Tracking Stock Media and Font Licenses: Preventing Client Copyright Lawsuits

Article image
Tracking Stock Media and Font Licenses: Preventing Client Copyright Lawsuits
Imagine getting a call from your agency's most valuable client. Their office manager just opened a letter from a stock photo agency's legal department, flagging an embedded header image on their corporate blog that was downloaded three years ago, or a custom web font whose monthly traffic quietly outgrew its licensed tier during a viral marketing push. The letter isn't asking politely — it's demanding payment, and it names your agency's original build as the source of the problem.

In modern web development, asset management is intellectual property management. Designers and developers routinely source stock photography, video, vector icons, and web typography from platforms like Getty Images, Adobe Stock, Envato Elements, and Monotype. But when an agency hands over a finished site, the underlying licensing terms — traffic caps, transfer rules, subscription requirements — rarely get handed over with it. When a copyright question surfaces years later, liability traces straight back to the agency that built the site.

This guide covers how stock media and web font licensing actually work, what triggers a real demand letter (and what doesn't), and how to build a tracking workflow — using InstaRenewal for the recordkeeping side — that protects both your clients and your agency.

1. How Stock Image Enforcement Actually Works Copyright enforcement in stock photography is largely automated, and it has been for over a decade. The best-known example is PicScout, a visual-fingerprinting technology founded in Herzliya, Israel in 2002 and acquired by Getty Images in April 2011 for a reported $20 million. PicScout's ImageTracker system crawls the open web, matches images against a rights-holder's catalog by visual fingerprint (not just filename or metadata, so cropped or lightly edited images can still be flagged), and checks whether a valid license exists for that domain. If none is found, an automated settlement notice goes out.

It's worth being precise about the dollar figures here, because the original scare-number ("$10,000 to $150,000") conflates two very different things:

Initial demand letters from Getty Images and similar agencies typically ask for $800 to $5,000 per image as an opening settlement position — not a court judgment. These numbers escalate in follow-up letters if ignored, but they are a starting offer, not a bill.
Statutory damages under U.S. copyright law (17 U.S.C. § 504) range from $750 to $30,000 per work if a case actually goes to litigation, rising to a maximum of $150,000 per work only where the court finds the infringement was willful. That $150,000 ceiling is a litigation outcome, not a typical demand-letter figure, and courts rarely award anywhere near the maximum.
Critically, a rights-holder can only elect statutory damages (as opposed to proving actual losses) if the work was registered with the U.S. Copyright Office before the infringement began, or within three months of first publication. Major stock agencies register their catalogs systematically for exactly this reason, which is why the threat is real even for a single embedded image — but it also means the leverage in these letters comes from registration bookkeeping most small business owners never think to check.
Common categories of exposure:

Untracked stock sourcing — using images from unlimited-subscription platforms (Envato Elements, Motion Array) without generating a domain-specific sub-license for each project.
Pageview tier breaches — exceeding a web font's licensed monthly pageview band without upgrading the tier.
Invalid sublicensing — using an asset licensed under a designer's personal account for commercial client work without a proper transfer.
Expired term licenses — continuing to run rights-managed photography or video after a fixed-term agreement lapses.

1. Stock Media Platforms: What the Licenses Actually Say Envato Elements Envato Elements' current license terms (verified directly against Envato's own help center) work like this:

Per-project licensing. Every item you download is licensed for one specific project. Reusing the same asset in a second client site requires generating a new license for that item — no re-download needed, just a new license record through Envato's "Manage" function.
Active subscription is required to start new work, not to keep existing work. You need an active subscription to download items and to license them into new projects. Once an end product is completed while your subscription was active, your commercial rights to that finished product are permanent — they survive cancellation.
The unfinished-draft trap is real. If an item is downloaded and a project is left incomplete when the subscription lapses, that item's license also lapses. The project cannot be finished or published using that asset until the subscription is reactivated and a valid license exists for it. This is the exact scenario the original draft flagged, and it holds up under Envato's published terms.
Items can be transferred to a client as part of a completed end product, carrying a limited sublicense — but the underlying stock item itself is never owned by the agency or the client; only the license is transferred.
Enterprise Stock: Getty Images, iStock, Shutterstock
Enterprise-grade providers issue licenses that are more tightly scoped than Envato's unlimited-subscription model — typically either rights-managed (RM), which restricts usage by duration, geography, and placement, or royalty-free (RF), which is broader but still tied to license terms like seat count or impression caps. For every enterprise stock asset, agencies should retain:

The original order ID and license certificate.
Any seat count, print-run, or digital impression cap stated on the license.
Whether the license was purchased under the agency's account or the client's own procurement account.
A corporate rebrand or domain migration is a common, easy-to-miss trigger: if an enterprise license was registered against an old domain and the site later moves to a new one, an automated scraper match against the new domain can flag as unlicensed even though the underlying rights were legitimately purchased.

1. Web Typography: The Pageview Trap, With Real Numbers Commercial type foundries — Monotype, Hoefler & Co., Klim Type Foundry, and independents sold through MyFonts — generally don't sell self-hosted web fonts as flat one-time purchases. They meter by monthly pageviews, and pricing scales with traffic. Based on current published foundry pricing:

Tier band Approx. annual cost per font family
Up to ~500K monthly pageviews roughly $500 – $1,200/year (small business range)
~1M monthly pageviews often priced per-font using a base-price multiplier — e.g., a $39 base font at the 1M-pageview tier runs roughly $780/year
5M – 10M monthly pageviews scales into the low thousands per year
25M+ monthly pageviews (enterprise) roughly $5,000 – $25,000+/year, depending on the number of font families and embedding rights needed
Two things worth adding that the traffic-tier trap almost always leaves out:

Flat-fee alternatives exist. Some sellers (Fontspring is a commonly cited example) offer self-hosted web licenses with no pageview cap at all, trading a higher upfront cost for immunity to traffic-driven overage fees. For a client expecting rapid growth, this is often the safer buy.
Open-source fonts sidestep the problem entirely. Google Fonts and similarly licensed typefaces (SIL Open Font License) can be self-hosted at unlimited traffic with no pageview exposure — a reasonable substitute for body text even when a paid display face is used for headlines.
How real is the enforcement risk?
It's real, but it looks different from a stock-photo lawsuit. According to legal industry commentary (including the Association of Corporate Counsel's own guidance to in-house counsel), font foundries overwhelmingly send "pay-to-license" demand letters rather than cease-and-desist notices — the foundry's goal is a retroactive license fee plus an ongoing subscription, not shutting the site down. Outright lawsuits are comparatively rare and settle before trial in most documented cases, though a public list of over 20 documented font lawsuits (compiled independently by type designer Thomas Phinney) shows the ones that do go to trial can involve six- and seven-figure claims. The practical risk for most small and mid-size agency clients is a back-dated invoice, not a courtroom — but "usually modest" doesn't mean "worth ignoring," especially since back-payment demands are often billed at a materially higher rate than the license would have cost if purchased on time.

1. Designing an Agency Copyright Compliance Audit A standardized audit protocol, run at both new-client onboarding and periodically for existing sites, covers four stages:

Stage 1 — Discovery. Inventory every image, video, vector, and font file live on the domain. Cross-reference file names, metadata, and font header tags against whatever license records exist. Flag anything with no verifiable receipt or order ID as "orphaned."

Stage 2 — Categorization. Sort every asset into one of four buckets:

Client-owned / directly licensed — the client holds the master receipt under their own billing account.
Agency-licensed (transferred) — the agency purchased under a project-specific license and formally sublicensed it to the client.
Royalty-free / open source — Google Fonts, Unsplash, Creative Commons Zero, and similar. Keep a dated snapshot of the license page at time of download, since open-source terms can and do change.
Unverified / high-risk — no clear provenance. Replace or properly license before further use.
Stage 3 — Contract clarity. Your standard web development agreement should explicitly state that the agency licenses third-party media and fonts for the client's specific domain, that some licenses carry recurring renewal fees or traffic-based tiers, and that the client is responsible for maintaining those renewals and tier upgrades once the site is delivered and the engagement ends.

Stage 4 — Ongoing tracking. This is the operational piece most agencies skip, and it's where a renewal-tracking habit — not necessarily automated software — actually prevents the problem.

1. Where InstaRenewal Fits — and Where It Doesn't It's worth being accurate about what a renewal-tracking tool like InstaRenewal actually does here, because it's easy to overstate. InstaRenewal is a manual record-keeping and renewal-date tracker for domains, SSL certificates, hosting accounts, plugin/software licenses, and — relevant here — custom assets, which is exactly the field type that fits a stock photo license or a web font subscription that doesn't have a dedicated category. It is not an automated scanner, it doesn't crawl your client's site for unlicensed images the way PicScout does, and it doesn't monitor live traffic against a font's pageview tier in real time.

What it's genuinely useful for in this context:

Logging each license as an asset with a renewal date. A Monotype webfont subscription or an enterprise Getty license has an annual renewal date just like a domain does — log it the same way, so it shows up in the same weekly review instead of living in an inbox thread from three years ago.
Recording ownership and payment responsibility. InstaRenewal's asset fields already track who owns an asset (agency or client) and who's responsible for paying for it — the exact distinction that matters when a font license was purchased under a designer's personal account versus the client's own procurement.
Using notes for license reference details. Order IDs, license certificate numbers, and pageview tier levels can be recorded in the asset's notes so they're not solely dependent on someone's memory or an old email.
Building the renewal date into a habit of checking traffic before it matters. InstaRenewal won't tell you a client's traffic crossed into a higher pageview tier — but a renewal reminder set well ahead of the font's annual renewal date gives you a natural checkpoint to pull traffic numbers and confirm the tier is still correct before the license auto-renews at the wrong level.
Client-ready reporting. At offboarding or a client's own compliance review, a report showing what's tracked, who owns it, and who's paying for it is a straightforward way to hand over exactly the recordkeeping a copyright audit would ask for.

1. Conclusion: Recordkeeping Is the Actual Defense Most agencies treat asset licensing as paperwork to survive, not a service to sell. But the mechanics above point to a more useful framing: the difference between a manageable pay-to-license letter and a genuinely expensive claim is almost always whether someone can produce a receipt, an order ID, and a clear ownership record within a day of being asked. Building that habit — a documented compliance audit at onboarding, a clear licensing clause in the contract, and a renewal-date record for every stock and font asset a site depends on — turns IP compliance from a liability into a differentiator you can point to when a client asks who's watching this for them.