Glossary
The terms used across the portal, defined in plain language. Where a term has a normative or primary source, it is linked.
Definitions marked "Not reviewed" are written by us and not yet checked by a second person. They are not indexed by search engines.
- AGPL network clauseNot reviewed
Section 13 of the GNU Affero General Public License v3 ("Remote Network Interaction"). If you modify an AGPL program and let users interact with your modified version over a network, you must offer those users the corresponding source code of your version at no charge. Running an unmodified copy does not trigger it. This is why the AGPL is called network copyleft: offering the software as a service counts, not only distributing copies.
- GNU Affero General Public License v3.0, section 13 (retrieved 2026-10-29)
Related terms: Copyleft, SPDX licence identifier
Verified- Break-even (payback)Not reviewed
The point at which the cumulative saving of a change has paid back its one-off costs (migration, training, running both systems in parallel). Before that point the change has cost more than it saved. The SIAX savings calculator only reports a break-even month when the cash flow actually reaches it, and says so when it never does.
Plain-language definition; there is no single primary source.
See also: /en/savings-calculator, /en/methodology
Related terms: TCO (total cost of ownership)
Verified- CopyleftNot reviewed
A licence condition that requires modified versions and, depending on the licence, larger works built on the code to be distributed under the same licence, with source code. Strong copyleft (for example the GPL) covers the combined work; weak copyleft (for example the LGPL or MPL) covers only the licensed files or library. Copyleft is triggered by distribution; the AGPL also counts network use.
Plain-language definition; there is no single primary source.
See also: /en/methodology
Related terms: AGPL network clause, Open Source Definition (OSI-approved)
Verified- Data residencyNot reviewed
Where data is physically stored and processed: which country or region the servers, backups and support access are in. When you host an open source tool yourself, you choose the location; with a SaaS product it follows the vendor's regions and subprocessors. Residency alone does not decide which laws apply: the provider's jurisdiction and contracts matter too.
Plain-language definition; there is no single primary source.
See also: /en/hosting
Related terms: Self-hosting, DPA (data processing agreement)
Verified- DPA (data processing agreement)Not reviewed
The contract required by Article 28(3) of the GDPR when a processor (for example a hosting provider) processes personal data on behalf of a controller (for example your company). It sets out the subject matter, duration, nature and purpose of the processing, the types of personal data and the obligations of the processor. Whether a provider offers one, and how it is concluded, is listed per provider on the hosting page.
- Regulation (EU) 2016/679 (GDPR), Article 28 (retrieved 2026-10-29)
See also: /en/hosting
Related terms: Data residency
Verified- OIDC (OpenID Connect)Not reviewed
OpenID Connect 1.0 is an identity layer on top of the OAuth 2.0 protocol. It lets an application verify who a user is, based on authentication done by an identity provider, and get basic profile information. It is the most common way open source tools support single sign-on alongside SAML and LDAP.
- OpenID Connect Core 1.0 (retrieved 2026-10-29)
Related terms: SSO (single sign-on)
Verified- Open coreNot reviewed
A business model where the core of a product is released under an open source licence and some features (often SSO, audit logs or scaling features) are only available in a paid edition under a proprietary licence. When we compare a tool, we state which features sit in the non-open part.
Plain-language definition; there is no single primary source.
See also: /en/methodology
Related terms: Source-available, Open Source Definition (OSI-approved)
Verified- Open Source Definition (OSI-approved)Not reviewed
The Open Source Initiative's ten criteria that a licence must meet to be open source, among them free redistribution, access to source code, and no discrimination against persons, groups or fields of endeavour. A licence that the OSI has approved against these criteria is called OSI-approved.
- Open Source Initiative: The Open Source Definition (retrieved 2026-10-29)
See also: /en/methodology
Related terms: Source-available, Copyleft
Verified- Self-hostingNot reviewed
Running software on infrastructure you control (your own servers, or servers rented from a hosting provider) instead of using the vendor's hosted service. You decide where the data is and when to upgrade, and you carry the work: installation, updates, backups, monitoring and security. Self-hosting is never free; its cost is hosting plus that work.
Plain-language definition; there is no single primary source.
See also: /en/hosting, /en/savings-calculator
Related terms: Data residency, TCO (total cost of ownership)
Verified- Source-availableNot reviewed
Software whose source code can be read, but whose licence does not meet the Open Source Definition, for example because it forbids offering the software as a competing service or limits commercial use. Source-available is not open source, and the portal never labels it as such.
Plain-language definition; there is no single primary source.
See also: /en/methodology
Related terms: Open Source Definition (OSI-approved), Open core
Verified- SPDX licence identifierNot reviewed
A short, standardised code for a licence from the SPDX License List, for example MIT or AGPL-3.0-only. The list exists so that licences can be identified efficiently and reliably, including in source code. Expressions combine identifiers, for example "MIT OR Apache-2.0". The portal records a project's licence as an SPDX expression checked against its LICENSE file.
- SPDX License List (retrieved 2026-10-29)
See also: /en/methodology
Related terms: Open Source Definition (OSI-approved), Copyleft
Verified- SSO (single sign-on)Not reviewed
Signing in once with a central identity provider and reaching several applications without separate passwords. Common protocols are OIDC, SAML and LDAP. For a self-hosted tool, check whether SSO is in the open edition or only in a paid one.
Plain-language definition; there is no single primary source.
Related terms: OIDC (OpenID Connect), Open core
Verified- TCO (total cost of ownership)Not reviewed
Everything a solution costs over a period, not only its licence: hosting, storage and traffic, backups, monitoring, support, internal time, migration and training. Comparing a SaaS product with a self-hosted alternative only makes sense on TCO, with every assumption stated. Open source is never assumed to cost nothing.
Plain-language definition; there is no single primary source.
See also: /en/savings-calculator, /en/methodology
Related terms: Break-even (payback), Self-hosting
Verified
Other glossaries on siax.io
Swedish IT and business glossary (Ordlista)
General IT terms (older glossary)
An older list of general IT terms, kept here unchanged. It has no sources and is not reviewed; the terms above are the ones the portal uses.
- A/B Testing
- A method of comparing two versions of a feature or page to determine which performs better based on user metrics.
- API
- Application Programming Interface. A set of rules and protocols that allows software applications to communicate with each other.
- API Gateway
- A server that acts as a single entry point for a set of microservices, handling request routing, composition, and protocol translation.
- Artifact
- A deployable component produced during the software build process, such as a compiled binary, Docker image, or package.
- Auto-scaling
- The ability of a cloud infrastructure to automatically adjust compute resources based on current demand.
- BigQuery
- Google Cloud's fully managed, serverless data warehouse designed for large-scale data analytics using SQL.
- Blue-Green Deployment
- A release strategy that runs two identical production environments to enable zero-downtime deployments and easy rollbacks.
- Broker
- A middleware component that routes messages between producers and consumers in distributed messaging systems like Kafka or RabbitMQ.
- Brownfield
- A software project that involves developing or modifying an existing system, as opposed to building from scratch.
- CI/CD
- Continuous Integration and Continuous Delivery/Deployment. A set of practices that automate building, testing, and deploying code changes.
- CORS
- Cross-Origin Resource Sharing. A browser security mechanism that controls how web pages can request resources from a different domain.
- CQRS
- Command Query Responsibility Segregation. An architecture pattern that separates read and write operations into different models.
- Container
- A lightweight, standalone, executable software package that includes everything needed to run an application: code, runtime, and dependencies.
- DAG
- Directed Acyclic Graph. A data structure used in tools like Apache Airflow to define task dependencies and execution order in data pipelines.
- DNS
- Domain Name System. The internet's phonebook that translates human-readable domain names into IP addresses.
- Docker
- An open-source platform that automates the deployment of applications inside lightweight, portable containers.
- Data Lake
- A centralized repository that stores large volumes of raw data in its native format until needed for analysis.
- Data Mesh
- A decentralized data architecture that treats data as a product, with domain teams owning and serving their own data.
- ETL
- Extract, Transform, Load. A data integration process that extracts data from sources, transforms it into a usable format, and loads it into a target system.
- Edge Computing
- A distributed computing paradigm that brings computation and data storage closer to the sources of data to reduce latency.
- Elasticsearch
- A distributed search and analytics engine built on Apache Lucene, commonly used for log analytics and full-text search.
- Event-Driven Architecture
- A software design pattern where the flow of the program is determined by events such as user actions, sensor outputs, or messages.
- Firewall
- A network security system that monitors and controls incoming and outgoing network traffic based on predetermined rules.
- Feature Flag
- A software development technique that enables or disables features at runtime without deploying new code.
- FQDN
- Fully Qualified Domain Name. The complete domain name for a specific computer or host on the internet.
- Git
- A distributed version control system for tracking changes in source code during software development.
- GraphQL
- A query language for APIs that allows clients to request exactly the data they need, reducing over-fetching and under-fetching.
- gRPC
- A high-performance RPC framework developed by Google that uses Protocol Buffers and HTTP/2 for efficient service-to-service communication.
- Helm
- A package manager for Kubernetes that simplifies the deployment and management of applications using reusable chart templates.
- Horizontal Scaling
- Adding more machines or instances to a system to handle increased load, as opposed to upgrading a single machine.
- Hot Reload
- A development feature that applies code changes to a running application without requiring a full restart.
- IaC
- Infrastructure as Code. The practice of managing and provisioning infrastructure through machine-readable configuration files instead of manual processes.
- Idempotent
- An operation that produces the same result regardless of how many times it is executed, critical for reliable distributed systems.
- Ingress
- A Kubernetes API object that manages external access to services in a cluster, typically HTTP/HTTPS routing.
- JWT
- JSON Web Token. A compact, URL-safe token format used for securely transmitting claims between parties, commonly used in authentication.
- Job Queue
- A data structure that holds tasks to be processed asynchronously by worker processes, enabling background job execution.
- Kubernetes
- An open-source container orchestration platform that automates deployment, scaling, and management of containerized applications.
- Kafka
- Apache Kafka is a distributed event streaming platform used for building real-time data pipelines and streaming applications.
- KPI
- Key Performance Indicator. A measurable value that demonstrates how effectively a company or system is achieving key objectives.
- Lambda
- AWS Lambda is a serverless compute service that runs code in response to events without provisioning or managing servers.
- Load Balancer
- A device or service that distributes incoming network traffic across multiple servers to ensure reliability and performance.
- Latency
- The time delay between a request being made and the response being received, often measured in milliseconds.
- MCP
- Model Context Protocol. An open protocol that standardizes how AI applications connect to external tools, data sources, and services.
- Microservices
- An architectural style that structures an application as a collection of loosely coupled, independently deployable services.
- Middleware
- Software that sits between an operating system and applications, providing common services like authentication, logging, and message routing.
- NIS2
- The EU Network and Information Security Directive 2. An updated cybersecurity regulation requiring organizations to implement stricter security measures.
- Namespace
- A logical partition used to organize and isolate resources within a system, commonly used in Kubernetes and programming languages.
- NoSQL
- A class of database management systems that do not follow the traditional relational model, optimized for specific data models like documents or key-value pairs.
- OAuth
- An open authorization framework that allows third-party applications to access user resources without exposing credentials.
- Observability
- The ability to understand the internal state of a system by examining its outputs, typically through logs, metrics, and traces.
- ORM
- Object-Relational Mapping. A technique that lets developers interact with a database using objects in their programming language instead of raw SQL.
- Pipeline
- A set of automated processes that move code from version control through build, test, and deployment stages.
- Pub/Sub
- Publish/Subscribe messaging pattern where senders broadcast messages to a topic and receivers subscribe to topics of interest.
- Prometheus
- An open-source monitoring and alerting toolkit designed for reliability and scalability, commonly paired with Grafana for visualization.
- Queue
- A data structure or messaging system that stores messages in order for asynchronous processing, ensuring reliable delivery between services.
- Query Optimization
- The process of improving the performance of database queries by analyzing execution plans, indexes, and data access patterns.
- RAG
- Retrieval-Augmented Generation. An AI technique that enhances LLM responses by retrieving relevant external documents before generating answers.
- RBAC
- Role-Based Access Control. A method of restricting system access based on the roles assigned to individual users within an organization.
- REST
- Representational State Transfer. An architectural style for building web APIs that uses standard HTTP methods and stateless communication.
- Reverse Proxy
- A server that sits in front of web servers and forwards client requests, providing load balancing, SSL termination, and caching.
- SRE
- Site Reliability Engineering. A discipline that applies software engineering practices to infrastructure and operations to create scalable, reliable systems.
- SSL/TLS
- Secure Sockets Layer / Transport Layer Security. Cryptographic protocols that provide encrypted communication between clients and servers.
- Serverless
- A cloud execution model where the cloud provider manages the infrastructure, automatically scaling and billing based on actual usage.
- Service Mesh
- A dedicated infrastructure layer that manages service-to-service communication within a microservices architecture using sidecar proxies.
- Terraform
- An open-source IaC tool by HashiCorp that enables you to define and provision infrastructure across multiple cloud providers using declarative configuration.
- Throughput
- The amount of data or number of operations a system can process in a given time period, a key performance metric.
- Token
- A unit of text processed by an AI model, or a piece of data used for authentication. Context depends on usage: NLP or security.
- UUID
- Universally Unique Identifier. A 128-bit identifier used to uniquely identify resources across distributed systems without coordination.
- Uptime
- The percentage of time a system or service is operational and accessible, commonly expressed as nines (e.g. 99.99%).
- VPN
- Virtual Private Network. A technology that creates a secure, encrypted connection över a public network, often used for remote access to private infrastructure.
- Vertical Scaling
- Increasing the capacity of a single machine by adding more CPU, memory, or storage, as opposed to adding more machines.
- Vector Database
- A specialized database designed to store and query high-dimensional vectors, commonly used for AI embeddings and semantic search.
- Webhook
- A mechanism that allows an application to send real-time HTTP callbacks to a specified URL when a particular event occurs.
- WebSocket
- A communication protocol that provides full-duplex communication channels över a single TCP connection for real-time data transfer.
- WAF
- Web Application Firewall. A security layer that monitors and filters HTTP traffic between a web application and the internet.
- XSS
- Cross-Site Scripting. A security vulnerability where attackers inject malicious scripts into web pages viewed by other users.
- XML
- Extensible Markup Language. A markup language that defines rules for encoding documents in a format that is both human-readable and machine-readable.
- YAML
- YAML Ain't Markup Language. A human-readable data serialization format commonly used for configuration files in DevOps and cloud-native tools.
- Yarn
- A fast, reliable JavaScript package manager that serves as an alternative to npm with deterministic dependency resolution.
- Zero Trust
- A security framework that requires all users and devices to be authenticated and authorized before accessing any resource, regardless of network location.
- Zero Downtime Deployment
- A deployment strategy that ensures an application remains available to users throughout the entire update process.
- Zookeeper
- Apache ZooKeeper is a centralized service for maintaining configuration, naming, and synchronization in distributed systems.
- Agent
- An autonomous AI system that can plan, use tools, and take actions to accomplish complex tasks with minimal human intervention.
- Batch Processing
- A method of processing large volumes of data in groups at scheduled intervals, as opposed to real-time stream processing.
- CDN
- Content Delivery Network. A geographically distributed network of servers that delivers web content and media to users from the nearest edge location.
- Canary Deployment
- A release strategy that gradually rolls out changes to a small subset of users before deploying to the entire production environment.
- DDoS
- Distributed Denial of Service. A cyberattack that overwhelms a target system with traffic from multiple sources to disrupt normal operation.
- Embedding
- A numerical vector representation of data (text, images, etc.) that captures semantic meaning, enabling similarity search and AI applications.
- Fine-tuning
- The process of training a pre-trained AI model on a smaller, domain-specific dataset to adapt it for specialized tasks.
- GitOps
- A set of practices that uses Git as the single source of truth for declarative infrastructure and application delivery.
- Hallucination
- When an AI model generates confident but factually incorrect or fabricated information that is not grounded in its training data.
- Immutable Infrastructure
- An approach where servers are never modified after deployment. Updates are made by replacing instances with new ones built from a common image.