SLAs are a critical component of any outsourcing and technology vendor contract. Beyond listing expectations of service type and quality, an SLA provides remedies when requirements aren’t met.
Following are answers to common questions about SLAs and tips on how your organization can craft effective SLAs with your vendors and partners.
A service-level agreement (SLA) defines the level of service expected by a customer from a supplier, laying out metrics by which that service is measured, and the remedies or penalties, if any, should service levels not be achieved. Usually, SLAs are between companies and external suppliers, but they may also be between two departments within a company.
A telecom company’s SLA, for example, may promise network availability of 99.999% (which works out to about five and a quarter minutes of downtime per year), and allow the customer to reduce their payment by a given percentage if that is not achieved, usually on a sliding scale based on the magnitude of the breach.
SLAs are an integral part of an IT vendor contract. An SLA pulls together information on all the contracted services and their agreed-on expected reliability into a single document. They clearly state metrics, responsibilities, and expectations so that, in the event of issues with the service, neither party can plead ignorance. It ensures both sides have the same understanding of requirements.
Any significant contract without an associated SLA (reviewed by legal counsel) is open to deliberate or inadvertent misinterpretation. The SLA protects both parties in the agreement.
Ideally, SLAs should be aligned to the technology or business objectives of the engagement. Misalignment can have a negative impact on deal pricing, quality of service delivery, and customer experience.
Most service providers have standard SLAs — sometimes several, reflecting various levels of service at different prices — that can be a good starting point for negotiation. These should be reviewed and modified by the customer and legal counsel, however, since they are usually slanted in favor of the supplier.
When sending out an RFP, the customer should include expected service levels as part of the request; this will affect supplier offerings and pricing and may even influence the supplier’s decision to respond. For example, if you demand 99.999% availability for a system, and the supplier is unable to accommodate this requirement with your specified design, it may propose a different, more robust solution.
The SLA should include not only a description of the services to be provided and their expected service levels, but also metrics by which the services are measured, the duties and responsibilities of each party, the remedies or penalties for breach, and a protocol for adding and removing metrics.
Metrics should be designed so bad behavior by either party is not rewarded. For example, if a service level is breached because the client did not provide information in a timely manner, the supplier should not be penalized.
SLAs offer numerous benefits, including:
There are several types of SLAs that clients and vendors can choose from to base their relationship, including:
The SLA should include components in two areas: services and management.
Service elements include specifics of services provided (and what’s excluded, if there’s room for doubt), conditions of service availability, standards such as time window for each level of service (prime time and non-prime time may have different service levels, for example), responsibilities of each party, escalation procedures, and cost/service tradeoffs.
Management elements should include definitions of measurement standards and methods, reporting processes, contents and frequency, a dispute resolution process, an indemnification clause protecting the customer from third-party litigation resulting from service level breaches (this should already be covered in the contract, however), and a mechanism for updating the agreement as required.
This last item is critical; service requirements and vendor capabilities change, so there must be a way to make sure the SLA is kept up-to-date.
An indemnification clause is an important provision in which the service provider agrees to indemnify the customer company for any breaches of its warranties. Indemnification means that the provider will have to pay the customer for any third-party litigation costs resulting from its breach of the warranties. If you use a standard SLA provided by the service provider, it is likely this provision will be absent; ask your in-house counsel to draft a simple provision to include it, although the service provider may want further negotiation of this point.
Should the service provider be acquired by or merge with another company, the customer may expect that its SLA will continue to be in force, but this may not be the fact. The agreement may have to be renegotiated. Make no assumptions; however, bear in mind that the new owner will not want to alienate existing customers, so may decide to honor existing SLAs.
Most service providers make statistics available, often via an online portal. There, customers can check whether SLAs are being met, and whether they’re entitled to service credits or other penalties as laid out in the SLA.
Usually these processes and methodologies are left to the outsourcing company to identify, ensuring that such processes and methodologies can support the SLA agreement. However, it’s recommended that the client and the outsourcing company work together during the SLA contract negotiation to eliminate any misunderstanding about the process and method of support as well as management and reporting methods.
For critical services, however, customers should invest in third-party tools to automatically capture SLA performance data, which provide an objective measure of performance.
The types of SLA metrics required will depend on the services being provided. Many items can be monitored as part of an SLA, but the scheme should be kept as simple as possible to avoid confusion and excessive cost on either side. In choosing metrics, examine your operation and decide what is most important. The more complex the monitoring (and associated remedy) scheme, the less likely it is to be effective, since no one will have time to properly analyze the data. When in doubt, opt for ease of collection of metric data; automated systems are best, since it is unlikely that costly manual collection of metrics will be reliable.
Depending on the service, the types of metric to monitor may include:
The goal should be an equitable incorporation of best practices and requirements that will maintain service performance and avoid additional costs.
In addition to defining the services to be provided, the contract should also document how the services are to be monitored, including how the data will be captured and reported, how often it will be reviewed, and who is involved in the review.
For more on these mistakes and others, see “15 SLA mistakes IT leaders still make.”
Cloud vendors are more reticent about modifying their standard SLAs because their margins are predicated on providing commodity services to many buyers. However, in some cases, customers are able to negotiate terms with their cloud providers.
