Legal
Licensing
Last updated: 3 May 2026
The shape of the licence
KeystoneOps is sold as a perpetual, non-transferable licence. You buy it once, and the right to run the version you bought (and all minor releases of that version) is yours forever — even if you stop paying maintenance.
What the licence covers
- Production deployment on infrastructure controlled by your trust
- Unlimited users and unlimited "agents" — there is no per-seat tax
- Unlimited academies within your purchased band
- Use of the on-prem network discovery agents at your sites
- API access for any internal trust integration
Maintenance (optional, 20% of licence/year)
- All future minor + major version upgrades
- Security patches
- Email support during UK office hours
- Migration assistance for major-version upgrades (e.g. 1.x → 2.x)
You can stop paying maintenance any time. Your existing licence keeps working; you just stop receiving upgrades.
What the licence doesn't cover
- Reselling KeystoneOps to other trusts (it's a licence to use, not to redistribute)
- Hosting KeystoneOps as a managed service for third parties
- Modifying the source to remove copyright or branding
If your trust grows beyond your purchased band (e.g. acquires more academies), you upgrade to the next band — pro-rated for the remaining maintenance period.
Source availability
Licensed trusts receive the full source code as part of their tarball release. You can inspect, audit, and modify it for your own deployment. You cannot redistribute modifications.
Termination
The only way the licence terminates is if it's used in breach of the licence agreement (e.g. resold, modified to remove copyright). Even then, you have a remediation window before the licence is revoked.
Questions
Email licensing@keystoneops.education. We'll send the full licence agreement on request before purchase — no NDA required.