diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ebcbb0c..152feaa 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -48,3 +48,14 @@ jobs:
             *.a
             monocypher/*.h
             monocypher/LICENSE
+
+  reuse-compliance-check:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - name: REUSE Compliance Check
+      uses: fsfe/reuse-action@v4
+      with:
+        args: lint
diff --git a/LICENSES/BSD-2-Clause.txt b/LICENSES/BSD-2-Clause.txt
new file mode 100644
index 0000000..99bc18f
--- /dev/null
+++ b/LICENSES/BSD-2-Clause.txt
@@ -0,0 +1,24 @@
+Copyright 2022 Tillitis AB <tillitis.se>
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+1. Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/LICENSES/CC0-1.0.txt b/LICENSES/CC0-1.0.txt
new file mode 100644
index 0000000..0e259d4
--- /dev/null
+++ b/LICENSES/CC0-1.0.txt
@@ -0,0 +1,121 @@
+Creative Commons Legal Code
+
+CC0 1.0 Universal
+
+    CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+    LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+    ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+    INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+    REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+    PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+    THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+    HEREUNDER.
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer
+exclusive Copyright and Related Rights (defined below) upon the creator
+and subsequent owner(s) (each and all, an "owner") of an original work of
+authorship and/or a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for
+the purpose of contributing to a commons of creative, cultural and
+scientific works ("Commons") that the public can reliably and without fear
+of later claims of infringement build upon, modify, incorporate in other
+works, reuse and redistribute as freely as possible in any form whatsoever
+and for any purposes, including without limitation commercial purposes.
+These owners may contribute to the Commons to promote the ideal of a free
+culture and the further production of creative, cultural and scientific
+works, or to gain reputation or greater distribution for their Work in
+part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any
+expectation of additional consideration or compensation, the person
+associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+is an owner of Copyright and Related Rights in the Work, voluntarily
+elects to apply CC0 to the Work and publicly distribute the Work under its
+terms, with knowledge of his or her Copyright and Related Rights in the
+Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be
+protected by copyright and related or neighboring rights ("Copyright and
+Related Rights"). Copyright and Related Rights include, but are not
+limited to, the following:
+
+  i. the right to reproduce, adapt, distribute, perform, display,
+     communicate, and translate a Work;
+ ii. moral rights retained by the original author(s) and/or performer(s);
+iii. publicity and privacy rights pertaining to a person's image or
+     likeness depicted in a Work;
+ iv. rights protecting against unfair competition in regards to a Work,
+     subject to the limitations in paragraph 4(a), below;
+  v. rights protecting the extraction, dissemination, use and reuse of data
+     in a Work;
+ vi. database rights (such as those arising under Directive 96/9/EC of the
+     European Parliament and of the Council of 11 March 1996 on the legal
+     protection of databases, and under any national implementation
+     thereof, including any amended or successor version of such
+     directive); and
+vii. other similar, equivalent or corresponding rights throughout the
+     world based on applicable law or treaty, and any national
+     implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention
+of, applicable law, Affirmer hereby overtly, fully, permanently,
+irrevocably and unconditionally waives, abandons, and surrenders all of
+Affirmer's Copyright and Related Rights and associated claims and causes
+of action, whether now known or unknown (including existing as well as
+future claims and causes of action), in the Work (i) in all territories
+worldwide, (ii) for the maximum duration provided by applicable law or
+treaty (including future time extensions), (iii) in any current or future
+medium and for any number of copies, and (iv) for any purpose whatsoever,
+including without limitation commercial, advertising or promotional
+purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+member of the public at large and to the detriment of Affirmer's heirs and
+successors, fully intending that such Waiver shall not be subject to
+revocation, rescission, cancellation, termination, or any other legal or
+equitable action to disrupt the quiet enjoyment of the Work by the public
+as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason
+be judged legally invalid or ineffective under applicable law, then the
+Waiver shall be preserved to the maximum extent permitted taking into
+account Affirmer's express Statement of Purpose. In addition, to the
+extent the Waiver is so judged Affirmer hereby grants to each affected
+person a royalty-free, non transferable, non sublicensable, non exclusive,
+irrevocable and unconditional license to exercise Affirmer's Copyright and
+Related Rights in the Work (i) in all territories worldwide, (ii) for the
+maximum duration provided by applicable law or treaty (including future
+time extensions), (iii) in any current or future medium and for any number
+of copies, and (iv) for any purpose whatsoever, including without
+limitation commercial, advertising or promotional purposes (the
+"License"). The License shall be deemed effective as of the date CC0 was
+applied by Affirmer to the Work. Should any part of the License for any
+reason be judged legally invalid or ineffective under applicable law, such
+partial invalidity or ineffectiveness shall not invalidate the remainder
+of the License, and in such case Affirmer hereby affirms that he or she
+will not (i) exercise any of his or her remaining Copyright and Related
+Rights in the Work or (ii) assert any associated claims and causes of
+action with respect to the Work, in either case contrary to Affirmer's
+express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+
+ a. No trademark or patent rights held by Affirmer are waived, abandoned,
+    surrendered, licensed or otherwise affected by this document.
+ b. Affirmer offers the Work as-is and makes no representations or
+    warranties of any kind concerning the Work, express, implied,
+    statutory or otherwise, including without limitation warranties of
+    title, merchantability, fitness for a particular purpose, non
+    infringement, or the absence of latent or other defects, accuracy, or
+    the present or absence of errors, whether or not discoverable, all to
+    the greatest extent permissible under applicable law.
+ c. Affirmer disclaims responsibility for clearing rights of other persons
+    that may apply to the Work or any use thereof, including without
+    limitation any person's Copyright and Related Rights in the Work.
+    Further, Affirmer disclaims responsibility for obtaining any necessary
+    consents, permissions or other rights required for any use of the
+    Work.
+ d. Affirmer understands and acknowledges that Creative Commons is not a
+    party to this document and has no duty or obligation with respect to
+    this CC0 or use of the Work.
diff --git a/REUSE.toml b/REUSE.toml
new file mode 100644
index 0000000..2d1e9e3
--- /dev/null
+++ b/REUSE.toml
@@ -0,0 +1,23 @@
+# SPDX-FileCopyrightText: 2024 Tillitis AB <tillitis.se>
+# SPDX-License-Identifier: BSD-2-Clause
+version = 1
+
+[[annotations]]
+path = ".github/workflows/*"
+SPDX-FileCopyrightText = "2022 Tillitis AB <tillitis.se>"
+SPDX-License-Identifier = "BSD-2-Clause"
+
+[[annotations]]
+path = [
+     ".clang-format",
+     ".editorconfig",
+     ".gitignore",
+     "example-app/Makefile",
+     "monocypher/README.md",
+     "Makefile",
+     "README-DIST.txt",
+     "README.md",
+     "RELEASE.md"
+]
+SPDX-FileCopyrightText = "2022 Tillitis AB <tillitis.se>"
+SPDX-License-Identifier = "BSD-2-Clause"
diff --git a/app.lds b/app.lds
index 30f149f..8f8a808 100644
--- a/app.lds
+++ b/app.lds
@@ -1,7 +1,6 @@
-/*
- * Copyright (C) 2022, 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause 
- */
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
+
 
 OUTPUT_ARCH( "riscv" )
 ENTRY(_start)
diff --git a/example-app/blue.c b/example-app/blue.c
index 93df470..556ae89 100644
--- a/example-app/blue.c
+++ b/example-app/blue.c
@@ -1,4 +1,4 @@
-// Copyright (C) Tillitis AB
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #include <stdint.h>
diff --git a/include/tkey/assert.h b/include/tkey/assert.h
index eb9aaf3..3742acc 100644
--- a/include/tkey/assert.h
+++ b/include/tkey/assert.h
@@ -1,7 +1,5 @@
-/*
- * Copyright (C) 2022, 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause
- */
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
 
 #ifndef TKEY_ASSERT_H
 #define TKEY_ASSERT_H
diff --git a/include/tkey/blake2s.h b/include/tkey/blake2s.h
index 91a3602..f0e0c59 100644
--- a/include/tkey/blake2s.h
+++ b/include/tkey/blake2s.h
@@ -1,4 +1,4 @@
-// Copyright (C) Tillitis AB
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #ifndef TKEY_BLAKE2S_H
diff --git a/include/tkey/led.h b/include/tkey/led.h
index 50b5de4..d746de6 100644
--- a/include/tkey/led.h
+++ b/include/tkey/led.h
@@ -1,7 +1,5 @@
-/*
- * Copyright (C) 2022, 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause
- */
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
 
 #ifndef TKEY_LED_H
 #define TKEY_LED_H
diff --git a/include/tkey/lib.h b/include/tkey/lib.h
index 85ff1dd..e65412a 100644
--- a/include/tkey/lib.h
+++ b/include/tkey/lib.h
@@ -1,4 +1,4 @@
-// Copyright (C) 2022 - Tillitis AB
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #ifndef TKEY_LIB_H
diff --git a/include/tkey/proto.h b/include/tkey/proto.h
index 5af62e9..b4aa6d3 100644
--- a/include/tkey/proto.h
+++ b/include/tkey/proto.h
@@ -1,4 +1,4 @@
-// Copyright (C) 2022, 2023 - Tillitis AB
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #include <stddef.h>
diff --git a/include/tkey/qemu_debug.h b/include/tkey/qemu_debug.h
index b858b54..660e149 100644
--- a/include/tkey/qemu_debug.h
+++ b/include/tkey/qemu_debug.h
@@ -1,4 +1,4 @@
-// Copyright (C) 2023 - Tillitis AB
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #ifndef TKEY_QEMU_DEBUG_H
diff --git a/include/tkey/tk1_mem.h b/include/tkey/tk1_mem.h
index 44e7590..ef2761a 100644
--- a/include/tkey/tk1_mem.h
+++ b/include/tkey/tk1_mem.h
@@ -1,7 +1,7 @@
 /*
  * Tillitis TKey Memory Map
  *
- * Copyright (c) 2022, 2023, 2024 Tillitis AB
+ * SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
  * SPDX-License-Identifier: BSD-2-Clause 
  *
  */
diff --git a/include/tkey/touch.h b/include/tkey/touch.h
index 7412d20..ea6c1cf 100644
--- a/include/tkey/touch.h
+++ b/include/tkey/touch.h
@@ -1,7 +1,5 @@
-/*
- * Copyright (C) 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause
- */
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
 
 #ifndef TKEY_TOUCH_H
 #define TKEY_TOUCH_H
diff --git a/libcommon/assert.c b/libcommon/assert.c
index 7c0e830..2da69cb 100644
--- a/libcommon/assert.c
+++ b/libcommon/assert.c
@@ -1,7 +1,5 @@
-/*
- * Copyright (C) 2022, 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause
- * */
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
 
 #include <tkey/assert.h>
 #include <tkey/lib.h>
diff --git a/libcommon/blake2s.c b/libcommon/blake2s.c
index ff73750..337f2b1 100644
--- a/libcommon/blake2s.c
+++ b/libcommon/blake2s.c
@@ -1,4 +1,4 @@
-// Copyright (C) Tillitis AB
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #include <stdint.h>
diff --git a/libcommon/led.c b/libcommon/led.c
index 7202b0a..2eacb84 100644
--- a/libcommon/led.c
+++ b/libcommon/led.c
@@ -1,7 +1,5 @@
-/*
- * Copyright (C) 2022, 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause
- */
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
 
 #include <stdint.h>
 #include <tkey/led.h>
diff --git a/libcommon/lib.c b/libcommon/lib.c
index bf01880..66575cf 100644
--- a/libcommon/lib.c
+++ b/libcommon/lib.c
@@ -1,4 +1,4 @@
-// Copyright (C) 2022 - Tillitis AB
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #include <stdint.h>
diff --git a/libcommon/proto.c b/libcommon/proto.c
index 663dbd8..3b9e898 100644
--- a/libcommon/proto.c
+++ b/libcommon/proto.c
@@ -1,4 +1,4 @@
-// Copyright (C) 2022, 2023 - Tillitis AB
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #include <stddef.h>
diff --git a/libcommon/qemu_debug.c b/libcommon/qemu_debug.c
index 7d4387a..3bd4f46 100644
--- a/libcommon/qemu_debug.c
+++ b/libcommon/qemu_debug.c
@@ -1,4 +1,4 @@
-// Copyright (C) - Tillitis AB
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 #include <stdint.h>
diff --git a/libcommon/touch.c b/libcommon/touch.c
index e43be6a..cb4ac0b 100644
--- a/libcommon/touch.c
+++ b/libcommon/touch.c
@@ -1,7 +1,5 @@
-/*
- * Copyright (C) 2023 - Tillitis AB
- * SPDX-License-Identifier: BSD-2-Clause
- */
+// SPDX-FileCopyrightText: 2023 Tillitis AB <tillitis.se>
+// SPDX-License-Identifier: BSD-2-Clause
 
 #include <stdbool.h>
 #include <tkey/led.h>
diff --git a/libcrt0/crt0.S b/libcrt0/crt0.S
index 4399cea..f484b7d 100644
--- a/libcrt0/crt0.S
+++ b/libcrt0/crt0.S
@@ -1,4 +1,4 @@
-// Copyright (C) 2022, 2023 - Tillitis AB
+// SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
 // SPDX-License-Identifier: BSD-2-Clause
 
 	.section ".text.init"
diff --git a/tools/spdx-ensure b/tools/spdx-ensure
index 828032c..853868d 100755
--- a/tools/spdx-ensure
+++ b/tools/spdx-ensure
@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-FileCopyrightText: 2022 Tillitis AB <tillitis.se>
+# SPDX-License-Identifier: BSD-2-Clause
 set -eu
 
 # Check for the SPDX tag in all files in the repo. Exit with a non-zero code if
@@ -12,6 +14,7 @@ tag="SPDX-License-Identifier:"
 
 missingok_dirs=(
 .github/workflows/
+LICENSES/
 )
 
 missingok_files=(