SaaS Agreement in Israel: Template, Key Clauses and Local Law (2026)

A software-as-a-service (SaaS) agreement gives a customer the right to access hosted software over the internet for a subscription fee, rather than a copy to install. It is a licence-plus-service contract covering uptime, support, data, security and renewals. Israel has no SaaS-specific statute, so a SaaS deal runs on general contract law plus privacy law, and privacy law in Israel changed significantly in 2025. This guide explains the framework, the clauses that matter and a skeleton. It is general information, not legal advice; take Israeli counsel before you sign. ## What is a SaaS agreement? In a SaaS model the provider hosts and runs the software and the customer subscribes to use it. Nothing is installed and nothing is sold outright. That shapes the contract: the customer cares about availability, support, data and continuity; the provider cares about scope of use, payment and liability limits. A good SaaS agreement reads as a service contract with a licence inside, not a software sale. ## The law that governs SaaS in Israel | Area | Governing source | |------|------------------| | Contract formation, good faith, remedies | Contracts (General Part) Law 5733-1973; Contracts (Remedies) Law 5731-1970 | | Personal data | Protection of Privacy Law, 5741-1981, as amended by Amendment 13 | | Consumer-facing subscriptions | Consumer Protection Law, 5741-1981 | | Electronic signatures | Electronic Signature Law, 5761-2001 | The big development is privacy. The Protection of Privacy Law, 5741-1981 was substantially reformed by Amendment 13, approved by the Knesset in 2024 with most provisions taking effect on 14 August 2025. The reform is often described as moving Israel closer to the European GDPR model. ## Why the 2025 privacy reform changes SaaS terms Amendment 13 matters directly to any SaaS provider that touches Israeli residents' data: - Wider definition of personal data. It now expressly includes online identifiers such as IP addresses and geolocation data, and the old sensitive category is reframed as especially sensitive data (covering biometric, genetic and location data).

• Reach to foreign providers. The law applies to organisations that process data on Israeli residents even without a local office, so a SaaS vendor serving Israeli customers is in scope.
• Governance duties. In defined cases organisations must appoint a privacy (data protection) officer, and large databases over a threshold (reported at 100,000 records) carry registration duties.
• Tougher enforcement. The Privacy Protection Authority gained expanded powers, including administrative fines without prior court approval and powers to investigate and restrict databases. The practical effect: a data-processing schedule is now a core part of an Israeli SaaS contract, not an afterthought. ## Key clauses in an Israeli SaaS agreement ### 1. Access and licence A non-exclusive, non-transferable right to access the service for the term, scoped to named users or usage limits. Make clear nothing is sold and no source code is delivered. ### 2. Subscription, fees and renewal Fees, billing cycle, currency, taxes and renewal mechanics. For consumer sign-ups, respect the Consumer Protection Law, including rules on cancellation of ongoing-transaction subscriptions. ### 3. Service levels and support Uptime commitment, maintenance windows, support hours and response targets, and a proportionate remedy (service credits) when they are missed. ### 4. Data protection and security The data-processing schedule: roles, purposes, security measures, breach notification, subprocessor controls, assistance with data-subject requests, and transfer terms, aligned with the amended Protection of Privacy Law. ### 5. Intellectual property The provider keeps all IP in the software; the customer keeps its data and content. Address ownership of feedback and configuration. ### 6. Warranties and disclaimers A limited performance warranty with a clear disclaimer of implied warranties, within the limits the contract and consumer law allow. ### 7. Liability A cap (often tied to fees paid) with carve-outs (for data breaches or IP infringement). A court will scrutinise an exclusion that is unfair to a consumer. ### 8. Term, termination and exit Term, renewal, termination for cause, and, crucially, data return and deletion on exit. A customer that cannot retrieve its data is trapped and exposed under privacy law. ### 9. Governing law and disputes Israeli law and a chosen forum and language. ## A short SaaS agreement skeleton 1. Parties and recitals

2. Definitions
3. Access rights and licence scope
4. Subscription, fees, taxes and renewal
5. Service levels and support
6. Customer responsibilities and acceptable use
7. Data protection schedule (roles, security, breach, subprocessors, transfers)
8. Intellectual property
9. Confidentiality
10. Warranties and disclaimers
11. Limitation of liability
12. Term, suspension and termination
13. Data return and deletion on exit
14. Governing law and dispute resolution
15. Signatures Use this as a structure to adapt with Israeli counsel, not a finished contract. The 2025 privacy reform is recent, so confirm the current detail before relying on any clause. ## Common mistakes - Treating data terms as boilerplate after a reform that widened scope and raised fines.

• Assuming the law does not reach you because you have no Israeli office.
• Promising uptime with no defined remedy, or a remedy out of proportion to the fee.
• Leaving data return and deletion vague, which traps the customer and raises privacy risk. ## Keeping SaaS contracts and their renewals in one place A SaaS business is a portfolio of near-identical contracts with different data schedules, service levels and renewal dates, and a privacy reform like Amendment 13 means every one of those data schedules may need review. The work of drafting each contract from a master template, checking the data and liability terms, and tracking every auto-renewal is exactly what an AI contract workspace is meant to carry in one place: generate each agreement from your approved template, see each clause flagged where it drifts from standard or carries risk, edit in plain language, and keep a live timeline of renewals and obligations. On jurisdiction depth, Adira is India-first today with other jurisdictions on its roadmap, so for Israel-specific drafting it supports the workflow while local-law depth is built out; you can read more at Adira. One source of truth across a stack of subscriptions beats scattered files when the law moves.