
Data Ownership: The organization (customer) retains full legal ownership of all data entered into the system.
Data Portability: Customers must be able to export their data easily and in standard, open formats such as CSV, XML, or PDF to facilitate migration or backup. The export process should be straightforward, secure, and ideally free of prohibitive fees.
Data Return on Termination: Upon contract termination, the provider should ensure a smooth and complete return of all customer data without retention or undue barriers.
Flexible Subscription Plans: Options to upgrade or downgrade service tiers based on current organizational needs, often on a monthly or annual basis.
Pro-rated Billing: Adjustments to charges reflecting the scale changes, ensuring customers pay only for what they use.
Notice Periods: Requirements for advance notice (e.g., 30 days) to scale down or cancel services.
Renewal Terms: Contracts often auto-renew unless the customer provides notice of non-renewal within a specified period (e.g., 30-60 days before expiration).
Cancellation Policy: Customers can typically cancel at the end of a billing cycle or contract term, sometimes requiring advance written notice.
Data Retention Post-Cancellation: Providers may retain data for a limited period post-cancellation to allow data export but should not withhold data or charge excessive fees for retrieval.
Fees and Penalties: Some contracts may include early termination fees or require full payment for the contract term; these should be clearly stated.
Data Protection Regulations: Compliance with GDPR, CCPA, or other relevant data privacy laws.
Security Standards: Implementation of ISO 27001, SOC 2 Type II, or equivalent certifications to ensure data security.