Back

Playbook

What to Put in an Integration Partnership Agreement

October 28, 20267 min read

Short answer: put in writing the five things that break first. Who owns support when the partner's side goes down, how much notice either side gives before a breaking change, how revenue is attributed and reported every month, how either side exits with notice and a clean wind-down, and what data crosses the integration. Agree them before anything ships, because after the first outage every one of them becomes an argument.

This is a practical checklist from the operating side, not legal advice. For exclusivity, regulated data, or amounts that matter to either company, have your own counsel read the final document.

Why integration partnerships break without an agreement

Integrations rarely die because the build was hard. With coding agents, the build is the cheap part. They die later, on the things nobody wrote down: who answers the customer, who changed the field, whose numbers are right, and how to get out. A founder on a SaaS forum who had run one put the first of those in a sentence:

"rev-share is great until their API goes down and suddenly you're the one getting the angry emails, ask me how I know"

Most integration deals still live in a chat thread and a launch date. That works right up to the first incident, and then two founders who liked each other are negotiating support terms in the middle of an outage, which is the worst possible moment to negotiate anything. If you want the operational side of what goes wrong, it's catalogued in 7 common SaaS integration problems. This post is the paper that stops those problems turning into disputes.

The integration partnership agreement checklist

ClauseThe question it answersWhat happens without it
Support ownershipWho answers the customer, and how fast does the partner respond?The host absorbs every complaint about something it doesn't control
Change policyHow much notice before a breaking change, and to whom?A renamed field breaks the integration and a customer finds it first
AttributionWhich sales count, how are they tagged, who reports?"Your dashboard says 40, ours says 12"
ExitHow does either side leave without stranding customers?An embed disappears overnight with a chunk of signups
Data handlingWhat crosses, for what purpose, and when is it deleted?A privacy review blocks launch, or a customer list walks out the door

1. Who owns support when the partner's side breaks?

The customer only sees the product they're using. If an accounting tool embeds a payroll partner's feature and payroll is down, the email goes to the accounting tool. That is not unfair; it is just how customers work. So write the split down:

  • First-line support belongs to whoever's interface the customer sees. It's their customer and their screen. They triage and reply.
  • Second-line support belongs to the partner who provides the capability, with a stated response time. Pick a real one you can meet (for example four business hours, one business day or two business days) rather than an aspirational one.
  • An incident notice duty. The partner tells the host when their side is degraded, ideally before the host's customers notice. A status page that can notify the host counts.
  • An escalation address that is a role, not a person. People go on holiday and change jobs; a role inbox survives both.
  • A graceful failure state. Agree that the host shows a clear "temporarily unavailable" message instead of an error when the partner fails. It's a product decision, but writing it into the agreement makes it a shared one, and it turns an angry email into no email.

2. How much notice for a breaking change?

The most common way an integration breaks after launch is that one side changes something the other built against, with no warning. Renamed fields, a new auth flow, a webhook payload that quietly changed shape. The agreement should say:

  • A notice period. Thirty days is a sensible floor for small partnerships. Longer if the partner has many hosts or the change touches billing.
  • A security and legal exception. Some changes can't wait. Those get notice as soon as reasonably practicable, not thirty days.
  • What counts as breaking. Removing or renaming a field, changing authentication, changing the meaning of a value, or deprecating an endpoint the partner uses. Adding optional fields is not breaking.
  • Where notice goes, and in what form. A dated written notice to the escalation address, so "we told you" is provable later rather than a memory of a call.
  • No obligation to expand. Neither side commits to building more than the agreed scope. This protects the smaller company from a partner's roadmap.

Why integrations decay even with good intentions is covered in SaaS integration maintenance. The notice clause is the contractual half of that problem.

3. How will revenue be attributed, and who reports it?

Revenue share stays friendly only while both sides trust the numbers. Another founder on the same forum, who had built one, described the conversation that ends partnerships: the one "where your dashboard says 40 and theirs says 12." Agree before launch:

  1. The attribution method. A unique signup link, a partner ID passed through the integration, or a tag on the charge itself. The closer the tag sits to the actual payment, the less there is to argue about.
  2. Which revenue is in scope. Name the specific products or prices. "Any revenue from the partner's customers" invites a fight about upgrades, add-ons and renewals.
  3. How long a customer stays attributed. The duration of the share, written as a date or a number of months, not "ongoing".
  4. One shared monthly report. Same figures, both sides confirm or dispute a specific line. Monthly disagreements are small. Annual ones are fatal.
  5. A dispute route. A period of good-faith negotiation, then mediation, then whatever binding step you choose. Decided calmly, in advance.

Worth adding a line on retention, too: agree how you'll check whether customers who came through the partner are still active after a month. People who only ever touch you through someone else's product can churn faster, and a conversion rate without retention is a vanity number. The percentages themselves are a separate conversation, covered in integration partnerships that share revenue.

4. How does either side exit cleanly?

Most collaborations don't work out, and that's fine, as long as leaving doesn't hurt anyone's customers. The fear on the provider's side is specific: a host can pull an embed overnight and take the provider's signups with it. The fear on the host's side is a partner that disappears and leaves a broken screen. One exit clause answers both:

  • A notice period for leaving without cause, plus a defined term so the agreement ends on a date unless both continue it.
  • A removal window. Each side removes the other's integration surfaces from its own product within a stated time after exit.
  • Graceful degradation in the meantime, so customers aren't stranded mid-task.
  • An agreed customer message. Optionally, one message offering affected customers the choice to continue with the provider directly, opt-in by the customer. Nobody hands over a customer list; the customer chooses. Make it symmetrical or the host will read it as poaching.
  • Final settlement. What's owed up to the exit date, confirmed on the same monthly report.
  • Data deletion with a deadline, confirmed in writing by each side.

A partnership that's easy to leave is easier to say yes to. That's not a weakness in the deal; it's what gets it signed.

5. What data crosses the integration, and what happens to it?

Nobody hands their user table to a company they met last month, and data protection law would stop them if they tried. The best integrations exchange a call and a consented identity handoff, never a dataset. Write down:

  • Exactly which fields cross, in which direction, and why each one is needed.
  • That each side uses the other's data only to run the integration, never to market to those users independently.
  • Who is the controller and who the processor for each flow, and whether a data processing agreement is needed.
  • Where credentials live (each side keeps its own; nobody stores the other's secrets).
  • Deletion on exit, with the deadline from the exit clause.

Keeping the data surface small isn't just compliance. It's what lets an integration ship without a six-week legal review on each side.

What else belongs in the agreement?

  • Scope: what each side builds and exposes, described as capabilities rather than screens.
  • Term and renewal: a fixed term, renewed deliberately rather than automatically.
  • Identity of signatories: know who actually signed, and that they could bind the company.
  • Who writes the code: say plainly that each side builds and maintains its own half.

How long does this take to agree?

Less than founders expect, once the questions are on a page. The slow part is deciding the answers, not signing them. For a sense of how short the paperwork can be: on one collaboration on Ordana, measured from our own timestamps, it took 3 minutes from opening the collaboration to a signed contract and a live revenue share. That was a straightforward deal with standard terms, not a negotiated integration, and it's one data point, not a promise. But it shows the document isn't what holds you up.

If you want the clause-by-clause view of the full agreement, including revenue scope and signatures, see what an integration partnership agreement needs. Ordana generates the agreement from the collaboration's own plan and collects identity-verified signatures from every party; it's still worth reading every line yourself.


Related reading: