Open Source

Sovereign. Transparent. Community-Driven.

CRAFT is a digital public good. Both the software and the assessment framework are openly licensed so any institution can adopt, adapt, and extend them without vendor lock-in.

The Software

GPL-3.0

The CRAFT platform is released under the GNU General Public License v3.0, which guarantees that improvements remain free and open for the whole community.

The Framework

CC BY-SA 4.0

The ICARF v4.0 methodology, question bank, and scoring model are licensed under Creative Commons Attribution-ShareAlike 4.0: adapt freely, share alike.

Fork & Adapt

Tailor the question bank to your national context.

Public Good

Built for the commons, not for capture.

Attribution

Credit the DiBadili Institute; share derivatives alike.

Digital Public Goods Alliance · DPG Standard

Compliant with all nine DPGA indicators

The DPG Standard sets nine indicators a project must meet to be recognised as a digital public good. CRAFT satisfies each one in full.

01

Relevance to the SDGs

Strengthens institutional governance and accountability (SDG 16) and the partnerships that fund it (SDG 17).

02

Use of approved open licences

Software under GPL-3.0; the ICARF v4.0 methodology under CC BY-SA 4.0 - both on the DPGA-approved list.

03

Clear ownership

Copyright in the code and framework is held by the DiBadili Institute; institutional assessment data is owned exclusively by each institution.

04

Platform independence

Built on open standards (React, Postgres) with no mandatory closed dependency. Any institution can self-host the stack.

05

Documentation

Methodology, scoring model, question bank, and deployment steps are documented and openly published.

06

Non-PII data extraction

Aggregate scores and framework definitions export in open, non-proprietary formats; no personal data is required to reuse the method.

07

Privacy & applicable laws

Institutional data is encrypted, tenant-isolated, and governed by national data-protection law - never shared or repurposed.

08

Standards & best practices

Aligns with recognised governance frameworks (Global Fund, Pact OCA, OECD/G7 AI) and modern secure-by-default engineering.

09

Do no harm by design

Sovereign-data architecture, transparent scoring, and assessor accountability prevent extraction, surveillance, or punitive misuse.

Digital Public Good · Data Sovereignty

The Three-Layer Sovereignty Shield

Openness applies to the tools and the method - never to your institution's data. The Share-Alike obligation stops at the boundary of what you create.

Layer 1

Software

GPL-3.0

The platform code is open. Any modifications you deploy remain open for the community - the engine can never be captured or closed.

Layer 2

Methodology

CC BY-SA 4.0

The ICARF v4.0 framework, question bank, and scoring model are shared alike. Translations and national adaptations flow back to the commons so every institution benefits.

Layer 3

Institutional Data

100% PROPRIETARY

Your assessments, evidence, and scores are yours alone. The institution retains absolute, exclusive ownership. DiBadili has ZERO access, and the Share-Alike clause NEVER applies to your data.

Open engine, shared method, sovereign data - the foundation of a trustworthy public good.