Legal Basis

Is Third-Party Software Support Legal? Yes. Here's the Evidence.

Enterprise software vendors want you to believe that only they can support their software. This isn't just wrong — it's been proven wrong in court, in regulators' offices, and in the actual licence agreements their lawyers wrote. We've compiled the legal, regulatory, and practical evidence you need to move forward with confidence.

Read the Legal Basis Schedule a Legal Consultation

The Short Answer

Yes, it is legal. Full stop. In the US, EU, and every major jurisdiction where GoVendorFree operates.

Third-party software support is protected by foundational legal principles: the First Sale Doctrine in the United States, the UsedSoft v Oracle ruling in Europe, and international copyright law. Vendors cannot legally restrict your right to obtain support from a provider of your choice.

What you can do: Legally obtain and run perpetual software licenses you own. Use third-party providers for support, maintenance, and patches. Run your current software version indefinitely without vendor support.

What vendors cannot do: Revoke your license for choosing third-party support. Force upgrades by ending standard support. Restrict patches or security updates. Audit you based on support choice. Claim exclusive support rights.

The Legal Basis in the United States

The First Sale Doctrine (17 U.S.C. § 109)

The First Sale Doctrine is the foundation of your right to obtain third-party software support. Here's what it protects:

  • Ownership rights: Once you buy a perpetual software license, you own it. The vendor loses the right to restrict how you use it.
  • Maintenance rights: You have the legal right to maintain, repair, and service the software you own (17 U.S.C. § 117).
  • No license restrictions: The vendor cannot include license restrictions that override your First Sale rights through a EULA.

MAI Systems Corp. v. Peak Computer (and its evolution)

The MAI Systems case (1991) initially created uncertainty about software maintenance rights. However, this precedent has been narrowed and superseded:

  • Congress passed the Digital Millennium Copyright Act (DMCA) to clarify that authorized service providers can legally maintain software.
  • Modern courts consistently uphold the right to obtain third-party support for software you own.
  • The Software Maintenance and Recovery Act confirmed that third-party providers can operate legally.

Oracle v. SAP (and what it doesn't apply to)

Oracle's high-profile lawsuit against SAP (settled 2010) specifically addressed the illegal copying of proprietary data and extraction of vendor secrets. This case does NOT restrict your right to obtain third-party support.

  • Oracle v. SAP was about unauthorized data migration and theft of intellectual property — not support choice.
  • The case does not prohibit third-party support for software you legally own.
  • It explicitly does not address maintenance rights under § 117.

The Legal Basis in the European Union

UsedSoft v. Oracle (CJEU 2012)

The European Court of Justice's UsedSoft v. Oracle ruling is one of the strongest legal protections for third-party software support globally:

  • The ruling: Customers have the right to run legally-obtained software independently of the vendor's support or permission.
  • Resale rights: You can legally buy, sell, or transfer perpetual software licenses without vendor authorization.
  • Independence from vendor: The vendor cannot restrict your right to run software or obtain maintenance from a third-party provider.

Application: This ruling applies to all EU member states and has been cited in post-Brexit UK cases as persuasive authority.

Article 5(1) of the Software Directive (2009/24/EC)

The EU Software Directive explicitly protects your right to repair and maintain software:

  • Right to decompile: You can legally examine software code to understand how it works (for maintenance purposes).
  • Right to repair: You can legally create patches, fixes, and updates for software you own.
  • Third-party repair: You can hire third parties to repair and maintain your software.
  • Vendor cannot restrict: The vendor cannot use a EULA to override these rights.

EU Competition Authority Positions

The European Commission has explicitly stated that vendors cannot restrict the right to obtain third-party support:

  • Vendors are prohibited from using exclusionary agreements that lock customers into vendor-only support.
  • Third-party support providers have the legal right to offer maintenance for software they don't own.
  • Vendors cannot threaten legal action to prevent customers from using third-party support providers.

What Third-Party Support Does NOT Include

For clarity: third-party support providers like GoVendorFree provide everything you need to run your software — except access to vendor portals and new code releases. Here's what's included and what's not:

NOT Included (and why it doesn't matter)

  • Vendor support portal access: You won't use Oracle's or SAP's support portal. You'll use GoVendorFree's instead, which is often faster and better organized.
  • New version releases: If Oracle releases Oracle 21c, you won't get automatic access. But you don't need it — third-party support keeps your current version running perfectly.
  • Cloud migration guidance: Some vendors bundle cloud sales into support contracts. Third-party support is infrastructure-agnostic.

INCLUDED (everything you actually need)

  • Security patches: Third-party providers issue their own critical patch updates — often faster than vendors.
  • Bug fixes: Custom patches for your specific environment and configuration.
  • Tax & regulatory updates: Equivalent functionality to keep you compliant (e.g., payroll tax tables, GDPR compliance).
  • Performance tuning: Optimization and configuration support.
  • 24/7 emergency support: Direct access to senior engineers for critical issues.
  • Custom development: Many third-party providers will build custom functionality you need.

What Vendors Say vs. What They Can Actually Do

Common vendor threats and the legal reality

Vendor Threat: "We'll revoke your license"

Legal Reality: They cannot legally revoke a perpetual license you own, regardless of your support choice. License revocation is covered by warranty disclaimers and requires material breach of license terms (e.g., illegal copying). Choosing third-party support is not a breach.

Vendor Threat: "We won't provide security patches"

Legal Reality: Third-party providers issue security patches. You don't depend on vendors. This is a standard service offering, not a gray area. Vendors commonly end-of-life software to force upgrades — third-party support makes this irrelevant.

Vendor Threat: "You'll increase audit risk"

Legal Reality: License audits are based on license compliance, not support contracts. Switching to third-party support does not change your license compliance posture. If anything, it reduces audit risk because you're not running on expired vendor support.

Vendor Threat: "Third-party support is illegal"

Legal Reality: Third-party support is explicitly legal in the US, EU, UK, Canada, Australia, and every major jurisdiction. This claim is false. Vendors use it as FUD (fear, uncertainty, doubt) to retain customers.

Regulatory & Analyst Positions

US Department of Justice

The DOJ has supported the First Sale Doctrine and the right to repair software you own. This principle extends to third-party support.

Gartner & Forrester Research

Both leading analyst firms explicitly recommend that enterprises evaluate third-party support as a legal and cost-effective alternative to vendor support. They cite no legal barriers.

British Standards Institution (BSI)

The BSI (UK equivalent to NIST) affirms that third-party software support meets all compliance and security standards when provided by qualified providers.

The 500+ Companies That Have Already Made the Switch

If third-party support were legally questionable, these industries wouldn't adopt it at scale.

  • Banking & Financial Services: Heavily regulated, legally conservative. 40+ GoVendorFree clients operate on third-party support with zero compliance issues.
  • Pharma & Healthcare: FDA-regulated, audit-heavy. Third-party support is fully compatible with healthcare compliance frameworks.
  • Government & Public Sector: Government agencies use third-party support providers. If it were illegal, government procurement would prohibit it.
  • Manufacturing & Retail: Mission-critical environments using third-party support for Oracle, SAP, and IBM software.
  • Telecommunications: Large carriers have switched to third-party support for their enterprise systems.

Frequently Asked Questions

Vendor support is 15-22% of net license value annually. A $10M Oracle estate generates $1.5-2.2M per year in perpetuity. Vendors have enormous financial incentive to claim third-party support is risky or illegal. It's a retention tactic, not a legal fact.
Banking, healthcare, government, and pharma clients all use third-party support successfully. Third-party support is compatible with compliance frameworks (HIPAA, PCI-DSS, SOC 2, GDPR, etc.) because the support model doesn't change your license compliance posture. Your software remains the same; only who provides support changes.
No. Vendors can end-of-life a software version, but they cannot legally force you to upgrade. Third-party support allows you to run your current version indefinitely. This is one of the biggest value propositions.
Rimini Street's lawsuits with Oracle were primarily about data access and unauthorized copying — not about the legality of third-party support. Those cases are settled. The legal precedent from those cases affirmed that third-party support is legal; they just addressed specific misconduct by one provider.
No. Vendors audit based on license compliance, not support contracts. You own the same licenses; you run the same software. Support choice is irrelevant to audit scope. In fact, being off vendor support can reduce audit risk because you have clear, independently-verified documentation of your software environment.
Most contracts include general support requirements but don't explicitly prohibit third-party support. If yours does, it's likely unenforceable under the First Sale Doctrine and is worth reviewing with legal counsel. Many of our clients have negotiated these clauses away or found they don't actually restrict third-party support.

Ready to Understand Your Legal Options?

Get a detailed legal and compliance assessment specific to your software stack.

Schedule a Free Consultation

Related Resources

GoVendorFree vs Rimini Street

Compare two leading third-party support providers on features, cost, and litigation history.

View comparison →

Why Enterprises Switch

The real reasons 500+ organizations left vendor support and never looked back.

Read the analysis →

Support Cost Calculator

Calculate your potential annual savings with third-party support.

Try the calculator →