Editorial photograph of an enterprise boardroom interior
Oracle · Contract Frameworks · Comparison

OMA vs OLSA vs OCA: Which Oracle Master Agreement You're Actually Signing

Oracle sells under two named frameworks and one piece of legacy paper that never expired, and the differences in audit rights, definitions, and termination are worth more than any discount on the order form. This guide shows you how to identify which framework governs each of your orders, which terms travel with it, and where to fight.

Contact Us Oracle Hub
500+Enterprise clients
$2B+Under advisory
Watch the briefingResearch briefing · 4:43

How to Negotiate the Oracle Java Employee Agreement: Honest Leverage in a Captive Deal

Priced per employee, every employee, from $15 down to $5.25. At renewal your leverage is thin and OpenJDK threats rarely land. The one-year runway, trading through the wider Oracle relationship, and containing what you sign.

Industry Recognized
500+ Enterprise Clients
$2B+ Under Advisory
11 Vendor Practices
100% Buyer Side Independent

Oracle sells under two named frameworks and one piece of legacy paper that never expired, and the differences in audit rights, definitions, and termination are worth more than any discount on the order form. This guide shows you how to identify which framework governs each of your orders, which terms travel with it, and where to fight.

Three Names, Two Live Frameworks, and One Piece of Legacy Paper

Start with what Oracle actually publishes. On its own Contracts and Policies page, Oracle names exactly two primary sale agreements: the Oracle Master Agreement (OMA) and the Cloud Services Agreement (CSA), each available as either a transactional agreement or a five-year term agreement. That is four documents from two frameworks, and none of them is called an "Oracle Cloud Agreement." "OCA" is customer and advisor shorthand that has calcified into industry vocabulary. It is not a SKU, not a document title, and not something an Oracle contracts specialist will recognize as a request. In 25 years of sitting across the table from Oracle, I have watched the naming slip cost credibility in the first ten minutes: when your redline cover note asks for changes to "the OCA," the rep reads it as confirmation that nobody on the buyer side has opened the paper, and the negotiation posture hardens accordingly. Use the vendor's own vocabulary, or at minimum cite the agreement number and effective date printed on your executed copy.

The third name is the Oracle License and Services Agreement (OLSA), and it is not an option on the menu today. You cannot ask for an OLSA; Oracle will not issue one. But it did not evaporate. Legacy OLSAs signed years or decades ago remain fully valid until formally superseded by an OMA, which means a meaningful share of long-tenured Oracle estates are still governed by paper that predates the current audit and definitions language. Sources disagree on when the switch happened: some place broad OMA adoption around 2010, others put the formal OLSA-to-OMA replacement at 2013 after roughly twenty years of OLSA use, with most long-tenured customers holding an OMA signed between 2013 and 2018. Do not resolve that by picking a date. Resolve it by pulling your own executed signature pages and reading the title block, because the differences between the two are concentrated in audit clause language, liability provisions, and the definitions of terms like "Processor" and "authorized use" that decide the size of an audit finding.

"OCA" is not an Oracle document title, and using it in correspondence tells your rep that nobody on your side has read the paper.

Scope and Term: What Each Framework Actually Covers

The scope split is the entire practical difference, and it is where most buyers make the wrong structural choice before a single price is discussed. The five-year OMA is a single contract that covers any combination of software, hardware, cloud, and services. The CSA covers multiple cloud purchases only, not other products or services, and it carries an explicit ordering window: "You may place orders governed by this Agreement for a period of five years from the effective date of this Agreement." That sentence is a cliff, not a renewal prompt. When year five closes, your ordering vehicle stops working and Oracle controls the terms of whatever replaces it, typically at the exact moment your workloads are least portable.

The OMA behaves differently in practice. It typically has no expiration date and remains in effect indefinitely unless terminated by mutual agreement or material breach, continuing to govern individual license and support agreements throughout their lives. That practical perpetuity cuts both ways: every improvement you win in the master travels forward for decades, and every unfavorable clause you leave in place does too, including the policies Oracle can revise unilaterally by reference. Our buyer-side position is straightforward: if you have any on-premises or hardware footprint at all, negotiate under a five-year OMA and attach cloud orders to it, because Schedule C on an OMA lets a cloud ordering document sit under the master you already redlined rather than under a fresh CSA whose terms you have not touched.

Framework Products covered Ordering window Expiry behavior Cloud orders attach?
OMA, transactionalSoftware, hardware, services (single purchase)One orderGoverns that order's lifeNo, cloud uses online CSA
OMA, five-year termAny combination of software, hardware, cloud, servicesFive-year termNo expiration date in practice; indefinite unless terminated by mutual agreement or material breachYes, via Schedule C
CSA, transactionalSingle cloud purchaseOne orderGoverns that subscription termYes, cloud only
CSA, five-year termMultiple cloud purchases onlyFive years from effective date, explicitOrdering right ends; new paper requiredYes, cloud only
Legacy OLSASoftware, hardware, services as originally scopedClosed to new issuanceValid until formally superseded by an OMANo, needs OMA or CSA

Two operational tests settle any ambiguity. First, every ordering document ties back to its parent by date or contract number, and cloud transaction terms state explicitly which CSA or OMA (Schedule C) the document is tied to, so read that line before you assume. Second, check whether your executed master predates 2013, because an OLSA-governed estate needs a deliberate decision on whether to stay put or novate, not a default drift into whatever Oracle attaches to the next renewal. Inventory the paper first, then open the clause-level redline.

Which Terms Travel With Which Framework

The framework you signed decides three things that determine audit outcomes, and none of them appear on the order form. First, audit clause language differs: legacy OLSAs carry different notice, scope, and cooperation wording than the OMA, and Oracle's LMS teams read the difference. Second, liability provisions differ, which changes what a compliance finding can actually cost you beyond the license shortfall. Third, and most expensive, the definitions differ. "Processor," "authorised use," "employee," and "use" are not stable terms across a 20-year paper trail, and a definition written in 2006 can produce a materially different count than the current one against the same physical estate. Our audit-defense experience is consistent on this point: the argument almost always collapses into whose definition applies, not whether the software is installed. Start with the Oracle definitions section and where processor and use are really set before you concede a single number.

The second structural fact is that the OMA is deliberately thin. It contains no product-specific terms, because those live in ordering documents, and no counting rules, because those live in Oracle policies incorporated by reference. That design is not laziness. The master agreement sets the legal ground rules (audit rights, license restrictions, support terms, termination) while the money rules sit two levels down, in documents Oracle can revise unilaterally after you sign. That is why the clause that lets Oracle change the rules through policies incorporated by reference is the single highest-leverage redline in the whole stack. Buyers who negotiate hard on the order form and sign the OMA as presented have optimized the 10 percent of the contract that Oracle expects to lose on and surrendered the 90 percent that governs the next decade. Fix the sequence: freeze definitions and policy versions first, then discuss price.

How Ordering Documents Stack on Top, and How to Read the Stack

The mechanical test is simple and you can run it this afternoon. Every ordering document ties back to its parent framework by reference, typically the parent's execution date or contract number, and cloud transaction terms go further: they explicitly state which Cloud Services Agreement or Oracle Master Agreement (Schedule C) that ordering document is tied to. So the governing framework for any given order is not a matter of opinion or of which agreement is newest. It is printed on the order, usually in the first page header block or the terms-reference line near the signature. If an order does not name its parent, that ambiguity is Oracle's drafting problem and your negotiating asset; raise it in writing before an audit, not during one.

The audit consequence of a mixed estate is the part most buyers miss. If you hold both an OLSA from 2009 and an OMA from 2015, your estate is governed by two different audit clauses simultaneously, order by order, and Oracle will cite whichever clause is more favorable to Oracle for the specific order under review. In practice that means broad legacy audit language applied to old database orders and current OMA restrictions applied to new ones, in the same engagement. Your defense is documentary, not rhetorical: you scope the audit down to the specific orders and their specific parents, and you refuse consolidated treatment. Pair the register below with the approach to capping audit frequency, notice, and scope so that future orders roll onto the framework you would rather defend.

If you hold both an OLSA and an OMA, Oracle will cite whichever audit clause is more favorable to Oracle for the specific order under review.

Build an order-to-framework register and treat it as a permanent control, not a one-off project. Four fields carry the weight: contract number, execution date, parent agreement (OLSA, OMA, or CSA), and the URL-incorporated policies in force at signature, captured as saved PDFs with the date you retrieved them. That last field is the one nobody keeps and everybody needs, because Oracle overwrites policy and price-list documents in place rather than versioning the URL, so the effective date printed on page one is the only marker of which version you actually agreed to. Once the register exists, you can answer Oracle's first audit letter with a scoped inventory instead of a discovery exercise, and you can price migration of legacy orders onto a single framework as a deliberate trade rather than accepting it as a bundled concession on the next renewal.

Cloud-Specific Terms the CSA Pulls In by URL

The Cloud Services Agreement is short because most of its substance lives somewhere else. The CSA defines "Service Specifications" as the descriptions posted at www.oracle.com/contracts applicable to the Services under your order, expressly including Program Documentation, hosting, support, and security policies such as the Oracle Cloud Hosting and Delivery Policies. Read that literally: the availability commitment, the backup regime, the patching windows, and the security controls you are relying on for a five-year ordering window are all posted documents Oracle maintains, and Oracle can revise them without a countersignature from you. This is the same structural problem that runs through on-premise support, and the same fix applies: pin the URL-based documents to the version in effect on the order date, or negotiate a no-material-degradation clause. Our guide on policies incorporated by reference walks the specific redline language, and it works verbatim in the cloud framework.

  • Ask Oracle for a dated PDF of every Service Specification referenced by your order, then archive it internally. Oracle does not version these URLs, so the copy you saved is your only evidence of what you bought.
  • Name the Hosting and Delivery Policies explicitly in the ordering document and attach them, rather than relying on the generic incorporation language.
  • Require written notice of material changes to hosting, support, or security policies during the Services Period, with a termination-for-convenience trigger if Oracle degrades a control you documented as a requirement.

One incorporated document runs the other way. The applicable Data Processing Agreement is also incorporated by reference, stays in force for the Services Period, and, in any conflict with the Service Specifications, the DPA takes precedence. That precedence ordering is unusual in Oracle paper and worth exploiting: where a security policy is vague and the DPA is specific, the DPA governs. The buyer-side right almost nobody uses sits in the same document: the DPA permits the customer to audit Oracle's compliance with its DPA obligations up to once per year. In 25 years of negotiating with this vendor, I have seen that right invoked a handful of times. Exercise it once, in writing, and you change the tone of the relationship at no cost.

Why the Framework Choice Costs Real Money: 2026 List and Support Math

Procurement teams spend their negotiation capital on the discount line and sign the framework unread. The math says that is backwards. Database Enterprise Edition lists at $47,500 per Processor and $950 per Named User Plus, with a floor of 25 NUP per Processor (10 per server for SE2), and you license the higher of the floor or real headcount. Since NUP is exactly one fiftieth of the Processor price, Processor wins past 50 real users per Processor. Those metric definitions are set in the master agreement's definitions section, not the order form, which is why our note on how "Processor" and "Use" are really defined matters more than a five-point discount improvement. The real exposure is the option stack: a fully optioned EE Processor license lists at $122,000 with $26,840 annual support, meaning support is 2.6x the base Database license price, and audit findings overwhelmingly target options rather than base deployment.

Component (2026 list) List per Processor Where it bites
Database Enterprise Edition$47,500Base metric, defined in the master agreement
Diagnostics Pack$7,500Default-on features, common audit finding
Tuning Pack$5,000Default-on features, common audit finding
Partitioning$11,500Used by DBAs without license check
Real Application Clusters$23,000Failover and cluster misconfiguration
Fully optioned EE processor$122,000Annual support $26,840, 2.6x base license
200-processor fully optioned estate$24.4M + $5.37M supportNet at 55-75% discount: $9.8M-$14.6M license, $2.16M-$3.21M support

Support economics outlive the master agreement, which is exactly why the framework outranks the order form. Annual support is 22 percent of the net license fee fixed at original order signature, so a bad framework locks a bad annuity for a decade or more. Uplift caps of 4 to 8 percent are typical where they exist at all, the median 2026 uplift is 6.0 percent, and roughly 41 percent of capped renewals are breached anyway. On the estimated 44 percent of estates with no cap, Oracle defaults to 8.0 percent. Compound 8.0 percent against a $3.21M support base and you have added more than $1.4M of annual spend inside five years, on paper you never negotiated. Then add the version-control trap: Oracle overwrites the price-list file in place rather than versioning the URL, so the effective date on page one is the only marker of which list a quote was priced from. A January quote and a May quote are not comparable documents. Demand the dated price-list PDF with every quote, and read our price hold and uplift cap guidance before you accept any renewal schedule.

A five-point discount improvement is worth less than a single sentence capping support uplift, because the discount happens once and the uplift compounds forever.

What to Do First: A 30-Day Framework Audit

Treat this as a document-retrieval exercise first and a negotiation exercise second, because you cannot argue about audit scope until you know which paper Oracle will cite. In week one, pull every executed master agreement and every ordering document your organization has signed, including acquired entities, and build a single register with four columns: parent framework (OMA, CSA, or legacy OLSA), execution date, contract number, and the ordering documents that reference it. Cloud order forms make this easy because the transaction terms explicitly state which Cloud Services Agreement or Oracle Master Agreement (Schedule C) the document is tied to. On-premises orders usually reference the master by date or number only, so match them manually. In week two, isolate the OLSA-governed orders and read the audit clause, the liability provisions, and the definitions of "processor" and "authorized use" side by side against your OMA. Those three areas are where the frameworks materially diverge, and in our negotiation experience the older paper is sometimes the friendlier paper.

  • Do not consolidate onto a single OMA by reflex: signing a new master at the next major transaction can supersede favorable legacy audit or liability language you will never get back, so price that surrender before you agree to it.
  • If the legacy terms are better, preserve them and negotiate only the new order under separate paper, accepting the administrative cost of maintaining two frameworks.
  • Before touching support, model the repricing: dropping a line from a Customer Service Identifier commonly triggers repricing of the surviving lines at original list rather than your net rate, which frequently erases the entire saving from the terminated shelfware.

For the specific language to demand once the register is built, work through the clause-by-clause redline guide, then take the two highest-value fights individually: capped audit frequency and notice, and a real price hold with uplift caps and repricing protection. Sequence matters more than aggression here.

Frequently asked questions

Is there really an agreement called the Oracle Cloud Agreement (OCA)?

No. Oracle publishes two primary sale agreements: the Oracle Master Agreement (OMA) and the Cloud Services Agreement (CSA). 'OCA' is customer and advisor shorthand that has circulated for years, but if you cite it in a negotiation or an audit response you will be corrected. Use CSA, or the exact contract number printed on your ordering document.

Does my old Oracle OLSA still apply, or has it been replaced automatically?

It still applies. An OLSA remains fully valid until it is formally superseded by a signed OMA, and many customers who signed before roughly 2013 are still governed by one. Nothing about signing a new OMA in 2026 retroactively changes the terms attached to orders that reference the older OLSA, which is why estates commonly run under two different audit clauses at once.

Which framework should I sign a new cloud purchase under: the OMA or the CSA?

If you are buying only cloud services and expect no on-premises, hardware, or professional services purchases under the same paper, the five-year CSA is the narrower fit. If you want software, hardware, cloud, and services under one negotiated set of legal ground rules, the five-year OMA covers all of it. Whichever you pick, confirm the ordering document names the correct parent agreement, because Oracle's cloud transaction terms specify which CSA or OMA (Schedule C) the order attaches to.

Does the OMA expire?

In practice, no. The OMA typically carries no expiration date and continues to govern individual license and support agreements indefinitely unless terminated by mutual agreement or for material breach. The five-year element in Oracle's marketing refers to the ordering window, not the life of the legal terms, which is exactly why the audit, liability, and definitions language you accept today will still be quoted at you a decade from now.

Where are Oracle's license counting rules if they are not in the master agreement?

They sit in Oracle policies published on oracle.com/contracts and incorporated by reference, not in the signed agreement. That includes partitioning rules, processor core factors, and hosting and delivery policies for cloud, all of which Oracle can revise without your countersignature. Getting the version in force at signature attached as an exhibit is one of the highest-value redlines available to a buyer.

Can I audit Oracle?

Under the Data Processing Agreement incorporated into the cloud framework, yes, up to once per year, for Oracle's compliance with its DPA obligations. The DPA also takes precedence over the Service Specifications where the two conflict. Very few customers exercise this right, which makes it useful leverage when Oracle initiates a compliance review of your estate.

Free White Paper

Oracle Cloud at Customer Licensing. The buyer side brief.

Oracle Cloud at Customer enterprise licensing. Buyer side brief across OCI Dedicated Region, Exadata Cloud at Customer, autonomous database.

Gated with a work email on the download page. No sales follow up you did not ask for.

Get the White Paper →
Independent, buyer side. We never share your details with vendors.
Run a software spend health check against your Oracle estate in under five minutes.
Open the Tool →
Deep Library

More on this topic.

Oracle Hub →
The Oracle Contract Clauses That Decide Your Next Audit: A Buyer-Side Redline Guide
Oracle · Guide
The Oracle Contract Clauses That Decide Your Next Audit: A Buyer-Side Redline Guide
The full guide this article belongs to.
Guide
Redlining Oracle's Audit Clause: Capping Frequency, Notice, and Scope
Oracle · Deep dive
Redlining Oracle's Audit Clause: Capping Frequency, Notice, and Scope
Another angle on the same decision.
Guide
The Clause That Lets Oracle Change the Rules: Policies Incorporated by Reference
Oracle · Deep dive
The Clause That Lets Oracle Change the Rules: Policies Incorporated by Reference
Another angle on the same decision.
Guide
Which Audit Clause Is Oracle Citing? OTN License vs Master Agreement
Oracle
Which Audit Clause Is Oracle Citing? OTN License vs Master Agreement
Oracle cites different Java audit clauses depending on your contract vehicle. Compare OTN
Guide
Oracle OCI Universal Credits. Most enterprise commitments are over committed by twenty to forty percent at signing.
Oracle
Oracle OCI Universal Credits. Most enterprise commitments are over committed by twenty to forty percent at signing.
Oracle OCI Universal Credits decoded. Discount curves by commitment size, BYOL versus lice
Guide
Adobe Creative Cloud plans in 2026. Which plan fits each seat.
Oracle
Adobe Creative Cloud plans in 2026. Which plan fits each seat.
Adobe ships four Creative Cloud plan families in 2026. All Apps, Single App, Photography,
Guide
Editorial boardroom interior

The advisor your vendors do not want.

500+ enterprise clients. 11 vendor practices. Industry recognized. One conversation can change what you pay for the next three years.

Stay ahead of Oracle licensing changes.

One buyer side briefing a week. Renewal signals, audit moves, and the levers that work. No vendor spin.