The Top 5 Legal Questions Asked by MSPs about Cloud Computing

*REHEAT*

As an experienced Business Contracts Solicitor, Sue Mann of Cousins Business Law has helped dozens of IT The Top 5 Legal Questions Asked by MSPs about Cloud Computing companies navigate contract law. She also offers advice about cloud computing.

Sue’s last guest post for this blog “Your MSP contract – what is in and what is not?” received very warm feedback from all who read it.

I asked Sue to write another post about the questions she frequently hears about cloud – she kindly agreed. Here, Sue answers the top 5 questions asked by MSP’s about Cloud Computing.

The Top 5 Legal Questions Asked by MSPs about Cloud Computing

Cloud computing is far from a new idea, but the difference now is that it’s becoming more widely accepted and used in businesses of all sizes. That means that those MSPs who haven’t already started moving their clients to cloud solutions are looking at this much more seriously.

Clearly as IT specialists, MSPs are in a much stronger position than I am to assess the technical and financial pros
and cons. But from discussions with Richard, I’m aware that a number of questions tend to be raised by MSPs around some of the legal issues. I’d like to try and help here.

1. Who is the Cloud Customer?

Not so long ago, MSPs’ clients using cloud services would probably have done so by buying those services direct from the cloud vendor. The market is now changing, with more cloud vendors coming into the sector with a broader range of offerings.

It’s becoming less usual for the small business client to buy direct from the cloud vendor and for MSPs to become the reseller.

To that extent, the MSP becomes the ‘middle man’ in the supply chain. From a legal point of view, the MSP is then the customer of the cloud vendor.

The MSP will be selling the cloud services on to its clients. Keeping this relationship in mind will help in answering a number of the other common questions which arise.

2. My MSP client hasn’t paid me. Do I still have to pay the cloud computing vendor?

Following on from the previous point, you will be the customer so far as the cloud vendor is concerned. So the short answer is yes, the cloud vendor will want payment even if your client doesn’t pay you.

Each business contract depends on its own particular terms, but the majority of cloud vendors will expect to use their standard terms. Note that these will generally be heavily in their favour, including as to payment. I expect they will have little sympathy if your client hasn’t paid you.

I can suggest two ways that you can protect your MSP business in this situation. Firstly – and this is a general rule which applies to all arrangements with your MSP clients – make sure you don’t agree to more than you can deliver.

Where you take on arrangements which require you to do something, make sure that you will be in a position to meet your obligations. In this case, make a payment at a specific time to the cloud vendor.

So, the contract with your client should require your client to pay you in advance of the date you have to pay the cloud vendor. Include protective measures as well such as a right to suspend your service, charge interest and so on if your client doesn’t pay you on time.

Are you a third-party reseller or provider of #cloud solutions? Do you know your legal responsibilities? In this blog, @tubblog invites a business contracts solicitor to answer 5 #MSP FAQ about #cloudcomputing Click to Tweet

What Else can You do?

Secondly, if your client’s failure to pay might be part of a wider dispute or the end of your relationship with them. If possible, negotiate an option with the cloud vendor allowing you to terminate the cloud service in respect of that client.

This is more likely to be possible where your contract with the cloud vendor covers multiple clients. What you will need is the ability to reduce the number of users under the contract.

Your negotiating position is also likely to depend on factors such as the length of the term of the contract between you and the cloud vendor.

Check whether the fee is a monthly or other periodic fixed charge or variable according to usage. And keep in mind the principle of not exposing your business to the cloud vendor more than you can definitely cover with your client.

3. My MSP client’s data stored in the cloud has been lost or corrupted. Am I liable?

As the reseller of the cloud service to your client, your client has no direct contract with the cloud vendor. What you should do is to check what assurances the cloud vendor offers as regards the safety and security of the data.

See if it provides any indemnity for loss or corruption and mirror those in the contract with your clients. Doing so means you’re not promising more than you can provide.

On a client relations point, you are their advisor and the expert as far as your client is concerned. Make sure they understand what is and is not covered to try and avoid any dispute over liability arising in the first place.

Before you engage a cloud vendor, it is important to do preliminary due diligence checks. Look at if they cover the physical and technical security of the cloud vendor’s service.

This includes their back up and testing procedures to ensure that the possibility of a loss or corruption of your client’s data is minimised. Should it occur, prompt restoration should be feasible.

4. My MSP client isn’t happy with the cloud computing vendor’s service. Whose responsibility is it?

As I’ve said before, as far as your client is concerned you are providing the service to them. You have to take responsibility for sorting it out if there’s a problem.

To do that you will need to follow the procedures you have agreed with the cloud vendor. My suggestion here is to make sure your contract with the cloud vendor includes:

a comprehensive description of the service the cloud vendor is to provide
Which is backed up by service levels for key areas
And if possible, some form of ‘incentive’ in the form of service credits

The obligations you undertake with your client should then not exceed what the cloud vendor undertakes with you. Think of it as a back to back arrangement with your client where what you offer is no more than you receive from the cloud vendor.

5. My contract with the cloud computing vendor is coming to an end. What will happen to my client’s data?

This time I won’t repeat myself, but will launch straight in. Make sure your contract with the cloud vendor covers what will happen to data stored in the cloud when the contract ends for whatever reason.

The contract should include provisions for an orderly transfer of the data either to you (so you can pass it on to your client) or to a new cloud vendor.

Without appropriate cover, there will be a danger of lock-in to an unsatisfactory cloud vendor. Such provisions will also be critical if anything happens to the cloud vendor such as insolvency.

Conclusion

To sum up, my advice is to carry out thorough preliminary checks. Weigh up the potential benefits, risks and legal obligations.

Make sure that whatever terms are finally agreed in relation to the cloud computing service are recorded in written contracts with both cloud vendor and your client.