The ITAM Review

News, reviews and resources for worldwide ITAM, SAM and Licensing professionals.

Autodesk Audit Guide

Autodesk is best known for Computer-aided Design (CAD) Software

Autodesk is best known for Computer-aided Design (CAD) Software

Autodesk products are used by more than 10 million architects, designers, engineers, manufacturers, and digital artists across multiple industries, including architecture, engineering, construction, manufacturing, automotive, media and entertainment, and utilities and telecommunications.

To help combat pervasive piracy, Autodesk, along with other publishers, founded The Business Software Alliance (the BSA), an organization designed to investigate and punish businesses that are using software they cannot prove they own.

The BSA claims that 42 percent of software used in the global marketplace is pirated. For every legal copy of Autodesk software sold in the marketplace, five more illegitimate copies are distributed.

What does this mean for the average business? If you are using Autodesk products, you should ensure that you fully understand your obligations under Autodesk’s sometimes confusing license terms and that you have dated documentation to demonstrate ownership of each product you are using. If Autodesk or the BSA is auditing you, you should seek experienced counsel to guide you through the process.

AUTODESK SOFTWARE AUDITS

Autodesk typically initiates audits four ways –through its internal compliance team, through an outside law firm, as part of a BSA audit, or as part of a Software and Information Industry Association (SIIA) audit.

Although the process is slightly different depending on which of the above entities initiates the audit, the basic information requested pursuant to the audit framework is the same – the quantity and serial number of Autodesk products installed on each computer, the number of licenses owned and the serial numbers of any licenses owned.

When Autodesk audits a business’ use of software, it is looking for several common licensing issues:

  • The business has more licenses installed than it owns
  • The serial number is invalid or registered to another company
  • The company is using licenses that were previously used as an underlying license for an upgrade

All of these actions are prohibited under Autodesk’s license provisions and companies should be aware of the restrictions before purchasing or deploying any Autodesk software.

Audit targets typically receive a letter from Autodesk, its law firm, the BSA, or the SIIA demanding the business’ cooperation in disclosing the number of Autodesk installations on its network and the number of Autodesk licenses it owns, including serial numbers. The auditing entity may assert that it has received information that indicates the business may have more installations of Autodesk software than it is licensed to use. The letter often describes the various penalties associated with copyright infringement and sometimes threatens the business with civil litigation if the business does not cooperate.

In many cases, as a result of the audit Autodesk demands a settlement payment calculated as the MSRP of the allegedly unauthorized products installed on the business’ network multiplied by three. The multiplier, Autodesk argues, is the penalty for using unauthorized software and is assessed in lieu of proceeding with formal judicial resolution. The use of multipliers as an approximation of damages is a hotly contested issue.

UNDERSTANDING AUTODESK’S LICENSING TERMS

Autodesk’s End User License Agreement (“EULA”) contains a number of provisions that restrict a user’s ability to purchase, install, use, or transfer Autodesk products. Users are often unfamiliar with the licensing terms or even when they take the time to learn the terms, misunderstand their obligations.

Autodesk claims that any violation of the license agreement is not only a breach of contract, but likely constitutes copyright infringement as well. Because the penalties for copyright infringement can be severe, it is important to understand and comply with the Autodesk licensing requirements.

Initially, Autodesk restricts the number of installations and indicates that certain licenses can only be installed on certain kinds of computers. For a standalone product, the EULA allows one installation of the product on a single computer in the office setting. The EULA also allows one installation on a portable or home computer to be used only by the same person who uses the office installation. A standalone product cannot be installed on a network computer or a server. Furthermore, it is improper to install a network license on both a server and a standalone computer. Even though it is technologically possible to install Autodesk software in violation of the license agreement, the license terms prohibit the installations and can result in penalties.

Autodesk also contractually limits redistribution or transfer of its software products. The grant of the license in the EULA is explicitly non‐transferable, and the EULA also prohibits a lawful license holder from redistributing the license to anyone without Autodesk’s written permission. What this means to those in the Autodesk market is that if the business bought the software from anyone other than an Autodesk reseller, Autodesk will claim that the copy is unauthorized. This can pose a problem in the following circumstance – Autodesk stops selling a particular version of a software product, but for compatibility reasons, the business needs to purchase an out‐of‐date, unsupported version of Autodesk software. According to Autodesk, the business cannot buy a used, legal copy of the proper version because it is not distributed by an authorized reseller.

Furthermore, if a business owned a legal copy of an Autodesk product and later purchased an upgrade, the earlier version of the product is no longer valid and cannot be used legally after a short period of time for transition from one product to the next has passed. In some instances, a software user with a valid subscription may upgrade to the latest version and continue to receive technical support, or may continue to use the authorized older version without technical support. But, typically purchase of an upgrade license invalidates the older license. If your business has a need to use both licenses, do not purchase an upgrade; buy a full version license instead.

AUTODESK HAS POWERFUL ENFORCEMENT RIGHTS

The Copyright Act of 1976 and the Digital Millennium Copyright Act (“DMCA”), protect, among other works, software. Autodesk regularly avails itself of copyright laws to protect against unauthorized use of its copyrights and software piracy. The DMCA focuses on Internet piracy and the unauthorized distribution, copying, and use of copyrighted materials. The anti‐circumvention provision of the DMCA is designed to prevent copyright infringers from overcoming security protocols that block duplication of software. These provisions enable copyright holders to pursue damages against copyright infringers, resulting in civil fines or potential criminal charges.

When a copyright owner claims that a company is using its software without a license, the burden shifts to the software user to prove that the user had a valid license. Although the license agreement does not require users to retain proofs of purchase to demonstrate ownership, those proofs of purchase are the only acceptable documentation in many audit cases. There is no requirement that the copyright owner show that the accused infringer had knowledge of the infringement or an intent to infringe the copyright.

The penalties for copyright infringement can be severe. If a copyright holder successfully sues for copyright infringement, the copyright holder can seek actual damages, statutory damages, punitive damages, injunctions, and in some cases, federal prosecutors can initiation a criminal copyright action that may result in imprisonment. The statutory damages increase and punitive damages may be awarded if the copyright infringement is willful or knowing.

VIABLE DEFENSES

There are not many defenses to a claim of copyright infringement. One possible defense to copyright infringement is fair use. The fair use of a copyright ranges from news reporting, to parody, research, or other non‐infringing ways.

Some factors used by courts to determine whether the copying or use qualifies under the fair use defense include the following:

  1. The purpose and character of the use, including whether such use is of a commercial nature or is for nonprofit educational purposes;
  2. The nature of the copyrighted work;
  3. The amount and substantiality of the portion used in relation to the copyrighted work as a whole; and
  4. The effect of the use upon the potential market for or value of the copyrighted work.

If the court determines the use of the protected work constituted fair use, damages will not be assessed against the alleged copyright infringer. However, it would be difficult for a business using a copyrighted software product in violation of the license agreement to qualify for the fair use defense.

Another affirmative defense to a claim of software infringement is the first‐sale doctrine. The first‐sale doctrine enables the owner of a legal copy of protected work to transfer, sell, rent, or otherwise distribute the copyrighted materials without permission from the copyright holder. A copyright holder’s exclusive right to distribute the particular copy ends once it is sold to a third party.

Julie Machal‐Fulks, Scott & Scott LLP

Julie Machal‐Fulks, Scott & Scott LLP

This doctrine is applicable to computer software, and cannot be waived by the End User License Agreement (“EULA”). However, a purchaser of copyrighted software may not resell the product contrary to a license agreement if the purchaser is a merely licensee of the protected work, and not an owner of a copy of the work. Whether a purchaser of retail software is an owner or a licensee is a question that continues to be examined by the courts in cases like Vernor v. Autodesk.

In Vernor, Timothy Vernor claimed he was entitled to resell the Autodesk software that he purchased from another individual. A federal district court in Washington agreed, but the Ninth Circuit Court of Appeals reversed, finding that the first‐sale doctrine does not apply to a person who possesses a copy of a copyrighted work without owning it, such as a licensee. After reviewing the software license agreement between Autodesk and the original owner, the Court determined that the original owner was a licensee who was not allowed to resell the software to Vernor. Because it is unclear whether the first‐sale doctrine could ever apply to software when a license agreement prohibits transfer, companies should be cautious when trying to acquire software from third parties.

CONCLUSION

Autodesk diligently pursues companies it suspects of violating Autodesk’s EULA. Businesses should ensure that they are aware of their obligations under the license agreement and that they are complying with the obligations. If a company is facing an Autodesk audit, it should take the matter seriously, recognize that the exposure could be significant, and understand the ramifications of providing information to Autodesk. Having visibility into the process and the information requested by Autodesk is an important component in minimizing the risks associated with a software audit.

This guide was prepared by Julie Machal‐Fulks, partner, and Keli Johnson, associate of Scott & Scott, LLP.

Image Credit 

About Martin Thompson

Martin is owner and founder of The ITAM Review, an online resource for worldwide ITAM professionals. The ITAM Review is best known for its weekly newsletter of all the latest industry updates, LISA training platform, Excellence Awards and conferences in UK, USA and Australia.

Martin is also the founder of ITAM Forum, a not-for-profit trade body for the ITAM industry created to raise the profile of the profession and bring an organisational certification to market. On a voluntary basis Martin is a contributor to ISO WG21 which develops the ITAM International Standard ISO/IEC 19770.

He is also the author of the book "Practical ITAM - The essential guide for IT Asset Managers", a book that describes how to get started and make a difference in the field of IT Asset Management. In addition, Martin developed the PITAM training course and certification.

Prior to founding the ITAM Review in 2008 Martin worked for Centennial Software (Ivanti), Silicon Graphics, CA Technologies and Computer 2000 (Tech Data).

When not working, Martin likes to Ski, Hike, Motorbike and spend time with his young family.

Connect with Martin on LinkedIn.

11 Comments

  1. Ilan Justh says:

    This is all fine and good but since this is a guide specifically for Autodesk is there something unique or different for their product as opposed to other software vendors?

    I could be blind or illiterate but I would have to say most of what is posted looks to be of a similar vein to all the other software vendors EULAs. If this is the case I ask to please have anything special pointed out since it is one thing to true up a $200 Adobe license problem. I don’t mind having a few extra. Is is much more costly to fix something at $5000 per seat. That is something I want to be exactly on point with no spares.

  2. Anonymous says:

    Protection of software was not explicit in the Copyright Act of 1976. The correct piece of legislation to quote in this instance is the Copyright, Designs and Patents Act (1988) which affords software legal protection as a literary piece of work – brought about by FAST, no less.

  3. Julie Machal-Fulks says:

    The Copyright Office instructs that computer programs should be considered literary works, which were explicitly protected in the Copyright Act of 1976. See http://www.copyright.gov/circs/circ1.pdf

  4. Julie Machal-FUlks says:

    Ilan,
    The primary differences between Autodesk’s licensing practices and other software vendors’ practices are:
    1. Autodesk has more restrictive terms regarding transfers of its licenses;
    2. Autodesk’s licensing enforcement program is rigorous;
    3. Autodesk carefully tracks registration of its software and will disable a company’s ability to purchase additional licenses while an investigation is pending.

  5. Heather Smith says:

    Thanks for the information – but perhaps it could be listed as specifically relating to the UK (or wherever it specifically relates to). The legislation you mention here is not relevant in other countries, and I’m aware that this site is not only frequented by UK/US visitors. While the Autodesk EULAs may be the same the world over, some of the other factors may not be. For instance, in Australia Autodesk audits are initiated in ways other than the 4 you have mentioned.

    I have no issue with the topic here (in fact I was quite interested to read about it when I saw the link in the latest newsletter) but find it a tad frustrating when the content is not applicable to all, or showing the differences for each location.

    Cheers,
    Heather

  6. Hi Heather,
    The ITAM Review is powered by the kind contributions of worldwide ITAM professionals – I would very much welcome any contributions specific to the Australian market.
    Martin

  7. Anonymous says:

    Interesting fact that they require a record of serial numbers deployed on each host.. Factoring MSI deployment for products you may well encounter the same serial number across multiple hosts.

    Also in regards to ‘The business has more licenses installed than it owns’ should be put into context if you are running the Autodesk license manager (sever based) which I believe acts in a concurrent manner.

    Maybe useful to give people the full picture of the licensing options. Certainly if heavy users of the Autodesk range it helps to mitigate non compliance.

  8. Charlie says:

    Interesting thread, would not the the product registration process imply that autodesk software is disabled if it exceeds the purchased amount. If the registration process allows exceeding the installation if the eula states that. Would it not create a unfair jepordy on the basis that they allowed it as well?

  9. Christian says:

    I came late to the discussion, but I just have to say, in Mexico Autodesk and BSA are starting audits just because “in his records” we reach the limit of Auto Cad activation, one activation, regardless the motive (reinstallation same PC) and without a real audit in our offices.

  10. Here is a very informative video to let you know what to do if you receive a BSA Audit

    https://youtu.be/xnIClvNzJxc

  11. Intelligent Sanity says:

    Almost every other software company can handle activation and licensing in proper form to alleviate End User mistakes.
    Autodesk appears to intentionally fail this basic task set as so they have the opportunity to case-pummel companies for profit.
    — If you ask me, this intentional tactic should be illegal.

Leave a Comment