SaaS Agreement in Portugal: Template, Key Clauses and Local Law (2026)

What a SaaS agreement is A Software as a Service (SaaS) agreement gives a customer online access to software hosted by a provider, for a subscription fee. The customer receives a right to use the service during the term, not ownership of the software. Portugal has no statute written only for SaaS. The contract rests on freedom of contract, and the regulated areas that shape it are data protection and electronic commerce. ## The law that governs it The contract itself is governed by the Portuguese Civil Code (Codigo Civil) and general contract principles. A SaaS deal is an atypical contract combining a licence to use with a service. For personal data, the EU General Data Protection Regulation (GDPR) applies directly, together with Law No. 58/2019 of 8 August, which executes the GDPR in the Portuguese legal order. The supervisory authority is the National Data Protection Commission (Comissao Nacional de Proteccao de Dados, CNPD). Where the provider processes personal data for the customer, article 28 of the GDPR requires a data processing agreement. For online dealings, Decree-Law No. 7/2004 on electronic commerce sets information duties and rules for contracts concluded electronically. ## Key clauses to include ### Grant of access and users

Describe the service, the authorised users and that this is access for the term, not a sale. ### Term, renewal and fees Set the term, auto-renewal, notice to cancel, fees, payment timing and price changes. ### Service levels and support Define availability, maintenance windows, support response times and any service credits. ### Data protection Include a GDPR article 28 data processing agreement covering subject matter, security, sub-processors, international transfers and help with data subject rights, aligned with Law No. 58/2019. ### Security State security measures and breach notification timelines. ### Intellectual property Confirm the provider owns the software and the customer owns its data. ### Liability and warranties Set warranties, disclaimers and a liability cap, with consumer rules in mind if any users are consumers. ### Data portability and exit Explain how the customer retrieves its data in a usable format and how the provider returns or deletes it after termination. ### Governing law and forum Choose Portuguese law and a court or arbitration seat. ## Common mistakes - Relying on a privacy policy instead of a GDPR article 28 data processing agreement.

• Ignoring the e-commerce information duties under Decree-Law No. 7/2004.
• Leaving data export and deletion undefined at exit.
• Promising availability with no measurable target. ## Draft and manage it in one workspace A SaaS contract carries renewal dates, data duties and service commitments that a team must track for years. Adira is an AI legal workspace where you can draft an agreement from a structured template, see each clause flagged favourable or unfavourable to your side, edit clauses in plain language and track renewal and compliance dates in one place. Depth for non-India jurisdictions such as Portugal is on the roadmap, so confirm local coverage first. You can see the approach at Adira. This article is general information, not legal advice. Check your data protection duties with a qualified Portuguese lawyer before you sign.