Client Profile
Aegean Airlines is Greece's flag carrier and largest airline, operating scheduled and charter services across a network of European and Mediterranean destinations. The organisation employs approximately 3,800 staff and operates IT systems supporting reservations, revenue management, customer experience, ground operations, and back-office finance and HR functions. Java forms a significant component of the technology infrastructure: the airline's passenger services system relies on Java-based middleware for real-time booking and check-in processing, while Oracle's Java platform has historically been deployed on server infrastructure supporting the loyalty programme management and data analytics environments.
Prior to Oracle's January 2023 licensing model change, Aegean's Java environment had been managed under the legacy per-processor and Named User Plus licensing framework, with Oracle JDK installed across selected server workloads. The organisation had not undertaken a formal Java licensing review since the pre-2019 model, and its internal IT asset management records did not clearly distinguish between Oracle JDK installations and open-source OpenJDK distributions that had been deployed during a virtualisation programme several years earlier.
The Challenge
Oracle's January 2023 introduction of the Java SE Universal Subscription fundamentally changed the commercial basis of Java licensing for enterprise customers. Under the new model, any organisation that uses Oracle Java SE anywhere in its environment must license every employee — including part-time, contractors, and agency staff — at Oracle's per-employee subscription rate. Oracle's compliance team began systematically contacting enterprise customers with Java deployments to identify those whose licence position had not transitioned to the new subscription model.
When Oracle's compliance team contacted Aegean, its calculation was based on the employee-count methodology applied to Aegean's total workforce of approximately 3,800 staff. At Oracle's standard list price for the Java SE Universal Subscription, this produced an annual subscription requirement of approximately €380,000 — and Oracle's team also sought a retrospective true-up for the period since January 2023, which added a further €760,000 in claimed back-payments, producing the total initial exposure estimate of approximately €1.1M.
Oracle's position raised two fundamental questions that required independent analysis before Aegean could respond. First, was the employee-count methodology actually applicable to Aegean's environment, or were significant portions of the estate running OpenJDK distributions that do not require any Oracle licence? Second, even if Oracle JDK was present, was Oracle's claimed retroactive liability for the period before Aegean had been notified commercially and contractually supportable? The organisation engaged Redress Compliance immediately upon receiving Oracle's communication.
The Approach
Redress Compliance's engagement began with a full Java deployment audit conducted across Aegean's server infrastructure and end-user computing environment. The audit was designed to distinguish Oracle JDK installations — which trigger Oracle's licensing requirements — from OpenJDK distributions and other Java runtimes that carry no Oracle commercial obligation.
The technical audit identified four distinct categories of Java deployment across the estate. First, Oracle JDK 8 installations on a small number of legacy back-office application servers that had been specifically retained on Oracle JDK due to application dependency requirements. Second, OpenJDK distributions that had been deployed during a server virtualisation programme four years earlier as a deliberate cost-reduction measure — these installations required no Oracle licence of any kind. Third, Amazon Corretto deployments on cloud infrastructure that Aegean had migrated to AWS — Amazon Corretto is an OpenJDK distribution certified for production use and not subject to Oracle's commercial licensing. Fourth, Java runtime components embedded within commercial software packages — where the software vendor, not Aegean, holds the Java licence through their own Oracle agreement.
The analysis established that Oracle JDK was actively deployed on 47 servers — a fraction of the full estate, and a figure that directly contradicted Oracle's employee-count calculation methodology. Under Oracle's own licence metric for organisations with limited Oracle JDK deployments, a processor-based or named user subscription applying only to systems running Oracle JDK was commercially and contractually supportable as an alternative to the employee-wide subscription Oracle had initially proposed.
Redress also challenged the retrospective liability calculation. Oracle's Universal Subscription had only introduced the employee metric from January 2023; for the disputed retroactive period, Oracle's own pricing model had not yet applied the employee metric, making a back-payment calculated on that basis contractually unsupportable. Redress prepared a detailed technical and commercial response to Oracle's compliance team presenting these findings, with full deployment evidence and a subscription proposal sized to the 47 servers running verified Oracle JDK.
The Outcome
Oracle's compliance team accepted Redress's technical submission and withdrew the €760,000 retrospective liability claim in its entirety. On the forward subscription, Oracle agreed to a processor-based subscription structure covering the 47 confirmed Oracle JDK servers — an annual subscription cost of approximately €84,000, compared to Oracle's initial employee-wide subscription demand of €380,000 per year. The total ongoing subscription cost represented a 78% reduction versus Oracle's initial proposal.
Following resolution of the Oracle position, Aegean implemented a structured Java remediation programme. The 47 Oracle JDK servers were reviewed individually: ten were migrated to OpenJDK within six months, reducing the forward Oracle subscription further; the remaining 37 retained Oracle JDK where application compatibility testing confirmed that migration risk was unacceptable for the current planning cycle. The organisation also established a Java governance process to ensure that all future Java deployments are tracked by distribution and version, eliminating the ambiguity that had existed in the pre-audit estate.
Key Takeaways
- Oracle's employee-count metric applies only where Oracle JDK is actually in use. OpenJDK, Amazon Corretto, Eclipse Temurin, and other certified open-source distributions carry no Oracle commercial obligation. An independent Java audit almost always identifies a significant portion of the estate as non-Oracle Java.
- Retroactive liability claims under the 2023 model require careful scrutiny. Oracle's compliance team routinely includes retroactive elements in its initial exposure calculations. These claims frequently lack contractual foundation for the pre-2023 period and should not be accepted without independent legal and commercial review.
- The employee-count subscription is not the only commercial option. For organisations with a limited number of Oracle JDK deployments, Oracle's processor-based or named user subscription options remain available and produce dramatically lower costs than the employee-wide subscription Oracle's compliance team typically proposes first.
- Embedded Java in commercial software does not create end-user licensing obligations. Java components bundled with third-party enterprise software are licensed by the software vendor. Organisations frequently include these installations in their Java inventory unnecessarily, inflating Oracle's count.
- Engage independent advisory before responding to Oracle's compliance team. Oracle's initial exposure calculations are commercial opening positions. An independent technical audit before any substantive response to Oracle consistently produces a materially better outcome.
Received a Java licensing letter from Oracle?
Redress Compliance audits Java environments, challenges Oracle's methodology, and resolves compliance positions before they become costly commitments.