In response to an unprecedented pace of technological change and an increasingly complex environment, countries and customers are seeking greater reliability and resilience across technology providers and the services they deliver. As global technology providers committed to security, open innovation and upholding shared values, we recognize that a shared commitment of principles based on trust is critical to realizing the full benefits of technology to drive job creation and economic growth across the globe.
To be agents for strong economic growth, for the creation of jobs, and for secure and resilient technology that reaches every country and company we serve, global technology providers must collectively articulate and provide a truly trusted technology stack, with key attributes based not on the nationality of the supplier but rather on the commitments we make to our customers.
In pursuit of these goals, the undersigned technology providers commit to adhere to the following principles, which collectively emphasize independence, transparency, trust, privacy, security, and open innovation. Providers may adapt the controls for each principle to their business and corporate structure, aligning with international norms and supporting digital sovereignty, competitiveness, and resilience.
Transparent Corporate Governance and Ethical Conduct
Providers maintain transparent control, financial practices, and strong corporate governance.
Providers will ensure open competition and transparency in financing, and are subject to independent verification and public or regulatory scrutiny.
Operational Transparency, Secure Development, and Independent Assessment
Providers follow best practices for transparency in maintenance, updates, and vulnerability remediation.
Providers employ secure development practices, lifecycle management for software and source code, participate in coordinated vulnerability disclosure programs and support AI systems that are safe, reliable, and trustworthy.
Providers are subject to credible third party or national risk assessments and maintain internationally recognized security and compliance certifications.
Robust Supply Chain and Security Oversight
Providers demonstrate comprehensive oversight of their supply chains, including contractually binding security and quality assurances with suppliers and adherence to global standards for supply chain management (e.g., supplier governance programs, end-to-end risk management strategies, etc.).
Open, Cooperative, Inclusive, and Resilient Digital Ecosystem
Providers support a globally distributed, interoperable technical environment across the full digital stack that enables cross-border innovation, robust value chains and choice in technology.
Providers promote fair market access, open standards, the protection of intellectual property, digital resilience, and promote cross-border cooperation.
Respect for the Rule of Law and Data Protection
Providers are headquartered in countries with a proven record of upholding the rule of law and data protection.
This is evidenced by adherence to independent regulatory oversight, international agreements, and transparent legal frameworks.
