Service levels (SLA)
Defines measurable service targets such as availability, response and restoration times.
Ask: Which metrics are contractual, how are they measured, and what exclusions apply?
ASTACKRA Growth OS
Biblioteca de cláusulas para licitaciones
Cláusulas de compras públicas en lenguaje claro y las preguntas de aclaración que deberían hacer compradores o licitadores.
Procurement clauses
Plain language plus the question that prevents a vague clause becoming an implementation surprise.
Residencia de datos
Restricts where specified data may be stored or processed.
Ask: Which data classes are covered, and do backups/logs count?
Acuerdo de tratamiento de datos (DPA)
Sets controller/processor responsibilities for personal data.
Ask: Which subprocessors, transfers and breach-notification obligations apply?
Accesibilidad
Requires the delivered service to meet a stated accessibility standard such as WCAG.
Ask: Which WCAG version/level, what evidence is required, and who accepts remediation?
Trazabilidad
Requires significant actions and decisions to be attributable and reviewable.
Ask: Which events, retention period and export format are mandatory?
Business continuity / disaster recovery
Defines recovery expectations after a serious service disruption.
Ask: What RTO/RPO targets and testing evidence are required?
Security questionnaire
Collects evidence about technical and organisational controls.
Ask: Which certifications are mandatory versus evidence-equivalent?
Source-code/IP ownership
Defines ownership or licensing of custom code and third-party components.
Ask: What must transfer at acceptance, and what pre-existing IP remains licensed?
Exit and portability
Defines how data and operational knowledge leave the supplier at termination.
Ask: Required export formats, assistance period and deletion evidence?
Subcontractors
Controls use of third parties in delivery or data processing.
Ask: Is prior approval required and which obligations must flow down?