Geoffrey Caesar

SaaS terms of service govern the relationship between a SaaS provider and its customers, and they need to do several things at once: license the software, allocate liability, allocate IP in customer data and configurations, document the service levels, address data protection, and handle termination. Where SaaS terms make their

Managed services agreements differ from one-off service agreements because the relationship is ongoing: the supplier operates something on a continuous basis, often with embedded technology, often touching the customer's data and systems. What managed services agreements need to address The drafting points that matter most are: scope and

The EU AI Act applies extraterritorially to a wider range of organisations than many UK businesses initially realise, including those with AI systems available in the EU, those whose outputs are used in the EU, and those acting as providers, deployers, importers, or distributors under the Act's terminology.

Procuring AI products and services is more risky than procuring traditional software, because the questions are different: what data is the model trained on, what data am I providing for inference, what happens to my prompts and outputs, what are the model's known limitations, and who is responsible

AI governance is the discipline of ensuring that an organisation's use of AI is documented, monitored, and consistent with its legal obligations and values. What the kit puts in place The starter kit puts the foundational artefacts in place: an acceptable use policy; an AI inventory (a register

Many existing commercial contracts were drafted before AI was a meaningful part of the supplier's or the customer's operations, and they do not address it. Updating contracts to address AI is a discrete piece of work that affects IP in AI inputs and outputs; confidentiality (where

AI use in workplaces has outpaced the policy infrastructure. Most employees now use consumer AI tools (for drafting, summarising, research, and code generation), and most employers do not have a clear written position on what is permitted, what is prohibited, and what is done with the output. What an acceptable