CycloneDX and SPDX: choosing an SBOM format
Two formats, both standards, both accepted. The choice is less about features than about what your customers and your toolchain already consume.
Every function edits its own copy, and by the third revision nobody can say which is current. That is not a tooling problem until you decide it is.
BOM management is the practice of keeping a bill of materials accurate, versioned and shared as a product changes. It becomes a discipline rather than a file the moment more than one function needs to act on it, because purchasing, production, quality and finance all read it and at least two of them want to change it.
The predictable failure is copies. An engineer sends a spreadsheet, purchasing adds supplier columns, production annotates it with substitutions made on the floor, and finance builds a costing from a version that predates both. Nothing is wrong with any of the copies individually; what has been lost is the ability to say which one is the BOM.
The question that matters when a part is discontinued is not what it is in, but everything it is in. A component used in one flagship product and quietly in three legacy ones produces an obsolescence problem three times larger than anticipated, discovered as each of those products fails to build. A structure that supports the reverse lookup — from part to all parents — turns that into a planning exercise instead.
Spreadsheets are a legitimate answer for a small product with slow change. What ends their viability is not part count but change rate: once revisions arrive faster than people reconcile copies, the copies diverge permanently, and no amount of discipline recovers it.
What goes to a contract manufacturer is not your internal BOM. It is a released revision, with approved alternates stated, with any part you do not want substituted marked as such, and with the drawings and specifications attached at the revision referenced. Sending a working spreadsheet instead is how substitutions get made in good faith that nobody approved, and the resulting argument is expensive because both parties were working from documents that were each internally consistent.
Ettex Sheets holds the structure with a revision per column set rather than overwritten cells, Ettex Records keeps the released revisions with their effectivity and the supplier packages sent out, and the mechanism for moving between revisions is covered in engineering change order. The document itself is covered in bill of materials.
Plainly: this is a spreadsheet and records approach, not product lifecycle management software. PLM exists because this problem is real; what this covers is doing it deliberately at the scale where PLM is not yet justified.
Keeping a bill of materials accurate, versioned and shared as a product changes, with one authoritative source and controlled revisions.
When the change rate exceeds the rate at which people reconcile copies — not at a particular part count.
A reverse lookup from a component to every assembly and product containing it, used to assess the impact of obsolescence or a change.
A released revision with approved alternates stated and referenced drawings attached — not a working file.
Two formats, both standards, both accepted. The choice is less about features than about what your customers and your toolchain already consume.
A cap table is not a summary of ownership. It is the record of every instrument issued, and the errors in it are discovered by somebody else’s lawyer during diligence.
The term sheet decides your ownership through three mechanics most founders model wrongly: the option pool, the conversion of earlier instruments, and whether the pool is pre or post money.