Matrix Conference 2025

Matrix Conference 2025

Leading the way into CRA compliance: Element’s approach to the incoming regulation
2025-10-18 , Ada Byron

The Cyber Resilience Act is a new European regulation that has the main goal to increase European cyber security and resilience, through accountability. A lot has been said about the impacts of the CRA on open source, in particular towards non-profit foundations, but what about organisations - such as Element - that operate complex licensing models with a mix of monetised and non-monetised products?

In this talk we endeavour to shine a light on our thinking regarding CRA compliance for our products, as well as implications for the wider ecosystem of vendors and communities building on Matrix. We also introduce our roadmap of communications around the CRA, aimed at those using and building on top of our products.

I am a privacy, policy and regulation professional, currently working on the future of decentralised communication at Element. I have also just submitted my PhD thesis at UCL, on the topic of technology worker's attitudes and behaviours towards privacy and change. My main research interests are centred on privacy, change, human rights, privilege and power, ethics, and algorithmic accountability, particularly around how these areas interact with different social, demographic and contextual factors.

Amandine is a co-founder and Guardian of the Matrix.org Foundation. The Foundation is the custodian for the Matrix open standard, a unique initiative aiming to democratise secure online communication and solve the problem of fragmentation in current Chat, VoIP, VR and IoT technologies. Matrix makes open real-time-communication as universal and interoperable as email, and brings the power back to the user on choosing who they trust with their data and how they want to communicate.

Amandine is also COO and co-founder for Element, the company building the eponym open source, secure and interoperable collaboration tool built on Matrix. Element delivers Matrix solutions to millions of users, including the French Government, the German Armed Forces, and private companies like Mozilla or Red Hat.

Amandine heads the Business and Impact section of the European Open Source Academy and previously set up and led product management for the Unified Communications line of business within Amdocs. Amandine has a degree in telecommunications engineering from Ecole Supérieure de Chimie, Physique et Electronique de Lyon as well as an EMBA from ESC Rennes.

This speaker also appears in: