These questions pop up very often in my private community and during conversations with tech founders.
So I hope this topic will serve to clarify this for future users.
Let’s say I want to build a SaaS where n8n will be used as the backend orchestration layer (effectively the “API” behind my product). End users interact only with my SaaS UI and my API; they will not log into n8n or see the n8n editor.
I’m trying to understand how the Sustainable Use License / commercial options apply in the scenarios below:
-
If n8n is powering my SaaS backend (receiving requests from my app, running workflows, returning results), and n8n uses only my company’s own third-party credentials (service accounts / app-level keys) — is this considered permitted “internal business use” under the SUL?
-
If users can log in to my SaaS with Google or Apple (OIDC / “Sign in with Google/Apple”) only for authentication (identity scopes like openid/email/profile), does that have any licensing implication for n8n?
-
If, during login or later, the user grants OAuth scopes that allow my backend to access the user’s Google data (e.g., Drive/Sheets/Gmail/Calendar), does that automatically move the use case outside SUL even if users never access the n8n UI?
-
If I store users’ temporary OAuth tokens in my own database (not inside n8n’s credential store) and then my backend passes those tokens to n8n at runtime (e.g., via HTTP headers) so n8n can call Google APIs on behalf of the user — is this treated the same as “using users’ own credentials” under the license, or does it matter that credentials aren’t stored in n8n?
-
Is there any difference in licensing expectations between an MVP (small number of users/customers, low volume) vs a scaled SaaS (many users/tenants), assuming the architecture is the same (n8n as backend workflows/API)? If there is no difference, what is the key factor that determines licensing requirements in this backend/API scenario?
-
If my SaaS must access each user’s third-party accounts via OAuth (Google/Meta/etc.) to fetch or update that user’s data, but users never interact with n8n, is an Enterprise license sufficient, or is an Embed/commercial agreement required? More generally: would an Enterprise license be sufficient for any use of n8n as a SaaS backend (API/orchestration engine) as long as n8n itself is not the product being sold and the n8n UI is not exposed to customers?