SaaS Agreement: 10 Key Elements You Must Pay Attention To
In the digital era, the Software as a Service (SaaS) model has become a cornerstone of modern business operations. From CRM systems and project management tools to accounting software and collaboration platforms, companies increasingly rely on cloud-based solutions to improve efficiency and flexibility. The appeal is clear: instead of expensive software licenses and complex installations, businesses gain access to powerful software through the internet, with predictable monthly or annual costs.
However, behind the simplicity of using SaaS solutions lies a complex legal relationship governed by the SaaS Agreement. This document is not merely a confirmation of purchase; it is a detailed service agreement that regulates your rights, the obligations of the service provider, and, most importantly, the fate of your business data.
This guide will take you through the 10 most critical elements of every SaaS Agreement, with reference to the relevant legal provisions that form the framework of these modern business relationships.
Defining the SaaS Agreement: What Exactly Are You Purchasing?
This is the foundation of the agreement. It must be absolutely clear what the service includes. Unclear definitions may lead to misunderstandings and disputes. The agreement should precisely answer the following questions:
What are the specific functionalities of the software?
How many users are included in the subscription?
What is the available data storage capacity?
Are future updates and new versions included?
Since the Law on Obligations requires every contractual obligation to be determined or at least determinable, an unclear definition of the subject matter of the obligation (the service) may result in the agreement being considered invalid. Additionally, pursuant to the Law on Electronic Commerce, the service provider is required, before entering into the agreement, to clearly inform the other party about the content of the agreement and the general terms and conditions of service.
Sevrice Availability Level (Service Level Agreement - SLA)
Since SaaS applications are hosted by the service provider, you depend on its infrastructure. What happens if the system goes down? The SLA is a part of the agreement that defines the promised level of service. Particular attention should be paid to:
Guaranteed Uptime: What percentage of time (for example, 99.5%, 99.9%) will the service be guaranteed to remain available?
Scheduled Maintenance: When and how will the service provider notify you about planned interruptions due to maintenance?
Compensation for Downtime (Service credits): What do you receive if the promised uptime is not achieved? Most commonly, this is provided in the form of credits (discounts) applied to future subscription fees.
This is directly connected to the obligation of the service provider to act with the care of a good professional, as prescribed under the Law on Obligations. Failure to comply with the SLA constitutes a breach of contractual obligations.
Ownership and Protection of Data: Who Owns Your Data?
This is perhaps the most important aspect. You are entering sensitive information regarding your customers, finances, and operations into a third-party system. The agreement must clearly confirm that you remain the owner of your data.
From the perspective of the Law on Personal Data Protection, your company acts as the Controller of personal data, while the SaaS provider acts as the Processor.
Their relationship must be regulated through an agreement that requires the processor to:
Process data only based on documented instructions from the controller (you);
Ensure the confidentiality of the data;
Delete or return all data after termination of the service.
Special attention should be paid to the location of servers. If data is stored outside North Macedonia, strict rules regarding transfers of personal data to third countries must be respected.
Data Security
Besides ownership, security is equally important. How does the service provider protect your data from cyberattacks, unauthorized access, or loss?
The agreement should specify the security measures implemented. The Law on Personal Data Protection requires controllers and processors to implement appropriate technical and organizational measures, including measures such as pseudonymization and encryption.
The agreement should also define the procedure in case of a security breach.
The processor (SaaS provider) is required to immediately notify the controller (you) of any personal data breach.
Intellectual Property
A SaaS Agreement is a form of licensing agreement. You do not purchase the software itself; you obtain the right to use it. The Law on Copyright and Related Rights explicitly protects software as a “computer program.”
The agreement should clearly state that the service provider retains ownership of the intellectual property rights in the software, while you receive a non-exclusive, non-transferable license to use the software during the term of the agreement. The issue becomes more complex if you pay for specific customizations. The agreement must define who owns those custom developments and modifications.
Fees and Billing Model
This is the commercial part of the agreement, but it also has important legal implications.
Review the following:
Billing model: Is payment calculated per user, based on usage volume, or as a fixed monthly fee?
Payment Deadlines: When do invoices become due?
Consequences of Late Payment: What is the applicable default interest rate? Does the provider have the right to suspend access to the service?
Price Increase Policy: Can the provider increase prices, and under what conditions? Do you have the right to terminate the agreement if you do not agree with the new pricing?
According to the Consumer Protection Law, a contractual provision allowing a trader to increase prices without granting the consumer the right to terminate the agreement may be considered unfair. Although this law primarily applies to consumers, the principle of fairness is also relevant in business relationships.
Term, Renewal, and Termination
Term: Is the agreement concluded for one year, month-to-month, or another period?
Auto-renewal: Many SaaS agreements automatically renew unless they are cancelled within a specific period before expiration. This clause must be clearly drafted so that the customer understands when and how the agreement may be renewed or terminated.
Termination Conditions: What are the circumstances under which you or the service provider may terminate the agreement? Usually, termination is permitted due to a material breach of contractual obligations. However, the Law on Obligations also regulates the right of termination in cases of non-performance, which may be incorporated into the agreement.
Limitation of Liability and Indemnification
Every SaaS Agreement usually contains a clause through which the service provider attempts to limit its liability for damages (for example, limiting liability to the amount paid by the customer during the previous 6 or 12 months). It is important to understand that, according to the Law on Obligations, liability for damages caused intentionally or through gross negligence cannot be excluded in advance.
On the other hand, an indemnification clause represents an important protection mechanism for the customer. Such a clause should require the service provider to defend and compensate the customer if a third party brings a claim because the provider’s software infringes someone else’s intellectual property rights.
Support and Maintenance
What happens when you encounter a problem? The agreement should clearly define the scope and quality of support services, including:
Support Channels: Telephone, email, ticketing system, or other communication methods.
Support Hours: The periods during which technical assistance is available.
Response time: Within what timeframe will the service provider respond to your request?
These obligations form part of the overall quality of the service and fall within the general obligation of performing contractual obligations in good faith and with due care.
Exit Strategy
Every agreement eventually comes to an end. What happens at that point? This is a critical issue that is often overlooked. The SaaS Agreement should regulate:
Data Return Procedure: How will you receive your data back after termination of the agreement?
Data Format: Will the data be provided in a standard, usable format (for example, CSV, SQL, JSON), or will it be delivered in a proprietary format that is useless without the provider’s software?
Data Deletion Period: How long after termination will the provider retain your data before permanently deleting it?
This is directly connected with the obligation of the processor to return or delete personal data after completion of the service, as required under data protection legislation.
*
CONCLUSION
SaaS Agreements are complex legal instruments that define your access to essential business tools and regulate the management of your data, which represents one of your most valuable business assets.
Although it may be tempting to skip reading lengthy legal documents, the consequences of doing so can be costly.
Pay particular attention to these ten elements, understand your rights and obligations, and for high-value or business-critical agreements, do not hesitate to seek professional legal advice.
Careful analysis before signing is the best investment in the security, continuity, and long-term stability of your business operations.
**
Note: This article is intended for informational purposes only and should not be considered legal advice. Legal issues can be complex and each situation may have specific circumstances that require individual analysis. For this reason, we recommend consulting a qualified attorney who can provide tailored legal guidance for your particular case.