Technology & AI

Technology contracts that match how the system really works.

Software, cloud services and AI tools now sit at the centre of most businesses, and the contracts behind them settle the rights in the software, liability for failures and the terms on which your data is handled. We draft and negotiate these contracts, whether you are the supplier or the customer, and help you meet the EU rules that now apply to them.

Contact the firm Call 24/7 · +30 210 220 5950

Who it is for

Software houses, SaaS providers and IT integrators that sell to businesses, and companies that buy, license or outsource critical technology.

We also work with businesses that are introducing AI tools into their products or their daily operations and want the contractual and regulatory side settled before the tools are rolled out.

What we cover

We work on the full life of a technology relationship, from the first proposal to termination and exit:

01
Software development, licensing and maintenance agreements, and IT outsourcing
02
SaaS and cloud subscription terms, with service levels and the move to another provider
03
Data processing agreements and data sharing clauses
04
AI clauses, such as training on your data, rights in outputs and liability for errors, and a map of the company's own AI use against the AI Act

The AI Act timetable

The EU AI Act, Regulation (EU) 2024/1689, applies in stages. The bans on prohibited AI practices and the AI literacy provision have applied since 2 February 2025, the rules for general-purpose AI models since 2 August 2025, and most of the remaining provisions, including the transparency obligations, since 2 August 2026; generative AI systems placed on the market before that date have until 2 December 2026 to meet the marking obligation of article 50(2), and new prohibitions added in 2026 apply from the same date. Following Regulation (EU) 2026/1744, the obligations for high-risk AI systems now apply from 2 December 2027 for the uses listed in Annex III and from 2 August 2028 for AI embedded in products covered by Annex I.

In Greece, Law 5321/2026 introduced measures for the application of the AI Act and repealed the earlier national obligations of Law 4961/2022 for private companies using AI systems. Contracts with AI suppliers should therefore be written against the AI Act itself.

Data Act and DORA

Since 12 September 2025 the Data Act, Regulation (EU) 2023/2854, sets rules on switching between cloud and other data processing services and on unfair contractual terms in data sharing between businesses. Its unfair-terms rules reach contracts signed before that date only from 12 September 2027, so existing cloud and SaaS contracts should be reviewed in time.

Banks, insurers, investment firms and other financial entities have also been subject to DORA, Regulation (EU) 2022/2554, since 17 January 2025. It requires their contracts with ICT service providers to be in writing and to contain specific provisions, which their technology suppliers will be asked to accept.

How we work

We start by understanding the system and the commercial deal: what the technology does, where the data goes and what failure would cost. We then shape the contract terms on that basis, so that service levels, liability caps, intellectual property and exit provisions match the risks of the particular relationship.

FAQ

Questions clients ask

What should a SaaS contract include?

At minimum: a clear description of the service and its service levels, data protection terms, ownership of data and of any custom work, limits of liability, and an exit plan that lets you retrieve your data and move to another provider.

Who owns software developed for my company?

The contract should say so expressly. Without clear terms on intellectual property and access to the source code, the customer may end up with only a right to use the software, not ownership of it.

Does the AI Act apply to a company that only uses AI tools?

It can. The AI Act imposes obligations on deployers, meaning businesses that use AI systems in their activities, not only on the companies that develop them. Which obligations apply depends on the type of system and the use made of it.

When do the AI Act rules on high-risk systems apply?

After Regulation (EU) 2026/1744, from 2 December 2027 for the high-risk uses listed in Annex III of the AI Act and from 2 August 2028 for AI embedded in products covered by Annex I. The original prohibitions already apply; new prohibitions added in 2026 apply from 2 December 2026.

Can an AI provider use our company's data to train its models?

That depends on the contract and on data protection law. Many standard terms allow it unless the customer opts out, so the point should be checked and settled expressly before confidential or personal data is entered into the tool.

Contact