TYPO3 Association Board Meeting Protocol (19 August 2026)
The TYPO3 Association Board reviewed ongoing governance and compliance work, including the Conflict of Interest Policy and preparations for the Cyber Resilience Act. The meeting also covered new community structures and potential partnerships.
Attendance
- Olivier Dobberkau (President)
- Jana Höffner (Vice President)
- Stefan Busemann (Treasurer)
- Martin Helmich (Secretary)
- Jochen Weiland (Member of the Board)
- Thomas Maroschik (Member of the Board)
- Daniel Fau (CEO, TYPO3 GmbH)
- Frank Nägler (CTO, TYPO3 GmbH)
- Mathias Bolt Lesniak (Project Ambassador, TYPO3 Association)
- Rachel Foucard (Compliance Officer, TYPO3 Association)
Follow-Up Tasks From Last Meeting
The board revisited three topics from the previous meeting.
- Status update on proceedings regarding a copyright infringement.
- Status update on feedback for the proposed Enterprise Committee.
- Status update on a personal response to a request from a community member for a new team.
Report by Mathias Bolt Lesniak on Unit Rule Discussions
Project Ambassador Mathias Bolt Lesniak reported that the unit rule reviews are progressing positively on GitHub, with ongoing feedback being channeled back to the Governance Working Group. He clarified in the discussion on GitHub that the dialogue days were not a decision-making event and announced an upcoming newsletter for the following day to provide members with information on the review process and pending deadline.
Conflict of Interest Policy Review
Compliance Officer Rachel Foucard presented an updated Conflict of Interest policy proposal, incorporating feedback from the developer days and the community regarding the Units governance. The updated policy addresses the need for separation of power and clarifies that the Board, BCC, Units, and Committees should avoid excessive concentration of responsibility from the same agency. She requested that the board review the documentation and reach a final decision until the next board meeting on 2 September 2026.
Compliance Officer Tasks Update
Rachel Foucard reported on progress regarding the Cyber Resilience Act obligations for September, including the creation of a service inventory, a cyber security policy, and documented processes for handling actively exploited vulnerabilities. These documents are being reviewed by the security team and are on track for publication by 11 September 2026.
She also presented feedback regarding unit governance, specifically regarding the desire for limited mandates: A suggested minimum term of three years and a limit of three consecutive mandates for any TYPO3 Association elected positions to ensure consistency. This topic will be discussed in the upcoming Governance Working Group meeting regarding the Unit positions.
External Mediator to Support Ombudspersons
Rachel Foucard announced that an external mediation service will support the Ombudsperson Committee. A webinar took place 26 August to serve as an FAQ session for the community. The board encourages participation and registration to ensure a wide range of questions are addressed. The invitation to the webinar was also included in the Newsletter on 20 August 2026.
Proposal of a Public Sector Committee
Jana Höffner proposed the establishment of a Public Sector Committee, suggesting a kickoff in 2027 to avoid interfering with current unit restructuring efforts. The board expressed support for the initiative, and she agreed to prepare a decision paper and outreach plan, including potential international contacts.
European Open Source Academy Partnership
Mathias Bolt Lesniak introduced a proposal for a partnership with the European Open Source Academy (EOSA).
In addition to helping reach the committee's goals in less developed parts of Europe, the partnership can bring TYPO3 increased impact in these areas:
- Visibility and recognition in the EU public sector and beyond.
- Influence in EU open source strategy and decision-making.
- Collaboration with recognized and trusted companies and organizations.
- Marketing impact through communication opportunities on EOSA platforms and fora.
EOSA is an initiative by OpenForum Europe in collaboration with the European Commission that “plays a central role in fostering recognition, impact, and visibility for Europe’s Open Source leaders across industry, policy, and society.” The academy has four strategic goals:
- Excellence and Achievement: Celebrating outstanding contributions within the European Open Source Software and Hardware communities.
- Business and Impact: Supporting entrepreneurship and sustainable ecosystems grounded in Open Source Software and Hardware principles.
- Advocacy and Awareness: Representing European interests in global Open Source Software and Hardware dialogue and policy.
- Skills and Education: Empowering future generations through education, training, and outreach around Open Source Software and Hardware.
Trademark Policy Updates
Olivier Dobberkau presented a new trademark policy proposal, created in cooperation with the trademark officer, Ric van Westhreenen. The Association has registered additional trademarks. This required updates to the current policy. A FAQ will be published.
Structural feedback regarding the decision paper will be addressed before the board will vote on it.