diff --git a/.reuse/dep5 b/.reuse/dep5
deleted file mode 100644
index 9139a5ad..00000000
--- a/.reuse/dep5
+++ /dev/null
@@ -1,32 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: suspicious_login
-Upstream-Contact: Nextcloud <info@nextcloud.com>
-Source: https://github.com/nextcloud/suspicious_login
-
-Files: .tx/config l10n/*.js l10n/*.json screenshots/admin_settings.png screenshots/notification_android.png screenshots/notification_web.png
-Copyright: 2019 Nextcloud GmbH and Nextcloud contributors
-License: AGPL-3.0-or-later
-
-Files: .github/CODEOWNERS renovate.json
-Copyright: 2023 Nextcloud GmbH and Nextcloud contributors
-License: AGPL-3.0-or-later
-
-Files: composer.json composer.lock
-Copyright: 2018 Nextcloud GmbH and Nextcloud contributors
-License: AGPL-3.0-or-later
-
-Files: vendor-bin/php-cs-fixer/composer.json vendor-bin/php-cs-fixer/composer.lock
-Copyright: 2024 Nextcloud GmbH and Nextcloud contributors
-License: AGPL-3.0-or-later
-
-Files: package.json package-lock.json tests/phpunit.xml
-Copyright: 2019 Nextcloud GmbH and Nextcloud contributors
-License: AGPL-3.0-or-later
-
-Files: img/app.svg img/app-dark.svg
-Copyright: 2018-2024 Google LLC
-License: Apache-2.0
-
-Files: js/settings.js js/settings.js.LICENSE.txt js/settings.js.map
-Copyright: 2019 Nextcloud GmbH and Nextcloud contributors, 2020 Chart.js Contributors, 2014-2022 Evan You, 2011-2023 Tim Wood, Iskren Chernev, Moment.js contributors
-License: AGPL-3.0-or-later AND MIT
diff --git a/REUSE.toml b/REUSE.toml
new file mode 100644
index 00000000..b763989d
--- /dev/null
+++ b/REUSE.toml
@@ -0,0 +1,48 @@
+# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: AGPL-3.0-or-later
+version = 1
+SPDX-PackageName = "suspicious_login"
+SPDX-PackageSupplier = "Nextcloud <info@nextcloud.com>"
+SPDX-PackageDownloadLocation = "https://github.com/nextcloud/suspicious_login"
+
+[[annotations]]
+path = [".tx/config", "l10n/**.js", "l10n/**.json", "screenshots/admin_settings.png", "screenshots/notification_android.png", "screenshots/notification_web.png"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2019 Nextcloud GmbH and Nextcloud contributors"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = [".github/CODEOWNERS", "renovate.json"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2023 Nextcloud GmbH and Nextcloud contributors"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = ["composer.json", "composer.lock"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2018 Nextcloud GmbH and Nextcloud contributors"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = ["vendor-bin/php-cs-fixer/composer.json", "vendor-bin/php-cs-fixer/composer.lock"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2024 Nextcloud GmbH and Nextcloud contributors"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = ["package.json", "package-lock.json", "tests/phpunit.xml"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2019 Nextcloud GmbH and Nextcloud contributors"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = ["img/app.svg", "img/app-dark.svg"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2018-2024 Google LLC"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = ["js/settings.js", "js/settings.js.LICENSE.txt", "js/settings.js.map"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2019 Nextcloud GmbH and Nextcloud contributors, 2020 Chart.js Contributors, 2014-2022 Evan You, 2011-2023 Tim Wood, Iskren Chernev, Moment.js contributors"
+SPDX-License-Identifier = "AGPL-3.0-or-later AND MIT"