SaaS Subscription Agreement in Australia: Template, Key Clauses and Local Law (2026)

What is a SaaS subscription agreement in Australia, and when do you need one? A SaaS (software as a service) subscription agreement in Australia is the contract between a cloud software provider and its customer. Rather than selling a copy of software, the provider grants a right to access a hosted service for a subscription fee. The agreement sets out what the service does, the service levels, the fees and renewal, how customer data and personal information are handled, and who is liable when something goes wrong. You need one whenever you sell or buy access to hosted software in Australia. Providers usually publish their own standard terms, often as an online click-through. Customers, especially regulated, government and enterprise buyers, should still review and, where possible, negotiate the data, security, liability and exit terms. ## What law governs a SaaS agreement in Australia? There is no single SaaS statute. A SaaS agreement is governed by common law contract principles, broadly uniform across the states and territories, plus three statutory layers that matter for cloud services. - The Australian Consumer Law (ACL), Schedule 2 to the Competition and Consumer Act 2010 (Cth), which sets non-excludable consumer guarantees and the unfair contract terms regime for standard form contracts.

• The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which govern personal information, including cross-border disclosure and breach notification.
• State and territory procedure, which is why you still name a governing state or territory. ## How do unfair contract terms and consumer guarantees apply to SaaS? SaaS terms are usually standard form, so the unfair contract terms regime is directly relevant. Since 9 November 2023 it has been unlawful to propose, use or rely on an unfair term in a standard form contract with a consumer or small business, with large civil penalties. Common SaaS terms that draw scrutiny include broad unilateral rights to change the service or price, automatic renewal with no real exit, and one-sided liability or indemnity clauses. The ACL consumer guarantees also apply to many SaaS supplies, including that services are provided with due care and skill. These guarantees cannot be excluded, but liability for a breach can often be limited to re-supply or its cost for services not of a kind ordinarily acquired for personal use. Draft the liability clause around that rather than as a blanket exclusion. ## What are the key clauses in an Australian SaaS agreement? | Clause | What it does | | --- | --- | | Grant of access | The right to use the service and its limits | | Service levels and support | Uptime target, support response, service credits | | Fees, renewal and price changes | Fee, billing cycle, GST, auto-renewal and notice | | Customer data and ownership | Confirms the customer owns its data; licence to the provider | | Privacy and personal information | Privacy Act and APP duties, including cross-border disclosure | | Security and breach notification | Safeguards and the Notifiable Data Breaches scheme | | Acceptable use | What the customer may not do with the service | | Intellectual property | Provider owns the software; customer owns its data | | Consumer guarantees and warranties | ACL guarantees and any added warranties | | Limitation of liability | Caps and excluded loss, within what the ACL allows | | Indemnities | Usually IP infringement and data breach | | Term, suspension and termination | Duration, suspension rights and exit | | Data export and deletion on exit | Return or deletion of customer data | | Governing law | The chosen state or territory and forum | ### Privacy, cross-border disclosure and breach notification Most SaaS deals involve personal information, so the data terms are central. Under APP 8, if the provider discloses personal information to an overseas recipient, the disclosing party must take reasonable steps to ensure the recipient does not breach the APPs and generally stays accountable for how the recipient handles it. Many Australian customers, especially government, ask for Australian data residency. The Notifiable Data Breaches scheme in Part IIIC of the Privacy Act requires notification of eligible data breaches likely to cause serious harm to affected individuals and the Office of the Australian Information Commissioner, so the contract should require the provider to notify the customer quickly. The Privacy Act is also under reform following the 2024 amendments, so keep an eye on changing obligations. ## A simple Australian SaaS agreement template (structure) 1. Parties and definitions

2. Grant of access and restrictions
3. Service levels and support
4. Fees, GST, renewal and price changes
5. Customer data, ownership and licence
6. Privacy and personal information (Privacy Act, APPs)
7. Security and breach notification
8. Acceptable use
9. Intellectual property
10. Consumer guarantees, warranties and disclaimers
11. Limitation of liability
12. Indemnities
13. Term, suspension and termination
14. Data export and deletion on exit
15. Governing law and dispute resolution ## Common mistakes to avoid - Standard form terms with one-sided variation, renewal or liability clauses now exposed to unfair contract terms penalties.

• Trying to exclude the ACL consumer guarantees, which cannot be excluded.
• No data export or deletion clause, leaving the customer stranded on exit.
• Ignoring APP 8 accountability when data is hosted or supported from overseas.
• Vague breach timelines that do not support the Notifiable Data Breaches scheme. ## Doing this across many subscriptions Whether you sell SaaS or run a stack of it, the same work repeats: reading the data and security terms, checking renewal dates and price rises, tracking which version of the terms you agreed to, and keeping the signed copy findable. Done by hand across many vendors, renewals slip and risky terms go unread. The drafting, clause-by-clause review, version history and renewal tracking can live in one AI contract workspace tuned to how your company contracts. Adira is one such workspace. Its legal depth is strongest for India today, with Australian-law support on the roadmap, so use it as a drafting and review aid rather than a substitute for Australian legal advice. ## Is this legal advice? No. This is general information, not legal advice. The ACL, the unfair contract terms regime and the Privacy Act all affect SaaS contracts, and penalties for unfair terms are significant. For a specific deal, confirm the position with a qualified Australian lawyer. ## Frequently asked questions