Why Telcos Face Disproportionate Oracle Licensing Risk

Telecommunications operators sit at the intersection of every Oracle licensing complexity. They run Oracle Communications stack (BRM, ASAP, Order Management) with subscriber-based pricing that drifts with every product launch. They operate virtualised BSS/OSS environments — almost always on VMware or KVM — where Oracle's soft-partitioning rules expose entire physical server clusters. They hold or recently exited Unlimited License Agreements. And they have sprawling Java SE deployments powering network management, mediation, and operational platforms.

The global communications software market reached $15.1 billion in 2024, with CSPs under mounting pressure to optimise spend. Oracle licensing costs can represent 30–50% of a telco's total software expenditure — and the gap between what an operator believes it has licensed and what Oracle believes is owed routinely reaches seven figures. We have seen true-up demands of eight figures against operators who considered themselves compliant.

Circles Telco, a digital-first operator in Singapore, engaged Redress Compliance to run a pre-renewal licensing health-check ahead of an Oracle support contract renewal. The assessment spanned their Oracle database estate, Oracle Communications BRM and ASAP stack, Java SE deployments, and a recently certified ULA. What emerged was $4 million in avoidable spend across over-licensed database editions, unoptimised BRM subscriber tiers, VMware virtualisation exposure, and Oracle Diagnostic Pack and Tuning Pack feature activations that were generating invisible licence obligations.

"We thought we had this under control. The VMware processor exposure alone was seven figures. We had never calculated the physical host exposure — only the VM allocation." — CTO, leading Singapore telco operator

How to Use This Checklist

Each checkpoint below replicates the assessment methodology applied in the Circles engagement. The risk rating — High, Medium, or Low — reflects the frequency with which that item drives material compliance exposure in telco environments. High-rated items warrant immediate investigation; Medium items should form part of an annual compliance review; Low items should be verified at contract renewal.

For each checkpoint, you will find: the diagnostic question, expert commentary on the typical exposure in a telco environment, and — where applicable — the specific finding from the Circles assessment.

High Risk — Investigate immediately
Medium Risk — Review annually
Low Risk — Verify at renewal

Section A: Database Licensing Foundation

01 HIGH RISK
Oracle Database Edition vs Features Actually Activated
Are you licensed for Oracle Database Enterprise Edition, and are you actually activating any EE-only Options or Management Packs?

Oracle Database Standard Edition 2 (SE2) covers most OLTP workloads at a fraction of Enterprise Edition cost. The licensing trap for telcos is that Oracle software installs as Enterprise Edition by default — and once an EE-only feature is activated (even accidentally via a scheduled job, OEM policy, or a consultant's tuning session), the entire instance must be licensed as EE. Many telcos run billing and mediation databases that could legitimately run on SE2 at 50–70% lower licensing cost. The assessment must compare the edition licensed, the edition installed, and the features activated across every database instance.

Circles finding: 14 database instances running Oracle EE with zero EE-only features activated. Re-licensing to SE2 or rightsizing to EE without Management Packs delivered $820,000 in savings across support and licence entitlement.
02 HIGH RISK
Processor Core Counting and the Oracle Core Factor Table
Have you applied Oracle's Processor Core Factor Table correctly to every physical server running Oracle software, including hosts that only occasionally run Oracle workloads?

Oracle licenses processors by physical core count, adjusted by a Core Factor. Intel Xeon cores carry a factor of 0.5 (so a 32-core server requires 16 processor licences). ARM and SPARC carry different factors. Errors occur when organisations count virtual CPUs rather than physical cores, apply the wrong core factor for the CPU generation, or fail to include passive cluster nodes, standby servers, and hosts connected to SANs where Oracle binaries reside. For telcos with dense compute environments powering BSS and OSS, a single undercount can generate a seven-figure true-up claim.

Circles finding: Four physical cluster nodes had been excluded from the processor count on the basis that Oracle workloads were "primary-only." Oracle auditors would have counted all four nodes. Corrected count revealed a 12-processor licence surplus that was subsequently applied to reduce support costs.
03 HIGH RISK
Virtualisation: VMware and Non-Oracle Hypervisors
Are Oracle databases running on VMware, Hyper-V, or KVM — and have you licensed the full physical host (not just the VM's vCPU allocation)?

Oracle does not recognise VMware, Hyper-V, or KVM as "hard partitioning" technologies. When Oracle software runs in a VM on these hypervisors, Oracle's policy requires that you license every physical core on every physical host in the VMware cluster that could, even theoretically, host that VM — regardless of vCPU pinning, DRS rules, or affinity policies. This is Oracle's most aggressive and most disputed licensing position, and it generates the largest exposure in telco environments where VMware underpins the entire BSS/OSS compute stack. The only recognised hard partitioning technologies are Oracle VM, LDOM (on SPARC), and IBM LPAR (on Power).

Circles finding: Oracle databases running as VMs on a 6-node VMware cluster (192 total cores). The organisation had licensed 16 cores (the VM allocation). Full-cluster exposure was 96 processor licences (192 cores × 0.5 factor). The gap was a $1.4M true-up risk. Remediation via migration to Oracle VM for the highest-risk workloads and contractual carve-out for others reduced exposure by 65%.
04 HIGH RISK
Oracle Diagnostic Pack and Tuning Pack Activation
Have you checked whether Oracle Enterprise Manager (OEM), AWR reports, or SQL Tuning Advisor have been used — which automatically activates the Diagnostic and Tuning Packs as separate licensable options?

The Oracle Diagnostic Pack ($10,000 per processor) and Tuning Pack ($10,000 per processor) are add-on licences for Oracle Database Enterprise Edition that are activated the moment a DBA runs an AWR (Automatic Workload Repository) snapshot, generates an ADDM report, or uses the SQL Tuning Advisor — even informally, even once. Oracle's LMS audit scripts specifically probe the DBA_FEATURE_USAGE_STATISTICS view to detect these activations. Telco DBAs routinely use these tools for routine performance troubleshooting. Unless the packs are explicitly licensed, each activation creates an unlicensed obligation.

Circles finding: 28 database instances showed Diagnostic Pack activations in DBA_FEATURE_USAGE_STATISTICS. The organisation held Diagnostic Pack licences for 8 instances. 20 instances required remediation — either licence purchase, disabling the AWR retention (and accepting reduced diagnostic capability), or migration to SE2 where the packs are not available.
05 HIGH RISK
Oracle Partitioning Option Activation
Are any Oracle database tables or indexes using range, list, hash, or composite partitioning without an Oracle Partitioning licence?

Oracle Partitioning is a separately licensable option at $11,500 per processor. Telco databases routinely use partitioning for call detail record (CDR) tables, billing history archives, and OSS inventory tables — the data volumes involved make partitioning an obvious performance strategy. What many telco teams do not realise is that Oracle Partitioning is not included in Oracle Database Enterprise Edition. It must be explicitly licensed. Oracle audit scripts query DBA_PART_TABLES to identify activated partitioning in every database instance, and any activation — regardless of whether it was intentional — creates a licence obligation.

Circles finding: 19 databases used Oracle Partitioning for CDR and billing tables. Only 6 had Partitioning licences. Remediation involved either purchasing the remaining licences (with negotiated discount) or migrating the highest-volume tables to alternative partitioning approaches compatible with SE2 on separate instances.
06 MEDIUM RISK
Real Application Clusters (RAC) Licensing
Are you running Oracle RAC (Real Application Clusters) for high availability, and are all nodes in every RAC cluster fully licensed?

Oracle RAC is a separately licensable option that enables a single database to span multiple server nodes. In a RAC environment, every node in the cluster must be licensed — including passive nodes that only handle failover. Telcos use RAC extensively for BSS and billing high availability. A common error is licensing only the "active" nodes and assuming the passive failover node is covered. Oracle's position is that any node capable of running the database instance must be licensed.

07 MEDIUM RISK
Oracle Advanced Compression
Are any database objects using Advanced Compression, OLTP Compression, or SecureFiles compression — which are not included in Oracle EE?

Oracle Advanced Compression ($11,500 per processor) covers OLTP table compression, advanced index compression, SecureFiles deduplication, and Data Guard Redo compression. Telcos implement compression to manage CDR and billing archive storage costs — it is operationally rational but creates licensing exposure if the Advanced Compression option is not separately licensed. Database administrators frequently enable compression without checking licensing status, particularly when following performance or storage optimisation guides that do not flag the licensing implications.

Running a telco Oracle estate? Get a confidential assessment.

We identify exposure before Oracle does. 180+ assessments completed.
Download Assessment Guide →

Section B: Oracle Communications Stack

08 HIGH RISK
Oracle BRM Subscriber Count Accuracy
Does your contracted BRM subscriber count align with your actual billable subscriber base — including prepay, postpay, IoT SIMs, MVNOs, and enterprise accounts?

Oracle BRM (Billing and Revenue Management) is typically licensed by billable subscriber volume. For a growing operator, subscriber counts drift upward with every product launch, MNO/MVNO arrangement, IoT SIM activation, and enterprise contract. If your BRM licence was set at contract signing and has not been reviewed since, the gap between contracted and actual subscriber count may represent a significant compliance liability. Oracle's audit methodology will pull subscriber counts directly from the BRM schema. The definition of a "subscriber" in your contract — whether that includes inactive accounts, IoT endpoints, or trial registrations — is a negotiating lever that must be locked down contractually.

Circles finding: BRM licence was set at contract signing with a 4.5M subscriber cap. IoT SIM activations and an MVNO arrangement added 680,000 subscribers not explicitly scoped. Contractual re-scoping and carve-out negotiation resolved the exposure without a full true-up.
09 HIGH RISK
Oracle ASAP and Order Management Scope Alignment
Has your Oracle ASAP (Automated Service Activation Platform) or Order Management licence scope kept pace with new service types, network domains, and fulfilment use cases added since the original contract?

Oracle ASAP is licensed by service type or by volume of activation transactions, depending on the contract structure. Telcos launching 5G, IoT, fixed broadband, or enterprise connectivity services routinely add service types to ASAP without reviewing whether the additional service domains are within scope of the original licence. Similarly, Order Management licences scoped for consumer broadband may not cover enterprise CPE provisioning or wholesale partner fulfilment. Each new service launch should trigger a licence scope review.

10 MEDIUM RISK
Oracle Communications Analytics and Reporting
Are you using Oracle Communications Analytics, Oracle BI Publisher, or Oracle Analytics Server for billing reports and operational dashboards — and are these separately licensed?

Oracle Communications Analytics, Oracle BI Publisher, and Oracle Analytics Server are separately licensed components that are often deployed as part of a BRM or OSS implementation without explicit licence purchase. BI Publisher licences are frequently included in the BRM stack at deployment but may cover only specific use cases. Extending usage to additional business units, external customer portals, or partner reporting requires additional licence entitlements. The Named User Plus vs Processor licensing choice for these analytics tools has a material cost impact at telco scale.

11 MEDIUM RISK
Oracle WebLogic Server Licensing for Telco Middleware
Is Oracle WebLogic Server licensed for every processor running BRM, ASAP, and OSS middleware components — including clustered and standby nodes?

Oracle WebLogic Server is a separate licence requirement for BRM, ASAP, and many Oracle Communications applications. The Standard Edition vs Enterprise Edition distinction matters: WebLogic EE includes features like Multi-Data Source, Work Managers, and advanced clustering that Standard Edition does not cover. Telco deployments almost universally require EE features, but licensing audits frequently reveal Standard Edition licences covering Enterprise Edition deployments. Additionally, all nodes in a WebLogic cluster — including administrative, managed, and standby servers — must be licensed.

Section C: ULA Certification and Agreement Scope

12 HIGH RISK
ULA Certification Completeness and Entity Coverage
If you recently certified or are approaching the end of an Oracle Unlimited License Agreement, have you inventoried every Oracle deployment across every legal entity, joint venture, and subsidiary covered by the ULA?

ULA certification is a one-time irrevocable declaration of Oracle software usage at the end of the ULA term. The quantities declared become your perpetual licence entitlement. Under-declaration — whether by omitting a subsidiary, missing a deployment, or miscounting processors — means the undisclosed usage is unlicensed post-certification. Oracle has become more aggressive in post-certification audits, with newer ULAs containing obligations to share discovery data for a period after certification. Telcos are particularly exposed because acquisitions, joint ventures, and wholesale partnerships create complex entity structures where Oracle deployments exist outside the direct IT visibility of the team managing the certification.

Circles finding: ULA certified 18 months prior. Post-certification audit identified a development environment in a wholly-owned subsidiary that was excluded from the certification inventory. The subsidiary had six Oracle EE database instances. Remediation required a supplemental licence purchase to restore compliance.
13 HIGH RISK
ULA Product List Completeness at Certification
Were all Oracle products deployed at the time of ULA certification — including Options, Packs, and Communications products — included in the ULA product schedule and captured in the certified count?

ULAs cover a defined list of Oracle products specified in the agreement schedule. Products not listed in the ULA schedule are not covered by the unlimited deployment right and must be separately licensed. At certification, only the products on the ULA schedule are captured in the certified count. If your team deployed Oracle Partitioning, Advanced Security, or Oracle Communications products that were not on the original ULA schedule, those deployments are unlicensed and not protected by the certified entitlement. Begin ULA preparation 6–12 months before the end date to identify any gaps between the ULA product list and actual deployments.

14 MEDIUM RISK
Cloud Deployment Exclusions in ULA Contracts
If your ULA includes or included any cloud deployments (AWS, Azure, GCP), are those deployments explicitly covered by the ULA scope — or are they governed by separate BYOL rules?

Oracle's cloud licensing rules for bring-your-own-licence (BYOL) deployments on AWS, Azure, and GCP are different from on-premises rules. Authorised Cloud Environments (ACE) provisions govern which cloud environments are permitted under Oracle licence terms. Many older ULAs were written before cloud deployments were common and do not explicitly address cloud scope. When in doubt, Oracle's position is that cloud deployments are not covered unless explicitly listed. Telcos migrating OSS/BSS workloads to public cloud must verify that their Oracle licences permit cloud deployment before migrating.

Section D: Java SE and Middleware Exposure

15 HIGH RISK
Oracle Java SE Commercial Licensing Obligation
Have you identified every instance of Oracle JDK or Oracle Java SE Runtime Environment (JRE) deployed across your BSS, OSS, NMS, and back-office systems — and are you paying the correct subscription?

Since Oracle's January 2023 Java SE pricing change, all commercial use of Oracle JDK or Oracle Java SE Runtime requires a subscription priced per employee (the entire organisation, not just Java users) at $15 per employee per month. Telcos are among the most heavily exposed enterprises because Java underpins network management systems, mediation platforms, billing middleware, OSS integration layers, and customer portals. A 5,000-employee telco with any commercial Java SE usage owes Oracle $75,000 per month. Discovery must extend beyond IT-managed servers to include any system that deploys Oracle JDK — including vendor-managed platforms, operational support systems supplied by third parties, and development environments.

Circles finding: Oracle JDK discovered on 312 servers across BSS/OSS, NMS, and integration middleware. Java SE subscription exposure was $540,000 per year. Migration to OpenJDK or Eclipse Temurin (both free, drop-in replacements) for appropriate workloads reduced exposure to $180,000 per year for workloads requiring Oracle Java SE support.
16 MEDIUM RISK
Oracle SOA Suite and Integration Licensing
Is Oracle SOA Suite, Oracle Service Bus, or Oracle Integration Cloud used for BSS/OSS integration — and are processor counts accurate for all clustered nodes?

Oracle SOA Suite and Oracle Service Bus are processor-licensed middleware products used extensively in telco integration architectures — connecting billing, provisioning, CRM, and network inventory systems. SOA Suite licensing must cover every managed server in the domain, including nodes that handle only a subset of composite services. Telcos that expanded their integration architecture by adding nodes for performance or resilience often do not revisit the SOA Suite licence count at the same time. Oracle's audit methodology for SOA Suite involves identifying all WebLogic managed server JVMs with SOA composite deployments.

Section E: Support, Audit Readiness, and Optimisation

17 MEDIUM RISK
Oracle Support on Retired or Decommissioned Licences
Are you paying Oracle Annual Technical Support (22% of licence cost) on products that are no longer deployed, on retired hardware, or that have been migrated to alternative platforms?

Oracle Annual Technical Support is calculated as a percentage of the original licence value and grows at a compounding rate. Terminating support on decommissioned licences is contractually straightforward but requires explicit written notice and — in some cases — a compliance review to confirm the product is no longer installed. Many telcos carry support obligations on legacy Oracle database instances that were superseded by cloud-native platforms, on Oracle Communications products replaced by vendor-neutral OSS, and on development environment licences that are no longer in use. An annual support rationalisation exercise routinely identifies 5–15% of support spend that can be legitimately terminated.

Circles finding: $320,000 per year in Oracle support on products decommissioned as part of a BSS modernisation programme. Termination of support on confirmed decommissioned instances and re-harvesting of licence entitlements for active deployments delivered immediate cost relief.
18 MEDIUM RISK
Disaster Recovery and Standby Database Licensing
Are Oracle Data Guard standby databases, DR replicas, and active standby instances fully licensed — including in geographically distributed sites?

Oracle's licensing policy for disaster recovery allows a single unlicensed passive standby database per licensed production database — but only if the standby is cold (cannot be opened for any purpose including reporting). Active Data Guard (which allows read-only queries on the standby) is a separately licensed option. Many telco DR environments use standby databases for read offload of OSS reporting, creating an Active Data Guard obligation that was never purchased. Geographically distributed DR environments (Singapore primary, Johor Bahru DR for a Singapore telco) must be assessed for licence coverage in each location.

19 LOW RISK
Named User Plus Minimums on Oracle Applications
Where Oracle products are licensed on a Named User Plus (NUP) basis, have you verified the minimum NUP count per processor is being met — and that all users with direct or indirect access are licensed?

Oracle Named User Plus licences require a minimum number of users per processor (typically 10–25 NUP per processor, depending on the product). For Oracle database instances with few direct users but many application-tier connections, the NUP minimum is often more expensive than Processor licensing — but the reverse is also true for small user populations on multi-processor servers. Indirect access — where users access Oracle through an intermediary application — is also a licensing obligation that is frequently missed. Oracle's definition of a "user" for NUP purposes includes any individual whose actions cause data to be retrieved from the Oracle database, even through a front-end application.

20 LOW RISK
Third-Party Support as an Optimisation Lever
Have you evaluated third-party Oracle support providers (Rimini Street, Spinnaker Support) as an alternative to Oracle Annual Technical Support for stable, mature Oracle products in your estate?

Third-party Oracle support providers typically offer support at 50% of Oracle's ATS rate for mature products (Oracle Database 12c/19c, Oracle EBS, Oracle Forms). For a telco with $2M in Oracle ATS spend, this represents a potential $1M annual saving. The trade-offs are real: no Oracle-issued security patches, no product updates, and potential complications with Oracle audit cooperation. However, for stable production systems with long planned lifespans — particularly legacy OSS databases, Oracle Forms-based provisioning systems, and Oracle EBS deployments — third-party support can be a legitimate optimisation strategy while the organisation plans migration.

Want this assessment run against your Oracle estate?

Redress Compliance has completed 180+ Oracle licensing assessments for telcos and enterprises across APAC, EMEA, and the Americas. We work exclusively on the buyer side.
Request an Assessment →

Summary: The Circles Engagement Outcome

The 20-checkpoint assessment applied to Circles Telco Singapore identified $4 million in avoidable Oracle spend across five primary findings. The VMware virtualisation exposure ($1.4M) was the largest single item and the most commonly underestimated risk in all telco environments. Database edition and options misalignment ($820K) came second. Java SE subscription rationalisation ($360K annual), BRM subscriber scope correction (avoided a projected $760K true-up), and Oracle support rationalisation on decommissioned products ($320K) completed the picture.

The assessment took six weeks from kickoff to final report. The Circles team had engaged two Oracle renewals without a structured compliance review. A structured assessment delivered more value in six weeks than six years of Oracle-led "licence reviews" designed to identify upsell opportunities rather than reduce spend.

"We had assumed Oracle licensing was the vendor's problem to manage. It turned out to be our biggest software cost optimisation opportunity." — Head of IT Procurement, Circles Telco Singapore

Next Steps: Running Your Own Assessment

The most effective Oracle licensing assessments combine automated discovery (Oracle LMS scripts, third-party SAM tooling) with expert contract interpretation and negotiation context. Automated discovery tells you what is deployed; contract expertise tells you what is licensed; negotiation experience tells you what Oracle will and will not accept in remediation.

For telcos with Oracle Communications stack deployments, BRM subscriber-based licensing complexity requires specialist knowledge of how Oracle interprets subscriber scope, MVNO arrangements, and IoT SIM definitions. This is not a generic software asset management exercise.

Redress Compliance works exclusively on the buyer side. We do not accept referral fees, channel commissions, or vendor incentives. Our assessments are designed to reduce your Oracle spend — not to prepare you for a managed Oracle upsell.

Download our full Oracle Licensing Assessment guide for telcos, or book a confidential scoping call to discuss your Oracle estate and risk profile.