Open Source
Built in the Open.
Owned by No One.
All Core modules are MIT-licensed. Read the code, fork it, deploy it, improve it. DPP infrastructure is too important to be locked behind a proprietary wall.
Why Open Source for DPP?
Digital Product Passports will touch every manufacturer in Europe. The data models, compliance rules, and interoperability standards need to be auditable by everyone — regulators, industry bodies, civil society.
Proprietary DPP platforms create fragmentation and lock-in at exactly the moment the EU is trying to standardise. We believe the infrastructure layer should be a shared public good.
MIT license means you can use tap2.cloud Core in commercial products with zero royalties. Fork it, customise it, keep it private if you need to. The only thing we ask: contribute improvements back when you can.
Auditable compliance logic
Regulators and notified bodies can inspect exactly how our compliance engine interprets the delegated acts.
True interoperability
Open data models mean your DPPs can be read by any compliant platform — no proprietary format lock-in.
No vendor risk
If tap2.cloud ever ceases to exist, you have the full source code. Your compliance infrastructure doesn't depend on our survival.
How to Contribute
Three ways to get involved — pick the one that fits your time and skills
Report & Discuss
Open a GitHub Issue for bugs, regulatory inaccuracies, or feature requests. Start a Discussion for broader architecture questions. No code required.
Open an IssueFork & Fix
Fork the repository, make your change on a branch, and submit a pull request. All PRs receive a code review within 5 business days. See CONTRIBUTING.md for coding standards.
Fork on GitHubJoin the Core Team
Regular contributors with 5+ accepted PRs can apply for core maintainer status — with write access to the main repository and a voice in roadmap decisions.
Join DiscussionsRepository Structure
Each module ships as an independent package — use only what you need
tap2cloud/core MIT DPP Core, Data Model Registry, Identity & Access, Audit Log, Compliance Engine, QR/NFC Issuer, Supplier Data Intake, Public Product View
tap2cloud/extended Commercial Bill of Materials Linker, Certification Vault, Report Generator, Recycler API. Source available; usage requires a Managed Cloud or Private Cloud subscription.
tap2cloud/enterprise Enterprise Cross-Actor Messaging, Third-Party Verification, Regulator Dashboard. Enterprise license only.
tap2cloud/schemas MIT Industry-specific data schemas (JSON Schema + JSON-LD context). Battery, textiles, tyres, furniture, cosmetics, toys. Always open — interoperability first.
Star the repo. Fork the code.
Every star helps others find the project. Every fork is a potential contribution back to the community.