Double Open Compliance
The facts below are what the maker publishes about Double Open Compliance, checked and dated. Our editors have not written about it yet.
Plans and prices
From Double Open Compliance's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Double Open Compliance SaaS tier |
| Enterprise | Priced on request | MCP Server included · proprietary anchors supported |
| Pro | Priced on request | MCP Server included · available for SaaS or hybrid delivery |
The facts
Each one read from Double Open Compliance's own pages, with the date it was checked.
What it does
- Agent workflow
- AI agents act as junior curators and surface high-ambiguity exceptions for human verification or version-controlled pull requests.checked 30 Sep 2026
- API and identity
- The ORT technology stack used by Double Open provides a web UI, dashboards, REST API and identity management.checked 30 Sep 2026
- Compliance frameworks
- The platform addresses legal due diligence for the EU Cyber Resilience Act, NIS2 and DORA.checked 30 Sep 2026
- Data handling
- The service is intended for software component analysis and is not intended for storing personal or sensitive data.checked 30 Sep 2026
- Hosting and sovereignty
- Customer data is hosted in EU-controlled datacenters or on the customer's own infrastructure, supporting GDPR compliance.checked 30 Sep 2026
- Open source foundation
- The site's tools are built entirely on Apache-2.0 and MIT licensed open-source projects.checked 30 Sep 2026
- Performance
- Double Open Server provides global file-level caching that the site says enables 10x faster scanning.checked 30 Sep 2026
- Purpose
- Double Open automates software security and license compliance using deterministic filters and framework-anchored AI agents.checked 30 Sep 2026
- Repositories
- The service can manage projects from GitHub and GitLab, as well as projects in air-gapped environments.checked 30 Sep 2026
- SBOM formats
- The platform supports machine-readable SBOMs in CycloneDX and SPDX formats.checked 30 Sep 2026
- Scanning
- ORT Analyzer captures transitive dependencies according to how they are actually built.checked 30 Sep 2026
- Service availability
- Unless separately agreed, the SaaS service targets at least 99% uptime during regular business hours.checked 30 Sep 2026
- Vulnerability triage
- Its vulnerability triage ranks CVEs by code reachability and package roles and proposes evidence-backed resolutions.checked 30 Sep 2026
The company
- Headquarters
- Helsinki, Finlandchecked 28 Sep 2026
- Maker
- Double Open Oy is headquartered in Helsinki, Finland, and LinkedIn lists it as founded in 2023.checked 30 Sep 2026
Alternatives to Double Open Compliance
- 1
DeepFilterNet
Free planOpen sourceAPILinuxmacOSSelf-hosted7.6Free plan - 2
FOSSology
Free planOpen sourceWebAPILinuxmacOS7.5Free plan - 3
ScanCode.io
Free planWebAPILinuxmacOS7.0Free plan - 4
SourceTrust
Free planWeb6.7From $299 a year - 5
FOSSA
Free planWebAPILinuxSelf-hosted6.4Free plan - 6
DejaCode
WebAPILinuxSelf-hosted6.3From $500 a month