OCP Safe

Overview

OCP Safe is a security audit and reporting framework developed within the Open Compute Project to make hardware security assessments routine, standardized, and cost-effective. The framework defines the scope, methodology, and reporting format for security audits of OCP-compatible hardware, enabling hyperscale operators to request and compare security posture information across their supply chain.

The framework is designed to reduce the cost and effort of security audits — both for the hardware vendors undergoing audits and for the operators requesting them. By standardizing what a security audit covers and how results are reported, OCP Safe enables security compliance to scale across large, diverse hardware portfolios.

At OCP Global Summit 2025, Google noted that it is now regularly requesting OCP Safe audit reports from its hardware suppliers, signaling that security attestation is becoming a standard procurement requirement rather than a one-off compliance exercise.