Small Business Buying Software: A 10-Minute Contract Check

Minutes 1 to 2: price and increases

Find the order form or pricing page that forms part of the contract. Confirm the total cost including setup fees, add-ons, usage charges and taxes. Then find how prices can change: during the term, at renewal, with how much notice and whether there is a cap. Our guide to price increases covers what to ask for.

Minutes 3 to 4: term, renewal and cancellation

Write the cancellation deadline in your calendar now.

• How long is the initial term?
• Does it renew automatically, and for how long?
• How much notice do you need to give to cancel, and how?

Minute 5: data ownership and export

Confirm you own your data, the vendor uses it only to provide the service, and you can export it in usable formats when you leave. Check whether the vendor can use your data to train AI or for its own purposes.

Minute 6: security and privacy

Look for commitments to reasonable security, breach notification and a data processing addendum if you share personal data. If the software handles payments, health or customer data, these terms matter more.

Minute 7: service levels and support

Check whether uptime is promised and what you get if it is not met, usually service credits. Check support hours and response times.

Minutes 8 to 9: liability and indemnity

Check the limitation of liability: often capped at 12 months' fees, with exclusions for indirect losses. Check whether the vendor indemnifies you against claims that its software infringes intellectual property. Check whether you are asked to indemnify the vendor broadly. Our guide to fair liability caps explains typical terms.

Minute 10: changes and exit

Check whether the vendor can change terms unilaterally, and whether you can leave if changes are material. Check what happens at termination: access, export and deletion.

When to ask for changes

Small businesses often assume software terms cannot be negotiated. For standard click-through products, that may be true. But for larger contracts or annual plans, vendors often accept changes to renewal notice, price caps, data export and termination rights. Ask politely and specifically.

A worked example

A dental practice is buying scheduling software for $6,000 a year. In 10 minutes the office manager finds: automatic annual renewal with 90 days' notice, no cap on renewal increases, patient data used to "improve services," and liability capped at one month's fees. She asks for 30 days' notice, a 5% renewal cap, a data use restriction and a data processing addendum, and a 12-month liability cap. The vendor agrees to all except the notice period, which it reduces to 60 days.

Sample email

"We are ready to proceed, with four requests: a 30-day non-renewal notice period, a 5% cap on renewal increases, confirmation that our data will only be used to provide the service, and a liability cap of 12 months' fees. Please let us know if you can update the order form."

Common mistakes

• Reading only the price.
• Missing the auto-renewal notice deadline.
• Not checking data use and export.
• Assuming standard terms cannot change.
• Not keeping a copy of the terms you agreed to.

Quick checklist

• Total price and increase terms?
• Term, auto-renewal and cancellation notice?
• Data ownership, use and export?
• Security, breach notice and data processing addendum?
• Uptime and support?
• Liability cap and indemnity?
• Unilateral changes and exit?

Key terms explained

These terms appear in most software contracts.

• Order form: the document with products, prices and term.
• Auto-renewal: automatic extension unless cancelled.
• Service credit: a partial refund when uptime commitments are missed.
• Limitation of liability: a cap on what the vendor pays for problems.
• IP indemnity: vendor protection against claims the software infringes others' rights.

Click-through versus negotiated contracts

Many small business tools are bought online with click-through terms. You usually cannot negotiate those, but you can still choose between vendors based on their terms, choose a monthly plan instead of annual, and turn off data-sharing settings. For larger purchases, vendors often send an order form and master agreement that can be negotiated, especially near the end of their sales quarter.

Where the important terms hide

The terms that matter are often spread across several documents: an order form, a master subscription agreement, a data processing addendum, an acceptable use policy, a service level agreement and a privacy policy. The order form usually sets price and term, and often states that it overrides the other documents. Check which documents are included and which one wins if they conflict.

Accounts, users and access

Check who in your business can create accounts and accept terms on your behalf. Employees sometimes sign up for tools with personal emails, binding the business to terms nobody reviewed and creating data risk when they leave. Keep subscriptions under a company account, with an owner responsible for access and renewal.

Payment methods and auto-billing

Use a company card or invoicing rather than a personal card. Check whether the vendor auto-charges for overages, add-ons or renewals, and set alerts on your card for recurring charges. Keep invoices for accounting and tax purposes.

Keep a simple contract register

A spreadsheet with each tool, owner, cost, renewal date, cancellation notice period and where the contract is saved takes minutes to set up and prevents most unwanted renewals and forgotten subscriptions. Review it quarterly.

Regulated data

If your business handles health, financial, children's or payment card data, check that the vendor supports your legal obligations, for example by signing a business associate agreement for health data where required.

A second example: the free plan with strings attached

A consultancy uses a free file-sharing tool for client documents. The terms allow the provider to scan content for "service improvement" and give no confidentiality commitment for free accounts. A client's contract requires the consultancy to keep its documents confidential and use only approved processors. Moving to the paid business plan, with a confidentiality commitment and a data processing addendum, costs a few dollars per user and removes a real breach risk. Free and cheap plans often carry the weakest terms, so check them before putting client or customer data in them.

When to spend more than 10 minutes

Spend longer, or get advice, when the software holds sensitive data, the contract is multi-year, the annual cost is significant for your business, or the tool is critical to operations. The 10-minute check tells you whether a deeper review is needed.

Save the terms you agreed to

Vendors update online terms frequently. When you sign up or renew, save a PDF of the terms, order form and pricing page with the date. If a dispute arises later, you will need the version that applied when you agreed.

Get a second look in minutes

If you do not have 10 minutes, or want to be sure, upload the agreement to see all these clauses explained with risk flags.