Terms and download use

The content is a general reference for software composition, product cybersecurity and procurement. It does not determine legal duties for a particular product or contract and is not medical advice. Check current primary authorities and obtain the organization’s appropriate professional review for consequential decisions.

You may download, copy and adapt the original buyer CSV resources for your organization’s internal evaluation and procurement. Retain the source URL and date in adapted copies. Do not present a modified resource as an official government or standards-body document.

The original site material is provided as a starting point without a guarantee of completeness or suitability for a particular transaction. No vendor performance, security outcome or regulatory acceptance is promised. Third-party sources, trademarks and standards remain subject to their owners’ rights and terms.

External references and format versions can change. Review dates describe this edition’s checks, not continuous monitoring. The initial site provides no lead-matching service, advisory engagement or vendor partnership. Terms date: October 4, 2026.