NASA Procedural Requirements

NPR 2210.1E Effective Date: June 14, 2023 Expiration Date: June 14, 2028

Subject: Release of NASA Software

Responsible Office: Space Technology Mission Directorate

Preface

P.1 Purpose

This NASA Procedural Requirements (NPR) establishes procedures and responsibilities for the reporting, review, assessment, and release of software created by, or for, NASA. These procedures reinforce that NASA software is reported and released, both internally and externally, according to law and NASA policies, with appropriate restrictions on the use and redistribution of the software. The unrestricted release of NASA software, as defined in Appendix A, is prohibited.

P.2 Applicability

a. This NPR is applicable to NASA Headquarters and Centers, including Component Facilities, including JPL to the extent required by its contract.

b. This NPR is applicable to the reporting, review, assessment, and release of all software:

(1) Created exclusively by, or jointly with, NASA employees as part of the NASA employee's official duties;

(2) Created by a non-Federal party where intellectual property rights to the software have been assigned to the U. S. Government, or have been licensed to the Government where the license authorizes the Government to further release the software; or,

(3) In the lawful possession of NASA, except as otherwise stated in subparagraphs d through g.

c. This NPR applies to release of NASA software that:

(1) Was developed for, is being, or has been used in a NASA program.

(2) Was produced by, or for, NASA.

(3) May have significant commercial value or significant utility to potential private or public sector users or applications outside of NASA. Mobile applications (apps) are covered under this NPR.

d. This NPR does not apply to software that has been classified pursuant to Executive Order (E.O.) 12958, Classified National Security Information, by an Original Classification Authority and is designated and marked as Top Secret, Secret, or Confidential.

e. This NPR does not apply to software released without restriction as to use or disclosure prior to October 17, 1997 (the original issue date of NPD 2210.1, Release of NASA Software), unless such software has been modified to add new functionality since it was released.

f. This NPR does not apply to bug fixes. Bug fixes alone may be released without complying with the requirements of this NPR. Previously released software that has been modified only by incorporating bug fixes may be released to the same recipient(s) without requiring additional reporting, reviews, or agreements under this NPR. For applicability of this NPR to minor code enhancement of pre-existing software, see paragraph 1.10.3 F-G.

g. This NPR does not apply to Scientific Research Demonstration Software (as defined in Appendix A) that is developed and used for the purpose of supporting a scientific publication. Such publication-related software may be released with the scientific publication, but, as part of the NPR 2200.2, Requirements for Documentation, Approval and Dissemination of Scientific and Technical Information, review process for dissemination of scientific and technical information, the author/management is responsible to confirm that the related software meets the requirements set forth in the definition of Scientific Research Demonstration Software. The ability to distribute such software under NPR 2200.2 does not also permit the inclusion or release of any underlying software that may be related to the subject of the scientific publication, which would still need to be reported and released under NPR 2210.

h. This NPR does not apply to computer databases, websites, or software documentation, as defined in Appendix A unless such documentation discloses software source code.

i. In this directive, all mandatory actions (i.e., requirements) are denoted by statements containing the term "shall." The terms: "may" or "can" denote discretionary privilege or permission, "should" denotes a good practice and is recommended, but not required, "will" denotes expected outcome, and "are" and "is" denote descriptive material.

j. In this directive, all document citations are assumed to be the latest version unless otherwise noted.

P. 3 Authority

P.4 Applicable Documents and Forms

a. E-Government Act of 2002, Pub. L. 107-347, 44 U.S.C. ch. 36.

b. The NASA Seal and Other Devices, and the Congressional Space Medal of Honor, 14 CFR pt. 1221.

c. Government-Furnished Computer Software, 48 CFR subpts. 1852.227-88.

d. NPD 1440.6, NASA Records Management.

e. NPD 2090.6, Authority to Enter Into License Agreements and Implementation of Licensing Authority.

f. NPD 2091.1, Inventions Made By Government Employees.

g. NPD 7120.4, NASA Engineering and Program/Project Management Policy.

h. NPR 1441.1, NASA Records Management Program Requirements.

i. NPR 2190.1, NASA Export Control Program.

j. NPR 2200.2, Requirements for Documentation, Approval, and Dissemination of Scientific and Technical Information.

k. NPR 2800.2, Information and Communication Technology Accessibility.

l. NPR 2810.2, Possession and Use of NASA Information and Information Systems Outside of the United States and United States Territories.

m. NPR 7150.2, NASA Software Engineering Requirements.

n. NPR 7500.2A, NASA Technology Transfer Requirements.

o. NPD 7120.4, NASA Engineering and Program/Project Management Policy. Applicable Documents and Forms.

p. NASA-STD-8739.8, Software Assurance and Software Safety Standard.

P.5 Measurement/Verification

The NASA Technology Transfer System (NTTS) shall be used to record and maintain metrics data on all software reported and released under this NPR. Performance measures will be implemented to assess the Agency's compliance with intellectual property rights associated with computer software distributed by the Agency in accordance with Computer Software Piracy, E.O. 13103.

P.6 Cancellation

NPR 2210.1C, Release of NASA Software, dated August 11, 2010.

DISTRIBUTION:
NODIS

This document does not bind the public, except as authorized by law or as incorporated into a contract. This document is uncontrolled when printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: https://nodis3.gsfc.nasa.gov.