the fine print of cloud contracts mary shacklett president, transworld data

The Fine Print of Cloud Contracts

Mary ShacklettPresident, Transworld Data

A 360 Degree View of Contracts

• What’s in it

• What’s not in it

• What you need to know includes some working legal knowledge of contracts

Elements of Contracts

• Offer

• Acceptance

• Consideration

• Clear terms• Parties• Price• Item• Time

Important First Steps

• Read the contract

• Remember the legal concept of adhesion in contracts

• Consult an attorney

What Are Common Fine-Print Issues?

• Termination, opt-out clauses, and automatic renewals

• Penalties• Intellectual property and security• Product and performance warranties• Information sharing with partners • Disagreements, arbitration, and venue

What if You Need to Modify The Contract?

• The concept of the “boilerplate” contract and the vendor legal department

• Use of appendices, addenda

• Cover letter to indicate that the enterprise’s document (and letter) constitutes a total integration of the contract between you and your vendor

Common Modification Topics

• Pilot and acceptance tests

• SLAs and SLA review process

• Work coordination

• Security and confidentiality

• Anything else missing from contract that needs to be addressed

What’s Not in the Contract

• The “people” side of doing business

• Service-level agreements the way you expect them

• Input into the product or service

• Audit and compliance measures

• Unforeseen events

The People Side of Doing Business

• Account/project manager designation for implementation and post-implementation

• Chain of communications and “single point” person on your side

• Reporting and monitoring• Employee hiring practices• Disaster recovery and business

continuation testing

Service-Level Agreements The Way You Expect Them

• SLAs have to meet the needs of the business

• You should have your own expectations before you talk to any vendor about them

• Common areas are uptime, performance, problem response, problem resolution

• SLAs work best when they are clearly documented in an appendix to the contract

• Include periodic reviews and leave room for SLA modifications

Input Into the Product or Service

• Understand vendor’s R&D commitment before you sign anything – and frequency of new product releases

• User/executive committee participation

• If you are an early adopter, opportunity to pilot test and give input

• Explore commercial opportunities with vendors for apps you develop internally

Audit & Compliance Measures

• SAS70 audits and financial viability

• Comprehensive IT audits

• Ability to satisfy your regulatory and policy/business rule needs

• Does vendor have its own datacenter?

Unforeseen Events

• Disasters (vendor liability limits)

• Security and data breaches

• Vendor change of management control (acquisition, merger)

• Need to de-convert (set up performance expectations in contract)

Attorney Review: Why Do It?

• You won’t know everything

• Attorney review puts “teeth” into your negotiation

• Preventive step

Possible Problems: Misplacing the Contract

• Company wanted to review vendor contract and couldn’t find contract• Keep a file and assign someone to maintain it• Have your attorney keep a copy• Have a copy in an appendix of your DR plan• Benefits are you avoid losing leverage with

your vendor, you stay on the good side of your auditors, and you have a readily available written record of your agreement

Possible Problems: No Clear Termination Clause

• Company wanted to terminate vendor and couldn’t find a termination clause in the contract• Make sure there is a termination clause

(typically 30-90 days)• If you want an “opt-out” provision, include it• Penalties for terminating early, etc., should be

clearly understood

Possible Problems: Account Rep Changes

• Company had smooth launch of new cloud service with great account rep / project manager; the person was reassigned, and the new person wasn’t effective• Negotiate for the right to interview/approve key

vendor personnel before they are assigned• Incorporate the performance of this person in

your SLAs and vendor evaluations

Possible Problems: Vendor Goes Around IT

• Vendor and end-users started conferring and left IT out of the loop• Establish clear lines of communications upfront• Team with end-users• IT shouldn’t be a “glass house”

Possible Problems: SLA Modifications

• Company wanted to modify SLAs because of changing business conditions, and the vendor declined• Establish regular quarterly meetings with

vendors and discuss your business needs• Make SLAs a “living” portion of your contract –

within reason

Possible Problems: De-Conversion

• Company wanted to terminate vendor’s services and move to another vendor; and vendor became hostile, uncooperative• Include SLAs and penalties for de-conversion• Make sure you have an excellent

understanding of this with your vendor• Overcome the human tendency to not want

to discuss

Possible Problems: Vendor Stops Performing

• Company contracted for service that wasn’t delivered but kept paying• Stay on top of your contracts• If there is stoppage of performance, withhold

payment and immediately contact vendor• If service can’t be resumed in reasonable time,

terminate contract for breach• Have an attorney involved

Possible Problems: Employee Hiring

• Vendor hired away one of company’s key employees• Reach an understanding and document the

ground rules upfront

IT Realities• Unless you are a large shop, contract

management and negotiation is no one’s top-line responsibility

• With the movement to more cloud services and packaged vendor software, contract and vendor management are becoming mission-critical skills in IT

• The contract is the written agreement that establishes the playing field for IT and vendor interaction

• IT managers, directors, and CIOs need basic legal and negotiation skills

What You Need to Know• What constitutes a contract and what

constitutes a breach• What the vendor warranties and/or

quality-of-service commitments are• What your communications channels

with the vendor are• How to modify and terminate a contract• What your contract dispute avenues are• When to get an attorney involved

What if You’re an SMB?

• Don’t be afraid to modify a contract, present SLAs, or use an attorney

• Participate in vendor product planning

• Know the ins and outs of the contract

• Know where the contract is!

Concluding Remarks• In today’s environment, great skill in

managing vendor relationships is essential for IT

• The contract is the foundation of the vendor relationship

• Having a basic legal understanding of contracts is essential

• Identify what’s not in the contract that needs to be addressed

• Always read the fine print