- Published fact
- In progress
SBOM: Available
Self-assessed by IdeaScore. Not certified by an outside body.
A list of the open-source and third-party components inside IdeaScore, with their versions.
In place
- Every frontend and backend component is pinned to an exact version, so the bill of materials matches what runs.
- A bill of materials in the CycloneDX format covers the backend and the frontend: each component's name, version and package address. We generate it at release time. Last generated on 7 November 2026.
Work in progress
- Dependency vulnerability reports, with a fix or a written reason for each high finding.
Evidence
- SBOM (CycloneDX JSON)Published
Limits
- The bill lists the components IdeaScore is built from. It does not list our hosting providers' own software; those providers are on the Sub-processors page.
- Between releases it describes the most recent release.
Bring Your Questions to a Product Specialist
A 30-minute walkthrough of the Trust Centre, the Data and Privacy card and the Decision Trail, with your committee's questions.