Managed IT and cybersecurity services agreement
A single format from the Technology Services Agreements pack. IT Act 2000, s.43A and s.70B · CERT-In Directions of 28.04.2022 · DPDP Act 2023 · Indian Contract Act 1872.
- 20 pages
- 126
- Word and PDF
- 30 October 2026
- 30 October 2026
What it covers
- 1Managed IT and cybersecurity services agreementIT Act 2000, s.43A and s.70B · CERT-In Directions of 28.04.2022 · DPDP Act 2023 · Indian Contract Act 1872
Not included
What you will still need outside this format:
- Stamp duty on each agreement under the Stamp Act of the State where it is signed.
- The CERT-In incident report itself, filed in CERT-In's format within six hours.
- A full data processing agreement where the schedules are not enough (see FV07-G6).
- The website's own terms of use, privacy policy and refund policy (see FV07-G7).
- Influencer contracts and freelancer IP assignments (see FV07-G14 and FV07-G9).
- Mandatory outsourcing and cyber security clauses of RBI, SEBI or IRDAI for a regulated customer.
- A review of each AI model provider's own terms and usage policies.
- A tax view on the TDS row under section 393 and the GST SAC for each fee line.
Read the opening
The first part of the format, as it downloads. Blanks are highlighted.
For a managed service provider running a customer's IT and security operations. Software support only: FV07-G4. Outsourcing a whole function: FV07-G5. Fuller processor terms: annex FV07-G6. For a customer regulated by RBI, SEBI or IRDAI, add the regulator's mandatory outsourcing and cyber security clauses. Stamp under the State Stamp Act.
MANAGED IT AND CYBERSECURITY SERVICES AGREEMENT
THIS AGREEMENT is made at [Place of execution] on [Date of this agreement].
Between
1. [Name of the customer], a [company / limited liability partnership] incorporated or registered under the [Companies Act 2013 / Limited Liability Partnership Act 2008], having its registered office at [Registered office of the customer], bearing [CIN or LLPIN of the customer], PAN [PAN of the customer] and GSTIN [GSTIN of the customer], acting through [Name of the customer's signatory], [Designation of the customer's signatory], authorised by a resolution dated [Date of the customer's authorising resolution] (the “Customer”), of the ONE PART;
And