SaaS Contract Red Flags Checklist

Notice Window for Cancellation

• What is the required notice period to cancel or not renew?
• Is it 30 days, 60 days, or 90+ days?
• Does your renewal reminder system surface this date with enough lead time?
• Is the notice requirement in writing (email sufficient, or certified mail)?

Target: 30-day notice. Flag anything over 60 days.

Automatic Price Escalation

• Does the contract allow the vendor to raise price at renewal without negotiation?
• What is the cap? (Watch for "up to X%", "CPI-linked", or no cap at all)
• Have you modelled the escalation into your multi-year budget?
• Did you push to fix pricing for the contract term, or cap increases at 3%?

Target: Fixed pricing or ≤3% cap. Flag any uncapped escalation clause.

Evergreen Renewal Into a New Multi-Year Term

Look for: "successive terms of the same length" — this locks you into multi-year on auto-renew.

• Does the auto-renewal renew for 1 year, or does it reset to the original term length?
• If original term was 3 years, does a missed notice lock you in for 3 more years?
• Is the renewal term explicitly stated in the auto-renewal clause?

Target: Month-to-month or 1-year auto-renewal only.

Seat Ratchet / Minimum Commitment

Look for: "seat count cannot be reduced below prior term's licensed count."

• Can you reduce the number of seats at renewal, or only add?
• Is there a minimum seat floor that persists across all renewal terms?
• What happens if actual usage drops — are you still billed for peak seat count?

Target: Right to reduce seats to actual active users at each renewal.

Termination for Convenience

• Can you exit the contract for any reason (convenience), or only for vendor breach?
• Is there an early termination fee, and how is it calculated?
• Does the contract include a wind-down period with reduced payment?
• For multi-year deals: is there a convenience exit after Year 1?

Target: T4C clause with 30–90 days notice and no penalty. Flag any contract with no exit path.

Data Deletion on Exit

• How long after cancellation can you export your data?
• What formats are available for export (CSV, JSON, API)?
• When does the vendor permanently delete your data from their systems?
• Is there a confirmed deletion certificate, or is this just implied?
• For regulated industries: does the vendor's data retention comply with your obligations?

Target: 30-day export window, confirmed deletion within 90 days, export in a portable format.

Unilateral Terms Changes Mid-Term

• Can the vendor change pricing or service terms during your contract term with just 30 days notice?
• Does continued use constitute acceptance of new terms?
• If the vendor makes material changes, do you have an explicit right to exit without penalty?

Target: Pricing and material terms locked for the duration of each contract term.

Audit Rights and Usage Definitions

• What exactly counts as a "user" or "seat" under this agreement?
• Does the definition include API connections, service accounts, or integration users?
• Can the vendor conduct a retroactive usage audit and bill for overages?
• Is the audit right limited in frequency (e.g., once per year)?

Target: Clear user definition in writing, audit frequency capped, no retroactive billing surprises.

Subprocessor Changes Without Notice

• Does the Data Processing Agreement list current subprocessors?
• Can the vendor add or replace subprocessors without notifying you?
• If a new subprocessor creates compliance issues, do you have an exit right?
• Is there a mechanism to object to specific subprocessors (required under GDPR)?

Target: Advance notice of material subprocessor changes with an exit right if non-compliant.