Third Party Notices

Third Party Notices
Third-Party Software Notices and Information
Copyright © 2025-present TruOptim Solutions Ltd. All rights reserved.
Document Version: 1.1
Last Updated: 30 September 2026
About This Document
This document contains notices and information required by the licenses of third-party open source software components incorporated into the TruOptim Industrial AI Gateway. TruOptim is committed to compliance with all open source software licenses and to providing proper attribution to the open source community.
The open source components listed below are used in:
TruOptim Cloud Backend - The cloud-hosted component deployed in Azure
TruOptim Edge Gateway - The customer-deployed container for industrial network connectivity
TruOptim OPC UA Demo Servers - Optional demonstration servers for evaluation
Table of Contents
LGPL-3.0 Licensed Components (Weak Copyleft)
1.Apache-2.0 Licensed Components
2.MIT Licensed Components
3.BSD Licensed Components
4.Python Software Foundation License
5.Docker Base Image Components
6.Your Rights
7.Obtaining Source Code
8.Full License Texts
9.LGPL-3.0 Licensed Components
The following components are licensed under the GNU Lesser General Public License v3.0 (LGPL-3.0). This is a "weak copyleft" license that permits use in proprietary software while preserving your rights to the LGPL-licensed library itself.
asyncua (opcua-asyncio)
Copyright Notice:
Copyright (c) 2015-2024 FreeOpcUa Contributors

Your Rights Under LGPL-3.0:
In accordance with the GNU Lesser General Public License v3.0, you have the following rights with respect to the asyncua library:
Source Code Access: The complete source code for asyncua is available at:
1.GitHub: https://github.com/FreeOpcUa/opcua-asyncio
PyPI: https://pypi.org/project/asyncua/
Library Replacement: You may replace the asyncua library used in TruOptim with a modified version or a compatible alternative. Since asyncua is dynamically linked as a Python package, you can:
2.Install a modified version via pip
Build and deploy a custom Docker image with your preferred version
Modifications: If you modify the asyncua library, you must make your modifications available under LGPL-3.0 terms.
3.No Restriction on Proprietary Code: Your use of TruOptim does not require you to open-source your own proprietary code, configurations, or extensions, as asyncua is used via dynamic linking.
4.TruOptim Statement:
TruOptim Solutions Ltd. does NOT modify the asyncua library. We use it unmodified as distributed via PyPI. The library is imported as a standard Python module.
Apache-2.0 Licensed Components
The following components are licensed under the Apache License, Version 2.0. This is a permissive license that allows commercial use with attribution.
aiofiles
Copyright Notice:
Copyright (c) 2015 Tin Tvrtković

cryptography
Copyright Notice:
Copyright (c) Individual contributors.
All rights reserved.

python-multipart
coverage
Copyright Notice:
Copyright (c) 2004-2024 Ned Batchelder

diff-cover
pytest-asyncio
MIT Licensed Components
The following components are licensed under the MIT License. This is a permissive license that allows commercial use with minimal restrictions.
FastAPI
Copyright Notice:
Copyright (c) 2018 Sebastián Ramírez

MIT License Text:
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Pydantic
Copyright Notice:
Copyright (c) 2017 Samuel Colvin and other contributors

PyJWT
Copyright Notice:
Copyright (c) 2015-2022 José Padilla

python-tds
Copyright Notice:
Copyright (c) 2014 Mikhail Denisenko

pytest
pytest-cov
slowapi
fastmcp
itsdangerous
Copyright Notice:
Copyright 2011 Pallets

Azure SDK Components
The following Azure SDK packages are used for Control Plane integration with Azure services (ADR 162) and for cloud encryption-key coordination (ADR 485):
azure-identity
Copyright Notice:
Copyright (c) Microsoft Corporation

azure-storage-blob
Copyright Notice:
Copyright (c) Microsoft Corporation

azure-mgmt-containerregistry
Copyright Notice:
Copyright (c) Microsoft Corporation

azure-mgmt-appcontainers
Copyright Notice:
Copyright (c) Microsoft Corporation

azure-mgmt-resource
Copyright Notice:
Copyright (c) Microsoft Corporation

BSD Licensed Components
The following components are licensed under BSD-style licenses. These are permissive licenses that allow commercial use with attribution.
uvicorn
Copyright Notice:
Copyright © 2017-present, Encode OSS Ltd.
All rights reserved.

websockets
Copyright Notice:
Copyright (c) 2013-2024 Aymeric Augustin and contributors

Jinja2
Copyright Notice:
Copyright 2007 Pallets

httpx
Copyright Notice:
Copyright © 2019, Tom Christie
All rights reserved.

passlib
Copyright Notice:
Copyright (c) 2008-2020 Assurance Technologies, LLC

Authlib
Copyright Notice:
Copyright (c) 2017, Hsiaoming Yang

markdown
Copyright Notice:
Copyright 2007, 2008 The Python Markdown Project

reportlab
Copyright Notice:
Copyright (c) 2000-2024, ReportLab Inc.

Python Software Foundation License
Python Runtime
Copyright Notice:
Copyright (c) 2001-2024 Python Software Foundation
All rights reserved.

The Python runtime is redistributed as part of the official python:3.10-slim Docker image from Docker Hub.
Docker Base Image Components
TruOptim containers are built on the official python:3.10-slim Docker image, which is based on Debian GNU/Linux. This base image includes various system libraries and utilities under different open source licenses.
Base Image Details
Notable System Components
Source Code Availability:
Source code for all Debian components is available through:
Debian Package Archive: https://www.debian.org/distrib/packages
Debian Source Archive: https://sources.debian.org/
Your Rights
Summary of Rights by License Type
Your Rights Under Each License
MIT / BSD Licenses:
Use the software for any purpose, including commercial
Modify the software as needed
Distribute copies with attribution
Apache-2.0 License:
All MIT/BSD rights plus
Explicit patent grant from contributors
Must include NOTICE file if present
LGPL-3.0 License:
Use the library in proprietary software
Modify the library (must share modifications under LGPL)
Replace the library with a modified version
Access to library source code
Important: Your use of TruOptim Industrial AI Gateway does NOT require you to:
Open-source your configurations, customizations, or proprietary code
Share your Customer Data or business logic
Provide any rights to TruOptim beyond those specified in your subscription
Obtaining Source Code
For LGPL-Licensed Components (asyncua)
The source code for asyncua is freely available at:
GitHub: https://github.com/FreeOpcUa/opcua-asyncio
PyPI: https://pypi.org/project/asyncua/
To download the source code:
# Clone the repository
git clone https://github.com/FreeOpcUa/opcua-asyncio.git

# Or download source distribution from PyPI
pip download asyncua --no-binary :all:

For Debian Base Image Components
Source code for GPL/LGPL components in the Debian base image:
Debian Sources: https://sources.debian.org/
Package Search: https://www.debian.org/distrib/packages
To obtain specific package sources:
# Install source tools
apt-get install dpkg-dev

# Download source for a specific package
apt-get source <package-name>

Written Offer (LGPL Compliance)
In accordance with LGPL-3.0 Section 6, TruOptim Solutions Ltd. provides this written offer:
Upon written request to legal@truoptim.com, we will provide, for a period of three (3) years from the date of your last purchase or subscription, a complete machine-readable copy of the source code for any LGPL-licensed component incorporated into TruOptim Industrial AI Gateway, at a cost not exceeding the cost of physically performing source distribution.
As all LGPL-licensed source code is freely available online (see links above), this written offer serves as a backup compliance measure.
Full License Texts
Complete license texts for all licenses referenced in this document are available in the docs/legal/licenses/ directory:
LGPL-3.0
Apache-2.0
MIT
BSD-3-Clause
BSD-2-Clause
PSF
The full license texts are also available at:
LGPL-3.0: https://www.gnu.org/licenses/lgpl-3.0.html
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0
MIT: https://opensource.org/licenses/MIT
BSD-3-Clause: https://opensource.org/licenses/BSD-3-Clause
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause
PSF: https://docs.python.org/3/license.html
Contact Information
For questions regarding open source compliance or to exercise your rights under any open source license:
TruOptim Solutions Ltd.
Company Registration No. 16742261
205 Regent Street, 4th Floor
London, England, W1B 4HB
Email: legal@truoptim.com
Subject: Open Source Compliance Inquiry
This document is provided for informational purposes and to comply with the attribution and notice requirements of the open source licenses listed herein. This document does not constitute legal advice.
Copyright © 2025-present TruOptim Solutions Ltd. All rights reserved.