SoftwareHouse, Inc. (SHI) is a license clearing house. Sure, you get your license and bits through a SaaS interface and they have privacy terms but there is not really any terms of service or security or privacy terms with the software developer or publisher.
For applicable terms and conditions to the software purchased, you must go to the upstream software publisher. This then becomes a bit dodgy in that many software publishers are "some random guy in a basement" (SRGIB) who has not given thought to security or privacy requirements even though the use case for the software is innocuous and will rely on other means to provide security and privacy controls.
What I am getting at is that SHI is not going to provide you with terms and conditions for the software you purchase only for the act of purchase. As part of the purchase process, you should engage the publisher to understand their terms and conditions so that the most appropriate controls can be put in place for your use case. If they are processing, transmitting, or storing any Personal Information (remember that IP Addresses are PI) they will need to have controls to protect that data.
Yes, I have scars.
Original Message:
Sent: 06-14-2021 10:45 AM
From: Sonali Patel
Subject: Cloud Based Vendors
Thank you Tracy -- I can certainly request these documents, I have meeting tomorrow with IT head, I can request that from him or either directly from vendor.
do you know a vendor named SHI ? basically they are our main service provider and our IT vendors are usually managed via them.
Original Message:
Sent: 06-10-2021 12:13 PM
From: Tracy Wilson
Subject: Cloud Based Vendors
We print off any online agreements that are applicable at the time the product/service was purchased and store those as our contract agreements along with a copy of the invoice which typically includes the term. This way we can still track the upcoming renewal or expiry and helps prevent products/services from automatically renewing when they are no longer being used.
Original Message:
Sent: 06-10-2021 08:49 AM
From: Dave Howe
Subject: Cloud Based Vendors
Online/cloud vendors often will have separate pages with different resources – for example Terms of Service.
That usually will have what other companies will encapsulate within a more traditional contract.
Privacy clauses are also often in other places, presumably so that they can be adapted/changed without touching original contracts/invoices.
Thanks,
Dave
David Howe
Chief Information Officer
Original Message:
Sent: 6/10/2021 8:40:00 AM
From: Anonymous Member
Subject: Cloud Based Vendors
This message was posted by a user wishing to remain anonymous
Cloud based vendors ( relevant to IT sector), there are usually no written contract for these types of vendors, how should they be managed on venminder ? I am fairly new to Venminder, and I have seen some interesting discussion on this board, I was wondering if I can get some feedback on my question.