Executive Summary
Aegean Airlines is Greece's largest airline and a member of the Star Alliance, operating an extensive European route network with over 150 destinations across Europe, the Middle East, and North Africa. The airline's IT infrastructure supports flight operations, crew scheduling, passenger reservation systems, aircraft maintenance planning, ground handling coordination, and a wide range of internal business applications, many of which depend on Java for core functionality.
Oracle notified Aegean Airlines of an alleged Java SE licensing shortfall and claimed approximately $2 million in compliance exposure across servers and workstations. Oracle's sales team urged the airline to rapidly purchase Java SE subscriptions, warning that delays could affect access to support and future security updates.
The demand came as a surprise—Aegean had not historically budgeted for Java licensing, and many flagged installations were part of vendor-supplied aviation systems or running older Java versions believed to be free. In the highly regulated aviation industry, any suggestion of non-compliance demanded expert handling. Aegean engaged Redress Compliance to independently assess the true Java compliance position and manage all Oracle communications.
The result: Redress demonstrated that Aegean's Java usage was largely compliant or exempt, and Oracle formally withdrew the entire $2 million claim. Aegean paid nothing, and no flight operations were disrupted at any point during the engagement.
Aviation Industry Context
Airlines operate under EASA and national aviation authority oversight, creating extreme caution around any software change that could affect flight operations, maintenance tracking, or safety systems.
Deep Java Dependencies
Java embedded in flight operations, crew management, reservation systems, maintenance planning, and ground handling—much of it delivered by specialist aviation software vendors.
Oracle Sales Pressure
Oracle claimed $2M exposure and pushed for immediate Java SE subscription purchase, warning that delays could affect support access and security update availability.
Safety-Critical Constraints
Aviation systems demand rigorous change management—any Java remediation had to be validated against operational safety requirements before deployment.
The Challenge
Oracle's $2M Java SE Compliance Claim
Oracle's sales team calculated Aegean's Java SE exposure at approximately $2 million based on the Employee Metric pricing model applied to the airline's approximately 3,500 employees. Under this model, every employee counts in the Java SE subscription calculation—including pilots, cabin crew, ground handlers, maintenance engineers, and airport staff—regardless of whether they interact with Java-based systems.
Vendor-Embedded Aviation Software
A substantial proportion of Aegean's Java installations existed because specialist aviation software vendors had delivered their products with embedded Java runtimes. The licensing question—whether Aegean needed its own Oracle Java SE subscription for these vendor-bundled installations, or whether the vendor's redistribution license covered them—was the single most important issue in the case.
Aviation Safety and Change Management Constraints
Unlike most industries, aviation imposes rigorous change management requirements on any modification to operational systems. Aircraft maintenance systems are subject to EASA Part-145 requirements for documentation integrity. Any Java remediation activity required careful assessment against these operational constraints.
What Airlines Should Do When Oracle Raises Java Compliance
- Do not accept Oracle's numbers without independent assessment: Oracle's initial compliance figures are consistently inflated, particularly for industries with high headcounts and deep vendor-embedded Java.
- Inventory all aviation vendor agreements for Java redistribution coverage: Your PSS, DCS, M&E, and operations vendors almost certainly bundled Java under their own Oracle redistribution licenses.
- Classify every Java installation by source, version, and operational criticality: This determines which installations need remediation, which are already covered, and which require careful change management.
- Do not make operational system changes under time pressure: Aviation change management exists for safety reasons—Oracle's commercial urgency does not override operational safety requirements.
How Redress Resolved the Claim
Phase 1: Comprehensive Java Discovery and Classification
Redress deployed discovery tools across Aegean's entire IT estate. Every Java installation was catalogued and classified into five categories: vendor-bundled installations (potentially covered by the vendor's Oracle redistribution license), legacy version installations (JDK/JRE versions pre-dating Oracle's 2019 licensing change), operational system installations (where change management constraints applied), corporate and administrative installations (with no aviation safety implications), and orphaned installations (with no active application dependency). The discovery identified that the vast majority of server-side Java fell into the vendor-bundled category.
Phase 2: Vendor Agreement Analysis
Redress worked with Aegean's procurement and IT teams to obtain and analyze every third-party software agreement that included Java as a bundled or dependent component. For each agreement, Redress determined whether the vendor held an Oracle redistribution license covering Aegean's use of the embedded Java runtime. The analysis confirmed that the majority of Aegean's server-side Java installations fell under vendor redistribution coverage, eliminating the largest portion of Oracle's $2M claim.
Phase 3: Risk Mitigation and Remediation
For Java installations that were not covered by vendor redistribution or legacy version exemptions, Redress implemented a targeted remediation program with careful attention to aviation change management requirements. Corporate workstations were remediated immediately. Non-production environments were migrated to Eclipse Temurin (OpenJDK). Operational systems were assessed individually with OpenJDK migration validated through structured testing. All operational changes followed Aegean's existing change management framework. The remediation was completed in approximately five weeks with zero operational disruptions.
Phase 4: Oracle Communication and Claim Resolution
With the classification complete and remediation executed, Redress prepared a comprehensive compliance report addressing Oracle's $2M claim. The report presented the vendor redistribution analysis, the legacy version inventory, the remediation evidence, and the residual exposure calculation demonstrating that zero installations remained requiring an Oracle Java SE subscription. Redress managed all communications with Oracle, presenting evidence and countering Oracle's challenges. After multiple rounds of correspondence, Oracle formally dropped the $2 million claim entirely and confirmed Aegean's Java usage was compliant.
| Java Installation Category |
System Examples |
Oracle's Position |
Redress Classification |
Cost |
| Vendor-Bundled (Aviation Platforms) |
PSS, DCS, Crew Management, M&E, Flight Operations |
Aegean liable |
Covered by vendor redistribution license |
$0 |
| Legacy JRE/JDK (≤8u201) |
Long-running internal applications, older integrations |
Subscription required |
Exempt under Binary Code License |
$0 |
| Corporate Workstations |
HR, Finance, Commercial, Admin desktops |
Subscription required |
Migrated to OpenJDK / Removed |
$0 |
| Non-Production Environments |
Dev, Test, Staging servers |
Subscription required |
Migrated to Eclipse Temurin (OpenJDK) |
$0 |
| Operational Systems (Non-Vendor) |
Custom integration tools, Monitoring |
Subscription required |
Migrated to OpenJDK with safety validation |
$0 |
| Total |
All aviation and corporate systems |
~$2,000,000/year |
All classified or remediated |
$0 |
Before Redress Engagement
- $2M Oracle Java SE compliance claim
- Oracle pushing for immediate subscription purchase
- No classification of aviation vendor coverage
- Concern about operational system disruption
- Legacy version licensing status unclear
- No Java governance framework
- Unbudgeted expense threatening airline margins
After Redress Engagement
- $2M claim withdrawn by Oracle—$0 paid
- No subscription or license purchase required
- Vendor redistribution coverage fully documented
- Zero operational disruptions during remediation
- All legacy versions classified and documented
- Permanent Java governance framework established
- IT budget preserved for planned investments
Results & Business Impact
$2M Claim Eliminated
Zero Paid to Oracle
$6M+ 3-Year Avoided Cost
Preservation of operating budget
Zero Flight Operations Disrupted
Operational continuity maintained
5 Weeks Full Remediation
Rapid, safe resolution
Aegean avoided the entire $2 million annual Java SE subscription cost—a saving that, over a three-year horizon, represents approximately $6 million in avoided costs. For a European carrier operating in one of the most competitive short-haul markets, this preservation of operating budget was significant. The airline's IT investment plans continued without interruption.
The engagement was completed with zero operational disruptions. Flight operations, crew scheduling, maintenance planning, passenger processing, and all regulatory reporting continued without interruption. The OpenJDK migration for non-vendor systems was validated through Aegean's established change management framework.
Redress established a forward-looking Java governance framework comprising four elements: OpenJDK as default for all new Java installations, automated discovery to identify any new Oracle JDK installations, vendor contract integration to include explicit Java redistribution terms in all new agreements, and annual compliance review to reconcile the compliant position.
"Oracle hit us with a surprise $2 million compliance claim. We were concerned not only about the money but also about keeping our systems stable. Redress Compliance took charge of the situation and made it go away. They showed Oracle and us that most of our Java use was either already allowed or easily fixed. In the end we paid nothing, and we learned how to stay compliant without risking our operations. It was the best outcome we could have hoped for."
CIO, Aegean Airlines
"Airlines are one of Oracle's prime Java targets because the combination of deep vendor-embedded Java, safety-conscious change management, and regulatory compliance culture creates exactly the environment where Oracle's urgency tactics work. But the same vendor-dependency that makes the Java footprint appear large also makes the actual licensing requirement very small—because the vendors' redistribution licenses cover most of the deployment. Once you document that coverage, the claim collapses."
Fredrik Filipsson, Co-Founder, Redress Compliance