Analyze SaaS Agreement Extractor — Find Risks Automatically

SAAS SUBSCRIPTION AGREEMENT

This SaaS Subscription Agreement ("Agreement") is entered into as of April 1, 2025 (the "Effective Date"), by and between:

PROVIDER:
CloudMetrics Analytics Inc., a Delaware corporation, with principal offices at 1500 Technology Center Drive, Suite 200, Seattle, Washington 98109 ("Provider" or "CloudMetrics"),

and

CUSTOMER:
Riverside Healthcare Systems, a California nonprofit corporation, with offices at 4200 Medical Center Parkway, Sacramento, California 95817 ("C

{
  "document_type": "saas_agreement",
  "document_title": "SaaS Subscription Agreement",
  "effective_date": "2025-04-01",
  "order_form_number": "ORD-2025-0456",
  "parties": {
    "provider": {
      "name": "CloudMetrics Analytics Inc.",
      "address": "1500 Technology Center Drive, Suite 200, Seattle, Washington 98109",
      "defined_term": "Provider"
    },
    "customer": {
      "name": "Riverside Healthcare Systems",
      "address": "4200 Medical Center Parkway, Sacramento, California 95817",
      "defined_term": "Customer"
    }
  },
  "services": {
    "service_description": "Cloud-based healthcare analytics and business intelligence platform providing healthcare analytics, patient population management, clinical decision support, and regulatory compliance reporting",
    "service_name": "CloudMetrics Health Intelligence Platform, Enterprise Edition",
    "features_included": [
      "Core Analytics Dashboard with real-time data visualization",
      "Patient Population Health Management module",
      "Clinical Quality Measures (CQM) reporting",
      "Financial Performance Analytics",
      "Regulatory Compliance Reports (CMS, Joint Commission)",
      "Predictive Analytics Engine",
      "Custom Report Builder",
      "Data Integration Hub"
    ],
    "modules_licensed": [
      "Population Health Management",
      "Revenue Cycle Analytics",
      "Clinical Quality Reporting",
      "Patient Engagement Dashboard",
      "Executive Scorecard"
    ],
    "api_access": {
      "included": true,
      "api_limits": "100,000 API calls per month",
      "documentation": "Full API documentation available at docs.cloudmetrics.com/api"
    },
    "integrations": [
      "Epic Systems EHR",
      "Cerner Millennium",
      "Microsoft Power BI",
      "Tableau",
      "FHIR-compliant systems"
    ],
    "mobile_access": true,
    "offline_access": true
  },
  "subscription": {
    "subscription_term": {
      "initial_term": "3 years",
      "term_start": "2025-04-01",
      "term_end": "2028-03-31",
      "auto_renewal": true,
      "renewal_term": "1 year",
      "cancellation_notice_days": 90
    },
    "user_licenses": {
      "license_type": "Named user",
      "quantity": 250,
      "license_minimum": "200 licenses",
      "additional_users": "$85 per user per month, billed annually"
    },
    "usage_limits": {
      "storage": "5 Terabytes",
      "api_calls": "100,000 per month",
      "transactions": "Unlimited patient record transactions",
      "other_limits": [
        "Maximum 50 concurrent report generations"
      ]
    },
    "overage_charges": {
      "applicable": true,
      "overage_rates": "Storage: $0.10 per GB per month; API calls: $0.001 per call",
      "notification": "Customer notified at 80% and 100% of limits"
    }
  },
  "pricing_payment": {
    "fee_structure": "Annual",
    "subscription_fee": {
      "amount": "$425,000 per year",
      "billing_frequency": "Annually in advance",
      "per_user_fee": "$141.67 per user per month (250 users)"
    },
    "implementation_fees": {
      "amount": "$125,000",
      "included_services": "Project management, data migration, system configuration, EHR integration, user training (40 hours), go-live support"
    },
    "professional_services": {
      "rate": "$250 per hour",
      "prepaid_hours": "20 hours included annually"
    },
    "price_increases": {
      "permitted": true,
      "cap": "5% annual increase",
      "notice_days": 60
    },
    "payment_terms": "Net 30 days",
    "invoice_timing": "30 days prior to subscription year start",
    "payment_methods": [
      "ACH transfer",
      "Wire transfer",
      "Check"
    ],
    "late_payment": {
      "interest_rate": "1.5% per month",
      "suspension_right": true
    }
  },
  "service_levels": {
    "uptime_sla": {
      "target": "99.9%",
      "measurement_period": "Monthly",
      "exclusions": [
        "Scheduled maintenance",
        "Emergency maintenance",
        "Customer-caused issues",
        "Force majeure events"
      ]
    },
    "service_credits": {
      "available": true,
      "credit_structure": "99.0%-99.9%: 10% credit; 98.0%-99.0%: 25% credit; Below 98.0%: 50% credit",
      "credit_cap": "50% of monthly fee",
      "request_process": "Submit request within 30 days of incident"
    },
    "support": {
      "support_hours": "24x7 for critical issues; 8am-8pm ET M-F for non-critical",
      "response_times": "Critical: 1 hour; High: 4 hours; Medium: 8 business hours; Low: 2 business days",
      "support_channels": [
        "Phone",
        "Email",
        "In-app chat",
        "Customer portal"
      ],
      "dedicated_support": true
    },
    "maintenance_windows": {
      "scheduled_maintenance": "Sundays 2:00 AM - 6:00 AM ET",
      "notification": "5 business days advance notice",
      "emergency_maintenance": "Reasonable efforts to provide advance notice"
    }
  },
  "data_terms": {
    "customer_data": {
      "ownership": "Customer retains all right, title, and interest in Customer Data",
      "license_to_provider": "Limited license to use Customer Data solely to provide the Service",
      "no_data_mining": true,
      "aggregated_data": "De-identified, aggregated data may be used for product improvement and benchmarking"
    },
    "data_location": {
      "regions": "United States only (AWS us-west-2 and us-east-1)",
      "customer_choice": true,
      "data_residency": "All Customer Data remains within the United States"
    },
    "data_portability": {
      "export_format": "JSON, CSV, XML, HL7 FHIR",
      "export_frequency": "Unlimited self-service exports",
      "export_assistance": "Bulk exports at no additional charge",
      "post_termination_access": "60 days"
    },
    "data_deletion": {
      "upon_termination": "Within 90 days after post-termination access period",
      "deletion_certificate": true,
      "backup_retention": "180 days"
    }
  },
  "security_compliance": {
    "security_measures": {
      "encryption_at_rest": true,
      "encryption_in_transit": true,
      "access_controls": "Role-based access control, multi-factor authentication required",
      "audit_logging": true
    },
    "certifications": [
      "SOC 2 Type II",
      "HITRUST CSF Certified",
      "ISO 27001",
      "HIPAA compliant"
    ],
    "compliance_attestations": "Annual SOC 2 and HITRUST reports available under NDA",
    "penetration_testing": {
      "frequency": "Annual third-party testing",
      "customer_access": "Executive summary available upon request"
    },
    "security_incident": {
      "notification_hours": 24,
      "notification_content": "Nature of incident, data affected, remediation steps, point of contact",
      "cooperation": "Full cooperation with Customer's incident response team"
    },
    "subprocessors": {
      "list_available": true,
      "notification_of_changes": "30 days advance notice",
      "objection_right": true
    }
  },
  "data_processing": {
    "dpa_included": true,
    "gdpr_compliance": true,
    "ccpa_compliance": true,
    "controller_processor": "Customer is Controller; Provider is Processor",
    "standard_contractual_clauses": true,
    "international_transfers": "Customer Data may be accessed by support personnel in EU and Canada with appropriate safeguards"
  },
  "intellectual_property": {
    "service_ownership": "Provider owns all right, title, and interest in the Service",
    "customer_data_ownership": "Customer owns all right, title, and interest in Customer Data",
    "customizations": "Owned by Provider; Customer receives perpetual license",
    "feedback": "May be freely used by Provider without compensation"
  },
  "restrictions": {
    "use_restrictions": [
      "No sublicensing, selling, or transferring access",
      "No illegal use",
      "No unauthorized access attempts",
      "No viruses or malicious code",
      "No infringing content"
    ],
    "reverse_engineering": "Prohibited",
    "resale": "Prohibited without written consent",
    "benchmarking": "Publication requires prior written consent",
    "competitive_use": "Prohibited for developing competing product"
  },
  "warranties": {
    "service_warranty": "Service will perform materially in accordance with documentation",
    "malware_warranty": "Service will be free of viruses and malicious code",
    "compliance_warranty": "Compliance with applicable laws including HIPAA",
    "disclaimers": [
      "Implied warranties of merchantability",
      "Fitness for a particular purpose"
    ]
  },
  "indemnification": {
    "provider_indemnifies": {
      "ip_infringement": true,
      "cap": "Total fees paid by Customer under Agreement"
    },
    "customer_indemnifies": {
      "customer_data": true,
      "misuse": true
    }
  },
  "limitation_of_liability": {
    "cap": "Fees paid or payable during the 12 months preceding the claim",
    "cap_basis": "12 months fees",
    "consequential_damages": "Excluded",
    "uncapped_items": [
      "Indemnification obligations",
      "Breach of confidentiality",
      "Willful misconduct or gross negligence",
      "Provider's breach of data security obligations"
    ]
  },
  "termination": {
    "termination_for_breach": {
      "cure_period_days": 30,
      "notice_required": "Written notice specifying the breach"
    },
    "termination_for_convenience": {
      "permitted": true,
      "notice_days": 90,
      "refund": "Pro-rata refund of prepaid fees for unused portion"
    },
    "effect_of_termination": {
      "service_cessation": "End of notice period",
      "data_retrieval_period": "60 days",
      "survival": [
        "Confidentiality",
        "Indemnification",
        "Limitation of liability",
        "Governing law"
      ]
    }
  },
  "general_provisions": {
    "governing_law": "State of Washington",
    "dispute_resolution": "Binding arbitration in Seattle, Washington under AAA Commercial Rules",
    "assignment": "Requires written consent except for affiliates, mergers, or acquisitions",
    "entire_agreement": true,
    "amendments": "Must be in writing and signed by both parties"
  },
  "order_form": {
    "products_ordered": [
      "CloudMetrics Health Intelligence Platform, Enterprise Edition",
      "Population Health Management Module",
      "Revenue Cycle Analytics Module",
      "Clinical Quality Reporting Module",
      "Patient Engagement Dashboard",
      "Executive Scorecard"
    ],
    "quantity": "250 Named User Licenses",
    "term": "3 years (April 1, 2025 - March 31, 2028)",
    "pricing": "Year 1: $550,000 ($425,000 subscription + $125,000 implementation); Years 2-3: $425,000/year",
    "special_terms": "Early termination without penalty if Provider fails to achieve HITRUST recertification"
  },
  "signatures": {
    "provider_signed": true,
    "customer_signed": true,
    "date_signed": "2025-04-01"
  },
  "validation": {
    "services_defined": true,
    "pricing_clear": true,
    "data_handling_addressed": true,
    "sla_specified": true,
    "termination_rights_clear": true
  }
}