A frustrated man in a denim shirt sits at a desk, his hand resting on his forehead as he looks at a computer screen.

SLAs in IT Contracts: What You Should Look for Before Signing

3-minute read DataRoad

In summary

  • Response time and resolution time are two different things. Many contracts only guarantee the first — and it is the second that matters to the business.
  • An SLA without defined consequences is merely an intention, not a compromise.
  • The severity classification is the most important clause and the one that is least often read: it is this one that determines which deadline applies.
  • Before negotiating deadlines, work out how much an hour of downtime costs you. Without that figure, you’re buying blind.

Almost all IT support contracts include an SLA. Hardly any customers read it carefully before signing — and when they do read it, it is usually after a system outage, when they are trying to find out what they were entitled to demand.

This article explains what a service level agreement should contain, where the pitfalls in the wording lie, and what questions to ask before signing.

What is an SLA?

SLA — Service Level Agreement, or service level agreement — is the part of the contract that sets out what constitutes an acceptable service, in figures, and what happens when that threshold is not met.

That is what distinguishes “we provide IT support” from a verifiable commitment. Without an SLA, the quality of the service is a matter of opinion, and discussions always end up in the same place: the customer thinks it took too long, the supplier thinks it was reasonable, and there is no way to break the deadlock.

The managed IT support lifecycle: monitoring, detecting, resolving and preventing
A proper SLA sets out the full cycle: monitoring, detection, resolution and reporting — with deadlines for each stage.

A response is not a solution

This is the most important distinction of all, and the one that most contracts exploit to the supplier’s advantage.

Response time It is the time it takes for someone to acknowledge receipt of the request and start processing it. Resolution time is how long it takes for the problem to be resolved.

A contract that guarantees a “response within one hour” and nothing else technically allows a server to be down for three days without breaching the SLA — provided that someone responded within the first hour.

The question to ask before signing: “Apart from the response time, what resolution time is contractually guaranteed, and for what types of incident?” If the answer is vague, so is the commitment.

In practice, reputable suppliers commit to resolution times for critical incidents and work with targets — not guarantees — for the rest. That is reasonable and honest. What is not reasonable is for the contract to fail to distinguish between the two concepts at all.

The severity classification

All SLAs define incident categories with different response times. This is where, in practice, it is decided which service you will receive — and it is the section that almost nobody reads.

The standard structure usually has three or four levels, typically:

  • Critic — the company has come to a standstill or an essential service is unavailable to everyone.
  • High — a significant impact, with many users affected or having no alternative means of working.
  • Medium — a localised impact, with a contoured shape.
  • Bass — routine enquiries, queries, minor changes.

The crucial issue is not the list. It is who grades. If the supplier is the one to decide unilaterally on the severity of each incident, all tight deadlines become purely theoretical — all it takes is to classify as ‘medium’ what the customer considers ‘critical’.

A balanced contract sets out objective assessment criteria and an escalation mechanism for when the parties disagree.

Availability: the new ones

Availability commitments are expressed as a percentage, and the difference between similar figures is greater than one might intuitively expect:

  • 99% — around 7 hours of downtime per month
  • 99,5% — around 3.5 hours a month
  • 99,9% — around 43 minutes a month
  • 99,99% — about 4 minutes a month

There is a tenfold difference in the tolerated downtime between 99% and 99.9% — and a substantial difference in cost, because each additional nine requires redundancy that someone has to pay for.

Also worth a read such as The following are taken into account: the period over which it is measured, whether scheduled maintenance windows are included, and who carries out the measurement. A 99.9% service level agreement, measured annually, allows for a continuous eight-hour outage without constituting a formal breach.

Consequences and exclusions

An SLA without clearly defined consequences is not a commitment — it is a declaration of good intentions.

The usual consequences are credits against the next month’s instalment, scaled according to the severity of the breach, and the right to terminate the contract without penalty in the event of repeated breaches. Neither of these compensates for the actual loss caused by a stoppage, but both provide a tangible incentive for compliance.

Equally important is the list of exclusions — which does not count as a supplier’s fault. Faults attributable to the telecoms operator, hardware faults not covered by the maintenance contract, changes made by the customer without notice, and force majeure. Reasonable exclusions are normal; the key is that they should be specific rather than so broad as to render the agreement meaningless.

How to negotiate your

Don’t start with the deadlines. Start with this calculation: How much does an hour of downtime cost your company? Add to that unproductive wages, lost turnover and the cost of catching up.

With that figure, the conversation changes. It’s no longer a case of “we want the issue resolved within two hours”; it becomes an economic decision: if one hour of downtime costs X, it makes sense to pay an extra Y per month to reduce the expected downtime.

Four questions that make it worth reading the whole contract:

  • What times those were resolution Are they guaranteed, and for what levels of severity?
  • Who assesses the severity, and how can that assessment be challenged?
  • What cover is available outside working hours, and who actually answers the phone?
  • What happens, in practical terms, when the SLA is not met?

And here’s a simple sign of a good supplier: anyone who offers to report on SLA compliance on a monthly basis, without being asked, is confident in what they’ve signed up to.

DataRoad works with contracted and reported service levels, tailored to each client’s specific needs, within the managed IT services.

A chat before making a decision

Whether you’re tackling a specific problem, planning a move or simply looking for a second opinion, we always start in the same way: by understanding your situation before making any suggestions. No obligation, no jargon and no catalogues.

Book an assessment of your infrastructure

Read more articles ...

Find out about some of the companies that have already chosen and opted for our IT services

Contact us now

Contact Form

Request a quote from DataRoad. We’ll take care of the rest with a prompt and clear response to support your business’s needs.

Tell us what you need. IT support, network installation, cyber security, an office move or simply a second opinion on your IT infrastructure — we’re here to help.

Please fill in the form and a specialist technician will contact you on the same day.

    A reply on the same working day. No obligation.

    DataRoad — IT services for businesses
    Privacy Overview

    This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.