Home // COURSES // TECHNOLOGY, CONTRACTS AND REGULATION

When a technology contract becomes a lawsuit: what has to be measurable

The contract said the system would be accepted "after satisfactory acceptance testing". Two years later, each side has its own idea of satisfactory, and the judge asks the expert what the contract never defined.

The course

Why this course

Acceptance, SLA, escrow, delivery, logs, incidents and data on termination from a forensic perspective: the technical points the clause needs to cover.

In a software project that went wrong, the client says the system does not work and the supplier says it delivered. The examination reads the repository, the database, the support tickets and the acceptance testing to say what was done, when and why it failed. What it cannot do is measure against a criterion the contract never wrote down.

Evidence is lost in the contract itself: acceptance with no criteria, an SLA with no measurement source, delivery as loose files, an escrow nobody ever checked, logs nobody keeps, environments shut down on the day of termination.

The course goes through the clauses that most often end up in a forensic examination: what has to be measurable, who keeps the record and how it is verified. The drafting is the lawyer's. The course provides the technical points.

Length2 hours
TrackTechnology, contracts and regulation
FormatIn person or live online, open class or in-house. Taught in Portuguese, under Brazilian law
Who it is forContracts, technology, litigation and arbitration lawyers, in-house legal teams and IT contract managers.
InstructorAdriano Vallim, Forensic Expert and Digital Crime Specialist
CertificateCertificate of attendance stating the course hours, for every participant

I want this course

Pick as many courses as you like: they are kept and arrive ticked on the registration form.

By the end, you will be able to

What changes in your next case

  • Demand acceptance criteria with functionality, environment, test data and expected result.
  • Define in the SLA the metric, the measurement source, the time zone and the retention of records.
  • Specify what goes into escrow and how to verify that the deposit builds the system in use.
  • Provide for delivery through the repository with its history, not as loose files.
  • Include the supplier's technical duties in an incident: notify, preserve and allow forensic copying.
  • Plan termination: preserve before shutting down, return the data and delete with evidence.
Programme

2 hours, block by block

0:00
What was ready on the day of termination 10 min
  • Opening case
  • The failure that was not in the code
  • The contract as the first source of evidence
0:10
Acceptance and delivery that can be measured 25 min
  • Verifiable acceptance criteria
  • Recorded acceptance testing
  • Delivery through the repository
  • Scope changes and dependencies on the client
0:35
The SLA and the measurement source 20 min
  • Metric, window and exclusions
  • Who measures, with what record, in what time zone
  • Process failure and incident
  • Function points as a measure
0:55
Escrow, logs, incidents and termination 30 min
  • What to deposit in escrow and how to verify it
  • Ownership and third-party components
  • Logs and incidents at the supplier
  • Data and environments on termination
1:25
Exercise: the contract the examination cannot measure 20 min
  • Fictitious clauses without technical criteria
  • What would be needed to measure
  • Correction with the checklist
1:45
Questions and cases from the audience 15 min
  • Participants' cases, without identification
  • Contract already signed: what to do now
  • Arbitration and mediation in IT
Cases in class

The cases used in class

REAL CASE · ANONYMISED

What was ready on the day of termination

A development contract was terminated amid disagreement over what had been delivered and over the cause of the failures. The repositories were preserved with their full history, and the commits were compared with the acceptance testing up to termination. In a mirror environment, the examination tested the hypothesis that the failures came from the corporate network proxy, not from the code. The expert report established what was ready and where the failures came from.

Related page →

REAL CASE · ANONYMISED

A stalled software project, a relationship preserved

Client and developer were in dispute over a partly delivered project, each blaming the other. Technical analysis of the scope, the deliveries and each side's dependencies showed shared responsibility. Negotiation on the facts led to an agreement for partial delivery, with no court litigation.

Related page →

REAL CASE · ANONYMISED

The invoice that revealed the intrusion

A company received an additional charge from its cloud provider that it did not recognise. From the account records, the examination reconstructed the creation of unauthorised virtual machines and separated them from legitimate use. The additional charge was cancelled.

Related page →

Practice and materials

Ready to use the next day

Hands-on exercise

The groups receive fictitious clauses from a software contract, deliberately written without technical criteria. In 15 minutes, they point out in each clause what an expert would need to measure, what is missing and who would keep the record. They hand in the list of technical points the drafting needs to cover.

Materials provided
  • Technical checklist for technology clauses: what acceptance, SLA, delivery, logs, incidents and termination need to define.
  • Escrow verification guide: what to deposit and how to check the deposit.
  • SLA metric, source and retention chart: for each indicator, who measures and where the record is kept.
  • Pre-termination preservation list: what to copy before cutting access and shutting down environments.
Questions on the topic
Who owns the code the supplier developed?
It depends on the contract. Unless otherwise agreed, the Brazilian Software Act gives the client the rights to a program developed under a contract made for that purpose (Law 9,609/1998, art. 4º). The examination shows who wrote each part and what came from third parties or from open source.
Does source code escrow solve the risk of the supplier disappearing?
Only if the deposit can be verified. Code without history, without build instructions or without its dependencies does not build the system in use. Verification compiles the deposit and compares the result with the version in production.

Laws and rulings discussed

Law 9,609/1998, art. 4º (Brazilian Software Act)  ·  LGPD, arts. 16, 39 and 42, § 1º, I (Brazil's data protection act)  ·  CPC, art. 381 (Brazilian Code of Civil Procedure)  ·  Roteiro de Métricas de Software do SISP, version 3.0 (Brazilian federal government software metrics guide)

See also

Software and Development Project Forensics →   IT Arbitration and Mediation →   Information Security and Compliance →   Forensic Services in Digital Law and Technology →   See all courses →

Bring this course to your firm

Open class or in-house for your team, in person or online. Tell us the group size and preferred date: you will hear back within 24 business hours.

I want this course

The technical evidence your case requires. The authority courts respect.

Initial feasibility consultation at no cost. Reply within 24h on business days.
Request an Examination