SaaS Contract Red Flags: What You’re Actually Agreeing To

The short answer: The demo is 45 minutes; the contract governs 36 months. Before you sign, check seven things: the auto-renewal notice window (miss it and you’re locked another year), whether price increases at renewal are capped or uncapped, whether you can terminate for convenience or only the vendor, what happens to your data when you leave (Salesforce, for example, gives you 30 days after termination to retrieve it — then it’s deleted), whether the SLA’s only remedy is service credits, and whether the tool auto-upgrades your tier when you cross a usage metric. None of this is on the pricing page. It’s all in the MSA and the order form — which is the document you’re actually agreeing to.

This guide is educational, not legal advice. Contract terms are vendor-specific, change over time, and your order form controls — nothing here tells you what your specific contract means, and nothing here advises breaching or ignoring any term. For a real dispute, talk to a lawyer.

---

1. Auto-renewal with a notice window you’ll miss

Nearly every SaaS subscription auto-renews by default — that’s the standard clause type, and it’s usually the first one you’ll find in the “Term and Termination” section. The expensive part isn’t the renewal itself; it’s the non-renewal notice window: the contract requires you to give notice a set number of days before the term ends, or the renewal locks in automatically.

What the windows look like in practice:

• HubSpot’s current Customer Terms of Service (§4.1–4.2): the subscription “automatically renew[s] for the shorter of the same duration as your prior term or one year,” and unless your Order says otherwise, “you must turn off the auto-renewal setting in the Account & Billing section of your HubSpot account prior to the end of your Current Term.” Older HubSpot terms required written notice no more than 90 days but no less than 45 days before term end — the deadline and method have changed across versions, which is exactly the point: check your order form, not your memory (legal.hubspot.com, verified October 2026).
• Microsoft’s Online Subscription Agreement for commitment offerings: automatic renewal is preselected — “You can change your selection at any time during the Term,” and for terms longer than one month Microsoft provides notice of the renewal before expiration. The renewal itself is governed by the “Renewal Terms” posted on the renewal date, which you’re free to decline — by not renewing (microsoft.com terms of sale, verified October 2026).
• Salesforce’s MSA: renews for successive terms “equal in duration to the Initial Term (or one year, if the Initial Term is greater than one year) at salesforce.com’s then current fees” (Salesforce MSA, verified October 2026).

The practical move: the day you sign, calendar the renewal date and the non-renewal deadline, and note the required method (in-app toggle? email to an account manager? written notice?). A toggle in a billing portal is a very different friction level from a certified letter.

2. Price-increase clauses: capped, or uncapped

Read the pricing section for what happens at renewal — not during the term. Microsoft’s agreement is the cleanest example of the clause type: “During the Term of your Subscription, prices for Online Services will not be increased … except where prices are identified as temporary in the Offer Details.” The next sentence is the one that matters: “All prices are subject to change at the beginning of any Subscription renewal.” Salesforce’s MSA renews at “then current fees.” That word pair — then current — is the whole mechanism: the renewal price is whatever the vendor’s price list says on that date.

Some contracts do cap the uplift — one archived Salesforce MSA version limited renewal pricing increases to 7% over the prior term’s pricing (unless the prior term was promotional). But that was a specific archived version, and most MSAs carry no cap at all. The question to answer before signing: is the renewal uplift capped in your order form, and if so at what percentage? If the answer is “uncapped,” model it — a 25% uplift on a $5,000/year tool is $1,250 a year of budget you never approved.

3. Termination for convenience: who has it?

This is the asymmetry check. In many SaaS contracts, the customer can only terminate for cause (material breach, uncured after notice — typically 30 days), while the vendor reserves broader rights. HubSpot’s current terms are the textbook example: “you may not cancel your subscription prior to the end of your Current Term, and we will not provide any refunds of prepaid fees or unused Subscription Fees” — and an earlier HubSpot version’s “Early Cancellation” section said it outright: you can cancel early at your convenience provided that you pay all fees through the end of the term anyway (legal.hubspot.com, verified October 2026).

So ask the question the contract answers but the salesperson won’t volunteer: if the tool stops being useful in month 4 of a 12-month term, what do you owe? For many vendors, the answer is all 12 months. That doesn’t make the contract unfair per se — but it means a 12-month term is a 12-month financial commitment, and you should sign it like one.

4. Data export on exit: the format, the clock, the fee

This is the red flag that costs the most when it bites. Your records — customers, invoices, history — live in the vendor’s database, and the contract decides what happens to them when you leave.

Salesforce’s MSA (§12.5, “Return of Your Data,” verified October 2026) states the mechanics plainly: “Upon request by You made within 30 days after the effective date of termination of a Purchased Services subscription, We will make available to You for download a file of Your Data in comma separated value (.csv) format along with attachments in their native format. After such 30-day period, We shall have no obligation to maintain or provide any of Your Data and shall thereafter, unless legally prohibited, delete all of Your Data in Our systems.”

Read that clause like an owner, not a lawyer:

• The clock is 30 days, and the request has to be yours. Miss the window and your data may be deleted — no legal obligation to keep it.
• The format is CSV — flat rows, not the relational structure, automations, or report definitions you built. Budget for rebuilding, not just re-importing.
• This is one of the more generous policies in the industry. Plenty of tools give you less — a manual export button, a PDF, or nothing specified at all.

The pre-signing move: export your data on day 30 of the subscription (test the exit before you need it), confirm the format is something you can actually re-import, and calendar the export as part of your renewal review. The full playbook lives in our companion guide on vendor lock-in and switching costs.

5. SLA remedies capped at service credits

Service-level agreements look like protection until you read the remedy. The industry-standard clause type: if the service goes down, your remedy is service credits against future bills — and that’s your sole and exclusive remedy. Salesforce-family SLA documents state it outright: “the service credit described herein shall be Customer’s sole and exclusive remedy” for SLA breaches (Salesforce MuleSoft Cloud Offerings SLA, verified October 2026), and datacenter-industry guidance treats credits-plus-termination-rights as the standard ceiling — no separate claim for consequential damages from the outage.

Translate that: a day of downtime that costs you $10,000 in lost sales gets you a few hundred dollars of future subscription credit — if you claim it within the claim window (often 10–20 days after the affected month/quarter). The SLA doesn’t make you whole; it prices the vendor’s failure at a discount to itself. When evaluating an SLA, ask what percentage of monthly fees the credits actually represent at each uptime tier — and whether termination for chronic failure is available as an alternative.

6. Auto-tier-ups: the meter that upgrades you

Some contracts let the vendor move you to a higher tier — or start billing overage rates — when you cross a metric: users, contacts, API calls, storage, transactions. HubSpot’s current terms note that “on renewal, the current product usage limits … will apply to your subscription” (legal.hubspot.com, verified October 2026) — the product-usage-limits clause type, which lives in each product’s specific terms and changes with them.

The mechanics to check: (a) what the metric is and whether you can see it in real time; (b) whether crossing it triggers an automatic tier change or an overage bill (and whether the overage rate exceeds the base unit price); (c) whether the upgrade is retroactive or prospective. A per-seat tool where part-time staff burn full seats is the same problem in a different costume — see the per-seat vs. usage pricing guide for the math that decides which model fits your shape.

7. Trials that convert — and reminders that don’t

Free trials that roll into paid subscriptions are now explicitly regulated in California: the state’s amended automatic renewal law (AB 2863, effective July 1, 2025) expanded coverage to trial-to-paid conversions, requires express affirmative consent to the renewal terms, same-medium cancellation (sign up online → cancel online), annual renewal reminders, and fee-change notices (leginfo.legislature.ca.gov, law firm analyses verified October 2026). About 30 states now have some form of auto-renewal law, and New York City’s click-to-cancel rule took effect October 1, 2026 — but the details differ state by state, so “your state’s requirements” is a real research step, not boilerplate.

The federal picture, as of October 2026:

• The FTC’s click-to-cancel rule — finalized October 2024 — was vacated by the 8th Circuit on July 8, 2025 on procedural grounds, days before its compliance date. On March 11, 2026, the FTC issued an Advance Notice of Proposed Rulemaking to restart the effort; as of this writing, no replacement rule or timetable has been announced (comments closed April 13, 2026; staff review was on the regulatory agenda for July — nothing published since).
• What survived is the Restore Online Shoppers’ Confidence Act (ROSCA), 15 U.S.C. §§ 8401–8405 (enacted 2010): sellers must disclose all material terms clearly before obtaining billing information, get express informed consent before charging, and provide simple mechanisms to stop recurring charges. Violations are treated as FTC Act violations — and the FTC is enforcing it: Amazon paid $2.5 billion in September 2025 ($1 billion civil penalty + $1.5 billion in restitution) to settle allegations it misled customers into Prime and obstructed cancellation (govinfo.gov US Code, Title 15, Ch. 110; FTC reporting verified October 2026).

ROSCA and state ARLs bind the seller’s conduct — they’re about how subscriptions are sold and canceled. They don’t rewrite your B2B order form’s renewal terms. The contract still governs.

---

The 20-minute contract review

Work through any SaaS agreement in this order — the questions are the review:

1. Renewal date and non-renewal deadline. Calendar both, plus the required notice method. (Red flag 1)
2. Renewal pricing. Capped at a percentage? “Then-current fees”? Introductory pricing that snaps to list? (Red flag 2)
3. Mid-term exit. What do you owe if you cancel in month 4 of 12? Termination for convenience — yours, theirs, or nobody’s? (Red flag 3)
4. Data export. Request window, format, and what happens after it closes. Test the export in week one. (Red flag 4)
5. SLA remedy. Credits only? What’s the claim deadline? Is termination-for-chronic-failure an alternative? (Red flag 5)
6. Usage meters. What triggers a tier-up or overage, and can you see the meter? (Red flag 6)
7. Trial terms. When does the trial end, what does it convert to, at what price, and is cancellation one click? (Red flag 7)

If you can’t find the answer to any of these in 20 minutes, that’s the answer: the ambiguity is doing work for the vendor, not for you. Ask the salesperson to point to the section — in writing — before you sign.

Methodology

Clause mechanics are from primary sources verified in October 2026: Salesforce’s Master Subscription Agreement and SLA family (term/renewal, “then current fees,” §12.5 data-return terms, sole-and-exclusive-remedy SLA language); HubSpot’s current Customer Terms of Service (legal.hubspot.com §§4.1–4.4, renewal, non-renewal, early cancellation); Microsoft’s Online Subscription Agreement and Store Terms of Sale (preselected auto-renewal, during-term price protection, at-renewal repricing). Vendor terms change over time — clause types are stable, exact wording isn’t; this guide describes what to look for, not what any current contract says. Statutory and regulatory status: ROSCA (15 U.S.C. §§ 8401–8405, via govinfo.gov); the FTC’s vacated click-to-cancel rule and March 2026 ANPR status (law-firm analyses of the Federal Register docket and the FTC’s regulatory agenda, verified October 2026 — no replacement rule as of October 5, 2026); California AB 2863’s July 1, 2025 ARL amendments (Lexology and law-firm coverage; statute via leginfo.legislature.ca.gov); NYC’s click-to-cancel rule effective October 1, 2026 (NYC DCWP guidance reporting); EU Data Act switching provisions (secondary legal commentary corroborated across sources). Figures that are directional rather than load-bearing are attributed as such. This page is educational, not legal advice.

Sources

• Salesforce Master Subscription Agreement (term, auto-renewal at then-current fees, §12.5 Return of Your Data: 30-day request window, CSV format, deletion after window) — salesforce.com legal archive, verified October 2026
• HubSpot Customer Terms of Service (§§4.1–4.4: auto-renewal for shorter of same duration or one year; non-renewal via auto-renewal toggle; no early cancellation; termination for cause only) — legal.hubspot.com, verified October 2026
• Microsoft Online Subscription Agreement & Store Terms of Sale (auto-renewal preselected; no price increases during term; all prices subject to change at renewal; advance notice of price changes) — microsoft.com, verified October 2026
• Salesforce SLA family (service credits as “sole and exclusive remedy”) — salesforce.com legal documents, verified October 2026
• ROSCA, 15 U.S.C. §§ 8401–8405 (disclosure, express informed consent, simple cancellation mechanisms; violations treated as FTC Act violations) — govinfo.gov, verified October 2026
• FTC click-to-cancel rule vacated (8th Cir., July 8, 2025); ANPR issued March 11, 2026; no replacement rule or timetable as of October 2026 — law-firm analyses verified October 2026
• Amazon Prime settlement: $2.5B ($1B penalty + $1.5B restitution), September 2025 — FTC reporting verified October 2026
• California automatic renewal law amendments (AB 2863, eff. July 1, 2025: trials covered, express affirmative consent, same-medium cancellation, annual reminders, fee-change notices) — leginfo.legislature.ca.gov and law-firm coverage, verified October 2026
• NYC click-to-cancel rule (effective October 1, 2026; penalties $525/$1,050/$3,500) — NYC DCWP reporting verified October 2026
• EU Data Act switching provisions (applicable Sept 12, 2025; structured machine-readable exports; switching charges eliminated by Jan 12, 2027) — secondary legal commentary, verified October 2026

Frequently asked questions

My salesperson says the auto-renewal “never gets enforced.” Should I believe them? No. What the salesperson says doesn’t amend the contract — the MSA and the order form do. If a promise matters to you (a price cap, an exit right, an export format), get it in the order form. Verbal assurances from sales aren’t terms.

If the vendor’s terms are non-negotiable, what’s the point of reading them? Negotiation isn’t the only payoff. Knowing the renewal deadline, the export window, and the meter that triggers a tier-up lets you operate the contract — calendar the deadlines, test the export, watch the meter. Most of the expensive mistakes this guide prevents don’t require a redline; they require a calendar.

The contract says California law applies. Do I get the protections described here? The contract’s choice-of-law clause and your state’s consumer/business protection statutes are different things — and the state’s ARL protections discussed here are consumer-facing frameworks whose application to B2B software purchases varies. That’s a lawyer question, not a reading question. The operational takeaways (calendar deadlines, test exports) work regardless.

What about the EU Data Act — does it protect my US business? No. The Data Act binds providers serving EU customers on EU-covered contracts (applicable since Sept 12, 2025; switching charges eliminated by Jan 12, 2027). If your business and your customers are US-only, it doesn’t govern your contract. It matters to you as a signal of where exit-rights regulation is heading — and as leverage if your vendor operates globally.

We stopped using the tool in month 5 of a 12-month contract. Can we just stop paying? This guide can’t answer that for your contract, and stopping payment unilaterally can create its own liability. Read the termination section, talk to the vendor about options (downgrade, suspension, early termination), and if the amounts are material, talk to a lawyer before you act — not after.