Hosting contract or SaaS contract: what's the difference?

A hosting contract covers the provision of infrastructure or storage space. A SaaS contract covers access to a software application delivered online. The two regimes differ on intellectual property, availability obligations and how the parties are classified under GDPR.

Is the hosting provider liable for data loss?

A hosting provider's liability for data loss depends on the contract, the exact nature of the service, the commitments made, the alleged faults and the available evidence. Contract drafting is therefore decisive: it determines the level of obligation assumed, the allocation of roles and any limitations or exclusions of liability that may be invoked.

How should subcontracting be governed in a hosting contract?

The contract must identify authorised subcontractors, provide for notification conditions in the event of a change, and clearly allocate responsibilities between the primary hosting provider and its subcontractors. Depending on the activity and sector, enhanced cybersecurity requirements may also affect the management of this subcontracting chain.

Which court has jurisdiction in a dispute with a hosting provider?

The competent court depends on the status of the parties, the contract clauses and applicable procedural rules. A jurisdiction clause can fix the competent court in advance when it is valid and enforceable. Without such a clause, or if it is poorly drafted, the question remains open and often generates preliminary litigation on jurisdiction before the merits can even be examined.

How should an SLA with a hosting provider be formalised?

An SLA must include measurable commitments (uptime rate, GTI, GTR, response times, escalation procedures) and potentially penalties. Our firm drafts or audits SLAs to ensure they have real legal value and are consistent with the other clauses of the hosting contract.

Does the Data Act affect reversibility clauses?

Yes. The Data Act strengthens the importance of reversibility, portability and provider-switching clauses in hosting and cloud contracts. Its objective is to facilitate switching between providers and reduce technical or contractual lock-in. Our lawyers draft clauses governing data return, migration conditions and transfers in compliance with applicable regulation.

Digital law firm

Hosting contract lawyer

Hosting providers, cloud operators and managed service providers bear contractual responsibility for the availability, security and integrity of their clients' data. A poorly drafted hosting contract exposes businesses to significant risks. Our firm helps you secure this contractual framework before any incident occurs.

GDPRHDSNIS2SLA

Serveur moderne dans un centre de données à l'éclairage bleuté

Our services

Our hosting contract services

Hosting contract audit

We analyse the respective obligations of the hosting provider and client: scope of service, security commitments, data storage and location, subcontracting clauses, intellectual property and incident notification mechanisms.

Hosting contract drafting

We draft hosting contracts that precisely define the scope of service, financial conditions, term, termination terms and limitation of liability, fully integrating GDPR and applicable security regulation requirements.

Hosting contract negotiation

We intervene prior to signing to negotiate contractual terms: availability commitments, data security, confidentiality, reversibility, subcontracting governance and liability clauses.

General hosting terms and conditions

We draft the general terms of service for providers commercialising hosting services online: access conditions, support levels, liability limitation in the event of outages, and data reversibility clauses at contract end.

SLA drafting and availability commitments

We draft SLAs adapted to the technical and operational realities of the services provided: GTI, GTR, uptime rates, maintenance, penalties, escalation procedures and alignment with business continuity plans.

Hosting contract litigation

We represent hosting providers and clients in disputes arising from outages, extended unavailability, data loss, failure to meet service levels or contested terminations. We build a negotiation or litigation strategy adapted to the stakes of your matter.

Essential clauses

Essential clauses of a hosting contract

A hosting contract must detail the mutual obligations of the parties precisely. These clauses directly determine the ability to hold the hosting provider contractually liable and maintain service continuity.

Hosting provider and client obligations

The scope of service must be defined precisely: allocated resources, support levels, mutual security obligations and conditions of access to technical environments. The absence of a contractual definition of scope is the primary source of disputes.

Data storage and security

Data location, encryption mechanisms, access conditions and incident notification procedures must be set out explicitly. These elements determine GDPR compliance, including the obligation to notify the supervisory authority within 72 hours (Art. 33 GDPR).

Intellectual property

The contract must specify who owns the hosted content, under what conditions the hosting provider may access it, and how it is returned at the end of the contract.

Term and termination

The minimum commitment period, notice periods, conditions for termination for cause and the effects of termination on data must be drafted without ambiguity.

Subcontracting

A hosting provider that uses subcontractors remains liable for their failures to the client. The contract must list authorised subcontractors or provide conditions under which new subcontractors may be brought in.

Limitation of liability clause

The liability cap, exclusion of indirect damages and alignment with SLA penalties must be internally consistent. The Faurecia case law (Cass. com., 29 June 2010) holds that a limitation of liability clause may be set aside if it contradicts the scope of the essential obligation undertaken.

Our approach

What sets our hosting contract firm apart

Our hosting contract law firm draws on its experience in cyber and IT litigation to frame the essential contract clauses, far from generic templates.

Every hosting contract is drafted according to the client's actual exposure: nature of hosted data, service criticality, client type, sector-specific regulatory constraints. This approach delivers a robust contract, useful in day-to-day operations, consistent with your sector's practices and capable of withstanding scrutiny in the event of a dispute.

Armoires de serveurs et câbles réseau dans un centre de données

200+IT matters handled

FAQ

Frequently asked questions about hosting contracts

Our firm's answers to the most common questions on hosting contract law.

Do you have a hosting contract to review or draft?

EMPREINTE Avocats reviews your requests and takes the time to assess your situation before any commitment. An initial exchange allows us to understand the context of your hosting contract and determine if and how the firm can intervene.