Review this SaaS contract summary:
- 3-year term with 90-day auto-renewal notice
- Unlimited liability for data breaches
- Vendor can change pricing with 30-day notice
- Data can be used for "service improvement"
- Termination only for material breach

## Contract Review: SaaS Vendor Agreement

### Risk Rating: HIGH

---

### Executive Summary

This contract heavily favors the vendor with limited termination rights, uncapped liability exposure for you, and one-sided price increase provisions. Recommend significant negotiation before signing.

---

### Red Flags (Must Address)

| Clause | Issue | Risk | Recommendation |
|--------|-------|------|----------------|
| **Auto-Renewal** | 90-day notice for 3-year contract | Lock-in risk | Reduce to 30-60 days |
| **Pricing** | Vendor can change with 30-day notice | Budget risk | Cap increases at 5%/year or CPI |
| **Termination** | Material breach only | Lock-in risk | Add termination for convenience with notice |
| **Liability** | Unlimited for data breaches | Financial risk | Cap at 24 months of fees |

---

### Yellow Flags (Should Negotiate)

| Clause | Issue | Recommendation |
|--------|-------|----------------|
| **Data Usage** | "Service improvement" is vague | Define scope, exclude training AI |
| **Term Length** | 3 years is long | Request 1-year with renewal option |
| **SLA** | None mentioned | Require 99.9% uptime with credits |

---

### Green Flags (Acceptable)

- Standard confidentiality provisions
- Reasonable IP license terms
- Clear support response times

---

### Recommended Redlines

**Priority 1 (Deal Breakers):**

**Priority 2 (Strongly Preferred):**

---

### Questions for Legal Counsel

1. Is unlimited data breach liability acceptable given our cyber insurance coverage?
2. What's our exposure if we need to exit before term completion?
3. Are there regulatory implications for the data usage clause?

---

### Negotiation Leverage

**Your Position:** First-year customer, significant deal size

**Their Likely Flex:**
- Auto-renewal notice period
- Liability caps
- Pricing caps

**Their Likely Firm:**
- Base term length
- Core data usage rights

Quick review - key concerns only:
- Unlimited indemnification for IP claims
- 2x annual fees liability cap
- Net 45 payment terms
- 60-day termination notice
- Standard DPA included

## Quick Risk Assessment

### Overall: MEDIUM RISK

| Clause | Rating | Note |
|--------|--------|------|
| Indemnification | HIGH | Unlimited IP indemnity is risky |
| Liability Cap | GREEN | 2x is standard |
| Payment | GREEN | Net 45 is favorable |
| Termination | GREEN | 60 days is reasonable |
| Data Protection | GREEN | Standard DPA |

### Priority Action

**Address Indemnification:**
- Request mutual cap on IP indemnity
- Propose "lesser of [amount] or 12 months fees"
- Alternative: carve out for willful infringement only

**Everything Else:** Acceptable, proceed if IP indemnity resolved.