IT Environment NOT a developer of software or hardware At the end of the day, should NOT be responsible for issues with systems it doesn’t control Certainly not responsible for malicious actors
risk and liability • Establish appropriate expectations and solid business relationships with your customers, leading to satisfied customers • Enhance the value of your business when you look to sell your company
a clear fashion, especially “in-scope” and “out-of-scope”. Defined terms and separate document fit together. Has appropriate liability limitations Is tailored to the target customer (vertical focus, size) and competitive environment Likely has a master agreement structure Reflects the values, business model, and risk profile of the MSP’s owners and managers Avoids “contract gap problem”, i.e., making promises to customers without your suppliers making the same promises to you Reflects input of legal advisor, accountant/finance advisor, and senior technical management
– and some MSP’s -- to “URL-based” Terms ✓Flexible, easy to incorporate and easy to update ✓Shortens your signed documents ✓But always have to remember to include. ✓Compare to Master Services Agreement - signed just one time and just refer to in Schedules/Orders for Services
professional and workmanlike manner, using qualified personnel • No performance warranties • No hardware warranties • No warranties that monitoring and monitoring devices will be without error or will catch all issues • Exclude all other warranties
no promises or guarantees that it will be able to resolve issues or “bugs” in in software, systems and technology (“Third-Party Systems”), and (ii) a failure by Provider to resolve any issue or series of issues in any Third-Party System is not a breach of this Agreement. Provider is in no way liable for defects or “bugs” in any Third-Party Systems, or for correcting errors introduced into data or software due to failure of Third-Party Systems, or for any cost of reconstructing software or lost data.
impossible to guarantee: (i) the trouble-free performance and security of computer hardware, software, networks, environments, and systems; (ii) the reliability of any technology or technology-related asset; and (iii) the applicability, outcome or performance of any training or the behavior of any human resources, all regardless of whether procured, provided, installed, managed, supported, administered, trained and/or supervised by Provider, or in any way associated with the Services.
liability of Provider or any of its suppliers relating to this Agreement and the Services shall be limited to the amount of fees actually received by Provider from Client under the applicable Schedule during the prior [three (3) months/six (6) months]. In no event shall either party or any of its suppliers be liable for any special, incidental, indirect, cover, consequential, exemplary or punitive damages; any damages based on injury to person or property or death; or any lost sales, profits or data, even if a party is told that any of such damages may occur. In no event is Provider liable for any systems related to medical devices, other life-saving devices, real time controls for critical processes, or other systems the failure of which might cause injury or death, including any interface to any such systems.
the prior, current or future integrity of the security of any Client network or system. Client is solely responsible for developing its own security policy and periodically testing its security to make sure it meets the requirements of its security policy. Client is specifically advised to obtain appropriate cybersecurity insurance to help protect its technology environment from malicious actors. Unless specifically agreed in a Schedule, Provider does not provide recommendations concerning the security of any Client network or system. Any changes made to a Client network or system may have direct or indirect impacts that are negative to its security. Provider cannot anticipate every possible reaction due to such changes.
points, and other intelligent network devices and equipment that have been identified by Client and agreed by Provider to be covered (“Covered Systems”) will be monitored. To the extent possible, monitoring will include system and service up/down status, reasonable review of system and application error logs, and reasonable monitoring of performance of systems. Monitoring may not be available for all systems. Although monitoring is automated 24 hours per day, Provider will review, diagnose and respond to alerts during Regular Business Hours only.
cause operating difficulties or “break” other software and agrees that Provider will not be responsible for the potential adverse effects of applying any patches.
environment and to take steps to mitigate loss of data, interruption of service or any element disruptive to the backup service. Client understands and agrees that identification of files and data to be included in the backup are the sole responsibility of Client. Provider will assist Client’s effort to identify the data to be backed up, but Provider will not be liable for any damages or breach for any data or program not included in Client’s backup. Provider recommends that Client always have verified multiple backups before purging any database or accounting system.
100% reliable, and Provider will not be responsible for any losses due to its Service failing to report a problem, failure of the automated notification system, any other failure of systems and processes related to such monitoring.
continuation plan is NOT covered under this Schedule. Although the Services to be provided under this Schedule are designed to help provide IT continuity and will, under certain conditions, help to recover from certain disasters, nothing in this Schedule should be considered a formal disaster recovery or business continuity plan. If Client requires a disaster recovery or business continuity plan, including testing of the plan, Provider can assist Client with the development of such a plan at an additional fee
➢Do they require you to pass through specific terms in your customer agreement? ➢Can you negotiate expanded liability if they are the cause of a data breach or claim?