SaaS Contract Review: 9 Hidden Clauses That Cost You Money
1. Auto-Renewal at Higher Rates
The intro price is $99/month. Buried in Section 12: "Upon renewal, pricing reverts to standard list price of $299/month." Always check the renewal pricing clause separately from the initial fee schedule.
2. Price Escalation Without Caps
"Company reserves the right to increase fees upon 30 days notice." That means your $500/month bill could become $2,000/month next month. Negotiate: annual cap of 5% or CPI+3%, whichever is lower.
3. Who Owns Your Data?
Most SaaS contracts say "Customer retains ownership of Customer Data." Good. But watch for: "Company retains perpetual license to use anonymized Customer Data for any purpose." That means they can sell your usage patterns to competitors.
4. Uptime SLA Gaps
"99.9% uptime" sounds great — that is 8.7 hours of downtime per year. But (a) what is the measurement period? (b) Is planned maintenance excluded? (c) Is the remedy a credit or actual cash refund? A 10% credit on a $100/month contract is $10 — not meaningful.
5. Termination for Convenience — Only for Them
If they can cancel with 30 days notice but you are locked in for 12 months, it is one-sided. Push for mutual termination rights. If they refuse, at minimum: if they terminate, you get a pro-rated refund plus data export assistance.
6. Data Export on Exit
Without a data export clause, switching vendors means rebuilding everything from scratch. Specify: "Upon termination, Company shall export all Customer Data in a standard format (CSV, JSON, or SQL dump) within 14 days at no additional charge."
7. Hidden Fees
Implementation fee, training fee, premium support fee, overage fee, per-seat vs per-user confusion, annual commitment paid monthly (with penalty for early exit). Read the pricing page against what the contract actually says.
8. Security and Breach Obligations
Who is liable if they get hacked and your customer data leaks? If the contract says "Company not liable for security incidents," walk away. Minimum: (a) breach notification within 72 hours, (b) they cover costs of customer notification, (c) SOC 2 or ISO 27001 certification.
9. Liability Cap That Protects Only Them
Their liability is capped at 12 months of fees (~$1,200). Your liability is uncapped. A data breach affecting 50,000 of your users could cost millions. Make liability mutual and proportional to contract value — if their cap is $1,200, yours should be too.
Try PactLens free — upload a contract for AI risk analysis in 30 seconds.