Clear explanations of 500+ contract clauses, written in plain English for businesses and individuals.
COSHH (Control of Substances Hazardous to Health) is a UK regulatory framework requiring employers to identify, assess, and control exposure to hazardous substances in the workplace. When this clause appears in a force-majeure section, it creates sig
Read More →FSMA (Food Safety Modernization Act) Compliance is a U.S. federal regulatory framework requiring food manufacturers, suppliers, and handlers to implement preventive controls, traceability systems, and food safety plans. When this clause appears in an
Read More →This clause requires one or both parties to comply with U.S. Food and Drug Administration (FDA) regulations and standards. The FDA oversees the safety, efficacy, and labeling of food, drugs, medical devices, and related products. By including this cl
Read More →This clause pertains to UKCA (UK Conformity Assessed) Marking, which is the United Kingdom's post-Brexit replacement for CE Marking on products sold in the UK market. Following the UK's departure from the European Union, products that previously reli
Read More →CE Marking is a European Union regulatory compliance declaration indicating that a product meets EU safety, health, and environmental protection requirements. This clause typically obligates one party (usually the supplier or manufacturer) to ensure
Read More →This clause requires that one or both parties comply with the Health Insurance Portability and Accountability Act (HIPAA), a U.S. federal law governing the privacy, security, and breach notification of protected health information (PHI). The clause t
Read More →This clause requires a vendor (typically a third-party service provider, software vendor, or technology partner) to maintain SOC 2 certification, which stands for Service Organization Control 2. SOC 2 is an auditing standard that evaluates how servic
Read More →This clause requires compliance with PCI DSS (Payment Card Industry Data Security Standard), which is a mandatory security framework for any organization that processes, stores, or transmits payment card data. PCI DSS compliance involves implementing
Read More →This clause requires the SaaS provider to maintain ISO 27001 certification, which is an international standard for information security management systems. ISO 27001 demonstrates that the provider has implemented comprehensive controls to protect con
Read More →This clause combines GDPR (General Data Protection Regulation) compliance obligations with restrictive covenants—contractual provisions that limit a party's freedom to act after the contract ends (such as non-compete, non-solicitation, or confidentia
Read More →Get instant AI-powered risk analysis. No legal degree required.
Get Started Free