WithSecure Terms of Use

The WithSecure Terms of Use are the standard license terms for WithSecure’s business products. They cover “all the solutions, software-based services and web applications” of WithSecure Corporation and its affiliates, together with support tools, portals, documentation and updates, referred to collectively as the Solution.^[1] The current version is dated February 2026, and the former EULA address now redirects to it. WithSecure first published separate business terms after its 2022 demerger from F-Secure. Its announcement said the old EULA “were written originally to accommodate both the F-Secure B2B and B2C offerings”.^[2] An EU Data Act addendum (September 2025) and a Data Processing Agreement supplement the Terms.^[3][4]

Scope and precedence

Under §1.1, “If you have a direct agreement with WithSecure on the provision of the Solution, the terms and conditions of said agreement prevail over these Terms.” WithSecure “expressly objects to and rejects any terms and conditions included or referred to in your purchase order”. If language versions differ, the English version prevails.^[1] Under §1.2 the Terms are accepted by opting in, or by installing, copying or using the Solution, on behalf of the customer’s organisation.^[1] For customers who buy through a reseller, which is WithSecure’s normal channel, the Terms of Use are therefore usually the governing licence. Catalog: Direct agreement with WithSecure prevails over the Terms of Use.

Grant and term

§2.1 grants “a non-exclusive, non-transferable, non-assignable, revocable right to use the specified Solution, for a specified time period, as separately agreed upon between you and WithSecure or its resellers or distributors”. The grant depends on payment of the subscription and license fees.^[1] The subscription term is set in the order, not in the Terms. “Unless otherwise agreed, the subscription will automatically renew for an additional term upon the expiration of the initial term and each subsequent term”.^[1] Catalog: Subscription grant is non-transferable and time-limited, Subscriptions renew automatically unless otherwise agreed.

Metrics and quantity

§2.3 sets the quantity limit in general terms. The customer may “install and use the Solution solely for the amount of users, seats or accounts that have been subscribed to”, may create copies “for installation and backup purposes only”, and may extend the number of subscriptions by buying more.^[1] The Terms do not define “user”, “seat” or “account”. The units come from the order and from WithSecure’s pricing, which distinguishes protected devices from protected digital identities (see WithSecure Elements subscriptions and module licensing). Catalog: Use limited to the subscribed users, seats or accounts.

Telemetry threshold

§2.4 adds a volume limit that has no equivalent in most per-device endpoint licences. “If your event or telemetry volume exceeds by more than twenty percent (20%) the WithSecure global average for the relevant Solution without a valid justification, WithSecure reserves the right to invoice you for the excess usage above such threshold.”^[1] The Terms do not publish the global average or the rate for excess usage. The clause makes data volume a second, contingent charge on top of the seat count, which is a pattern described in Subscription and consumption licensing. Catalog: Excess event or telemetry volume above 20% of the global average may be invoiced.

Evaluation

Under §2.2, WithSecure may, on request and with its approval, grant “a limited, non-exclusive, non-transferable right to evaluate the Solution for non-commercial purposes”. “You must purchase a subscription to the Solution to continue to use the Solution commercially after the evaluation period ends.”^[1] Elements Security Center labels such keys with the subscription type Evaluation, as distinct from Commercial, Governmental, Educational and Not For Resale.^[6] Catalog: Evaluation rights are for non-commercial use only, WithSecure evaluation and free trial.

Restrictions and third-party use

§3.1 prohibits using the Solution beyond the Terms. It bars demonstrating, selling, distributing or transferring the Solution “to any third party”, creating derivative works, reverse engineering and sublicensing. It also lists prohibited purposes such as spamming or malware distribution.^[1] §3.2 allows outsourcing on narrow terms. “You may permit a third party to administer Solution and/or use Solution to perform security services for your business only if such third-party use or administration is for your sole benefit and on your behalf”. The customer stays liable for that third party’s use and must notify WithSecure promptly of unauthorised access.^[1] An MSP running a customer’s tenant therefore acts under the customer’s licence. MSPs that serve many customers use WithSecure’s partner channel instead (see WithSecure partner and MSP licensing). Catalog: Third-party administration only for the customer's sole benefit.

Audit and usage data

The February 2026 Terms contain no clause that gives WithSecure a right to audit, inspect or request a self-declaration of the customer’s deployment.^[1] The data clauses do much of that work instead. §8 says the Solution automatically collects personal data such as “(for example license allocation, device, and software information, user account activity, geographic location of your device, operation system, etc.)”. “Data collected from one Solution may be utilized in another Solution”, and WithSecure “may monitor the usage of the Solution”.^[1] Under §11.7, WithSecure may limit use, decline renewal or terminate where it observes use in breach of the Terms or of the Solution’s intended purpose.^[1] Seat enforcement in Elements Security Center completes the picture: a device cannot be added without a free installation in the subscription.^[6] For comparison with contractual audit regimes, see Software license audit.

Changes to the Terms and to the Solution

§10.1 lets WithSecure change features, remove features and end support for versions “in accordance with WithSecure’s product lifecycle policies, which may lead to the Solution becoming inoperable”. Revised Terms “shall automatically cover all Solutions and installations of your subscription” once published. “In case there are material changes to the Terms, WithSecure may also notify you by other means and in this case, the revised Terms shall become effective within thirty (30) days from the communication. You accept the revised Terms by continuing to use the Solution.”^[1] The lifecycle policy sets the practical timetable. Elements agent versions reach end of life three months after the next version, and product end of life is announced at least six months ahead.^[5] Catalog: Revised terms apply to all installations; material changes after 30 days, Elements agent versions reach end of life three months after the next version.

Accounts

§11.1 requires a named User Account, which must not be shared, and may require multi-factor authentication. WithSecure may suspend or remove an account if “the User Account has been inactive for a period of six (6) months”, or if MFA was not enabled when required.^[1]

Termination

Under §11.7, WithSecure may terminate immediately for breach. If the agreement between WithSecure and the reseller or distributor ends, the customer may be notified of “premature termination of your subscription” and “shall not be entitled to a refund, damages, or other compensation from WithSecure”. On any termination the customer must “immediately i) discontinue all use of Solution, and ii) delete any such copies of Solution, that may be installed on your own IT environment”.^[1] Catalog: On termination, stop use and delete installed copies.

Liability and governing law

§5 disclaims all warranties, express or implied, and provides the Solution as is. §6.1 excludes indirect and consequential damages and caps aggregate liability at “THE TOTAL AMOUNTS PAID BY YOU FOR THE SOLUTION FOR A PERIOD OF SIX (6) MONTHS IMMEDIATELY PRECEDING THE EVENT CAUSING THE LIABILITY”.^[1] §11.9 applies Finnish law, with arbitration in Helsinki under the Finland Chamber of Commerce rules. Where subscriptions are bought by or for users residing in the United States, New York law applies, with JAMS arbitration in New York.^[1] Catalog: Liability capped at six months of fees, Governing law: Finland, or New York for US purchases.

EU Data Act addendum and data processing

The EU Data Act addendum (September 2025) “applies only to Clients headquartered and billed within the European Union”. It governs switching to another provider, moving to on-premises infrastructure, or erasing data under Regulation (EU) 2023/2854.^[3] Its key periods are:

The Agreement terminates when switching is complete, or at the end of the Notice Period for erasure-only requests. However, “Any remaining subscription fees shall be payable as an early termination fee.” For Switching Notices submitted before 12 January 2027, WithSecure may charge reasonable switching fees where the work is disproportionate.^[3] The Data Processing Agreement “contains the mandatory clauses required by Article 28(3) of the General Data Protection Regulation” and takes effect with the underlying Agreement.^[4] Catalog: EU Data Act switching: two-month notice, remaining fees payable.

Out of scope

• Direct enterprise agreements with WithSecure, which prevail over the Terms and are not public.
• WithSecure Cloud Protection for Salesforce Terms of Service, which the terms page links to separately.
• Community forum, remote support and website terms listed alongside the Terms of Use.
• The DPA document itself, which the landing page links as a separate file that was not retrieved.
• F-Secure consumer license terms.

Catalog rows

• Rules
  • Direct agreement with WithSecure prevails over the Terms of Use
  • Subscription grant is non-transferable and time-limited
  • Subscriptions renew automatically unless otherwise agreed
  • Use limited to the subscribed users, seats or accounts
  • Excess event or telemetry volume above 20% of the global average may be invoiced
  • Evaluation rights are for non-commercial use only
  • Third-party administration only for the customer's sole benefit
  • Revised terms apply to all installations; material changes after 30 days
  • On termination, stop use and delete installed copies
  • Liability capped at six months of fees
  • Governing law: Finland, or New York for US purchases
  • EU Data Act switching: two-month notice, remaining fees payable
  • Separate B2B licence terms since the F-Secure demerger
• Programs
  • WithSecure evaluation and free trial
• Sources
  • WithSecure Terms of Use (February 2026)
  • WithSecure EU Data Act addendum (September 2025)
  • WithSecure is refreshing the License Terms used for our products and services (WithSecure Community knowledge base)