what is software as a service?
saas is a way of delivering a software product to customers, whereby the product is accessed by the customer via the internet. access to the product (ie the service) is usually provided to the customer in exchange for either a subscription fee or a fee paid per use. this differs from the provision of software services by allowing customers to actually download and install the software on their own computing systems. saas customers can be individuals or businesses.
a saas product exists in the cloud (ie a network of remote servers, rather than local servers or hardware). it is operated and maintained in a centralised manner by the service provider (ie the business providing the software product) rather than by its various users (ie the provider’s customers) individually. essentially, a customer purchasing saas will be paying to use the seller’s services, rather than paying to ‘have’ their product (eg as you would have if you purchased a word processing programme on a cd-rom years ago).
although saas products are not downloaded software, some can be accessed via mobile apps.
some examples of types of software that are often provided as saas include:
-
payroll systems
-
email systems
-
sales and customer relationship management systems
-
information storage systems
-
legal document platforms
-
streaming platforms
why do businesses use saas?
running a software business using a saas model has many benefits for providers and customers. these include:
-
they’re easier to keep up to date - there are no outdated versions of the software being run by different customers, so when suppliers introduce updates, they only need to be applied to the current software version. centralised updates also reduce the effort customers need to put into keeping their software operational
-
flexibility for users - users of saas systems can access their systems and information from anywhere that they have internet access. they may also be able to change between various subscription models that their supplier provides (eg by purchasing a plan that allows them to store or process more data) as their personal or business needs grow or change
-
cost savings - customers often avoid the large upfront costs required to purchase and download a traditional software product. instead, they can pay a regular subscription fee for saas or just pay to use the service when they require it. offering services in this way can also help saas providers to draw business from their non-saas competitors
how do i sell or purchase a saas product?
traditional software products are often provided for customers to use with a software licence (or ‘software licensing agreement’) (as well as a general contract of sale). a software licence is a form of intellectual property (ip) licence, by which an ip owner (ie the supplier) grants the customer the right to use their ip (ie the software). a software licence usually includes conditions on its use, for example, it may licence one or multiple people to use the software and may dictate how it can be used. for more information, read software licensing and business.
saas products can also be provided with a licence granting the customer the right to use the software provided by the service in a certain way. as selling saas products also involves service provision, a services agreement or a similar contract will also be in place to set out the terms for the provision of services more widely. often, a services agreement will incorporate ip licensing considerations. for example, it may licence the customer to use the supplier’s software (ip), without a separate licence agreement needing to be created.
liability and indemnities
contracts for saas products are often formed between businesses that each deal with multiple other customers. this makes it important to have adequate provisions limiting each party’s responsibilities in the event that a legal claim is brought against them.
for example, if one party is accused of violating a third party’s ip or data protection rights, they may be able to claim compensation for any losses due to this claim. this is called an indemnity.
for example, if a customer (let’s call this ‘customer a’) of a business (‘customer b’) that uses a saas supplier’s product for their customer service has their data protection rights breached, they may take legal action against the saas supplier. if successful, the saas supplier may have to pay customer a compensation. an indemnity clause in the saas supplier’s contract with customer b may allow the saas supplier to claim this money back from customer b. for more information, read indemnity.
a limitation of liability clause (ie restricting the legal claims that the other party to the contract can make and/or how much compensation they can claim) can be particularly important for saas providers. saas products are all about making their customers’ lives and businesses easier to manage. so, if a relied-upon system fails, this can be very damaging for a customer’s business. a saas supplier does not want to bear the losses incurred due to any failures in their systems beyond their control, and so clauses can be included in agreements which limit this liability. both providers and customers should be aware of this when negotiating or signing agreements. for more information, read limitation of liability clauses.
if you need bespoke documents drafted (eg a software licence or terms and conditions for your saas product), consider using our bespoke legal drafting service.
data protection considerations when selling or using saas
many saas products provide services to businesses, which help them to organise and manage their own businesses. for example, it’s common to use a saas product to hold a customer’s data to manage their customer service, staff payroll, or general data storage. therefore, using a saas product requires businesses on both sides of the services relationship to be aware of the significant data protection obligations imposed on the parties.
if a business uses another business’ saas software to process (eg record, store, or organise) personal data (ie data from which individuals can be identified) about their customers, they are outsourcing data processing to the software provider. to ensure that this is done in compliance with the uk general data protection regulation (gdpr) and the data protection act 2018, certain data protection documents may need to be in place, including:
-
a data processing agreement (dpa) to supplement a services agreement and set out how the data will be processed (eg the security measures that will be used to keep it safe). for more information, read data processing agreements
-
a data protection impact assessment (dpia) to identify and minimise the risks of any processing being outsourced to the saas product that are likely to result in high risks to the rights and freedoms of others. for more information read, data protection impact assessments
for more information on data protection documents that may be needed for businesses that use or sell saas, read data protection for businesses.
other considerations for saas providers
a saas provider is a business like any other, and as such, they must be aware of multiple other legal matters. these include:
-
protecting their intellectual property beyond licensing to customers - creating a new software product involves creating an innovative and valuable new piece of ip. you should consider protecting your ip to ensure no rival businesses can use and profit from your creations. for more information, read protect intellectual property
-
adhering to online business regulations - for example, by following legal requirements for the information you must provide to consumers (ie private individuals) when selling online. for more information, read online business regulations
-
being aware of consumer rights - consumers have various rights enshrined in law, such as the right to cancel purchases within a certain period of time. different rules often apply to the cancellation of purchases of digital products. for more information, read consumer rights when purchasing digital content and doing business with consumers
if you have any questions about using or supplying saas, do not hesitate to ask a lawyer.
