Cloud provider goes TITSUP? Will someone think of the data!

The IP will likely ask you to pay up again

Past this point, it all starts to unravel. The IP’s role is to realise as much money from the assets under its control to pay off the debts which gave rise to the insolvency. The IP will need to identify what those assets are. If the provider owns the data centre, then this is likely to be very valuable. However, if the provider is renting racks from, or co-locating hardware in, a data centre owned by a third party, this will be less valuable.

Further, there is the danger that a failure by the provider to keep up payments will mean the DC owner will pull the plug. The DC owner might not need to wait until the next bill is payable by the provider, since most contract terms allow for a termination upon the appointment of administrators or insolvency practitioners. Timely action is now important as, without continuity of service, the IP may have no leverage.

The main thing under its control is your assets as the customer – meaning your data.

Therefore, the most likely scenario is that the IP will ask you, the customer, to pay up for the services, even if you have already paid upfront, with the threat of discontinuation of the service at short notice if you don’t comply. If your business relies upon the continued provision of services, any discontinuation of these services could cause your business to fail.

In theory, the law is on your side. You’ve agreed an acceptable level of performance under the SLA, have paid upfront and are comfortable that you retain ownership of your data. Any attempt to shut off the service pending action by the IP refusing to honour the contract is likely to be a breach of your contract with the provider.

Unless you are able to get an injunction from the court at short notice to prevent the IP from shutting down the service, you are at the mercy of the IP. This is what happened with 2e2 and, while the industry expressed shock at the time of how it played out, the reality is that this is likely to recur each time there is an insolvency.

What can you do to overcome this?

There is no simple solution to this and the key is always to plan ahead before it actually happens. Let’s examine the most likely solutions.

Step in: One solution often proposed is that the customer can “step into” the shoes of the provider and deal directly with the third-party subcontractor and continue to pay the third party to preserve continuity of service. In reality, this might work for telecoms or maybe co-location but is unlikely to work with a data centre. If the DC owner has sold a block of resource to the provider who has used it to sell to you and 50 other customers, the DC owner will have no interest in dealing direct with you and 50 other customers. It will simply re-designate the resource as available for resale to someone else. For this to work, you need to negotiate with the third-party subcontractor at the same time as you negotiate with the cloud provider.

Escrow: Traditional source code escrow clearly won’t work in a cloud environment. Placing code into escrow only works if the software is running on-premise in object code format. If you are paying for SaaS and the provider is holding your data, receiving a copy of the source code will not help as, while you are working out what to do with the code and how or where to host it, in the meantime the IP may have turned off the service. It might be possible for a third party to step in and continue paying the DC owner behind the scenes, in which case this form of escrow is more akin to a “step in” referred to above.

Separate Back-up/DRaaS: A better solution might be to have a third party manage your back-up copy and provide you with disaster recovery as a service. Providing your main provider and your DRaaS provider are not under common ownership, there is reduced likelihood they will both go bust at the same time. If your provider goes bust, you could switch to the DRaaS. You naturally need to check the recovery point and time objectives to ensure you get continuity. You also need to ensure your DRaaS provider can get access to the data on a regular basis to perform the back-ups and this might mean the two providers – who might be competitors – need to co-operate.

In short, cloud provider insolvency remains one of the great unanswered questions in the industry, with no magical or standard formula providing a solution. What do you think? What’s your DR solution if the provider goes bust? ®