SaaS Terms of Service (Australia)

The 12 Clauses That Actually Matter

1. The Grant of Access

Not a "sale". Not a "licence" (though close). SaaS is a right to access hosted software as a service. Draft it as non-exclusive, non-transferable, revocable, limited to authorised users, and only for the customer's internal business purposes. This one clause defeats 80% of misuse claims.

2. Authorised Users and Sharing

Define who a "user" is (usually a named individual). Prohibit account sharing. If your pricing is per-user, this clause is the enforcement mechanism.

3. Fees, Auto-Renewal and Price Increases

Under Australian Consumer Law, auto-renewal terms in standard-form contracts must be clearly disclosed and not "unfair". Best practice: renewal notice at least 30 days before, price increase capped or subject to CPI, right to cancel before renewal.

4. Data Ownership and Rights

Customer owns their data. You get a limited licence to use it to deliver the service, to develop the service (aggregated / anonymised only), and to comply with law. Draft this precisely — the "we can use your data to train our AI" clause is the #1 reason enterprise customers walk away in 2026.

5. Security and Data Breach

Commit to specific standards (ISO 27001, SOC 2 Type II if you have them; otherwise "commercially reasonable measures"). Notify the customer of a data breach within a defined period — 72 hours for enterprise, 30 days minimum under the Privacy Act mandatory notification scheme.

6. Service Levels (SLA)

The mistake: over-promise. 99.99% uptime sounds nice; a single AWS region outage will breach it. Realistic: 99.5% monthly uptime with defined exclusions (scheduled maintenance, force majeure, customer-caused downtime, third-party outages). Remedy is service credits, not damages.

7. Warranties and Disclaimers

Warrant that (a) you have the right to grant access, (b) the service will materially conform to documentation, (c) you will use commercially reasonable security. Disclaim all other warranties, including fitness for purpose, uninterrupted service, and third-party integrations.

8. Limitation of Liability

The three-part Australian standard: (a) cap total liability to fees paid in the preceding 12 months; (b) exclude consequential, indirect, special and lost-profits damages; (c) preserve ACL consumer guarantees where they cannot be excluded. See our indemnity clause guide.

9. Indemnities

You indemnify the customer for third-party IP infringement claims arising from the service. Customer indemnifies you for their use of the service in breach of the terms, and for their data. Cross-indemnities without a cap are a common founder mistake.

10. Term and Termination

Cover: initial term, renewal, termination for convenience (usually a notice period for monthly, none for annual), termination for cause (material breach unremedied), termination for insolvency, and — critically — what happens to customer data on termination (export window, deletion timeline).

11. Acceptable Use

Prohibit the obvious: illegal use, scraping, reverse engineering, competitive benchmarking, resale. Reserve the right to suspend accounts for acceptable-use breaches without waiting for termination.

12. Governing Law and Disputes

NSW law and NSW courts for a Sydney-based startup. Add a mandatory good-faith negotiation step before either party can commence proceedings. Consider arbitration for enterprise deals where you want confidentiality.

The Australian Consumer Law Traps

Even a well-drafted SaaS agreement can have entire clauses voided under the ACL's unfair contract terms regime. High-risk terms in a standard-form SaaS contract:

• Unilateral price increases with no cap and no exit right
• Broad termination-for-convenience rights that only sit with the provider
• Automatic renewal without clear disclosure
• Liability caps set at a nominal amount (e.g. $100)
• Indemnities that transfer risk far beyond the customer's actual control

See our unfair contract terms guide.

Consumer vs Enterprise Terms

Most maturing SaaS companies end up with two documents: (a) standard online terms for self-serve / SMB customers, and (b) a negotiated Master Services Agreement (MSA) for enterprise. The online terms are shorter and heavily consumer-guarantee compliant. The MSA is longer, negotiated, and typically excludes the ACL by structuring the transaction over $100k. See our MSA guide.

What It Costs

Frequently Asked Questions

Do Australian SaaS terms need to comply with the Australian Consumer Law?

Yes — if any of your customers are 'consumers' under the ACL. That includes any business buying a service worth under $100,000 (unless bought for resupply). Consumer guarantees cannot be excluded, and unfair contract terms in standard-form contracts are void.

Can I limit my liability in Australian SaaS terms?

Yes, but with limits. You can cap liability for breach and negligence, exclude consequential loss, and require the customer to bear their own data risk. You cannot exclude ACL consumer guarantees or liability for wilful misconduct.

Do I need Australian-hosted data to sell SaaS in Australia?

No — but you must disclose where data is stored under the Privacy Act 1988 (APP 8), and you remain accountable for the overseas recipient's handling. Enterprise customers, government and APRA-regulated entities may contractually require Australian hosting.

How often should SaaS terms be updated?

Review annually and after any material change to the service, pricing model, or Australian regulation. Notify existing customers of material changes with at least 30 days' notice, or the changes may not bind them.

Next Step

See our SaaS subscription contracts service page, our website T&Cs guide, or book a 15-minute call to plan your SaaS legal stack.