The governing law clause in a SaaS agreement under India law

Standard position

In SaaS agreements governed by Indian law, the governing law clause typically designates the substantive law of India, most often the Indian Contract Act 1872, as controlling interpretation, performance, and dispute resolution. Market practice among Indian SaaS vendors is to specify 'The laws of India without regard to conflict of law principles', often paired with exclusive or non-exclusive jurisdiction clauses naming Indian courts (typically Delhi, Bangalore, or Mumbai High Courts). Foreign vendors contracting with Indian customers frequently offer a choice between Indian law and their home jurisdiction's law as a negotiation point.

Legal basis

Section 23 of the Indian Contract Act 1872 voids agreements contrary to law; Section 10 establishes freedom of contract within lawful boundaries. The Indian contract framework provides no mandatory choice-of-law rule that overrides party agreement. However, the Consumer Protection Act 2019 imposes mandatory consumer protections that cannot be waived by choice of law; these apply to individual end-users of SaaS platforms. The Bharatiya Nyaya Sanhita (BNS) 2023, which will eventually replace parts of the Indian Penal Code, does not materially alter contract law principles. Courts recognize governing law clauses as valid and binding (see principles affirmed in Enercon Engineers Limited v. Enercon (India) Limited, Delhi High Court). Section 44A of the Indian Code of Civil Procedure 1908 permits Indian courts to apply foreign law if chosen by the parties, subject to public policy constraints.

Drafting and negotiation

Clearly specify 'The laws of India, without regard to its conflict of law principles' to prevent arguments that foreign law's internal conflicts rules might apply. Where the agreement involves cross-border data transfers, consider adding a carve-out: 'Data protection obligations shall be governed by applicable data protection laws in the jurisdiction where Personal Data is located', reflecting India's Digital Personal Data Protection Act 2023. If the SaaS vendor is non-Indian, negotiate whether Indian or foreign law applies; Indian customers typically prefer Indian law for familiarity and local court access, while vendors may resist to avoid compliance complexity. Define which statute governs each obligation (e.g., 'liability limitations governed by Section 55 of the Indian Contract Act', warranty disclaimers governed by Section 23). Pair the governing law clause with a jurisdiction or arbitration clause; courts will enforce an arbitration agreement even if it names a seat outside India, under the Arbitration and Conciliation Act 1996, which is internationally harmonised. Do not assume that choosing Indian law avoids disputes over enforceability; non-Indian vendors should be aware that Indian courts will not enforce penalties deemed punitive under Indian law, even if validly agreed.

Common pitfalls

Failing to exclude conflict-of-law principles creates ambiguity over which legal regime controls. Omitting a separate jurisdiction or arbitration clause leaves parties unclear whether disputes proceed in court or arbitration. Vendors often overlook that consumer protection statutes (Consumer Protection Act 2019, Section 20 DPDPA 2023) apply mandatorily to individual users regardless of choice of law, so disclaiming 'consumer' status linguistically does not avoid these protections. Mixing Indian law with foreign court jurisdiction (e.g., 'Indian law, exclusive jurisdiction in Delaware courts') creates enforceability obstacles in India; Indian courts may refuse to recognise foreign judgments on public policy grounds. Not distinguishing between data residency laws and substantive contract law leads to confusion; data protection compliance is territorial and cannot be fully governed by choice of law alone.

Sample language

This Agreement shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. The parties irrevocably submit to the exclusive jurisdiction of the courts of [Delhi / Bangalore / Mumbai], provided that either party may seek interim relief in any court of competent jurisdiction. Notwithstanding the foregoing, obligations relating to Personal Data protection shall be governed by applicable data protection and privacy laws in the jurisdiction where Personal Data is located or processed.

This is general drafting guidance, not legal advice, and not a substitute for advice on your specific facts and jurisdiction. Sample language is a starting point to adapt, not a finished clause.