contracts
SaaS Agreement in Kenya: Template and Key Clauses (2026)
A SaaS agreement in Kenya is the contract under which a software provider lets a customer use its hosted software over the internet in return for a subscription fee. Nothing is installed and nothing is sold. The customer gets a right to access and use the service, and the provider keeps running it. The agreement has to cover access, service levels, data, payment and what happens when things go wrong. This is general information, not legal advice. The law changes and every deal is different, so confirm the current position before relying on any clause. ## How Kenyan law shapes a SaaS deal There is no single SaaS statute in Kenya. A SaaS agreement is a commercial contract, so ordinary Kenyan contract law governs its formation and enforcement. Three areas tend to matter most in practice. Data protection is the big one. The Data Protection Act 2019 is the main data protection law, and the Office of the Data Protection Commissioner regulates it. Where the service handles personal data of people in Kenya, the agreement should set out who is the controller and who is the processor, what the provider may do with the data, security obligations, and the position on moving data outside Kenya. Consumer rules under the Consumer Protection Act can apply where the customer is a consumer. Tax matters too, because value added tax can apply to digital services, including a framework for digital service tax, and should be addressed in the pricing clause. <!-- [VERIFY] exact Data Protection Act 2019 cross-border transfer conditions and the current VAT and digital service tax treatment of SaaS before stating them as fixed figures --> ## A clause by clause skeleton Use this as a structure to adapt, not a finished document. ``` SAAS AGREEMENT Parties: [Provider] and [Customer] Date: [date] 1. DEFINITIONS Key terms, including the Service, Users, Customer Data and Fees. 2. ACCESS AND LICENCE The right to access and use the Service for the subscription term, non-exclusive and non-transferable, within usage limits. 3. SUBSCRIPTION AND FEES The plan, the fees, the billing cycle, taxes and what happens on renewal and on late payment. 4. SERVICE LEVELS AND SUPPORT The uptime target, support response times and any service credits. 5. CUSTOMER DATA AND DATA PROTECTION Ownership of Customer Data stays with the Customer, the provider's role as processor, security, and compliance with the Data Protection Act 2019. 6. ACCEPTABLE USE What the Customer and its Users may not do with the Service. 7. INTELLECTUAL PROPERTY The provider owns the software and IP; the Customer owns its data. 8. CONFIDENTIALITY Each side protects the other's confidential information. 9. WARRANTIES AND DISCLAIMERS The limited warranties given and the disclaimers. 10. LIABILITY Caps and exclusions, usually tied to fees paid. 11. TERM AND TERMINATION The term, renewal, termination rights and notice. 12. DATA RETURN AND DELETION Return or deletion of Customer Data at the end, and for how long. 13. GOVERNING LAW AND DISPUTES Governed by Kenyan law, disputes by arbitration or the courts.
- **Data residency and transfers.** Cloud SaaS often stores data abroad. Confirm whether that is allowed and on what conditions under the Act.
- **Tax.** Value added tax and a digital service tax framework can apply to digital services, so the fees clause should state whether prices include them.
- **Consumer rules.** Where the customer is a consumer rather than a business, consumer protection rules can affect unfair terms. ## Common mistakes to avoid - Treating the service like sold software and granting rights that do not fit a subscription model.
- A weak or missing data protection clause when the service handles personal data of people in Kenya.
- An uptime promise with no definition of how it is measured or what the remedy is.
- No clear return or deletion of customer data at the end of the term.
- Silence on whether fees include value added tax or digital service tax, leading to billing disputes. ## Keeping SaaS contracts in one place A SaaS provider signs many of these, and a customer buys many of them. Each has its own renewal date, price, uptime promise, data terms and notice period. When they sit in inboxes and drive folders, it is hard to see which subscriptions renew next month, which carry a data processing addendum, and which auto-increase in price. Drafting a SaaS agreement, reviewing a liability or data protection clause, editing a service level in plain English and holding every subscription with its renewal dates in one view can live in a single AI workspace tuned to how your company contracts. Adira is built around that workspace, running on Claude, with per-seat pricing shown up front and a 7-day trial, India-first and built to work across jurisdictions. You can read more at [adiralaw.com](https://adiralaw.com). For a single subscription the skeleton above is enough on its own. The point worth keeping is that a book of SaaS contracts is easier to govern when every agreement, its data terms and its renewal dates stay together and current.
Frequently asked questions
- What law governs a SaaS agreement in Kenya?
- There is no single SaaS statute in Kenya, so a SaaS agreement is governed by ordinary Kenyan contract law. The Data Protection Act 2019, regulated by the Office of the Data Protection Commissioner, applies where the service handles personal data of people in Kenya. Consumer protection rules can apply where the customer is a consumer, and value added tax and digital service tax can affect pricing. This is general information, not legal advice.
- Who owns the data in a Kenyan SaaS contract?
- The customer should own its data, and the agreement should say so clearly. The provider typically acts as a processor handling the data on the customer's instructions. The data clause should cover security measures, the provider's role, compliance with the Data Protection Act 2019, any transfer of data outside Kenya, and the return or deletion of data when the contract ends.
- Does the Data Protection Act 2019 affect SaaS agreements?
- Yes, where the service processes personal data of people in Kenya. The agreement should set out controller and processor roles, security obligations, and the conditions for any cross-border transfer of data, and there may be registration obligations with the Office of the Data Protection Commissioner. Confirm the exact requirements with current guidance before relying on them.
- How should service levels be written?
- State the uptime or availability target as a clear figure, explain exactly how it is measured and over what period, and set out what the customer receives if it is missed, such as a service credit. Also set support response times by priority. Vague promises of high availability with no definition or remedy are a common source of dispute, so make the measurement and the consequence explicit.
- Is tax charged on SaaS in Kenya?
- Value added tax and a digital service tax framework can apply to digital and software services in Kenya, so the fees clause should state whether the subscription price includes them or whether they are added. The treatment can change, so confirm the current position with the Kenya Revenue Authority or a tax adviser. Being explicit in the pricing clause avoids billing disputes later.
See how Adira drafts in your voice and reads contracts from your side.
Explore the showroomWorking through a contract like this? Weave is Adira’s free tool to read, mark up, and connect any contract in your browser — no account needed.
Try Weave — free