Cyprus Tech Startup Contract Law 2026 — SaaS Terms, MSAs, SLAs, Liability, EU Common Frame

1. Cyprus contract law framework

• Cyprus Contract Law Cap. 149 — basic contract principles (offer, acceptance, consideration, intention).
• Cyprus Sale of Goods Law Cap. 267 — supplements general contract law for goods.
• Sale of Services + General Conditions Law 56(I)/1999 — services-specific consumer protection.
• EU consumer protection directives (UCPD, Distance Selling, Digital Services Act) layered on top.
• GDPR + data-protection-specific terms — Cyprus Personal Data (Processing) Law 125(I)/2018.

2. SaaS Terms of Service essentials

• Service description — clear scope of what's provided.
• Acceptable Use Policy (AUP) — prohibited uses (illegal, infringing, abusive).
• Subscription terms + auto-renewal + cancellation.
• Payment terms + late-payment consequences.
• Service Level Agreement (SLA) — uptime commitments + remedies.
• Data protection — GDPR Article 28 Data Processing Agreement embedded.
• Intellectual property — customer data ownership vs platform IP.
• Liability limitation — typically 12-month-fee cap; gross-negligence carveout.
• Indemnification — IP infringement, gross negligence, wilful misconduct.
• Term + termination — convenience, breach, insolvency.
• Governing law + jurisdiction — Cyprus law + Cyprus courts, or English law + arbitration.

3. Master Service Agreement (MSA) + Statement of Work (SoW)

For B2B services Cyprus startups commonly use MSA + SoW structure:

• MSA — governing terms (liability, IP, confidentiality, payment terms, dispute resolution).
• SoW — project-specific scope, deliverables, timeline, pricing.
• Allows ongoing commercial relationship with multiple SoWs under one MSA.
• Cleaner accounting + tax treatment of multi-project engagements.

4. Liability limitation in Cyprus

• Cyprus permits contractual liability caps (typically 12-month-fee cap for SaaS).
• Cyprus unfair-contract-terms framework (Cyprus Unfair Terms in Consumer Contracts Law 93(I)/1996) limits enforceability of unduly broad disclaimers against CONSUMERS.
• B2B contracts — broader latitude for liability caps.
• Excluded from limits: liability for death / personal injury (statutory non-excludable), fraud + dishonesty, wilful misconduct, gross negligence (case-specific Cyprus interpretation).

5. Governing law + jurisdiction clauses

• Cyprus law + Cyprus courts — natural choice for Cyprus-incorporated companies.
• English law + London courts — popular international standard for B2B technology contracts.
• ICC arbitration in Cyprus (Limassol) — commercial dispute resolution venue.
• LCIA arbitration in London — popular for high-value tech contracts.
• Choice influenced by counterparty expectations + enforcement-jurisdiction needs.

6. Specific Cyprus-incorporation considerations

• Cyprus customer contracts: Cyprus VAT 19% applies on B2C sales; EU B2B reverse charge.
• UK customer contracts: post-Brexit place-of-supply rules + UK VAT (see /articles/cyprus-vat-services-to-uk-post-brexit-2026).
• US customer contracts: outside EU VAT; US state-tax rules apply at customer side.
• Standard contract terms apply alongside specific Cyprus regulatory layers (financial-services, MiCA, GDPR).

Frequently Asked Questions

Share this article

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.