1. EXECUTIVE SUMMARY This SaaS agreement provides access to a cloud platform for $2,000 per month. From the customer’s perspective, the main risks are automatic annual renewal, weak data protection terms, short suspension rights for unpaid invoices, and a low liability cap. Because the review objective is risk identification before signing with low risk tolerance, the customer should negotiate stronger renewal, privacy, security, service continuity, and liability protections before signing. 2. KEY TERMS SUMMARY - Parties: Not specified - Document type: SaaS agreement - Payment terms: $2,000 per month - Duration: Annual subscription with automatic renewal - Termination or cancellation: Cancellation required 60 days before renewal - Suspension rights: Provider may suspend access after 5 days of unpaid invoices - Liability: Limited to fees paid in the last 3 months - Data protection: Briefly mentioned, but incomplete - Incident response timeline: Not specified - Governing law: United States, specific state not specified 3. TOP CONTRACT RISKS Risk 1: Automatic renewal with long cancellation notice Risk level: High Why it matters: The customer may be locked into another annual term if the cancellation deadline is missed. Suggested action: Negotiate renewal reminders and a shorter cancellation window. Risk 2: Weak data protection terms Risk level: High Why it matters: The agreement does not include a clear breach notification timeline, security standards, subprocessors, or data handling obligations. Suggested action: Add a data processing addendum or detailed security schedule. Risk 3: Short suspension period for unpaid invoices Risk level: Medium Why it matters: Suspension after 5 days may disrupt operations because of a billing delay or administrative error. Suggested action: Request written notice and a longer cure period. Risk 4: Low liability cap Risk level: Medium Why it matters: A cap based on only 3 months of fees may be insufficient for data loss, service disruption, or security incidents. Suggested action: Negotiate higher or separate caps for confidentiality, data protection, IP infringement, and gross misconduct. 4. NEGOTIATION POINTS Must-have: - Add detailed data protection obligations - Add breach notification timeline - Add renewal reminder requirement - Add longer cure period before suspension Should-have: - Increase liability cap for data and security issues - Add service levels and support obligations - Clarify governing law and dispute resolution Nice-to-have: - Add customer termination rights for repeated downtime - Add audit or security review rights 5. SIGNATURE READINESS SCORE Score: 68/100 Reason: The agreement has basic commercial terms, but important customer protections are missing or weak. Main blockers before signing: - Weak data protection language - No breach notification timeline - Automatic renewal risk - Low liability cap - Short suspension period 6. RECOMMENDED NEXT STEPS - Request a data processing addendum - Negotiate automatic renewal terms - Add breach notification timing - Extend suspension cure period - Review liability exclusions and caps with counsel Final disclaimer: This contract analysis is for informational and operational review purposes only and does not constitute legal advice. Contract interpretation depends on jurisdiction, factual context, applicable law, and negotiation history. Before signing or relying on this document, high-risk clauses and jurisdiction-specific issues should be reviewed by a qualified lawyer.