Discovery Service (BPN Finder) Release 23.12 Compliance Acceptance Criteria

[kelaja]

Release Compliance 23.12

Source in Catena-X Confluence + Expert Contacts here. (Source only accessible for Catena-X Consortia members in current transition phase)

• [x] Gaia-X compliance confirmed by dedicated expert.

  • Obtain approval from CX Gaia-X expert(s), prior to Gate review.
  • Provide info as early as possible; expect optimization loops based on feedback => check linked PDF summary for requirements (Source only accessible for Catena-X Consortia members in current transition phase).

  Contact:

  • Release Mangement

• [x] GDPR compliance confirmed (personal data; Data Protection & Privacy DPP)

  • assessment must be completed via Catena-X GDPR questionnaire (Source only accessible for Catena-X Consortia members in current transition phase.)
  • either the product/service doesn`t process any relevant data,
  • or - in case the assessment reveals potential issues - a more severe "Data Privacy Impact Assessment" shall be conducted (if applicable: robust mitigation actions must be completed) Provide evidence for GDPR compliance prior to Gate review. Previous assessments remain valid, as long as approach to handling of personal data was not changed.

  Contact:

  • Release Mangement

• [x] Interoperability Check

  Acceptance criteria are fulfilled as described in in the following area on confluence: Interoperability Quality Gate Requirements (Source only accessible for Catena-X Consortia members in current transition phase.)

  • Approval will be documented centrally by Expert(s)

  • Obtain approval from Interoperability experts prior to Gate review.

  Therefore consult the regular office hours as early as possible; expect optimization loops based on feedback. (Source only accessible for Catena-X Consortia members in current transition phase.)

  Contact:

  • SYSTEM ARCHITECT2

• [x] Data Sovereignty Check

  Acceptance criteria are fulfilled as described in in the following area on confluence:

  • Data Sovereignty Guardrails for Release 3.2 (Source only accessible for Catena-X Consortia members in current transition phase.)
  • Approval will be documented centrally by Expert(s)
  • Obtain approval from Data Sovereignty experts prior to Gate review: Experts will schedule a review with your team.

  Expect optimization loops based on feedback.

  Contact:

  • SYSTEM ARCHITECT3,
  • SYSTEM ARCHITECT4

• [x] Confirmation of published CX Standards

  Product Owner confirms:

  • The FOSS product under review is compliant to all relevant Catena-X Standards which are already published on the Association website.
  • Failure to do so may ultimately make the reference implementation useless, as the mandatory CX Certification cannot be accomplished.

• [x] Verification of foreseen CX Standards

  Product Owner confirms:

  • The content of upcoming CX Standardization Requests (STAN) has been reviewed and feedback was provided to the responsible PCA/BDA. As per current status, the FOSS product under review will be compliant as soon as the CX Standard is published. (Info here) (Source only accessible for Catena-X Consortia members in current transition phase.)
  • Minimum: PCA/BDA have finalized all release-relevant Standardization Requests (STAN). Those have passed the CX Association`s technical committee (TC4S) and are pre-published on the website. Opt-out period in progress.
  • Best case: Association Board approval available and CX Standard is published on website.

[bs-sili]

Release Mangement

• [ ] Gaia-X compliance:

No changes since Release 23.09. Gaia-X compliance is not relevant for BPN Discovery [Discovery Service (BPN Finder)].

[bs-sili]

Release Mangement

• [ ] GDPR compliance: No changes since Release 23.09. Catena-X GDPR Declaration and Requirements_V23.12_BPN Discovery.xlsx

[bs-sili]

SYSTEM ARCHITECT2

• [ ] Interoperability Check: Interoperability has be marked as "not relevant" for Release 23.09. Since then no changes have been made.

[bs-sili]

SYSTEM ARCHITECT3, SYSTEM ARCHITECT4

• [ ] Data Sovereignty Check:

No significant changes since Release 23.09.

[thomas-henn]

Confirmation of published CX Standards

Yes, confirmation that the BPN Discovery under review is compliant to all relevant Catena-X Standards which are already published on the Association website, especially the CX-0053.

[thomas-henn]

Verification of foreseen CX Standards

Yes, confirmation that the content of upcoming CX Standardization Requests (STAN) has been reviewed and feedback was provided to the responsible PCA/BDA. As per current status, the BPN Discovery under review will be compliant as soon as the CX Standard is published. (Info here) (Source only accessible for Catena-X Consortia members in current transition phase.)

[bs-sili]

Hi @kelaja ,

for the points:

• Interoperability Check
• Data Sovereignty Check
• Confirmation of published CX Standards
• Verification of foreseen CX Standards

The Expert is not defined / Expert Github account is not known, pls forward to expert. Many thanks!

[kelaja]

Interoperability Check. -> @HiHenrik Data Sovereignty Check -> tbd

thx @thomas-henn

[kelaja]

@thomas-henn @bs-sili For Data Sovereignty POs can do a self-declaration if products have not undergone any significant changes. See Links (available to Consortia Members only) 2023-11-20 Stay informed & Release 23.12 & 24.03

[bs-sili]

@kelaja Data Sovereignty Check has been updated.

[HiHenrik]

@kelaja Interoperability Check: Acceptance criteria are fulfilled as described in in the following area on confluence: https://confluence.catena-x.net/display/PL/Interoperability+Office+Hours+Backlog+-+QGate+Prep