We are a SaaS company and I have been asked to review the 'Security' section of the contract proposed by one of our potential clients. I would like to know whether the following two statements are regular standards followed in SaaS contracts? As far as I can see, it looks reasonable. Given that we have industry standard anti-malware precautions in place, I feel I can give that sentence a go-ahead. However, I would like to make sure there are no hidden surprises.
Should it transpire that a Malware infection is attributable solely to the Client, the latter will bear the cost of diagnostics and restoration.
Should it transpire that a Malware infection is attributable to the Provider, the latter will bear the cost of diagnostics and restoration.
Does it look okay to okay the above two statements, especially the second one. We are the 'Provider'.