Who owns the data in a SaaS contract?

By default, the customer owns the input data, while the SaaS provider typically retains ownership of the platform, metadata, and aggregated, anonymized insights.

How do I protect my data rights in a SaaS agreement?

Ensure the contract explicitly grants you ownership of input data, mandates data portability upon termination, and restricts the vendor's right to use your data for training their AI models.

What is a 'usage license' in SaaS?

A usage license is a clause that grants the vendor permission to process, host, and sometimes analyze your data to provide the service, without transferring ownership.

A TermScore is an AI-generated risk rating from 0 to 100 that evaluates the fairness and risk level of any legal document. A score of 86-100 means the contract is highly favorable, while 0-30 indicates dangerous terms you should walk away from.

What types of documents can TermScore analyze?

TermScore analyzes any legal document including freelance contracts, employment agreements, residential leases, NDAs, brand sponsorship deals, SaaS vendor agreements, and rental applications. Upload PDFs, Word documents, or images.

How much does TermScore cost?

TermScore offers a free plan with 3 scores per month. The Team plan is $15/month for 30 scores, and the Professional plan is $50/month for 500 scores with team collaboration features. One-time purchases are also available: a single score for $5 or a 5-pack for $15, with no subscription required.

Is my document data secure?

Yes. Documents are processed in memory and analysis results are stored encrypted. TermScore never shares your document data with third parties and you can delete your data at any time from your dashboard.

How to negotiate data ownership rights in SaaS contracts?

How to Negotiate Data Ownership Rights in SaaS Contracts

To secure data ownership in SaaS contracts, explicitly define your input data as your sole property, restrict the vendor’s usage rights to service delivery only, and mandate a clear data export process upon contract termination. Never accept broad, perpetual licenses that allow vendors to monetize your proprietary information.

The Core Distinction: Input Data vs. Derived Data

Understanding the difference between the data you provide and the data the system creates is the foundation of any negotiation. SaaS vendors often attempt to claim ownership over everything that passes through their servers.

Defining Input Data

Input data is the information you upload, input, or generate through the use of the service. This is your intellectual property. Your contract must state that you retain 100% ownership of this data.

Defining Derived or Aggregated Data

Vendors often argue they own "derived data"—insights, analytics, or patterns generated from your usage. You should negotiate to ensure that any derived data containing your proprietary information remains yours or is at least subject to strict confidentiality obligations.

Key takeaway: Always insist on a clause stating that the vendor receives only a non-exclusive, limited, royalty-free license to use your data solely for the purpose of providing the service to you.

Action Item: Audit your current contract for the phrase "Vendor owns all data generated by the platform." If found, strike it and replace it with language that distinguishes between platform metadata and your proprietary input data.

Critical Red Flags in Data Clauses

When reviewing a SaaS agreement, certain language should trigger immediate concern. If you see these terms, you are at risk of losing control over your business intelligence.

Perpetual Licenses: Any clause granting the vendor a "perpetual, irrevocable, worldwide license" to your data.
AI Training Rights: Language allowing the vendor to use your data to "improve, train, or develop" their machine learning models without your explicit, opt-in consent.
Broad Sub-licensing: Rights that allow the vendor to share your data with third-party affiliates or partners without restriction.
Lack of Portability: Absence of a defined format or timeframe (e.g., 30 days) for data retrieval upon contract expiration.

Clause Type	Risky Language	Negotiated Alternative
Usage Rights	Vendor may use data for any purpose.	Vendor may use data solely to perform services.
AI Training	Data may be used for model training.	Data is excluded from AI training sets.
Termination	Data deleted upon termination.	Vendor must provide data in a standard, readable format.

Action Item: If a vendor insists on using your data for AI training, demand an "opt-out" provision or ensure that the data is fully anonymized and aggregated before it enters their training pipeline.

Negotiating Data Portability and Exit Strategies

Ownership is meaningless if you cannot access your data when you leave. A robust data ownership strategy must include a clear exit plan.

Define the Format: Specify that data must be returned in a machine-readable format (e.g., CSV, JSON, or SQL dump).
Set a Timeframe: Require the vendor to provide a full data export within 15 to 30 days of a termination notice.
Destruction Certification: Include a requirement that the vendor provides written certification of data destruction from their production and backup systems within 60 days of contract end.
Transition Assistance: Negotiate for "reasonable cooperation" during the transition period to ensure data integrity during the migration.

Key takeaway: Ensure the contract explicitly states that you own your data regardless of whether you are current on your subscription payments, preventing the vendor from holding your data hostage during a billing dispute.

Action Item: Add a "Data Return" clause that mandates the vendor provide a full export of your data at no additional cost upon contract termination.

Leveraging Technology for Contract Analysis

Manually reviewing every data ownership clause across dozens of SaaS vendors is prone to human error and oversight. TermScore uses advanced AI to instantly scan your contracts, flagging risky data ownership language and suggesting specific, attorney-approved redlines to protect your intellectual property. By automating this process, you can ensure consistency across your entire vendor portfolio and focus your legal resources on high-stakes negotiations.