Sample MSA / SaaS Contract Analysis

A vendor-favorable SaaS MSA where the Customer carries multiple effectively uncapped liability buckets while the Vendor caps its own exposure at 12 months of fees, with a broad Customer indemnity, no termination for convenience, and acceleration of all remaining fees on early termination.

Reviewed by the BizLeaseCheck Editorial Team · Last updated May 26, 2026 · Informational analysis, not legal advice.

90Danger score

Critical risk indicators — Vendor / SaaS MSA

This is the same report shape every BizLeaseCheck analysis produces: a 0–100 danger score, prioritized red flags with verbatim evidence quotes, the key dates buried in the document, and a tailored negotiation email draft.

8 red flags

10 key dates

Evidence-backed

Email draft included

Want the deep explainer behind a vendor / saas msa? Read the vendor / saas msa guide cluster.

See vendor / saas msa guides

Executive Summary

Document: Master service agreementReviewed for: the Customer

This MSA is materially vendor-favorable from the Customer perspective. The biggest risks are: (1) a one-sided liability structure that effectively leaves multiple Customer obligations uncapped while capping Vendor at roughly 12 months of fees; (2) a very broad Customer indemnity contrasted with a narrow Vendor IP indemnity; (3) expansive Vendor ownership and license rights over deliverables, usage data, aggregated data, and Customer feedback, plus a broad right to use Customer Data to improve and develop products; (4) weak security commitments with no fixed breach-notice deadline, no audit right, no certification commitment, and unrestricted subprocessor use; (5) weak SLA remedies with low credits, short claim window, and no chronic-failure termination right; (6) auto-renewal and renewal price increase mechanics with short notice windows; and (7) aggressive payment/suspension/acceleration terms. Based on the stated pricing, the committed first-year value is at least $72,000 ($60,000 subscription plus $12,000 onboarding), while Customer could also face uncapped exposure for indemnity, confidentiality breach, misuse, violation of law, and accelerated remaining-term fees if terminated for alleged breach. Arbitration in New York with fee shifting and class waiver further reduces Customer leverage in a dispute.

90Danger score

Commercial Terms Overview

Annual Contract Value

$72,000

Liability Cap

Fees paid or payable by Customer in the 12 months preceding the event; effectively about $60,000 annual subscription fees, though wording may include payable amounts. Multiple Customer obligations are excluded from the cap.

Auto-renews?

Yes

Notice Period

15 days

Liability Cap Exclusions

Customer payment obligationsCustomer indemnification obligationsCustomer breach of confidentialityCustomer violation of lawCustomer misuse of the servicesEither party's gross negligence or willful misconduct

Indemnification

Customer broadly indemnifies Vendor for claims arising from Customer Data, use of services, Customer products/services, breach, law violations, and third-party rights claims. Vendor only indemnifies for certain third-party claims that the unmodified service infringes U.S. patent, copyright, or trademark, subject to broad exclusions and Vendor control.

IP ownership

Vendor owns platform, documentation, APIs, configurations, templates, dashboards, connectors, usage data, analytics, aggregated data, deliverables, and improvements. Customer owns Customer Data but grants Vendor a worldwide sublicensable royalty-free license to use it to provide, improve, benchmark, and develop products. Customer assigns all feedback to Vendor.

Data/security

Commercially reasonable safeguards only; no fixed breach-notice deadline, no audit right, no penetration-test delivery obligation, no specific security framework certification, and Vendor may use subprocessors without prior approval.

SLA uptime

99.5% monthly uptime target with exclusions; 5% monthly fee credit below target, capped at 10% of monthly fees, sole and exclusive remedy, no chronic-failure termination right.

Termination for convenience

Not available during the Initial Term or any Renewal Term.

Price escalation

Vendor may increase fees for any Renewal Term with 20 days' notice before renewal; overages billed at then-current list price retroactive to the beginning of the month.

Term length

12-month initial term; successive one-year renewal terms

Governing law

New York

Critical Dates & Deadlines

Don't miss these dates. Add them to your calendar immediately.

Effective Date

2026-06-01|Agreement entered into as of June 1, 2026.

Initial Term Start

2026-06-01|Initial subscription term begins.

Initial Term End

2027-05-31|Initial subscription term ends.

Renewal Opt-Out Deadline

Estimate

2027-05-16|Customer must give written notice of non-renewal at least 15 days before the end of the then-current term.

Renewal Price Increase Notice Deadline

Estimate

2027-05-11|Vendor may increase renewal fees by giving notice at least 20 days before renewal.

Payment Deadline

Date not specified|Invoices are due net 15.

Suspension Notice Deadline

Date not specified|Vendor may suspend access upon 5 days' notice for any overdue amount.

Breach Cure Period

Date not specified|Material breach must remain uncured for 30 days after written notice before termination for cause.

SLA Credit Claim Deadline

Date not specified|Service credits must be requested within 10 days after the month in which the outage occurred.

Post-Termination Data Export Deadline

Date not specified|For 30 days after expiration or termination, Customer may request export of Customer Data if all fees are paid.

Detected Red Flags

Download Redlines (DOCX) View Source PDF

CriticalIssue Score: 97/100

Customer has multiple uncapped liability buckets while Vendor remains capped

Section 9

Why it's dangerous

This carve-out structure is highly asymmetric. Vendor's liability appears capped at the prior 12 months' fees, while Customer exposure for payment, indemnity, confidentiality breach, misuse, and law violations is uncapped. If a third-party claim, regulatory issue, or confidentiality incident arises, Customer could face liability far exceeding the contract value. Based on stated pricing, Vendor's cap is roughly tied to $60,000 in annual subscription fees, while Customer's excluded obligations have no stated ceiling.

“Except for Customer's payment obligations, Customer's indemnification obligations, Customer's breach of confidentiality, Customer's violation of law, Customer's misuse of the services, and either party's gross negligence or willful misconduct”(View in PDF)

Negotiation Tactic

Anchor on commercial proportionality: the deal is about a $72,000 first-year commitment, so uncapped Customer exposure is not commercially reasonable. Ask Vendor to explain why Customer should bear uncapped risk for ordinary use of the service.

Suggested Redline

Replace Section 9 with: 'Except for either party's fraud, willful misconduct, or amounts owed under a party's express indemnification obligations for third-party claims, each party's aggregate liability arising out of or relating to this Agreement will not exceed two (2) times the fees paid or payable under the applicable Order Form in the twelve (12) months preceding the event giving rise to the claim. Liability for confidentiality breaches, security incidents, and indemnification obligations will be subject to a separate cap of three (3) times such fees, and no carve-out shall apply solely to Customer.'

CriticalIssue Score: 96/100

Customer indemnity is overly broad and covers ordinary use of the service

Section 8

Why it's dangerous

This indemnity goes far beyond customary data/IP risk and sweeps in claims arising from Customer's use of the services, products/services, and any breach or legal violation. Combined with the liability-cap carve-out, this can create uncapped defense and settlement exposure for a wide range of third-party claims, even where Vendor's platform contributed to the issue.

“Customer will defend, indemnify, and hold harmless Vendor and its affiliates from all claims, damages, losses, liabilities, costs, and expenses arising out of Customer Data, Customer's use of the services, Customer's products or services, Customer's breach of this Agreement, Customer's violation of law”(View in PDF)

Negotiation Tactic

Position this as a scope correction: Customer should not insure Vendor against claims tied to Vendor's own platform or ordinary contracted use.

Suggested Redline

Revise to: 'Customer will defend Vendor from third-party claims solely to the extent arising from allegations that Customer Data, as provided by Customer and used in accordance with this Agreement, infringes such third party's intellectual property rights, or from Customer's use of the Services in violation of applicable law or this Agreement. Customer will have no indemnity obligation to the extent a claim arises from the Services, Vendor materials, or Vendor's acts or omissions.'

CriticalIssue Score: 95/100

No termination for convenience and accelerated fees if Customer exits early or is terminated for breach

Section 3

Why it's dangerous

This creates strong lock-in. If the service underperforms, business needs change, or Customer wants to consolidate vendors, Customer still owes the remaining committed fees. Based on the stated pricing, that could mean acceleration of a substantial portion of the $60,000 annual subscription, in addition to any onboarding already paid.

“Customer may not terminate for convenience during the Initial Term or any Renewal Term. If Customer terminates early or Vendor terminates for Customer breach, all unpaid fees for the remainder of the then-current term become immediately due.”(View in PDF)

Negotiation Tactic

Use budget flexibility and business-change risk. Multi-year or auto-renewing SaaS should not function like a finance lease.

Suggested Redline

Revise to: 'Customer may terminate an Order Form for convenience upon sixty (60) days' prior written notice. In such event, Customer will pay fees accrued through the effective termination date and any non-cancellable third-party costs expressly approved in writing by Customer, but no accelerated future subscription fees will be due.'

CriticalIssue Score: 94/100

Vendor claims ownership of deliverables and improvements created under the engagement

Section 5

Why it's dangerous

This is unusually broad because it gives Vendor ownership not just of the platform but also configurations, dashboards, connectors, deliverables, and improvements. If onboarding or implementation produces customer-specific work product, Customer may not own or control it despite paying for onboarding services. That can increase switching costs and reduce reuse rights.

“Vendor owns all right, title, and interest in the platform, documentation, APIs, configurations, templates, dashboards, connectors, usage data, analytics, aggregated data, deliverables, and all improvements.”(View in PDF)

Negotiation Tactic

Point to the paid onboarding fee and implementation dependency. Customer should not pay $12,000 for onboarding and then lose rights to the resulting artifacts.

Suggested Redline

Revise to: 'Vendor retains ownership of the pre-existing Services and Vendor technology. Customer owns all Customer Data and all customer-specific deliverables, reports, configurations, dashboards, and implementation artifacts created specifically for Customer under this Agreement. To the extent any such items incorporate Vendor technology, Vendor grants Customer a perpetual, irrevocable, worldwide, royalty-free license to use, copy, modify, and permit third parties to use such items for Customer's internal business purposes and transition to replacement services.'

HighIssue Score: 89/100

Vendor receives broad rights to use Customer Data to improve, benchmark, and develop products

Section 5

Why it's dangerous

This license goes beyond service delivery and support. It allows Vendor to use Customer Data for product improvement, benchmarking, and product development, with sublicensing rights. Without tighter limits, Customer data may be used to train features, generate benchmarks, or support other commercial offerings in ways Customer did not intend.

“Customer grants Vendor a worldwide, sublicensable, royalty-free license to use Customer Data to provide, improve, benchmark, and develop Vendor's products.”(View in PDF)

Negotiation Tactic

Focus on confidentiality, competitive sensitivity, and data governance. Retail operational data can be commercially sensitive even if de-identified poorly.

Suggested Redline

Replace with: 'Customer grants Vendor a limited, non-exclusive license to process Customer Data solely to provide, maintain, secure, support, and improve the Services for Customer and to comply with applicable law. Vendor may use only de-identified and aggregated data, which does not identify Customer or any individual and cannot reasonably be re-identified, for benchmarking and product improvement. Vendor will not use Customer Data to train generalized models or develop products for other customers without Customer's prior written consent.'

HighIssue Score: 88/100

Vendor IP indemnity is narrow and excludes many realistic claim scenarios

Section 8

Why it's dangerous

Vendor's indemnity only covers the unmodified service and only certain U.S. IP rights. It excludes claims involving Customer Data, combinations with non-Vendor products, modifications, beta features, open-source components, or use outside documentation. In a typical SaaS deployment with integrations and APIs, these exclusions may swallow much of the protection.

“Vendor will defend Customer against a third-party claim alleging that the unmodified service infringes a U.S. patent, copyright, or trademark”(View in PDF)

Negotiation Tactic

Use the product architecture against the clause: if the service is sold with APIs, connectors, and onboarding, the indemnity must cover intended integrated use.

Suggested Redline

Revise to: 'Vendor will defend, indemnify, and hold harmless Customer from third-party claims alleging that the Services, documentation, APIs, connectors, or Vendor-provided deliverables or configurations infringe, misappropriate, or otherwise violate any intellectual property right, including claims arising from Customer's authorized use of standard integrations, combinations contemplated by the documentation, or Vendor's implementation services.'

HighIssue Score: 88/100

Vendor has broad immediate termination rights based on subjective standards

Section 3

Why it's dangerous

This gives Vendor a unilateral right to cut off service immediately based on subjective beliefs about misuse or harm. For a business-critical platform, abrupt termination can disrupt operations and data access. The clause lacks objective standards, notice, and a cure opportunity except perhaps in extreme cases.

“Vendor may terminate immediately for Customer misuse, security concerns, or any conduct Vendor reasonably believes may harm the platform or other customers.”(View in PDF)

Negotiation Tactic

Frame this as continuity protection. Vendor can protect the platform without having an unchecked termination right.

Suggested Redline

Replace with: 'Vendor may suspend affected access only to the minimum extent reasonably necessary to address a verified security threat, unlawful activity, or material misuse that poses an imminent risk to the Services or other customers. Vendor will provide prompt notice, reasonably cooperate with Customer to cure the issue, and restore access as soon as the issue is resolved. Immediate termination will be permitted only for repeated material violations not cured within a reasonable period, except where prohibited by law.'

HighIssue Score: 87/100

Security obligations are vague and do not commit Vendor to objective standards

Section 6

Why it's dangerous

Commercially reasonable safeguards is a soft standard that gives Customer little objective enforcement leverage. There is no commitment to a named framework, control baseline, encryption standard, or security exhibit with measurable obligations. If a security incident occurs, Customer may struggle to prove breach of contract.

“Vendor will maintain commercially reasonable administrative, physical, and technical safeguards.”(View in PDF)

Negotiation Tactic

Ask for the controls Vendor already represents in security questionnaires and make those contractual.

Suggested Redline

Add: 'Vendor will maintain a comprehensive written information security program that includes administrative, technical, and physical safeguards aligned with industry standards, including encryption of Customer Data in transit and at rest, least-privilege access controls, MFA for privileged access, vulnerability management, logging and monitoring, secure development practices, and annual independent third-party assessments such as SOC 2 Type II or ISO 27001 certification.'

Negotiation Email Draft

Subject: Proposed revisions to MSA and Order Form #MRG-2026-01 Hi Acme team, Thank you for sending over the MSA package for InsightOps. We reviewed the agreement and are aligned on the commercial intent, but there are several provisions we need to rebalance before we can finalize. Our main comments are below: 1. Liability and indemnity - The current liability framework is materially one-sided. Vendor liability is capped, while several Customer obligations are effectively uncapped. - The Customer indemnity is broader than we can accept, particularly where it extends to ordinary use of the service and our products/services generally. - We also need a more practical Vendor IP indemnity that covers the contracted service as implemented, including standard integrations and Vendor-provided configurations. 2. Data rights and IP - We need to narrow Vendor's rights in Customer Data so they are limited to providing and supporting the service, with any benchmarking/product improvement based only on de-identified aggregated data. - Customer-specific deliverables, configurations, dashboards, and implementation artifacts should either belong to Customer or be licensed to us on a perpetual basis for continued use and transition. - The feedback assignment should be converted to a limited license and should not capture our confidential information or business methods. 3. Security and privacy - We need stronger security commitments, including a fixed breach-notice deadline, subprocessor notice/objection mechanics, and access to current independent security reports. - The current DPA language expressly omits several standard protections, which we need to address in the contract set. 4. SLA and service remedies - The SLA credits are too low relative to the operational impact of downtime and should not be the exclusive remedy for chronic or severe failures. - We need a termination right if uptime misses recur over a defined measurement period. 5. Renewal, pricing, and payment - The 15-day non-renewal window is too short, and the 20-day price increase notice creates a timing issue. Any renewal increase needs to be capped and disclosed before the non-renewal deadline. - We also need to revise the suspension and late-payment language so service cannot be suspended for disputed amounts or on only 5 days' notice. - The usage true-up should be based on a fixed contractual rate, not then-current list price applied retroactively. 6. Termination and exit - We need to remove fee acceleration for early termination and add a practical off-ramp if the service is not meeting requirements. - Post-termination data access should be extended, not conditioned on payment of disputed amounts, and accompanied by reasonable transition assistance. 7. Dispute process - We would prefer a more balanced dispute mechanism than mandatory New York arbitration with prevailing-party fee shifting. If helpful, we can turn comments quickly on a redline. We are aiming to close this promptly, but we will need the above points addressed so the agreement reflects a workable long-term SaaS relationship. Thanks, Meadow Retail Group LLC Counterparty AI Analysis

More sample reports

Every BizLeaseCheck document type produces a report like this. Browse other examples:

Commercial leaseCommercial LeaseA retail triple-net (NNN) lease with an uncapped operating-expense pass-through, a landlord relocation right, and an unlimited personal guaranty.View sample Residential leaseResidential LeaseAn apartment lease with a three-month security deposit, compounding late fees, an auto-renewal trap, a waiver of the warranty of habitability, and a self-help lockout clause.View sample Personal guarantyPersonal GuarantyA continuing, unlimited personal guaranty with joint-and-several liability, a waiver of defenses, and no burn-off — the clauses that put the signer’s personal assets on the line.View sample Business funding / MCABusiness Funding / MCAA merchant cash advance with a high factor rate (and the estimated true APR it hides), a confession of judgment, fixed daily ACH debits, and a hard-to-use reconciliation provision.View sample SBA loanSBA Loan PackageAn SBA 7(a) loan with an uncapped unconditional personal guaranty, joint-and-several liability for every 20%+ owner, available home-equity collateral, and lender authority to pursue guarantors before liquidating business collateral.View sample Franchise FDDFranchise Disclosure (FDD)A franchise disclosure document with a heavy fee stack (royalty + brand fund + tech + supplier rebates), broad no-cure termination triggers, a Gross Sales definition that includes amounts you may never collect from delivery platforms, and reserved encroachment rights (online, delivery, kiosk, wholesale) inside your market.View sample CRE purchaseCRE Purchase AgreementA commercial real-estate purchase agreement where $125,000 of earnest money goes hard immediately on deposit, the inspection period is only 10 days, the sale is broadly AS-IS with a disclaimer of all reps, and Buyer is asked to release Seller from all environmental, latent-defect, and unknown claims.View sample Business purchaseBusiness / Asset PurchaseAn asset purchase agreement that quietly assumes nearly all pre-closing liabilities (including unknown ones) to the Buyer, makes the contractual indemnity the sole and exclusive remedy in a way that purports to bar fraud claims, and provides no escrow, holdback, or indemnity security from the Seller.View sample Equipment financeEquipment Finance AgreementA non-cancelable equipment finance agreement structured economically like a financed purchase but drafted with lease-style remedies: explicit hell-or-high-water payment even if equipment never works, acceleration of all remaining payments plus residual on default, and evergreen 12-month auto-renewals at full payment if notice is missed.View sample Employment / NDAExecutive Employment AgreementAn executive employment agreement with a 24-month nationwide non-compete covering any connection with any competing business, a confidentiality clause that purports to bar disclosure to government agencies, and an IP-assignment provision that captures personal-time inventions with no carve-out.View sample LLC / operating agreementLLC Operating AgreementAn LLC operating agreement that concentrates control in the Manager — mandatory capital calls with only 10 business days to fund, 2x dilution plus voting suspension plus a 15% priority loan as the default penalty, and a departure valuation that uses book value with stacked 25% minority and 25% marketability discounts.View sample Construction contractConstruction SubcontractA subcontract that shifts major payment and schedule risk downstream: an explicit pay-if-paid clause, a Contractor disclaimer of any duty to pay amounts the Owner does not pay (for any reason), an unconditional lien waiver through the application date that includes unpaid amounts and retainage, and broad one-sided indemnity.View sample Commercial insuranceCommercial Insurance PolicyA Business Owner's Policy issued to a software consulting and data-hosting business where the core professional and technology services appear excluded, a separate endorsement removes professional and tech claims, flood is excluded even though the location is in a FEMA Special Flood Hazard Area, and the cyber sublimit is only $25,000.View sample Assumed leaseAssumed Lease (DD)A commercial retail lease being assigned to an incoming restaurant tenant: under 12 months remaining on the term, no transferable renewal option, an existing monetary default that the assignee would inherit, uncapped NNN/CAM exposure, and a landlord recapture right that can terminate the lease instead of consenting to the assignment.View sample