OpenFn is an open-source workflow automation and data integration platform that connects systems through more than 70 adaptors, handling ETL, API orchestration and webhook processing. It is in the collection as a data exchange building block, processing over 10 million transactions a year across 43 countries for governments, UN agencies and NGOs.
All DPGs in the DPGs for DPI Collection are assessed by the DPGA Secretariat against the DPGs for DPI criteria v2.0. Assessments use publicly available documentation and link to their evidence below. Assessed September 2026.
4 partially met
Layer 1
Recognised DPG
Layer 2
DPI Relevance
Layer 3
DPI Architecture Alignment

Does it provide a foundational DPI function, reusable across sectors, at population scale?
Core function is integration and workflow automation between otherwise disconnected systems, placing it in the Data Exchange domain. It is sector-agnostic in use — health, social protection, education, agriculture and humanitarian response — and operates at population scale, managing over 50 million records.
How the solution's architecture reflects the principles that distinguish DPI from conventional digitisation.
Can other systems connect without modifying the core, using documented open standards?
REST APIs, webhook endpoints and CLI tools are documented, including the Lightning platform API. It provides HL7 FHIR adaptors and is an OpenHIE-compliant reference technology, exchanging JSON over REST and supporting CSV, XML, FHIR and other formats through its adaptor library.
Is it a modular building block that does one thing well, rather than a monolithic platform?
The Lightning platform is decoupled from its adaptors, which are independently versioned and deployable, and new use cases are handled through project configuration rather than forking. The infrastructure-versus-application distinction is less sharp here, since OpenFn is itself the integration layer.
Can other public and private actors build on top of it?
More than 70 open-source adaptors exist and organisations can build their own for any API or system. WHO Go.Data, DHIS2, CommCare and multiple governments and NGOs actively use and extend it, and the LGPL-3.0 licence with a self-hosting option means no lock-in to OpenFn the company.
Can it run in distributed or federated deployments suited to national infrastructure?
Self-hosting with Docker keeps data on the deployer's own infrastructure. The platform is designed as a single instance, hosted or self-hosted, with no explicit federation between instances; the hosted service runs in a high-availability cloud configuration, but high-availability patterns for self-hosted deployments are not prominently documented.
Does it meet the security and privacy bar for population-scale infrastructure?
Data is encrypted in transit and at rest, credentials are encrypted at rest, and access controls and audit logging are in place. A privacy policy and data handling documentation are published with no unnecessary retention; trust and compliance pages exist, but no formal vulnerability disclosure policy was found.
Criteria: DPGs for DPI Collection criteria v2.0 · Co-stewarded by CDPI, Co-Develop and the DPGA Secretariat.
Spot something out of date? Contact the DPGA