Skip to content

Menu

LexBlog, Inc. logo
NetworkSub-MenuBrowse by SubjectBrowse by PublisherJoin the NetworkGet StartedSubscribeSupport
Contact Us
Search
Close

New Focus on Software Audits as a Result of Covid-19

By Mark A. Prinsley & Valerie Vanryckeghem on April 7, 2020
Email this postTweet this postLike this postShare this post on LinkedIn
Press enter button on the computer. Key lock security system abstract technology world digital link cyber security on hi tech Dark blue background, Enter password to log in. lock finger Keyboard

As the Covid-19 virus continues to wreak havoc, governments around the world are urging companies to organise remote working for their staff – wherever possible.

While this is a positive development for public health and economic considerations, companies should be aware that migrating all employees to home working could create additional challenges in software license compliance. As it turns out, remote access is the easiest way to quickly become non-compliant with many software vendors.

Of course, everything depends on the specific licensing terms in place for each software product. But very often software legitimately licensed on a server, still requires that every user or device accessing this software product is also properly licensed with an appropriate user or device license.

This may not create an issue if all staff is able to work on properly licensed devices, such as company laptops. However, businesses who normally have their staff in an office working on desktop PCs, or accessing network file shares and intranet applications, or running applications that connect to an on-premises database, may not already be set up to have all or most of their staff working remotely. As a result, many of their staff are now remotely accessing corporate software assets via personally owned devices such as home PCs, tablets and smartphones.

The issue at hand is the result of the hybrid IT world we are currently living in. Partly based on cloud concepts where everything is on the internet and easily accessed from all kinds of devices, and partly based on traditional business networks with servers, locally installed software and desktop PCs. The licensing model for these two types of environments is different. And as a result, companies who license applications on a per-user cloud subscription are now much better placed to continue working throughout the Corona crisis than those with perpetual per-device licenses.

Software vendors are aware of the issues surrounding remote working and it is to be expected that they will be particularly diligent in auditing this area. In order to prepare for this, companies should perform an inventory of all their installed and remotely accessed software.

There are a number of Software Asset Management (SAM) tools available to partially automate the inventory process. But most inventory tools do not account for remote access , nor do they perform adequate analysis of virtual scenarios. As a result, companies will almost certainly require additional work to obtain an accurate and comprehensive usage assessment.

Once you have an accurate inventory of all applicable software, devices, and users accessing that software you’ll need to match this technical landscape with the contractual landscape in place. If you cannot demonstrate that everything has been properly licensed and purchased, you are at risk to be out of compliance and subject to additional license purchases and/or penalties.

Clearly when the dust settles software vendors are going to look, where possible, to exercise their audit rights against potentially delinquent customers to make up for the new business they seem likely to struggle to win during the pandemic.

If you have particular concerns in this area, please do not hesitate to contact us as we can help you in assessing whether the contractual landscape matches up with the technical landscape.

***

If you wish to receive periodic updates on this or other topics related to the pandemic, you can be added to our COVID-19 “Special Interest” mailing list by subscribing here. For any other legal questions related to this pandemic, please contact the Firm’s COVID-19 Core Response Team at FW-SIG-COVID-19-Core-Response-Team@mayerbrown.com.

Photo of Mark A. Prinsley Mark A. Prinsley

Mark Prinsley is a partner and heads the technology practice in the London office, and is a member of the firm’s Cybersecurity & Data Privacy practice. He concentrates on technology transactions, in particular IT projects and outsourcing.

A substantial element of Mark’s practice…

Mark Prinsley is a partner and heads the technology practice in the London office, and is a member of the firm’s Cybersecurity & Data Privacy practice. He concentrates on technology transactions, in particular IT projects and outsourcing.

A substantial element of Mark’s practice involves data protection issues and he has worked extensively for clients in the pensions and financial services sector designing and implementing GDPR compliant systems for the collection and processing of personal data by businesses and related sub-contractors, commercial transactions involving data sharing and reaction to data breach scenarios including managing data breach notifications. Recent projects Mark has worked on involving personal data include working for an automobile manufacturer implementing a connected vehicle programme globally, a supplier of facial recognition technology on methods of marketing that technology in Europe in compliance with data protection laws and for an insurtech business licensing technology and services to enable life insurers to underwrite life cover for diabetics using AI.

Read Mark’s full bio.

Read more about Mark A. PrinsleyEmail
Show more Show less
  • Posted in:
    Technology and AI
  • Blog:
    COVID-19 Response Blog
  • Organization:
    Mayer Brown

Call us at 1-800-913-0988 or email sales@lexblog.com.

Facebook LinkedIn Twitter RSS
  • About LexBlog
  • The Field We Built
  • Our Beliefs
  • Our Team
  • Contact LexBlog
  • Disclaimer
  • Editorial Policy
  • Terms of Service
  • Get Started
  • Publishing Solutions
  • Compass
  • Submit a Request
  • Support Center
  • System Status
Copyright © 2026, LexBlog, Inc. All Rights Reserved.
Law blog design & platform by LexBlog LexBlog Logo