OCSS · the open standard for child-safety enforcement

Build child-safety protections once. Enforce them everywhere.

One standard for parental-control apps to enforce protections everywhere — more time protecting kids.

Join the coalition Read the standard
signal flow · one envelope
Parental-control app a parent sets a rule did:ocss:app OCSS signed signal one envelope, verifiable verified to root DNS resolver Cloudflare · NextDNS Home router eero · Google Nest Device / OS iOS · Android Browser / app store Chrome · Safari Apps Netflix · Instagram
Signed once. Enforced everywhere.
9capability layers
115rules
91laws
30+jurisdictions

Two layers, one standard

Meaning and movement, kept separate.

Apps implement both once. Rules say what a signal means; the Trust Framework carries it as a signed payload.

architecture · two layers
RULES What a signal means 123 categories · the shared vocabulary 115 TRUST FRAMEWORK How it moves & who's trusted signed envelope + eIDAS-style Trust List SIGNED OCSS carried as payload
Like WebAuthn + CTAP under FIDO2.
architecture · two layers
OCSS the umbrella standard
RULES What a signal means 123 categories · the shared vocabulary
carried as payload
TRUST FRAMEWORK How it moves & who's trusted signed envelope + eIDAS-style Trust List
SIGNED
Like WebAuthn + CTAP under FIDO2.

The payoff

Stop building one integration per surface.

App-to-surface wiring is an N×M tangle. Sign to the shared Trust List and it collapses to N+M.

before / after · N×M → N+M
Today — one integration per surface With OCSS — integrate once Filter app Screen-time Monitor app Your app DNS Router Device / OS App store Apps Netflix · Instagram 4 × 5 = 20 integrations Filter app Screen-time Monitor app Your app DNS Router Device / OS App store Apps Netflix · Instagram OCSS Trust List 4 + 5 = 9 integrations
Integrate once. Protect everywhere. Needs ≥3 independent surfaces or coverage degrades.
today — one integration per surface
4 PARENTAL-CONTROL APPS
Filter app Screen-time Monitor app Your app
wired pairwise · a tangle
5 ENFORCEMENT SURFACES
DNS Router Device / OS App store Apps · Netflix · Instagram
4 × 5 = 20 integrations
with OCSS — integrate once
4 PARENTAL-CONTROL APPS
Filter app Screen-time Monitor app Your app
sign once
OCSS the shared Trust List verified to root
fan out
5 ENFORCEMENT SURFACES
DNS Router Device / OS App store Apps · Netflix · Instagram
4 + 5 = 9 integrations
Integrate once. Protect everywhere. Needs ≥3 independent surfaces or coverage degrades.

Pre-ratification, in the open

We publish our zeros.

No accredited entities yet. Empty registry. Forming committee. Verify every claim against the ledger.

0 accredited today registry empty committee forming by design
See our status →

Founding coalition

One seat is taken. The rest are open.

Buildable by anyone, owned by no one. Founding members shape the taxonomy, the conformance contract, and how trust is granted.

founding steward
open seat
open seat
open seat
open seat
open seat
open seat
open seat
Join the coalition