Scope of Services
Define hosted resources, supported software versions, allowed workloads, and exclusions. Attach a service catalog or schedule for clarity and change control.
A written Hosting Services Agreement creates clear expectations for both parties about uptime, security, liability, and data handling.
Multiple internal stakeholders — legal, IT, security, procurement, and business owners — should review the agreement before execution.
Define hosted resources, supported software versions, allowed workloads, and exclusions. Attach a service catalog or schedule for clarity and change control.
Specify uptime targets, measurement windows, incident response times, and credits or remedies for SLA breaches, including reporting and escalation procedures.
List technical safeguards, encryption in transit and at rest, vulnerability management, access controls, and incident notification timelines and responsibilities.
Clarify ownership of customer data, permitted uses by the provider, data export formats, and obligations for data deletion or return on termination.
Address applicable regulatory obligations (HIPAA, PCI, data privacy laws), audit rights, third-party certifications, and requirement to sign a BAA when needed.
Define termination rights, notice periods, data retrieval procedures, transition support, and any post-termination data retention or destruction responsibilities.
| Field | Configuration |
|---|---|
| Authentication Level | Email, SMS code, or KBA depending on risk |
| Signing Order | Sequential or parallel signer routing |
| Retention Policy | Automatic archive duration and export options |
| Notifications | Email reminders and completion notices |
Ensure the platform provides an audit trail and retention features that meet your legal and regulatory obligations.
Date services commence and obligations start
Monthly or annually; specify invoice due date
Commonly 30–90 days written notice
Typically 10–30 days to remediate breaches
Automatic renewal or notice period before renewal
Finalize terms, exhibits, and pricing with stakeholders
Both parties sign and the effective date is established
Provider provisions systems and begins onboarding users
Periodic SLA reviews and compliance audits
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
Optica adopted online execution to centralize vendor contracts and speed approvals.
The clinic used digital signing for patient-facing hosting and data agreements.