Software Licensing & Master Service Agreements : Chicago Software Licensing Lawyer & Attorney : Sam Conforti Law Firm : Master Service Agreements, Negotiations, Outsourcing : Cook County, Illinois

Bahan Sadegh, CEO and co-founder of NETtime Solutions and a veteran of the on-demand software industry, has written an article with the SMB Customer in mind.  Sadegh has created a list of questions for the SMB to consider before choosing its SaaS Vendor entitled 10 Questions To Ask A Potential SaaS Vendor.  His list is very informative and it would be wise to keep handy when considering which SaaS Vendor to select.  I cannot attest to the fact that this is an inclusive list, but I will tell you that his discussion of the points he has identified gives the reader enough information to perform their due diligence and ask more questions and there really are more than 10 points to know if one includes all the “sub-points” Sadegh includes.  I will try to provide a brief synopsis of his 10 Questions below:

1.     Billing should be pay-as-you-go: We all know there is a business cycle and your invoice should reflect this cycle.  Also, there should never be any maintenance fee on your invoice.

2.     Security:  Sadegh has a very good list of questions to ask in this very important area.  Instead of trying to paraphrase his words, I think it best to directly quote him on this matter:

“Ask your potential SaaS vendor:

-       Does the data center that is housing the servers have physical security 24/7?

-       Is the perimeter of the data center secured (do guards walk the perimeter at least once per 24 hours)?

-       Who has permission to the access these servers (only internal employees or do contractors also have access)?

-       Is there a log that captures who came in and when they left? If so then how often are those logs audited?

-       Does the application use industry standard 128-bit encryption?

-       If multiple customers are housed on the same server then are they logically/physically separated to ensure your data is not viewed by unauthorized eyes?

-       Has the staff of the SaaS vendor who has access to your data gone through a criminal background check? It’s important to know whether or not convicted felons have access to your sensitive personal data.

-       Does the vendor have a formal BCP (Business Continuity Plan)? Is the vendor willing to share it with you and does it satisfy your concerns?”

3.     Solution must be web based:  There should be no requirement to install an application on any computer.     Also any SaaS application should be able to run on any platform and any browser.  In the event of a computer crash, you must have access to your application.

4.     An experienced vendor:  Make sure the vendor has experience in hosting.  A vendor experienced in hosting has already addressed such issues as scalability and security and is not merely repackaging their application as SaaS. (NOTE:  See point 8 below regarding MSP’s).

5.     Upgrades should be automatic:  You want to be on the latest version and have the most current functionality.  There should be no need to retrain your users.  The upgrades should be seamless.

6.     Integration:  You should have the ability to transfer between the web based applications and any on-premise applications.

7.     Data must be backed up regularly:  Nightly onsite back-ups and weekly offsite back-ups should be the minimum.  Does the vendor test how to restore their database?

8.     Who is hosting the solution:  Is this an in-house hosting arrangement or has the SaaS vendor contracted out with a Managed Service Provider (“MSP”)?  Get a SAS 70 report and verify that in the data center every system has at least one independent backup to ensure availability in the event of system failure; this is known as N+1 configuration.

9.     Scalabilty:  Can the SaaS vendor grow as your company grows?  Ask about their largest customer and ask them about their plans for growth.

10.  Is the SaaS system monitored:  An easily overlooked question.  Do they have monitoring software and do they test their firewalls?

Sadegh concludes his checklist by suggesting that the SaaS Customer perform a bi-annual review of their service with the above checklist in mind.

• Email This
• Print
• Comments
• Trackbacks
• Share Link

The SaaS story remains the same, but now the approach must shift.  SaaS is cheaper to implement and the enterprise can avoid the upfront capital expenditures for hardware.  Since it is a service, the pricing is based on per seat use and so there is no initial cash outlay for the software suite.  You pay for what you use.  In this current economic crisis enterprises are ripe for a way to lower costs and so the approach the SaaS vendor should take needs to adjust to the times and the SaaS vendor must highlight the advantages in their marketing approach.  Demian Entrekin, founder and Chief Technology Officer of Innotas, has written an Op Ed piece for SandHill entitled 10 Predictions for Software as a Service.  In it he cites a Gartner study that predicts the $6.4 billion in SaaS sales for 2008 will grow to over $14.8 billion by 2012.  In his article Entrekin discusses the 10 key trends that the SaaS vendor should consider in order to expand their market share by encouraging acceptance of their application.  I will provide a brief synopsis of these trends below, but I strongly suggest his article to my readers for the full story.

10 Key Trends to Growth and Acceptance:

1.     Sell the product features:  Abandon the traditional approach of selling the whole product and emphasis the individual product features that address the individual business processes desired.

2.     The application is seamless:  SaaS is not restricted to the enterprise and more directed toward user networks.  This should lead to easier adoption.

3.     Have an Elevator Speech:  Just when marketing yourself for a job, one needs to be able to sell oneself in the first few moments of the interview, Entrekin suggests the SaaS Vendor be able to demonstrate added value in the first minutes of meeting the prospect.

4.     A Deming Approach:  W. Edwards Deming would emphasis “the ability to support a reliable, scale-able service at a low cost.”

5.     Emphasis Tier 1 Support:  Stress the capability of your Tier 1 Support and suggest the enterprise eschew the need for high priced consultants to answer what become high priced questions.

6.     Product Alliances are key to growth:  Make alliances with other SaaS vendors as a means to growing market share.

7.     Video rules the day:  Use video for training and support.  It is cheaper and much more interesting than the traditional text tools.

8.     Consider a full service Hosting Provider:  This is the point of most interest to me.  Entrekin points out that the SaaS Vendor obtains the same leverage from an outsourcer that they provide to their own customers.  This has the added benefit of leading to aggregation of applications and partnerships.

9.     Grid Computing:  SaaS vendors should build their applications so they are “cloud compatible”.  It remains to be seen if grid computing becomes cost efficient, but the SaaS vendor should be ready to take advantage if such is the case.

10.  Your approach can shift from the technology hurdles to a marketing strategy: Entrekin believes the hurdles getting the application to market are slowly but surely being overcome and now is the time to shift to a viable marketing strategy.

• Email This
• Print
• Comments
• Trackbacks
• Share Link

Due to the differences between traditional “on premise” software licensing and the newer software as a service (“SaaS”) offering, there were bound to be required adjustments on how the software customer contracted for these services.  We owe a debt of gratitude to Gene Landy with the law firm of Ruberto, Israel & Weiner, P.C. in Boston, MA.   Landy has put together a list of 8 items in his article 8 Legal Tips for SaaS Vendors that should be considered by the SaaS Vendor while developing their SaaS offering.  Including some or all of these tips in your contract may be a smart decision.  Here is a brief summary of those legal tips:

1.     Look for restrictions in your own software licenses:  As you develop your offering, do your licenses prohibit use as a service bureau or are there restrictions on remote access or use as an Application Service Provider.  You wouldn’t want your SaaS application to be in violation of any of these restrictions.

2.     Has your contract model evolved:  Initially the SaaS offering came in a 2 part form - first a software license and then a hosting agreement.  Today the more common contract model is to view this as a subscription and not mention licensing in the agreement.

3.     The Tax Man:  Your customers may be interested to know that most states do not levy a tax on services as they do for the sale of a license.

4.     Trials:  The SaaS Vendor could include a trial period bundled into the subscription agreement.

5.     Required upgrades limit the SaaS vendor’s maintenance costs:  Require customers to upgrade and eliminate having to maintain prior releases.

6.     Security:  It is fine to tout your security measures, but never promise 100% guaranteed data protection.  This is IT after all and you are using the internet.

7.     Consider SAS 70 as a selling feature:  You can provide your customers with an extra level of comfort and some of your customers may actually require a SAS 70 certification.  This is a certification performed by an outside accounting firm which attests to the accuracy and security a vendor provides.  The certification states that the controls are adequate.

8.     Data Breach Notification:  In the event of a data breach most states require a notification be sent out to the subjects of such a breach.  Make sure that your customers do not attempt to place such obligation upon you.  The costs could be prohibitive.

This is by no means an inclusive list, but Landy has hit some key issues. I found it very informative and helpful.

• Email This
• Print
• Comments
• Trackbacks
• Share Link