I work for a software supplier that licenses commercial software to clients. The license has various conditions - don't copy it, only use it for licensed purposes, etc.
A lawyer has reviewed the agreement and identified a risk where a client has an outsourced IT provider. In this case, the software would be running on computers owned by the IT provider. Potentially the IT provider could copy the software. However, they are not signatories of the license agreement, so it would be more difficult to enforce against them.
The lawyer has suggested making it a tripartite agreement (software supplier, customer, IT provider). This would fix the issue, but introduces other complexity.
This must be an extremely common issue for commercial software. What other approaches can be used to deal with outsourced IT providers?
Jurisdiction is England & Wales, but interested in general approaches.