OpenFn

Data Exchange

OpenFn is an open-source workflow automation and data integration platform that connects systems through more than 70 adaptors, handling ETL, API orchestration and webhook processing. It is in the collection as a data exchange building block, processing over 10 million transactions a year across 43 countries for governments, UN agencies and NGOs.

Workflow automation
data integration
ETL
API orchestration
70+ adaptors
webhook processing

All DPGs in the DPGs for DPI Collection are assessed by the DPGA Secretariat against the DPGs for DPI criteria v2.0. Assessments use publicly available documentation and link to their evidence below. Assessed September 2026.

14 of 18 checks met

4 partially met

Layer 1

Recognised DPG

Layer 2

DPI Relevance

Layer 1 Recognised Digital Public Good

Listed in the DPG Registry.
VerifiedVerified DPG logo

Layer 2 DPI Relevance

Does it provide a foundational DPI function, reusable across sectors, at population scale?

Domain fit
Cross-sector reuse
Population scale
3/3

Core function is integration and workflow automation between otherwise disconnected systems, placing it in the Data Exchange domain. It is sector-agnostic in use — health, social protection, education, agriculture and humanitarian response — and operates at population scale, managing over 50 million records.

Layer 3 DPI Architecture Alignment

How the solution's architecture reflects the principles that distinguish DPI from conventional digitisation.

A · Interoperability

3/3

Can other systems connect without modifying the core, using documented open standards?

External API docs
Open standards
Open data formats

REST APIs, webhook endpoints and CLI tools are documented, including the Lightning platform API. It provides HL7 FHIR adaptors and is an OpenHIE-compliant reference technology, exchanging JSON over REST and supporting CSV, XML, FHIR and other formats through its adaptor library.

B · Minimalist & Reusable Design

2/3

Is it a modular building block that does one thing well, rather than a monolithic platform?

Modular architecture
Core/app separation · Partially meets
Config-driven adaptability

The Lightning platform is decoupled from its adaptors, which are independently versioned and deployable, and new use cases are handled through project configuration rather than forking. The infrastructure-versus-application distinction is less sharp here, since OpenFn is itself the integration layer.

C · Ecosystem Enablement

3/3

Can other public and private actors build on top of it?

Third-party buildability
External integrations
No vendor lock-in

More than 70 open-source adaptors exist and organisations can build their own for any API or system. WHO Go.Data, DHIS2, CommCare and multiple governments and NGOs actively use and extend it, and the LGPL-3.0 licence with a self-hosting option means no lock-in to OpenFn the company.

D · Federation Readiness

1/3

Can it run in distributed or federated deployments suited to national infrastructure?

Federated deployment · Partially meets
Data sovereignty
High availability · Partially meets

Self-hosting with Docker keeps data on the deployer's own infrastructure. The platform is designed as a single instance, hosted or self-hosted, with no explicit federation between instances; the hosted service runs in a high-availability cloud configuration, but high-availability patterns for self-hosted deployments are not prominently documented.

E · Security & Privacy at Scale

2/3

Does it meet the security and privacy bar for population-scale infrastructure?

Infrastructure-grade security
Vulnerability disclosure · Partially meets
Privacy by design

Data is encrypted in transit and at rest, credentials are encrypted at rest, and access controls and audit logging are in place. A privacy policy and data handling documentation are published with no unnecessary retention; trust and compliance pages exist, but no formal vulnerability disclosure policy was found.

Criteria: DPGs for DPI Collection criteria v2.0 · Co-stewarded by CDPI, Co-Develop and the DPGA Secretariat.

Spot something out of date? Contact the DPGA