Software terms decide who owns your data, and who pays when it goes wrong.
Upload a SaaS agreement, DPA or vendor contract and get data rights, liability caps, renewal traps and DPDP obligations checked.
What people are surprised to learn
Full DPDP compliance is due 13 May 2027.
The DPDP Rules were notified in November 2025 and phase in to that date. Where a contract touches personal data, the Act addresses fiduciary and processor roles, breach notification, deletion and cross-border transfer. We flag what the agreement does and does not cover.
What this review checks
- Who owns your data, and whether it can train AI models
- DPDP fiduciary and processor obligations
- Auto-renewal and the cancellation notice window
- Liability caps against real breach exposure
- Unilateral price increases and term variation
- Uptime commitments with a real remedy, and data export on exit
- GST place of supply and export zero-rating
- Exclusivity and tie-in under the Competition Act
ClauseAudit provides information and analysis, not legal advice, and does not create an advocate–client relationship. Findings use calibrated language because enforceability depends on facts and forum. Consult a qualified advocate before acting on any finding. See India pricing.