diff --git a/.cargo/config.toml b/.cargo/config.toml
index 307bcfe43..18f6fb282 100644
--- a/.cargo/config.toml
+++ b/.cargo/config.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [build]
 rustflags = ["--cfg", "tokio_unstable"]
 
diff --git a/.codecov.yml b/.codecov.yml
index 54f4aaf72..a946b3cea 100644
--- a/.codecov.yml
+++ b/.codecov.yml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 comment: false
 
 flag_management:
diff --git a/.config/nextest.toml b/.config/nextest.toml
index 351fb92d7..7ed06faa5 100644
--- a/.config/nextest.toml
+++ b/.config/nextest.toml
@@ -1,2 +1,7 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [profile.default]
 retries = 1
diff --git a/.dockerignore b/.dockerignore
index e016faae8..01fcc861a 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 target/
 crates/*/target
 crates/*/node_modules
diff --git a/.editorconfig b/.editorconfig
index 23e144851..ccbe6ed4b 100644
--- a/.editorconfig
+++ b/.editorconfig
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 root = true
 
 [*]
diff --git a/.gitattributes b/.gitattributes
deleted file mode 100644
index 7e11055a9..000000000
--- a/.gitattributes
+++ /dev/null
@@ -1 +0,0 @@
-*.wasm binary
diff --git a/.github/actions/build-frontend/action.yml b/.github/actions/build-frontend/action.yml
index a7a1fe2c5..417f1f9ae 100644
--- a/.github/actions/build-frontend/action.yml
+++ b/.github/actions/build-frontend/action.yml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Build the frontend assets
 description: Installs Node.js and builds the frontend assets from the frontend directory
 
@@ -7,7 +12,7 @@ runs:
     - name: Install Node
       uses: actions/setup-node@v4.2.0
       with:
-        node-version: '22'
+        node-version: "22"
 
     - name: Install dependencies
       run: npm ci
diff --git a/.github/actions/build-policies/action.yml b/.github/actions/build-policies/action.yml
index 274aa8134..0eba08e6e 100644
--- a/.github/actions/build-policies/action.yml
+++ b/.github/actions/build-policies/action.yml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Build the Open Policy Agent policies
 description: Installs OPA and builds the policies
 
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a98d07e09..8b67a1414 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 version: 2
 updates:
   - package-ecosystem: "cargo"
diff --git a/.github/release.yml b/.github/release.yml
index 8b25ed964..3633ae68a 100644
--- a/.github/release.yml
+++ b/.github/release.yml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 changelog:
   categories:
     - title: Bug Fixes
diff --git a/.github/scripts/.gitignore b/.github/scripts/.gitignore
index 504afef81..efa4841d7 100644
--- a/.github/scripts/.gitignore
+++ b/.github/scripts/.gitignore
@@ -1,2 +1,7 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 node_modules/
 package-lock.json
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 7ac2669e5..f2c1f0b36 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Build
 
 on:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index b3f438f5f..d3c87d0e3 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: CI
 
 on:
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index 12f2419b3..ca3860aaa 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Coverage
 
 on:
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 811a35b9b..84170931e 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -1,10 +1,15 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Build and deploy the documentation
 
 on:
   push:
-    branches: [ main ]
+    branches: [main]
   pull_request:
-    branches: [ main ]
+    branches: [main]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/merge-back.yaml b/.github/workflows/merge-back.yaml
index 04884e2be..5cb8ebdf1 100644
--- a/.github/workflows/merge-back.yaml
+++ b/.github/workflows/merge-back.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Merge back a reference to main
 on:
   workflow_call:
diff --git a/.github/workflows/release-branch.yaml b/.github/workflows/release-branch.yaml
index fac7624c8..43015c972 100644
--- a/.github/workflows/release-branch.yaml
+++ b/.github/workflows/release-branch.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Create a new release branch
 on:
   workflow_dispatch:
diff --git a/.github/workflows/release-bump.yaml b/.github/workflows/release-bump.yaml
index 841893d50..3b147a2ce 100644
--- a/.github/workflows/release-bump.yaml
+++ b/.github/workflows/release-bump.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Bump the version on a release branch
 on:
   workflow_dispatch:
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index 02555f5e1..631221145 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Tag a new version
 on:
   workflow_call:
diff --git a/.github/workflows/translations-download.yaml b/.github/workflows/translations-download.yaml
index d2380c0df..130a76d38 100644
--- a/.github/workflows/translations-download.yaml
+++ b/.github/workflows/translations-download.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Download translation files from Localazy
 on:
   workflow_dispatch:
diff --git a/.github/workflows/translations-upload.yaml b/.github/workflows/translations-upload.yaml
index 2c5a27c3e..9fbe53c00 100644
--- a/.github/workflows/translations-upload.yaml
+++ b/.github/workflows/translations-upload.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 name: Upload translation files to Localazy
 on:
   push:
diff --git a/.gitignore b/.gitignore
index 1046cc35a..04c077e49 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 # Rust
 target/
 
diff --git a/.rustfmt.toml b/.rustfmt.toml
index 0e4510bbb..72a97f569 100644
--- a/.rustfmt.toml
+++ b/.rustfmt.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 max_width = 100
 comment_width = 80
 wrap_comments = true
diff --git a/Cargo.toml b/Cargo.toml
index 68f867595..07bc5d1ac 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [workspace]
 default-members = ["crates/cli"]
 members = ["crates/*"]
diff --git a/Dockerfile b/Dockerfile
index 085504530..354f5fada 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,8 @@
 # syntax = docker/dockerfile:1.7.1
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
 
 # Builds a minimal image with the binary only. It is multi-arch capable,
 # cross-building to aarch64 and x86_64. When cross-compiling, Docker sets two
diff --git a/book.toml b/book.toml
index e21f37eca..88f5e8263 100644
--- a/book.toml
+++ b/book.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 # Documentation for possible options in this file is at
 # https://rust-lang.github.io/mdBook/format/config.html
 [book]
diff --git a/clippy.toml b/clippy.toml
index 3cbf7c74c..2d1274857 100644
--- a/clippy.toml
+++ b/clippy.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 doc-valid-idents = ["OpenID", "OAuth", "..", "PostgreSQL", "SQLite"]
 
 disallowed-methods = [
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 6084984cd..ceb47a4c7 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-axum-utils"
 version.workspace = true
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 40c46897a..22def30c7 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-cli"
 version.workspace = true
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index 35b7f83d1..c6eb76d7c 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-config"
 version.workspace = true
diff --git a/crates/context/Cargo.toml b/crates/context/Cargo.toml
index 46adc9911..ad86d1426 100644
--- a/crates/context/Cargo.toml
+++ b/crates/context/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-context"
 version.workspace = true
diff --git a/crates/data-model/Cargo.toml b/crates/data-model/Cargo.toml
index c4e19fcdf..6474d46ae 100644
--- a/crates/data-model/Cargo.toml
+++ b/crates/data-model/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-data-model"
 version.workspace = true
diff --git a/crates/email/Cargo.toml b/crates/email/Cargo.toml
index 7b8ff94c4..eba4ea6fa 100644
--- a/crates/email/Cargo.toml
+++ b/crates/email/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-email"
 version.workspace = true
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 4bda28ced..35f3e79f5 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-handlers"
 version.workspace = true
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index 3df605792..66eaac607 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-http"
 description = "HTTP utilities for the Matrix Authentication Service"
diff --git a/crates/i18n-scan/Cargo.toml b/crates/i18n-scan/Cargo.toml
index c70d7b4e7..cfb1bd66b 100644
--- a/crates/i18n-scan/Cargo.toml
+++ b/crates/i18n-scan/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-i18n-scan"
 version.workspace = true
diff --git a/crates/i18n/Cargo.toml b/crates/i18n/Cargo.toml
index c73448060..8d04dc731 100644
--- a/crates/i18n/Cargo.toml
+++ b/crates/i18n/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-i18n"
 version.workspace = true
diff --git a/crates/iana-codegen/Cargo.toml b/crates/iana-codegen/Cargo.toml
index ae8f8d1ed..0f30c8c31 100644
--- a/crates/iana-codegen/Cargo.toml
+++ b/crates/iana-codegen/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-iana-codegen"
 version.workspace = true
diff --git a/crates/iana/Cargo.toml b/crates/iana/Cargo.toml
index 796abe4ba..d646bac19 100644
--- a/crates/iana/Cargo.toml
+++ b/crates/iana/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-iana"
 description = "IANA registry data for JOSE and OAuth 2.0"
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 9ca221bb3..ac9c4d96a 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-jose"
 description = "JSON Object Signing and Encryption (JWT & co) utilities"
diff --git a/crates/keystore/Cargo.toml b/crates/keystore/Cargo.toml
index 668d555ad..0b97e5d88 100644
--- a/crates/keystore/Cargo.toml
+++ b/crates/keystore/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-keystore"
 description = "Secret keys store used by the Matrix Authentication Service"
diff --git a/crates/keystore/tests/generate.sh b/crates/keystore/tests/generate.sh
index c2de69c9f..b6cbe1082 100644
--- a/crates/keystore/tests/generate.sh
+++ b/crates/keystore/tests/generate.sh
@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
 
 set -eux
 
diff --git a/crates/listener/Cargo.toml b/crates/listener/Cargo.toml
index 14d84ea9b..5171e86b4 100644
--- a/crates/listener/Cargo.toml
+++ b/crates/listener/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-listener"
 version.workspace = true
diff --git a/crates/listener/examples/demo/certs/gen.sh b/crates/listener/examples/demo/certs/gen.sh
index 4ce16dcc3..019279ec1 100644
--- a/crates/listener/examples/demo/certs/gen.sh
+++ b/crates/listener/examples/demo/certs/gen.sh
@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
 
 # Script to regenerate the server and client certificate
 
diff --git a/crates/matrix-synapse/Cargo.toml b/crates/matrix-synapse/Cargo.toml
index 8e3e1841c..34c08e9c9 100644
--- a/crates/matrix-synapse/Cargo.toml
+++ b/crates/matrix-synapse/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-matrix-synapse"
 version.workspace = true
diff --git a/crates/matrix/Cargo.toml b/crates/matrix/Cargo.toml
index 2182c6426..a041fee5e 100644
--- a/crates/matrix/Cargo.toml
+++ b/crates/matrix/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-matrix"
 version.workspace = true
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index 4707bb137..2432e34f5 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "oauth2-types"
 description = "OAuth 2.0 types used by the Matrix Authentication Service"
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index 5b35ec913..3fffd584c 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-oidc-client"
 description = "OpenID Connect client library used by the Matrix Authentication Service"
diff --git a/crates/policy/Cargo.toml b/crates/policy/Cargo.toml
index ca927bcc6..7496f2726 100644
--- a/crates/policy/Cargo.toml
+++ b/crates/policy/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-policy"
 version.workspace = true
diff --git a/crates/router/Cargo.toml b/crates/router/Cargo.toml
index b31302fc0..07cd3a913 100644
--- a/crates/router/Cargo.toml
+++ b/crates/router/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-router"
 version.workspace = true
diff --git a/crates/spa/Cargo.toml b/crates/spa/Cargo.toml
index 292338a67..5287abf15 100644
--- a/crates/spa/Cargo.toml
+++ b/crates/spa/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-spa"
 version.workspace = true
diff --git a/crates/storage-pg/Cargo.toml b/crates/storage-pg/Cargo.toml
index 0bf34ec0b..149e92fc6 100644
--- a/crates/storage-pg/Cargo.toml
+++ b/crates/storage-pg/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-storage-pg"
 version.workspace = true
diff --git a/crates/storage/Cargo.toml b/crates/storage/Cargo.toml
index f22ef1d6e..07f4330c6 100644
--- a/crates/storage/Cargo.toml
+++ b/crates/storage/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-storage"
 version.workspace = true
diff --git a/crates/syn2mas/Cargo.toml b/crates/syn2mas/Cargo.toml
index 5452c14be..9dfee658b 100644
--- a/crates/syn2mas/Cargo.toml
+++ b/crates/syn2mas/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "syn2mas"
 version.workspace = true
diff --git a/crates/tasks/Cargo.toml b/crates/tasks/Cargo.toml
index 9cd39c20b..5c2a31536 100644
--- a/crates/tasks/Cargo.toml
+++ b/crates/tasks/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-tasks"
 version.workspace = true
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index a99f5ae56..ffe2dbf74 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-templates"
 version.workspace = true
diff --git a/crates/tower/Cargo.toml b/crates/tower/Cargo.toml
index 38067f120..44a17c670 100644
--- a/crates/tower/Cargo.toml
+++ b/crates/tower/Cargo.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [package]
 name = "mas-tower"
 description = "Tower layers used by the Matrix Authentication Service"
diff --git a/deny.toml b/deny.toml
index 152c525e5..62f8dab87 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 [graph]
 targets = [
     { triple = "x86_64-unknown-linux-gnu" },
diff --git a/docker-bake.hcl b/docker-bake.hcl
index cfa6b8353..3c3cac3af 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+#
 // This is used to set the version reported by the binary through an environment
 // variable. This is mainly useful when building out of a git context, like in
 // CI, where we don't have the full commit history available
diff --git a/frontend/.editorconfig b/frontend/.editorconfig
deleted file mode 100644
index 70fefa646..000000000
--- a/frontend/.editorconfig
+++ /dev/null
@@ -1,11 +0,0 @@
-root = true
-
-[*]
-charset=utf-8
-end_of_line = lf
-
-[*.{ts,tsx,js,cjs,mjs,css,json,graphql}]
-indent_style = space
-indent_size = 2
-insert_final_newline = true
-trim_trailing_whitespace = true
diff --git a/frontend/.gitignore b/frontend/.gitignore
index 5b51a6b97..bef0bf155 100644
--- a/frontend/.gitignore
+++ b/frontend/.gitignore
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 /node_modules
 /dist
 /coverage
diff --git a/misc/build-docs.sh b/misc/build-docs.sh
index 785b3f76f..caeab8d85 100644
--- a/misc/build-docs.sh
+++ b/misc/build-docs.sh
@@ -1,5 +1,10 @@
 #!/bin/sh
 
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+#
 # This script is used by the Cloudflare Pages to build the documentation.
 # It detects if it's running in the Cloudflare Pages build environment and will install the required dependencies.
 # It can also be used locally to build the documentation, given that the required dependencies are installed.
diff --git a/misc/sqlx_update.sh b/misc/sqlx_update.sh
index 6dee03da4..3ca357dff 100755
--- a/misc/sqlx_update.sh
+++ b/misc/sqlx_update.sh
@@ -1,4 +1,9 @@
 #!/bin/sh
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+#
 set -eu
 
 if [ "${DATABASE_URL+defined}" != defined ]; then
@@ -21,11 +26,11 @@ for crate in $CRATES_WITH_SQLX; do
   if [ $crate = syn2mas ]; then
     # We need to apply the syn2mas_temporary_tables.sql one-off 'migration'
     # for checking the syn2mas queries
-    
+
     # not evident from the help text, but psql accepts connection URLs as the dbname
     psql --dbname="$DATABASE_URL" --single-transaction --file="${crates_dir}/syn2mas/src/mas_writer/syn2mas_temporary_tables.sql"
   fi
-  
+
   (cd "$crates_dir/$crate" && cargo sqlx prepare) || echo "(failed to prepare for $crate)"
 
   if [ $crate = syn2mas ]; then
diff --git a/misc/update.sh b/misc/update.sh
index 4cbea8c31..1bab7d10d 100644
--- a/misc/update.sh
+++ b/misc/update.sh
@@ -1,5 +1,9 @@
 #!/bin/sh
-
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+#
 set -eu
 
 export SQLX_OFFLINE=1
diff --git a/policies/.gitignore b/policies/.gitignore
index 8a26235c9..33599e57b 100644
--- a/policies/.gitignore
+++ b/policies/.gitignore
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 /policy.wasm
 /bundle.tar.gz
 /coverage.json
diff --git a/policies/.regal/config.yaml b/policies/.regal/config.yaml
index 2088bdbf0..0620e6872 100644
--- a/policies/.regal/config.yaml
+++ b/policies/.regal/config.yaml
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 rules:
   style:
     external-reference:
diff --git a/policies/Makefile b/policies/Makefile
index 18cb2dbfc..0e4d8ebdd 100644
--- a/policies/Makefile
+++ b/policies/Makefile
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+#
 # Set to 1 to run OPA through Docker
 DOCKER := 0
 PODMAN := 0
diff --git a/policies/authorization_grant/authorization_grant.rego b/policies/authorization_grant/authorization_grant.rego
index 72fa7ee8b..e8602da76 100644
--- a/policies/authorization_grant/authorization_grant.rego
+++ b/policies/authorization_grant/authorization_grant.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 # METADATA
 # schemas:
 #   - input: schema["authorization_grant_input"]
diff --git a/policies/authorization_grant/authorization_grant_test.rego b/policies/authorization_grant/authorization_grant_test.rego
index 3594bfac2..2a13a2392 100644
--- a/policies/authorization_grant/authorization_grant_test.rego
+++ b/policies/authorization_grant/authorization_grant_test.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package authorization_grant_test
 
 import data.authorization_grant
diff --git a/policies/client_registration/client_registration.rego b/policies/client_registration/client_registration.rego
index 2a990b7aa..a257bd599 100644
--- a/policies/client_registration/client_registration.rego
+++ b/policies/client_registration/client_registration.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 # METADATA
 # schemas:
 #   - input: schema["client_registration_input"]
diff --git a/policies/client_registration/client_registration_test.rego b/policies/client_registration/client_registration_test.rego
index 034f5243b..60df994c6 100644
--- a/policies/client_registration/client_registration_test.rego
+++ b/policies/client_registration/client_registration_test.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package client_registration_test
 
 import rego.v1
diff --git a/policies/common/common.rego b/policies/common/common.rego
index 8386555c6..17e9aa82d 100644
--- a/policies/common/common.rego
+++ b/policies/common/common.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package common
 
 import rego.v1
diff --git a/policies/common/common_test.rego b/policies/common/common_test.rego
index 52950a591..18770fdc7 100644
--- a/policies/common/common_test.rego
+++ b/policies/common/common_test.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package common_test
 
 import data.common
diff --git a/policies/email/email.rego b/policies/email/email.rego
index d9c5eb778..4f2d09f92 100644
--- a/policies/email/email.rego
+++ b/policies/email/email.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 # METADATA
 # schemas:
 #   - input: schema["email_input"]
diff --git a/policies/email/email_test.rego b/policies/email/email_test.rego
index 9d3750b56..8e75e24a5 100644
--- a/policies/email/email_test.rego
+++ b/policies/email/email_test.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package email_test
 
 import data.email
diff --git a/policies/register/register.rego b/policies/register/register.rego
index 6a36f9611..34428741a 100644
--- a/policies/register/register.rego
+++ b/policies/register/register.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 # METADATA
 # schemas:
 #   - input: schema["register_input"]
diff --git a/policies/register/register_test.rego b/policies/register/register_test.rego
index 040cdcc5d..6cb324b77 100644
--- a/policies/register/register_test.rego
+++ b/policies/register/register_test.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package register_test
 
 import data.register
diff --git a/policies/util/coveralls.rego b/policies/util/coveralls.rego
index c25208552..1d8f60585 100644
--- a/policies/util/coveralls.rego
+++ b/policies/util/coveralls.rego
@@ -1,3 +1,8 @@
+# Copyright 2025 New Vector Ltd.
+#
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial
+# Please see LICENSE files in the repository root for full details.
+
 package util
 
 import rego.v1