Skip to content
Guides

Vendor contracts

These guides cover the contracts a technology company signs with its customers and its vendors, and the privacy terms they must carry: the data processing agreement, the master service agreement, the statement of work and the pilot or proof-of-concept agreement.

Guides in this section

  • Do you need a DPA? GDPR Article 28 and CCPA service provider terms

    When the GDPR and the CCPA require a data processing agreement, the terms each law requires side by side, and where vendor DPAs usually fall short.

    Last reviewed

  • Master Service Agreements

    How a master service agreement works with statements of work: liability caps matched to risk, change management, and termination rights on both sides.

    Last reviewed

  • Scope of Work

    What a statement of work should state: deliverables with acceptance criteria, payments tied to milestones, assumptions and exclusions, and change requests.

    Last reviewed

  • Pilot contracts

    How to structure a pilot or proof-of-concept agreement: success criteria, limits on scope, protection of intellectual property, and terms for conversion.

    Last reviewed

From the author's publications

Where the firm does this work