"An open company differs from an open source project in that an open company is a formal legal entity, and needn’t be about software."
The set of employees of an open company is much, much smaller than the set of people working on whatever-it-is that the open company nominally "owns"--really it's a commons. The only reason to have employees at all is to formalize access to private data such as passwords and private user data.
Gittip, for example, has one employee, me. If you counted up everyone who has weighed in on GitHub we'd have maybe 20 or 30 community participants by now? Many more depending on how you draw the lines.
If I understand you right, the "requirements" would apply to the small set of people with access to private data, not to the majority participating in building whatever-it-is together.