Service Overview
Netskope One Private Access (NPA) inspects and enforces policy on user traffic transiting the Netskope NewEdge network, providing visibility and access control across a customer’s private application traffic.
Definitions and Units of Measure
A User is defined as each individual that (a) is authorized by the customer to use the customer’s systems (including the customer’s network, cloud services and Internet connections), and (b) whose use of such systems is monitored by, or accessed by use of, the Services.
A Light User means a User with the capacity restrictions set forth in the Licensing Model section below.
An Application Segment refers to a single Private Application definition configured in the Netskope console by the administrator.
Units of Measure
- User & Light User: Each User or Light User counts as one Subscription Unit and cannot be shared between multiple Users.
- Application Segments: Each Private Application definition counts as one Application Segment.
Entitlement
Subscription Period: As set forth in a customer’s order.
Licensing Model
- User-Based: Each Subscription Unit entitles the customer to one (1) User and the Subscription Unit cannot be shared across users. The Application Segment allocation across different NPA packages is specified in the Netskope quotation.
- Light Users are entitled to a maximum of 5 Application Segments and 100 MB of traffic per Light User per month.
Pooling: User and Application Segment entitlement is assigned at the account level and may be shared across multiple of the customer’s tenants, excluding Light Users.
Add-On Packages: Customers may purchase incremental Subscription Units to increase their entitlements for Users or Application Segments (via “add-on” packages) at any time during the Subscription Period, by placing an additional Order.
Usage Monitoring
Customers may monitor their User and Application Segment count and retrieve a list of Users or Application Segments in their Netskope tenant Web UI at the tenant level. Netskope will also notify the customer via the account team when the number of Users or Application Segments exceeds the licensed quantity.
Measurement & Enforcement
Measurement Methodology
- Netskope measures User usage based on the number of unique Users observed over a rolling 90-day period.
- Netskope measures Application Segment usage based on the number of unique Application Segments existing on the observation date.
Service Limitations: If service usage exceeds the purchased entitlement, Netskope may limit functionality until the customer acquires additional licenses.
Overage Remediation: For Users and Application Segments, if the customer’s number of Users or Application Segments exceeds the purchased entitlement, the customer must, within 30 days of notification:
- License additional User and/or Application Segment packages sufficient to cover the excess Users for the remainder of the Subscription Period; or
- Cease usage of the services by Users in excess of purchased User quantities.
- Reduce the count of Application Segments in excess of purchased Application Segment quantities.
During the Service subscription period, Netskope will determine if actual Light Users exceed the capacity limitations set forth in the applicable product description. If actual capacity for any Light Users exceeds the capacity limitation, the customer is required within 30 days after notice to either:
- purchase upgrades to Users for all Light Users exceeding the capacity limitations, or
- immediately cease utilization of the excess capacity for all Light Users exceeding the purchased quantity, or a combination of both.
Customer Records: The customer may be required to provide written information or confirmation of the number of Users and Application Segments upon reasonable request by Netskope.

