Scolah Compass Platform (“Platform”) installs software on servers you own. Much of that software is written by others and comes under its own licence, not ours. This page lists it, explains who holds which obligations, and says where to find source code.
It supplements the Terms of Service. If this page and a component’s own licence disagree, the component’s licence wins.
1. How Third-Party Software Reaches Your Servers
- Each catalog application is delivered as a signed bundle: a fixed set of deployment files with every container image pinned.
- Third-party application images are upstream images, unmodified. We write the deployment configuration around them (Compose files, Kubernetes manifests, initial setup), not the applications themselves.
- Where an upstream project stopped publishing images, we rebuild them from the project’s published source, using its own build scripts and making no code changes. Today this applies to MinIO. Where an image is mirrored into our registry, it is byte-identical to upstream and pinned by digest.
- Your licence to each third-party component comes directly from its authors, under its own licence. We do not sublicense it, and our Terms do not narrow the rights its licence gives you.
2. Who Holds Which Obligation
| Situation | Who is responsible |
|---|---|
| Making source code available for software we distribute to you in unmodified form | Scolah — by pointing to the upstream source for the exact version, listed below or on request |
| Source we rebuild (e.g. MinIO) | Scolah — the licence texts ship inside the image under /licenses/, and we will provide the exact build source on request |
| You modify a component and make it available to users over a network (relevant for AGPL-3.0 software) | You — the AGPL requires you to offer your users the modified source |
| You use a component in a way its licence restricts (e.g. offering MongoDB or Redis 7.4+ as a managed service to third parties) | You |
| Trademarks of third-party projects | Their owners. Using a project’s software does not grant rights to its name or logo. |
Installing a component through the Platform does not change these obligations. Running unmodified AGPL software for your own organisation’s users places no additional source obligation on you.
3. Scolah’s Own Software
| Component | Licence |
|---|---|
| Scolah agent | Proprietary — licensed under the Terms of Service |
| Scolah Kubernetes operator and Helm chart | MIT |
| Scolah Compass application images | Proprietary — licensed under the Terms of Service |
| Bundle deployment configuration written by Scolah | Proprietary — licensed for use with the Platform |
4. Catalog Applications
| Application | Licence | Source |
|---|---|---|
| DHIS2 | BSD-3-Clause | github.com/dhis2/dhis2-core |
| ERPNext / Frappe | GPL-3.0 | github.com/frappe/erpnext |
| Keycloak | Apache-2.0 | github.com/keycloak/keycloak |
| KoboToolbox (KPI) | AGPL-3.0 | github.com/kobotoolbox/kpi |
| KoboToolbox (KoboCAT) | BSD-2-Clause | github.com/kobotoolbox/kobocat |
| Enketo Express | Apache-2.0 | github.com/enketo/enketo |
| LiteLLM | MIT (except upstream’s enterprise/ directory, which is not enabled) |
github.com/BerriAI/litellm |
| Metabase (Open Source Edition) | AGPL-3.0 | github.com/metabase/metabase |
| Moodle | GPL-3.0-or-later | github.com/moodle/moodle |
| OpenEWS | MIT | Upstream project repository |
| openIMIS | AGPL-3.0 | github.com/openimis |
| OpenMRS 3 | MPL-2.0 with Healthcare Disclaimer | github.com/openmrs |
| UNICEF HOPE | AGPL-3.0 | github.com/unicef/hope |
5. Databases, Storage and Supporting Services
Several of these are source-available or proprietary, not open source. They are free to run for your own organisation, but their licences restrict some uses, typically offering the software itself as a hosted service to third parties.
| Component | Used by | Licence | Type |
|---|---|---|---|
| PostgreSQL | Most applications | PostgreSQL Licence | Open source |
| PostGIS | DHIS2, HOPE, KoboToolbox | GPL-2.0 | Open source |
| MariaDB | ERPNext, OpenMRS | GPL-2.0 | Open source |
| MongoDB | Compass, KoboToolbox | Server Side Public License (SSPL) 1.0 | Source-available |
| Redis 7.4 and later | Compass and others | RSALv2 / SSPLv1 | Source-available |
| Redis 6.2 | Some catalog applications | BSD-3-Clause | Open source |
| Elasticsearch | UNICEF HOPE | Elastic License 2.0 / SSPL / AGPL-3.0 (your choice) | Mixed |
| RabbitMQ | openIMIS | MPL-2.0 | Open source |
| MinIO | Compass | AGPL-3.0-only | Open source (rebuilt by Scolah from source; licence texts in the image) |
| Qdrant | Compass AI module | Apache-2.0 | Open source |
| Solace PubSub+ Standard Edition | Compass | Solace proprietary licence (free Standard Edition) | Proprietary |
| nginx | Proxies and front-ends | BSD-2-Clause | Open source |
6. Platform Infrastructure Components
| Component | Purpose | Licence |
|---|---|---|
| Traefik | HTTPS entry point run by the agent on each server | MIT |
| restic | Backups run by the agent | BSD-2-Clause |
| cert-manager (optional) | Certificates on Kubernetes; off by default | Apache-2.0 |
| External Secrets Operator (optional) | Secret sync on Kubernetes; off by default | Apache-2.0 |
| Distroless and Alpine base images | Base layers of Scolah images | Apache-2.0 and the licences of included packages |
7. AI Models
The Platform does not install AI model weights on your servers. If you enable AI features, they call a hosted model through a provider you choose. The provider’s terms of service govern that use. See Data Residency.
8. Requests
To request source code, a licence text, or a full software bill of materials (SBOM) for a specific bundle version, email legal@scolah.com with the application name and version.