What Should Be in Your IT Support Contract: A Nigerian Business Guide
A Lagos accounting firm signed what looked like a great IT support deal: ₦250,000 monthly for “comprehensive support.” Three months in, surprise charges appeared. On-site visits? Extra. After-hours support? Extra. Training? Extra. By month four, actual costs hit ₦420,000, and when they tried to terminate, they discovered an 18-month lock-in with auto-renewal.
The contract had perfect SLAs. Response times looked great on paper. But nobody read the fine print on scope, pricing, or termination rights.
Most businesses focus entirely on service level agreements and miss the contract terms that cause bigger problems: vague scope, unfavorable termination clauses, hidden costs, and unclear data ownership. These issues don’t surface until you’re months in and trying to fix something that’s contractually binding.
Understanding IT support contracts in Nigeria requires looking beyond SLAs to the complete legal framework that protects your business. This article covers the eight essential components every IT support contract needs, what to negotiate before signing, and red flags that should make you walk away.
This is Part 2 of our IT Support Contracts series. Part 1 covered understanding SLAs. This article covers everything else: scope, pricing, data ownership, termination rights, and legal protections.
A quick note: This article shares practical guidance based on real Nigerian IT projects. It’s not a substitute for professional legal advice, so always run final contracts by your lawyer before signing.
I. Scope of Services: Get Specifics
In simple terms, scope answers three questions: what’s included, what’s excluded, and who is covered.
“Comprehensive IT support” means nothing. Your contract needs to spell out exactly what’s included in your monthly fee and what costs extra. Not in general terms. In specific, measurable terms. Every vague phrase in the scope section eventually shows up as a line item on your invoice.
Included Services should list: Help desk support through specific channels (email, phone, ticketing system), system monitoring and maintenance, software updates and patches, backup verification, security monitoring, monthly performance reports, and quarterly business reviews. If your vendor provides these, list them individually.
Explicitly exclude: Onsite visits (charged at ₦X per visit), hardware procurement, software licensing fees (you buy your own Microsoft 365 licenses), after-hours support outside business hours, major upgrades or migrations beyond routine maintenance, training sessions beyond initial onboarding.
The more explicit your exclusion list, the fewer surprise charges you’ll see.
Equipment and Software Ownership: Who owns the servers, monitoring tools, and backup systems? If your vendor provides hardware, what happens at contract end? Do you buy it out? Return it? Get hit with a removal fee? Spell it out: “Equipment provided by vendor remains vendor property. Client may purchase equipment at fair market value upon contract termination.”
Define user limits clearly: “Support covers up to 50 users. Additional users ₦3,500 per user monthly.” When you grow from 45 to 65 employees, you know the exact cost.
The “unlimited support” trap: A Lagos consulting firm paying ₦180,000 monthly for “unlimited support” hit trouble at 80+ tickets per month. The vendor complained about “excessive” usage, but the contract had no fair usage definition. The relationship turned sour fast.
Get limits defined: “Unlimited support up to 100 tickets monthly or 40 support hours, whichever comes first. Additional support ₦2,500 per ticket.”
Specificity prevents disputes. List what’s in, what’s out, and what costs extra. Your future self will thank you when there’s no argument about whether website updates were “included.”
II. Pricing and Payment Terms
This is where Nigerian business realities hit hardest. Exchange rate volatility, payment delays, and surprise cost escalations make pricing terms critical.
Understanding Pricing Models:
| Model | How It Works | Best For | Watch Out For |
|---|---|---|---|
| Fixed Monthly | Flat fee regardless of ticket volume or hours | Predictable costs, well-defined scope | Scope creep charges, “extras” adding up |
| Hourly/Time & Materials | Pay only for time spent | Project work, variable needs, occasional support | Unpredictable monthly costs, hard to budget |
| Hybrid | Base monthly fee plus hourly rate for out-of-scope work | Most flexible for growing companies | Clear definition of “base” vs “extra” |
In practice, most Nigerian SMEs find that hybrid models work best. You get predictable base costs plus flexibility for growth without getting hammered on every small request.
Currency and Exchange Rate Protection:
Here’s the Naira reality: many vendors price in dollars but bill in Naira. When exchange rates move from ₦1,200 to ₦1,500 per dollar, your ₦300,000 monthly fee becomes ₦375,000 without warning.
Better contract language protects both parties:
“Monthly fee: $250 USD, payable in Naira at CBN official rate on invoice date, capped at 10% quarterly increase.”
Or if you prefer Naira terms: “Monthly fee: ₦350,000, fixed for 12 months. Annual increases limited to 15% or official inflation rate, whichever is lower.”
Payment Terms That Work:
Payment schedule (advance vs. arrears), payment due within X days of invoice, late payment penalty (2-5% per month is typical), and service suspension policy after how many days’ notice.
From experience: payment delays strain vendor relationships faster than anything else. Professional vendors give clear 30-day written notice before service suspension, not abrupt shutdowns. But they’re also within their rights to suspend service if you’re 60-90 days behind. Build reasonable terms that both parties can live with.
Price Escalation Clauses:
Avoid: “Vendor may adjust pricing at any time at vendor’s discretion.”
Better: “Pricing fixed for initial 12-month term. Annual increases limited to 15% or official inflation rate, whichever is lower, with 90 days written notice.”
Hidden Costs Checklist:
Here’s a quick checklist you can run through with any IT vendor before you sign:
| Cost Item | Usually Included or Extra? | Typical Nigerian Rate Range |
|---|---|---|
| Onsite visits | Usually extra | ₦15,000 – ₦25,000 per visit |
| After-hours support | Usually extra | ₦10,000 – ₦20,000 per hour |
| Hardware procurement | Extra plus markup | Cost + 10-20% |
| Software licenses | Extra (client purchases) | Varies |
| Training sessions | Usually extra | ₦50,000 – ₦150,000 per session |
| Emergency callouts | Usually extra | 2x-3x standard rate |
| System documentation | Should be included | If extra: ₦50,000 – ₦200,000 |
Ask which items are included in your quoted fee. The ones that aren’t should have clear pricing attached.
III. Data Ownership and Security
Critical rule: you must own your data. All of it. Your customer records, your financial data, your email archives, your system configurations, your backup files. Everything.
Never, ever accept contract language like: “Data generated during service period remains vendor property” or “Client receives license to use data; ownership retained by vendor.”
The correct language: “All client data, backups, configurations, and documentation remain client property at all times. Vendor acts solely as custodian during contract term.”
Data Backup Responsibilities:
Who’s responsible for backups? (Should be vendor.) How frequently? (Daily for critical systems, weekly for less critical.) Retention period? (30 days minimum, 90 days better.) Storage location? (If offshore, note NDPA compliance implications.) Recovery time commitments are tied to your SLA requirements.
Your backup and recovery requirements should align with your broader business continuity planning strategy.
Data Access Controls:
Who at the vendor company can access your data? What security clearances do they need? Is all access logged and monitored? Can you audit access logs? These questions matter when you’ve got sensitive client information or financial records in systems your vendor manages.
NDPA Compliance Requirements:
If your vendor processes any personal data (employee information, customer records, anything with names and contact details), your contract must address Nigeria Data Protection Act compliance:
The vendor’s role as data processor (not controller), specific security measures the vendor implements to protect data, data breach notification requirements (within 72 hours of discovery), your right to audit the vendor’s data handling practices, and restrictions on subprocessors (can they send your data to third parties?).
For example, if your vendor manages your HR or payroll system, they are processing sensitive employee data and must meet NDPA standards.
For a complete breakdown of these obligations, check our NDPA compliance guide for Nigerian businesses.
Data at Contract End:
This clause prevents a hostage situation in which vendors refuse to release your data during transitions.
“Upon contract termination, vendor provides complete data export in standard, portable formats (CSV, JSON, SQL dumps as appropriate) within 15 business days. Vendor securely deletes all client data from vendor systems within 30 days of final data transfer and provides written certification of deletion.”
Security Incident Reporting:
“Vendor notifies client of any security incidents affecting client data within 24 hours of discovery, including: incident nature and timeline, data potentially affected, immediate remediation steps taken, and recommendations for client action if needed.”
This 24-hour notification window gives you time to meet the NDPA’s 72-hour breach reporting requirement to regulators.
IV. Intellectual Property Rights
When you pay for custom work, who owns it? Many businesses only discover they don’t own their custom configuration when they try to switch vendors, and the old provider says, “That setup is our proprietary template.”
Custom Code: Avoid: “Work product remains vendor property. Client receives license.”
Prefer: “Client owns all custom code, configurations, and integrations developed specifically for the client. Vendor retains pre-existing proprietary tools.”
Documentation: All system docs, procedures, and runbooks will be transferred to you. Critical for vendor transitions.
Third-Party Software: “Client responsible for Microsoft 365, Adobe licensing. Vendor responsible for monitoring tools, backup software.”
Work for Hire: “All deliverables constitute work for hire. Client owns all rights upon full payment.”
When switching vendors, you need to retain ownership of your configurations, customizations, and documentation. Otherwise, you start from scratch or pay licensing fees forever for work you already paid to create.
V. Contract Duration and Termination
This is where many Nigerian businesses get trapped. They sign what appears to be a reasonable contract and discover months later that they can’t escape poor service without paying massive penalties.
IT support contracts in Nigeria vary widely in duration based on company size and project complexity.
Initial Contract Terms:
SME contracts typically run 12 months. Enterprise contracts often span 24-36 months. Month-to-month agreements are rare and usually more expensive since vendors can’t amortize onboarding costs.
For major enterprise deployments, contracts can run much longer. In oil and gas sector IT support tenders, 7-year contract terms are standard. These long-term agreements require very careful planning around price escalation, equipment refresh cycles, and technology evolution.
One vendor in a similar long-term tender initially bid aggressively to win the contract but struggled in years four and five when equipment needed replacement and exchange rates had moved 40% against them. Their contract lacked adequate price escalation clauses, and they were contractually obligated to maintain service levels while losing money. The lesson: long contracts need realistic escalation terms that protect both parties.
Auto-Renewal Clauses to Avoid:
Dangerous: “This agreement automatically renews for successive 12-month terms unless either party provides written notice of non-renewal at least 90 days prior to the end of the then-current term.”
You have to remember to cancel 90 days before your anniversary date, or you’re locked in for another year. Miss that window, and you’re stuck even if service is terrible.
Better: “This agreement expires at the end of the initial term. Continuation requires mutual written agreement at least 60 days prior to expiration. If no agreement is reached, services continue month-to-month at current rates until terminated by either party with 30 days’ notice, with all other contract terms still applying during this period.”
Reasonable Termination Notice Periods:
Notice periods should scale with contract value:
| Monthly Contract Value | Reasonable Notice Period |
|---|---|
| ₦100,000 – ₦300,000 | 30 days |
| ₦300,000 – ₦1,000,000 | 60 days |
| ₦1,000,000+ | 90 days |
These periods give vendors time to adjust their staffing and give you time to find alternatives.
Termination for Cause vs. Convenience:
Termination for Cause allows immediate or very short notice termination for serious violations:
Persistent SLA failures (missing agreed targets in five or more months during any 90-day period), data breaches resulting from vendor negligence, vendor bankruptcy or business closure, or material contract violations not remedied within 30 days of written notice.
Termination for Convenience means either party can end the agreement without cause, provided proper notice is given.
Negotiate: “Client may terminate this agreement for convenience with 90 days written notice plus an early termination fee equal to two months of service fees. Vendor may terminate for convenience with 90 days notice, no fee required.”
The early termination fee is fair compensation to vendors for losing predictable revenue, while still giving you an escape route if the relationship isn’t working.
Transition Assistance Requirements:
This clause prevents the nightmare scenario where vendors refuse to cooperate during transitions or hold your systems hostage.
“Upon termination for any reason, vendor will: provide at least 30 days of transition assistance at standard rates, transfer all data, configurations, passwords, and documentation within 15 days, provide knowledge transfer sessions to incoming vendor or internal team, maintain all SLA commitments during notice period, and cooperate fully with transition activities.”
From experience: unprofessional vendors sometimes refuse to cooperate during transition, withhold critical documentation, claim that system configurations are “proprietary,” or slow-walk data transfers. Explicit transition clauses with timelines prevent this.
Prepaid Fees and Refunds:
“If the client terminates for convenience, unused prepaid service fees will be refunded on a pro-rata basis within 30 days of the termination effective date. If the vendor terminates for client breach, prepaid fees are non-refundable.”
VI. Liability and Risk Allocation
Liability Caps: Most contracts include: “Vendor’s total liability shall not exceed the amount paid in the preceding three months.”
For ₦300,000 monthly, that’s ₦900,000 cap. If vendor error causes ₦5M in business losses, you can only recover ₦900,000.
Is this fair? It depends on contract size and risk profile.
For SME contracts (₦200,000-500,000 monthly), liability caps of 6-12 months of fees are reasonable. For enterprise contracts, 12-24 months of fees or a percentage of annual contract value makes more sense.
More importantly, negotiate: “Liability cap does not apply to: gross negligence or willful misconduct, data breaches caused by vendor’s security failures, intellectual property violations, or vendor’s indemnification obligations.”
What Vendors Should Be Liable For: Direct damages from vendor negligence (data loss from backup system failures they were responsible for, security breaches from vulnerabilities they failed to patch, extended downtime beyond SLA allowances with no valid excuse).
What Vendors Shouldn’t Be Liable For: Issues caused by clients (user error, problems with the client’s internet connection or infrastructure), third-party service failures (unless the vendor failed to implement proper redundancy as specified in the SLA), force majeure events (but this needs a narrow definition, see below).
The goal is not to make your vendor responsible for everything; it’s to ensure they are responsible for what they truly control.
Insurance Requirements: Enterprise contracts often require: “Vendor maintains professional liability insurance of at least ₦10 million and cyber liability insurance of at least ₦5 million throughout contract term.”
For SME contracts, insurance requirements are unusual. But it’s worth asking if your vendor carries professional liability coverage.
Force Majeure Definitions:
Avoid: “Either party excused from performance due to any event beyond their reasonable control.”
That’s too broad. It could excuse vendor performance for routine power outages, internet problems, or staffing issues.
Better: “Force majeure events include: acts of God (earthquakes, floods), war, terrorism, and government actions prohibiting performance. Force majeure does NOT include: power outages, internet connectivity issues, staff absence or turnover, equipment failures, or financial difficulties.”
In the Nigerian context, power outages and connectivity issues are routine, not extraordinary. Vendors need to plan for these through generators, redundant connections, and proper infrastructure. These shouldn’t be force majeure excuses.
VII. Change Management and Scope Creep Prevention
Projects without firm guardrails expand. A ₦500,000 project becomes ₦800,000, and you’re arguing about what was “included.”
Change Request Process: “Scope changes require a written change request specifying: description, time estimate, cost breakdown, timeline impact, and dependencies. The client must approve in writing before work begins. Verbal, email, or WhatsApp approvals not binding.”
Pricing Impact: “Monthly support: pricing adjustments effective following month. Project work: additional costs added to project total.”
Timeline Accountability: In larger projects, some clients include financial penalties for vendor-caused delays and clearly defined consequences for client-caused delays. For example:
“Project timeline: 90 days from kickoff. Vendor delays without excuse: ₦25,000 weekly penalty after a 30-day grace period. Client delays (late feedback, scope changes): timeline extended, no penalty.”
When someone asks for out-of-scope work, vendors can say, “Let me send a change request proposal with cost and timeline” rather than doing the work and later fighting over payment. Clear boundaries help relationships, and clear change control isn’t about being difficult—it’s about making sure no one feels exploited as the project evolves.
VIII. Dispute Resolution Procedures
Escalation: “Disputes escalate: account managers (10 days), senior management (15 days), executives (20 days). No legal action until 45-day period concludes, unless urgent injunctions are needed to prevent serious harm.”
Mediation: “If escalation fails, parties attempt mediation before arbitration/litigation. The mediator is selected mutually. Each party bears its own costs; mediator fees are split.”
Governing Law: “Agreement governed by laws of the Federal Republic of Nigeria.”
Jurisdiction: “Legal proceedings in Lagos State High Court” (or location of choice).
Arbitration:Some require: “Disputes to be bound by arbitration under the Arbitration and Conciliation Act. Single arbitrator, Lagos venue.”
Pros: Faster, private. Cons: Expensive, limited appeals. For SME contracts valued at less than ₦5M annually, court jurisdiction is usually more practical. For an enterprise, arbitration makes sense.
Red Flags: Walk Away from These Terms
If you see more than one or two of these in a contract and the vendor won’t negotiate, strongly consider walking away. These provisions appear in poorly structured IT support contracts in Nigeria and should raise immediate concerns:
Unilateral change rights: “Vendor may modify agreement anytime with 30 days notice.” They can change pricing, scope, anything.
Perpetual auto-renewal: “Renews indefinitely until terminated.” Locked in forever unless you remember to cancel.
No termination rights: “Cannot terminate during initial 36 months.” Trapped with terrible service for three years.
Vendor owns your data: “Data remains vendor property.” You don’t own your customer data? No.
Unlimited liability waiver: “Vendor not liable for any damages.” Even gross negligence? Unacceptable.
Ambiguous scope: “Comprehensive support as vendor determines necessary.” Everything becomes an argument.
Uncapped price escalation: “Vendor may adjust pricing quarterly at sole discretion.” ₦300K becomes ₦500K with no recourse.
Professional vendors don’t need one-sided terms.
Before You Sign: Key Questions
Scope: What’s included monthly? What costs extra? User limits? What happens when we exceed?
Pricing: Fixed Naira or dollar-denominated? How are increases capped? Payment terms?
Data: Do we own all the data? What happens at contract end? NDPA addressed?
Termination: Notice period? Can we terminate for poor performance? Transition assistance?
Liability: Liability cap? What’s excluded? Vendor insurance?
Changes: How are scope changes approved? Impact on pricing/timelines?
What’s Next in This Series
You understand SLAs (Part 1) and contract structure (this article). Next: “IT Support Performance Measurement in Nigeria” covering KPIs beyond SLA compliance, tracking tools for the Nigerian context, and running effective vendor reviews.
Getting IT Support Contracts in Nigeria Right
IT support contracts in Nigeria require balancing legal protections with practical vendor relationships. The strongest contracts have clear scope, realistic pricing with exchange rate protections, explicit data ownership, reasonable termination rights, and fair liability caps.
Don’t sign contracts you don’t understand. Take time to review, negotiate unfavorable terms, and ensure both parties know what’s expected. If you’re still in the vendor selection phase, our guide to choosing the right IT vendor in Nigeria can help you evaluate options before you enter contract negotiations.
Need Contract Review Help?
If you’re evaluating an IT support contract, PlanetWeb can review your agreement and identify issues before you sign. We’ve worked with contracts from ₦200K monthly SME agreements to enterprise deployments worth hundreds of millions.
Our IT consulting services include contract review and vendor selection. Or if you’re considering managed IT services, we’ll walk you through what should be in your agreement based on your needs.
Contact our team to discuss your contract needs.
