# SaaS agreement drafter
> Source: https://legalcode.md/skills/legalcode-saas-agreement-drafter | [HTML version](https://legalcode.md/skills/legalcode-saas-agreement-drafter)

Draft and review SaaS/cloud service agreements from both vendor and customer perspectives — generate clause-by-clause guidance, flag market deviations, and produce auditable dual-perspective analysis with confidence-scored redlines.

Draft and review SaaS/cloud service agreements from both vendor and customer perspectives — generate clause-by-clause guidance, flag market deviations, and produce auditable dual-perspective analysis with confidence-scored redlines. Use when negotiating SaaS terms, drafting customer-facing service agreements, building vendor playbooks, managing SaaS compliance obligations (GDPR, CCPA, SOC 2, HIPAA BAA), assessing SaaS-specific risk allocation, reviewing subscription mechanics, SLA uptime commitments, data processing obligations, AI training restrictions, data portability, or exit assistance terms. Covers B2B, B2C, and B2B2C models. Jurisdiction-agnostic with localization markers for US, EU, UK, and AU. Produces structured guidance with Glass Box audit trail.

This skill drafts and reviews SaaS/cloud service agreements that allocate commercial, operational, and compliance risk between the vendor/platform and the customer. It provides clause-by-clause guidance from **both vendor and customer perspectives**, identifies deviations from market standards or organizational playbooks, and surfaces SaaS-specific issues: subscription mechanics, uptime metrics, data processing obligations, AI training restrictions, compliance certifications, data portability, and exit assistance. **Covers:** - SaaS Master Service Agreements (B2B enterprise, B2B SMB/scale, B2C consumer, B2B2C platform) - Subscription and consumption-based pricing with tiered seats, usage limits, true-ups, and overages - Service Level Agreements: uptime metrics, measurement methodology, credit structures, and exclusions - Data processing and security obligations: encryption standards, SOC 2/ISO 27001, penetration testing, breach notification timelines - Intellectual property: platform IP ownership, customer data rights, AI-generated output ownership, AI training restrictions - Acceptable Use Policy: SaaS-specific abuse vectors, enforcement rights, suspension mechanics - Data portability and exit assistance: export formats, migration timelines, post-termination retention, destruction certification - SaaS-specific liability caps: data loss, security breach, API failures, and service interruption carveouts - Auto-renewal and termination mechanics: notice periods, pricing change notifications, seat reduction rights - Change management: feature deprecation, API versioning, breaking changes, platform migrations - Compliance addenda: GDPR DPA, CCPA service ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*