Open public knowledge layer.
The Apeiris public knowledge layer — the 12 control domains, 72 control prefixes, attestation schemas, and the Evidence Fabric Specification — is published openly and is free to use, cite, and build on.
CC BY 4.0
The Apeiris public knowledge layer is licensed under Creative Commons Attribution 4.0 International (CC BY 4.0). You are free to share and adapt the material for any purpose, including commercial use, as long as you give appropriate credit to Apeiris.
Attribution: Apeiris Evidence Fabric — apeiris.ai
The Apeiris name, brand marks, domain identifiers, and attestation artifact schemas are copyright Apeiris. The license applies to the control framework content, not to the Apeiris brand or platform software.
Nothing to negotiate on the content itself.
Apeiris publishes the corpus under CC BY 4.0 rather than negotiating individual copyright licenses. Anyone who receives or accesses the licensed corpus receives the rights that license grants — commercial use, modification, redistribution — subject to its conditions. No separate agreement restricts those rights in the licensed material, and none is needed to use it.
Separate agreements cover what the public license does not: use of the Apeiris name and marks ("powered by" or logo display require written permission; conformance claims require a separate agreement), and commercial services — support, SLAs, hosted access, implementation, and the platform software. The corpus is open; the commercial offerings are the operational capabilities built around it.
Open does not mean anonymous — it means verifiable. Every artifact is SHA-256-pinned in an Ed25519-signed manifest; to rely on a copy as genuine, verify it against the published key. A copy that fails verification is not the Apeiris corpus, whatever it claims.
Three licensing domains, kept separate.
Content — the public knowledge layer (control matrices, crosswalks, coverage, schemas, graph, integration artifacts): CC BY 4.0.
Code — the consumer trust tooling that verifies and reads the corpus (@apeiris/verify, @apeiris/sdk, @apeiris/overlay): Apache-2.0, so any builder can adopt the verify path. The Apeiris platform software is proprietary and licensed separately.
Marks — the Apeiris name, logo, and domain identifiers are not licensed by CC BY 4.0 or Apache-2.0; brand use requires written permission via contact.