SaaS Agreements in the Philippines: Key Clauses for Buyers and Vendors

Software as a service (SaaS) is delivered and paid for online, so a SaaS agreement in the Philippines is governed in large part by the Electronic Commerce Act (Republic Act No. 8792). That law provides that a contract cannot be denied validity or enforceability solely because it is in the form of an electronic data message or electronic document, and that an electronic signature can be equivalent to a handwritten one. A well-drafted SaaS agreement therefore allocates service levels, data responsibilities, and liability between vendor and customer — while Philippine law supplies the baseline rules on electronic contracts, signatures, and records.

What makes a SaaS contract valid in the Philippines

Under Section 16 of the Electronic Commerce Act, an offer, its acceptance, and the other elements required for contract formation may be expressed, demonstrated, and proved through electronic data messages or electronic documents. No contract is denied validity or enforceability solely because it is electronic.

This means a click-through or online subscription can form a binding contract. The practical point for both sides is to keep the terms, order details, and acceptance records retrievable, because the law recognizes electronic documents that maintain their integrity and can be authenticated.

Electronic signatures and contract formalities

Section 8 of the Electronic Commerce Act provides that an electronic signature on an electronic document is equivalent to a signature on a written document if a prescribed procedure, not alterable by the interested parties, existed under which a method identifies the party to be bound, that method is reliable and appropriate, and the other party can verify the signature.

Section 9 adds a presumption: in any proceeding involving an electronic signature, it is presumed to be the signature of the person to whom it correlates and to have been affixed with intent to sign, unless the relying party knows of defects or reliance is unreasonable. For SaaS vendors, this favors using a documented, verifiable signing process rather than informal email approvals.

Records, originals, and audit trails

For compliance and disputes, Section 7 of the Act gives electronic documents the legal effect of any other writing where they maintain integrity and reliability and can be authenticated. Section 10 treats the original-form requirement as met where integrity is shown and the information can be displayed to the person to whom it is to be presented. Section 13 allows retention in electronic form if the record remains accessible, is kept in its generated format or an accurate representation, and identifies originator, addressee, and the time sent or received.

A SaaS agreement should therefore require logs, versioned terms, and retrievable records that satisfy these conditions.

Liability of the SaaS provider as a service provider

Section 30 of the Electronic Commerce Act limits the liability of a service provider, as defined in Section 5, for merely providing access, where the claim is founded on the parties' obligations under the electronic document or on the making, publication, or distribution of material. The protection does not apply if the provider has actual knowledge of unlawful material, knowingly receives a direct financial benefit from the unlawful activity, or directly commits or induces the infringement. It also does not affect obligations founded on contract.

For SaaS vendors, this means the statutory shield is narrow: contractual commitments on uptime, support, and data handling remain fully enforceable.

Data security, confidentiality, and lawful access

Section 24 lets parties to an electronic transaction freely determine the type and level of security they need and select appropriate technological methods. Section 31 restricts access to electronic files and electronic keys to the individual or entity with the legal right to possess or use them, and bars releasing an electronic key without consent. Section 32 imposes an obligation of confidentiality on persons who obtain access to electronic keys, data messages, documents, or similar material under the Act.

These provisions support clauses on encryption, access controls, and confidentiality that buyers should expect to see in any serious SaaS contract.

Frequently asked questions

Is a SaaS subscription contract valid in the Philippines? Yes. Under Section 16 of the Electronic Commerce Act, a contract is not denied validity solely because it is formed through electronic data messages or documents.

Are electronic signatures binding on SaaS agreements? They can be, if the requirements of Section 8 are met and the presumption in Section 9 applies. Using a verifiable signing procedure strengthens enforceability.

Is the SaaS provider liable for content it merely hosts? Section 30 limits liability for mere access in defined situations, but the protection is lost where the provider has actual knowledge of unlawful material, benefits directly from it, or commits the unlawful act — and it never overrides contractual obligations.

Practical takeaways

• Confirm the agreement is formed and recorded electronically in a way that satisfies Sections 7, 10, and 13 of the Electronic Commerce Act.
• Use a documented, verifiable electronic signing procedure to take advantage of the Section 9 presumption.
• Do not assume Section 30 immunity: contractual service levels and data obligations remain enforceable.
• Address security and confidentiality expressly, consistent with Sections 24, 31, and 32.
• Keep retrievable logs and versioned terms for audits and disputes.

Primary sources

The rules discussed above are drawn from the following primary sources, as published in the Official Gazette and the national statute book.

• REPUBLIC ACT NO. 11232 - AN ACT PROVIDING FOR THE REVISED CORPORATION CODE OF THE PHILIPPINES

• REPUBLIC ACT NO. 8792 - AN ACT PROVIDING FOR THE RECOGNITION AND USE OF ELECTRONIC COMMERCIAL AND NON-COMMERCIAL TRANSACTIONS, PENALTIES FOR UNLAWFUL USE THEREOF, AND OTHER PURPOSES

This article is general information and not legal advice. For your specific situation, consult a lawyer or ask ASG Legal AI.