Osprey Foundation

The Osprey Foundation

The Privacy-first Open Source Software standard.

POSS defines what "sovereign software" actually means. Vendor-neutral, globally applicable, and free forever — maintained by a foundation with no product to sell and no government to answer to.

Read the Standard Explore AERIE Join the community →

Why POSS exists

$600 billion spent on sovereign AI. Nobody agrees what "sovereign" means.

Every vendor defines sovereignty to include their own product. POSS is the neutral, testable definition — so "is this sovereign?" becomes a question with a verifiable answer.

Vendor-defined "Sovereign" means whatever closes the deal.
POSS-defined Ten principles. Independently verifiable. The same everywhere.

The standard

What POSS covers

POSS v0.1 · Draft
01 Privacy by Architecture Privacy enforced by architecture, not policy. 02 Self-Hostable as Primary Fully operable on infrastructure the user controls. 03 Sovereignty Beyond Data Residency Control, not just storage location. 04 Vendor Neutral by Design Replace any component without replacing the system. 05 Zero Telemetry, Zero Dark Patterns No surveillance, no manipulation. 06 Open Source as Default OSI-approved license, complete source. 07 No Open-Core Model No features withheld behind an enterprise edition. 08 Reproducible Builds & Supply Chain Integrity The source matches the binary, verifiably. 09 Interoperable by Design Open protocols and portable data. 10 Ethical Architecture Cannot be readily repurposed for mass harm.

Read the full standard

  1. 01

    Non-Commercial

    We exist to define a standard, not to generate profit.

  2. 02

    Non-Affiliated

    We belong to no government, no corporation, no movement.

  3. 03

    Non-Proprietary

    Everything we produce is open.

  4. 04

    Non-Extractive

    We never create artificial scarcity.

  5. 05

    Non-Permanent

    No single person should be irreplaceable.

Reference implementation

AERIE proves the standard works.

A local-first AI knowledge workspace — notes, document intelligence, and retrieval, running fully offline. No cloud, no accounts, no data leaving the device. A government CIO can verify POSS compliance in five minutes.

See AERIE

Latest

From the foundation

All posts →
Standard Announcing POSS: a standard for sovereign software May 29, 2026

Software sovereignty starts with a standard.

Read the Standard Get involved Contact the foundation