Transition clauses, handover of files and data, and usage rights: protecting operational continuity
One of the most common assumptions in contract management is that the supplier will remain in place. Operational plans are built on that basis, orders are placed, and commitments are made to customers. Then the supplier stops operating—not because of a dispute or a breach, but because an external event has brought its operations to a halt. This raises the question no one asked at signing: what happens if the supplier stops operating? And who owns the files, data, and usage rights the replacement needs?
The issue here is not why the supplier stopped operating. It is whether the company can transition to a replacement without interrupting its operations. That depends neither on goodwill nor on the speed of the response, but on the contract’s provisions governing transition, handover, and usage rights.
The Civil Transactions Law requires a contract to be performed in accordance with its provisions and in a manner consistent with good faith. A contracting party’s obligations are not limited to the express terms; they also extend to the contract’s necessary implications under statutory provisions, custom, and the nature of the transaction. This means that an obligation requiring the provider to hand over what it holds on exit may not be expressly written into the contract, yet may follow from the nature of the relationship. The difference between relying on an express clause and relying on the nature of the transaction is the difference between a strong position in defending your rights and one dependent on a possible judicial interpretation.
The same Law also addresses contractual interpretation. Where interpretation is required, the parties’ common intention is sought rather than relying solely on the literal meaning, with guidance drawn from custom and the circumstances in which the contract was concluded. If ambiguity remains, it is interpreted against the party that drafted the clause. A company contracting with a provider that uses its own template may find protection in this rule: ambiguity is interpreted against its author. But this protection is no substitute for clarity. An express clause is stronger than judicial interpretation because it leaves no room for differing interpretations.
When the Law alone is not enough
Saudi government contracts provide a clearer framework. The Ministry of Finance’s approved consultancy services contract template expressly requires the contractor, upon completion, termination, or expiry of the contract, to stop using any confidential data and information belonging to the government entity and to delete it permanently in accordance with the entity’s secure deletion provisions, unless destruction or return to the entity is requested. This is more than an ethical obligation; it is a contractual right enforceable in court.
In commercial contracts between private companies, however, there is no equivalent statutory provision requiring a provider to hand over data or files when the contract ends. The obligation arises from the contract, rather than from the Law. If the contract does not specify a transition mechanism, the affected company is left relying on a general rule: the contract binds the parties to its provisions and to what its nature requires. But where the contract is silent, the burden of establishing that data handover is required by the nature of the contract falls on the party asserting it.
The irony is that a company relying on an external provider for critical services may be in a weaker position than one that manages everything internally. The external provider holds the data, the licences, and the operational knowledge. A company without these elements does not control its operational continuity.
Transition requires more than a single clause
One common mistake in drafting contracts for ongoing services is to describe the provider’s obligations in general terms, such as: “The provider shall deliver the services in accordance with the agreed specifications.” This clause covers performance, but not exit. Exit is the ending of performance, rather than performance itself. It therefore requires separate provisions.
Transition provisions should identify three elements: what must be handed over, when, and how. “What” includes databases, files, records, documents, and any tangible or intangible assets used in performing the contract. “When” includes the handover period, which must give the company sufficient time to begin operating with the replacement. “How” includes the form of delivery, the encryption system, the technical format, and responsibility for conversion costs.
Every ongoing services contract will eventually end. Transition is a certainty, rather than a remote possibility. A company that enters into ongoing service contracts without a transition clause prepares for only one scenario: continuation of the contract. Yet contracts end, providers change, and companies are acquired.
Data is not a single category
This brings us to a distinction many companies overlook: different types of data require different treatment. Not everything held by the provider can be handed over in the same way. Personal data is subject to the Saudi Personal Data Protection Law, which regulates its transfer, deletion, and disclosure. Article 15 of the Law provides that personal data may not be transferred outside the Kingdom or disclosed to an external entity except in specified circumstances, including extreme necessity to protect the data subject’s life or vital interests, or to fulfil an obligation under an agreement to which the Kingdom is a party.
Operational data, such as call logs and performance reports, belongs to the customer and may be requested under the contract. Other records, such as accounting and tax records, must be retained by the provider under statutory requirements and cannot be destroyed until the prescribed retention period expires. Backup copies may not be capable of being handed over in full, but the parties can agree on a mechanism for accessing or destroying them.
A distinction must also be drawn between ownership of software and ownership of development deliverables. Software developed by the provider for its own purposes remains its property, while the customer receives only a licence to use it. Development deliverables created specifically for the customer, such as customised reports or interfaces designed at its request, may belong to the customer under the contract. The right to transfer a licence to a replacement provider is a separate issue. If the licence is personal to the provider, it does not transfer automatically. If it is transferable, the contract must expressly provide for this.
The practical takeaway
When engaging an external provider for a critical service, ask: if this provider stops operating tomorrow, what will I need from it to continue? Your answer is the list of transition provisions that should appear in the contract. Do not assume that the provider will cooperate on exit. Assume that it will act according to the contract, rather than goodwill. A provision that has not been written will not be performed.
Before signing, the question should be more than: how much does the service cost? It should be: if this contract ends tomorrow, will I have what I need to keep the business running without it?
Frequently asked questions
What transition provisions should a service contract include to protect operational continuity?
Transition provisions should specify the data and files to be handed over, their format, the handover period, responsibility for conversion costs, and the rights to use software and licences after the contract ends. In government contracts, the Ministry of Finance’s template expressly requires the government entity’s data to be deleted, destroyed, or returned upon request. In private contracts, these provisions must be expressly written. Article 95 of the Civil Transactions Law requires performance in accordance with the contract’s provisions and good faith, extending to its necessary implications given the nature of the transaction. An express clause, however, remains stronger than reliance on judicial interpretation.
What is the difference between transferring the work to a replacement and transferring employees?
Transferring the work involves transferring files, data, licences, and operational knowledge. Transferring employees is governed by the Saudi Labor Law and the contractual terms between the provider and its employees. An employee moving to a new provider does not automatically transfer the knowledge they hold about the customer’s systems unless a knowledge handover agreement exists.
Can the provider refuse to hand over data when the contract ends if the contract does not require it?
Not necessarily. Article 95 of the Civil Transactions Law requires performance in accordance with the contract’s provisions and good faith, extending to its necessary implications given the nature of the transaction. If the contract contains no express data handover clause, the company may rely on what the nature of the relationship requires. However, this requires judicial interpretation and may not provide the same protection as an express clause.
What usage rights should the customer obtain when engaging a technology service provider?
The contract should clearly specify the software and systems the provider will use, the licences required, who owns them, whether they transfer to the customer when the contract ends, and the limits of permitted use. A distinction must be drawn between ownership of software and ownership of development deliverables. Software developed by the provider for its own purposes remains its property, while the customer receives a licence to use it. Deliverables created specifically for the customer may belong to the customer. The right to transfer a licence to a replacement provider must be expressly stated in the contract.
How can operational continuity be protected in contracts for ongoing services such as maintenance, cleaning, and operation?
Article 9 of the Government Contract Instructions provides that contracts for continuously performed services must not exceed five years, although their duration may be extended with the Ministry of Finance’s approval. The contract should therefore include a transition clause specifying how files, equipment, and data will be handed over before the term expires. The customer should also retain copies of essential data and records independently of the provider.
What are the practical risks of omitting a file handover clause from a service contract?
The first risk is the loss of data and records. The second is an inability to transfer the work to a replacement provider in time. The third is the additional cost of rebuilding data from scratch. The fourth is litigation with the former provider over data ownership and usage rights.
How can a transition clause protect the customer without being unfair to the provider?
A balanced clause should impose clear obligations on both parties: the provider must hand over data and files in an agreed format within a specified period, while the customer must pay any outstanding amounts before handover. The provider is exempted from liability for damage resulting from the use of the data after handover. The clause should be specific and capable of performance, rather than general and ambiguous. It should also distinguish between personal data, operational data, records subject to statutory retention requirements, and backup copies. Each category requires a different handover mechanism.
