Safeguard
Compliance•

Can you ship an open font in a commercial app (SIL OFL)?

Under the SIL Open Font License 1.1 you can bundle and embed a font with software, but not sell it alone, and each copy must carry the license.

Safeguard Security Team
3 min read

Yes, in general. The SIL Open Font License 1.1 allows fonts to be bundled, embedded and redistributed with software, including modified versions. It does not allow selling the font on its own, and every copy must include the copyright notice and the license. Check the exact text for the fonts you use.

What the license says

A summary of OFL 1.1 from the official text:

TopicRule
Bundling or embedding with softwarePermitted
Selling the font by itselfNot permitted
Modified versionsPermitted, with conditions
Reserved Font NamesA modified version may not use one without written permission from the copyright holder
License copyEach copy must include the copyright notice and the license
Other licensesFont and derivatives must not be distributed under any other license

The license also says documents created with the fonts are not subject to it. If a condition is not met, the license becomes void.

Why fonts get missed

Teams scan code and forget assets. Fonts, icons, images, sounds and data sets each have their own licenses, and they ship in your app or website. A diligence review that covers only packages leaves these out. See Creative Commons for software and assets for the related image and content licenses.

Reserved Font Names in practice

If you edit a font, for example to subset it or to change glyphs, check whether the font declares Reserved Font Names. If it does, your modified version needs a different name unless you have written permission. Subsetting for web use is a common case where this surprises people, so check the font's own notice.

Steps for a team

  1. List every font file in your app and website, including those pulled in by a design system.
  2. Find the license for each one and record it.
  3. Keep the license text with the font files in your release.
  4. Add the fonts to your notices screen or file.
  5. Check for modifications and Reserved Font Names.
  6. Record where each font came from, including the download URL and date.

In an acquisition

Buyers rarely lead with fonts, but a missing license on a commercial font can become a small claim from its owner. Some fonts are commercial and licensed per seat or per domain. Keep purchase records alongside the open licensed ones.

Safeguard offers SBOM and dependency scanning plus compliance and evidence automation, which can help you keep an inventory and supporting records current. A free scan shows the inventory side.

Quick check

Does OFL cover text I write using the font?

The license says documents created using the fonts are not subject to it.

Can I put the font in a git repository?

Bundling is permitted under the license, as long as the notice and license text travel with each copy.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.