to international Ecma standard
Role in SDO
Standards Development Organisation
StandICT.eu Year
2026
Year