SaaS Subscription Terms Ireland: What to Include and How They Work
Last updated November 2026. General information only, not legal advice.
If you sell software as a service, your customers never install anything. They log in, use your platform while they pay, and leave when they stop. The SaaS subscription terms Ireland customers accept at sign-up are the only contract governing that relationship. This guide covers what to include, how click-wrap acceptance works, what changes for consumers, and what the EU Data Act now requires.
Why SaaS terms are not a software licence
A software licence lets the customer copy and run software on its own machines. With SaaS the software runs on your infrastructure, the customer gets a right of access rather than a copy, and the deal is a continuing service paid by subscription.
Irish law treats SaaS as a supply of services. Section 39 of the Sale of Goods and Supply of Services Act 1980 implies terms that the supplier has the necessary skill and will act with due skill, care and diligence; section 40 lets a business contract vary or exclude them by express wording. For bespoke build work, a software development agreement or a master services agreement may sit alongside your subscription terms.
Core clauses in SaaS subscription terms Ireland businesses should include
Subscription and access grant
A non-exclusive, non-transferable right to access and use the service during the term, for internal business purposes, for the users paid for, with the customer responsible for its users.
Fees and payment
The fees, billing cycle, due dates, VAT, late payment consequences, and how and when you may increase prices.
Term, renewal and termination
The initial term, whether it auto-renews, the notice needed to stop renewal, early termination grounds (unremedied breach, insolvency), and how long the customer can retrieve its data on exit before you delete it.
Service levels and support
If you promise uptime or response times, put them in a schedule, state the remedy (usually a service credit) and exclude planned maintenance.
Acceptable use and suspension
Prohibit unlawful content, reverse engineering and reselling, and reserve a right to suspend access for breaches, non-payment or security threats.
Intellectual property
You own the platform; the customer owns its data and grants you a limited licence to host and process it to provide the service.
Data protection and the Article 28 processor clause
Where you host customer personal data you are normally the processor and the customer the controller. Article 28(3) GDPR requires a written contract setting out the subject matter, duration, nature and purpose of processing, the types of personal data, the categories of data subjects and the controller’s rights and obligations. The Data Protection Commission’s practical guide to controller-processor contracts lists the mandatory provisions: documented instructions, confidentiality, security, sub-processor rules, assistance with data subject requests and breaches, deletion or return of data, and audit rights. Most providers attach these as a data processing schedule.
Confidentiality, liability and governing law
Include a mutual confidentiality clause. Cap your total liability (often the fees paid in the previous 12 months) and exclude indirect loss, lost profits and lost data; section 40 of the 1980 Act permits this between businesses, but never try to exclude liability that cannot lawfully be excluded, such as fraud. State Irish law and Irish courts.
How click-wrap acceptance works in Ireland
Section 19 of the Electronic Commerce Act 2000 provides that a contract is not denied legal effect, validity or enforceability solely because it is in electronic form, and that offer and acceptance may be communicated electronically. A “tick to accept” flow can therefore form a binding contract, provided the terms are presented before the customer commits and are clearly accepted.
The European Communities (Directive 2000/31/EC) Regulations 2003 add procedural rules. Regulation 13 requires you to explain, before the order is placed, the technical steps to conclude the contract, whether it will be filed and accessible, how input errors can be corrected and the languages offered, and to provide the terms in a way the customer can store and reproduce. Regulation 14 requires an electronic acknowledgement of the order. Business customers may agree to disapply parts of these rules, but not the storage rule.
If your customers are consumers
Part 3 of the Consumer Rights Act 2022 applies to digital content and digital service contracts with consumers from 29 November 2022. The service must conform to the contract and you must supply the updates it covers. Under section 64 you may modify a continuing service beyond what conformity requires only if the contract allows it for a valid reason, at no extra cost and with advance notice on a durable medium; where the change negatively affects the consumer, they may terminate free within 30 days.
Part 5 of the Act replaced the European Union (Consumer Information, Cancellation and Other Rights) Regulations 2013 for contracts from that date. Sections 112 and 113 give a 14-day right to cancel a distance contract, counted from the day it is concluded. Section 111 removes that right for a paid digital service once fully supplied, and for digital content not on a tangible medium once supply has begun, but only where the consumer gave prior express consent, acknowledged losing the right and received confirmation under section 109. Schedule 3 lists the pre-contract information, including the cost per billing period and, for auto-renewing contracts, the conditions for terminating. Section 108 requires the order button to say “order with obligation to pay” or equally clear wording, or the consumer is not bound.
Under Part 6, Schedule 5 presumes unfair a term that automatically extends a fixed-term contract where the deadline for the consumer to object is unreasonably early. Consumer rules differ between Member States, so if you sell to consumers across the EU, find a solicitor through the Law Society before relying on standard terms.
Recent change: the EU Data Act and cloud switching
Regulation (EU) 2023/2854, the Data Act, has applied since 12 September 2025. Chapter VI covers “data processing services”, which includes SaaS. Article 25 requires a written contract, available before signing, giving the customer the right to switch provider or move to its own systems within a transitional period of no more than 30 calendar days (extendable to at most seven months where technically unfeasible), a notice period of no more than two months, an exhaustive list of exportable data, a retrieval period of at least 30 calendar days, and erasure afterwards. Article 23 bans obstacles to switching. Article 29 permits only cost-based switching charges until 12 January 2027 and none from that date. Article 31 exempts services largely custom-built for one customer, and non-production trial versions.
Article 50 sets no delayed start for Chapter VI, so these rules are already live. In Ireland, the General Scheme of the Data Bill 2025 (published February 2026) proposes ComReg as the authority for the switching rules, but the Bill had not been enacted at the time of writing. A Commission “Digital Omnibus” proposal (November 2025) would narrow some switching obligations for smaller providers but has not been adopted.
What the template can and cannot do
The SaaS Subscription Terms template gives you a structured set of business-to-business terms covering the clauses above, with a data processing schedule, that you complete yourself. It cannot replace a negotiated enterprise agreement where a large customer insists on its own paper, it is not designed for consumer sales across the EU, and it will not resolve an existing dispute. If you process special category data or sell into regulated sectors, have a solicitor review your terms. See also our other commercial contract templates.
Frequently asked questions
What should SaaS terms and conditions Ireland cover?
At minimum: the access grant, fees, term and renewal, termination and data return, service levels, acceptable use, intellectual property, a GDPR Article 28 data processing schedule, confidentiality, a liability cap, suspension rights and Irish governing law.
Are click-wrap terms enforceable in Ireland?
Yes, in principle. Section 19 of the Electronic Commerce Act 2000 confirms a contract is not invalid solely because it was concluded electronically. You still need to present the terms before the customer commits, require a clear act of acceptance, let the customer store the terms and meet the pre-order information rules in the 2003 E-Commerce Regulations.
Is auto-renewal SaaS Ireland lawful?
For business customers, yes, if the terms state the renewal period and the notice needed to stop it. For consumers, you must disclose the cost per billing period and the conditions for terminating before they buy, and an auto-extension term with an unreasonably early deadline to object is presumed unfair under the Consumer Rights Act 2022.
What is a SaaS agreement Ireland versus SaaS terms?
The same type of contract. “Terms” usually means a standard document accepted online; “agreement” usually means a signed version negotiated with one larger customer.
Do I need a SaaS data processing agreement?
If your platform processes personal data on behalf of customers, yes. Article 28(3) GDPR requires a written contract with specific mandatory terms, and the Data Protection Commission publishes a practical guide to its contents.
OnlineLegalServices.ie is not a solicitor’s practice and does not give legal advice. For advice on your own situation, speak to a solicitor.
Sources: Electronic Commerce Act 2000, s.19, S.I. 68/2003 E-Commerce Regulations, Consumer Rights Act 2022, DPC guide to controller-processor contracts, Regulation (EU) 2023/2854 (Data Act)
