TYPO3 Association Board Quarterly Summit Protocol (Q2/2026)

On 8–9 June 2026 the board met in Frankfurt, Germany, for the Quarterly Summit of the Association (QSA 2). The agenda for the two days was packed as a lot of tasks lay ahead.

The board set the date for the Dialogue Days for 13–14 July 2026. A facilitator will be present on both days. An invitation was sent to all Association Members. You can register online for the Dialogue Days (deadline 3 July 2026).

The board members participate as regular participants only and will not have a special role.

On 5 August, just before the Developer Days, an additional Dialogue Day is planned for our team leaders, to continue the work on the Governance Process and the Unit Structure.

The board decided to continue the young talent campaign Surfcamp in 2027 and grant the funds out of the association's budget. The board also requested to receive a statistical report after the event, about the success of the Surfcamps. Success is measured by the contribution rate (contribution is counted by regular activity in any team or TYPO3 project) among former Surfcamp participants.

Daniel Fau, CEO of the TYPO3 Company (GmbH), presented the financial statements for the company for the year 2025. The company is in good financial shape and could even make a small profit.

The board discussed ways to publish the meeting minutes of its sessions as soon as possible on typo3.org.

• Visit the Board Meeting Protocols page

The Board reviewed their impressions, notes and member feedback on the General Assembly (GA) held in April. Pros and cons of the possible formats (on-site only, remote-only, hybrid) were discussed.

It was decided to have the GA 2027 in a remote-only format, using a professional tool to allow better member participation. Questions and petitions will be moved to an asynchronous format before the GA to allow sufficient time for discussions. The reports from the Board, Business Control Committee (BCC) and the committees will be published beforehand to allow enough time for review.

• Read more about the 2027 GA planning

The running budget 2026 was adjusted to increase the budget usage rate. The unused budget has been shifted.

• 6511 — Phone & Postage: -€500
• 6553 — Expenses GA: -€5,000
• 6600 — Expenses Marketing (Podcast, ...): -€1,000
• 6617 — Contributor Workspace Onboarding: -€12,000
• 6539 — Association Compensation: -€14,100

This allows us to allocate €16,500 to Surfcamp 2027. The remaining €65,000 for Surfcamp 2027 must be drawn from the remaining 2026 funds of budget #6626 Surfcamp (€7,000) and next year’s budget (€41,500).

We shifted €4,500 to #6535 Compliance and regulations to continue the work on the Cyber Resilience Act and the Ombudsperson group.

Further, the Server budget was increased by €3000 to implement a FAIR Server.

After the 2026 Board election and its approval by the General Assembly of the TYPO3 Association, some roles and responsibilities had to be reassigned. With the election of Jochen Weiland the board also welcomed a new member, while Rachel Foucard and Boris Hinzer are no longer members of the Board.

The board has elected Jana Höffner with five votes for her and one abstain as new vice president.

The fields of responsibility and other roles formally held by Rachel Foucard and Boris Hinzer had to be reassigned to the present board members.

• Liaison to Dutch committee: Olivier Dobberkau
• Board representative on the Academic Committee: Jochen Weiland
• Membership development: Jochen Weiland, supported by Jana Höffner
• Contribution development: Thomas Maroschik (Observes community health and lowers barriers for contribution, including the former FoR Fundraising)

The field Diversity, Inclusion, and International Development is not decided yet.

The Board’s attendance at the monthly Team Leader Meeting was shifted from Stefan Busemann to Martin Helmich.

Rachel continues to work as a Compliance Officer. Her mandate covers legal compliance, and ethical compliance, including relevant external representation and institutional coordination.

• Read more about the compliance officer mandate

The compliance officer Rachel Foucard and the Security Team will work together on implementing the Cyber Resilience Act (CRA) stewardship obligations. She is already ensuring the liaison with the Open Web Alliance (OWA) stakeholders to have a consistent CRA implementation plan.

A new additional external ombudsperson will be set up and the mediation process will be updated and simplified accordingly. The external ombudsperson and the new mediation process will be presented in a separate article in TYPO3 News soon.

The Conflict of Interest Matrix will be updated to better cover the relevant possible cases. The policy and process will be updated and published to improve transparency regarding this matter.

The board discussed various measures to increase trust in the product and its ecosystem. The background to this involves various recently discovered attack scenarios targeting different open source projects, like the XZ Utils Backdoor or the malicious takeover of WordPress plug-ins.

The board agreed to prioritize updating the TYPO3 Extension Repository (TER) terms and conditions and to define and establish a verification process.

Further discussed measures were:

• Ensuring supply chain security in TER
• Ensuring license conformity in TER
• Ensuring provenance of extensions in TER
• Data retention

The process of implementing the by-law changes as they were decided on at the 2026 General Assembly was initiated.

The changes will be documented in the Policy Directory. Martin Helmich was assigned to work out an appropriate workflow. By-law changes can then be tracked by a pull request workflow in that repository.