What shapes a SaaS product for the United Kingdom
UK buyers of software ask early and precisely about data, tax and payment. A product that has the answers in its settings pages and its invoices closes sales that a better-looking product without them will lose.
| Topic | What it means for your product | Decide early |
|---|---|---|
| Processor duties | When customers put personal data into your product, UK GDPR makes them the controller and you the processor. That requires a written contract, security measures, help with people's requests, notice of any breach and control over the sub-processors you use | Your data processing agreement and sub-processor list |
| VAT | Subscriptions are subject to VAT. A UK-established company registers once its taxable turnover passes the threshold, while a company established abroad that sells digital services to UK consumers has no threshold at all | Registration, invoice format and how prices are displayed, with your accountant |
| Collecting payment | Cards with strong customer authentication suit self-serve plans. Many UK businesses prefer Direct Debit for recurring bills, and Open Banking payments are growing | Which methods each plan offers |
| Consumer subscriptions | New rules under the Digital Markets, Competition and Consumers Act are due to start in January 2027. They add reminder notices, a cooling-off right on renewal and cancellation that is as simple as signing up | Whether you sell to consumers, and the renewal and exit flows if you do |
| Public sector and enterprise buyers | Buyers commonly ask for Cyber Essentials, answers to a security questionnaire and, in the public sector, WCAG 2.2 at Level AA with an accessibility statement. Health products face NHS assessment criteria | Which buyers you will approach first, and what they require |
| Users who share content | A product that lets users post content or message each other can fall under the Online Safety Act whatever the company's size, which brings risk assessments and reporting tools | Whether user-to-user features are in the first release |
Product workflows we build for the UK market
Subscription with a VAT invoice
The standard purchase, done the way a UK finance team expects.
- Plan selected with VAT shown
- Company and VAT details captured
- Card authenticated
- VAT invoice issued automatically
- Renewal notice sent ahead of each term
Direct Debit billing
For customers who will not put a company card on file.
- Customer sets up a mandate in the product
- Advance notice of each collection
- Payment collected
- Failed collections retried
- Account status updated
Customer due diligence pack
What a larger buyer asks for before purchase.
- Data processing agreement issued
- Sub-processors and hosting region listed
- Security questionnaire answered
- Accessibility statement shared
- Contract signed
Exit and deletion
The end of a contract, handled as carefully as the start.
- Notice received
- Export provided in a common format
- Access ended
- Data deleted from live systems, then from backups on schedule
- Confirmation sent
What we build
Multi-tenant platform
A shared platform with strict separation between customers, built so one customer's data can be exported or erased without touching another's.
Subscription and VAT billing
Plans, seats and usage through a billing provider, with compliant VAT invoices, card authentication and Direct Debit.
Processor tooling
Features that let your customers meet their own duties: data export, deletion, access logs and help with requests from individuals.
Organisation accounts
Workspaces, roles, single sign-on and audit history for customers with IT and security teams.
Accessible product design
Interfaces designed and tested to WCAG 2.2, ready for a public sector buyer's review. See SaaS UI/UX design.
Maintenance
Monitoring, updates and security patching after launch, set out in software maintenance and support.
What we need from you
- The customer you are building for, and what they use today
- Draft pricing, including how VAT will be shown
- Your adviser's input on processor terms and consumer rules
- Any tender or questionnaire you expect to answer
- A product lead with authority to decide
Ownership and licensing terms are defined in the project agreement.
A readiness checklist for a UK SaaS launch
Before development starts
0 of 8 checkedWhat to do next
Tell us who will buy the product, how you intend to bill them and where the product stands today. We will reply with a proposed architecture, the compliance features to schedule first and a first release you could sell. Start a conversation or book a 30-minute call.
Common questions
Do we charge VAT on SaaS subscriptions in the UK?
Yes, once you are registered. A UK-established business must register when its taxable turnover passes the registration threshold and can register earlier. A business established outside the UK that sells digital services to UK consumers must register from its first sale. Sales to VAT-registered businesses from abroad are usually handled by the customer under the reverse charge. Your accountant confirms your position, and billing is built to match.
What must a SaaS product do as a data processor under UK GDPR?
Act only on the customer's instructions, keep the data secure, help the customer answer requests from individuals, report breaches without undue delay, use sub-processors only with authorisation, and return or delete the data at the end of the contract. These duties sit in a written agreement. Several of them are product features in practice, such as export, deletion and access logs.
How do UK customers prefer to pay for subscriptions?
Smaller customers pay by card. Established businesses often prefer Direct Debit, which they already use for utilities, software and services, and larger organisations pay invoices by bank transfer against a purchase order. Offering Direct Debit alongside cards tends to reduce failed payments, because bank details change less often than card numbers.
What do public sector buyers ask of a SaaS supplier?
Expect questions on data protection, hosting location, security controls and accessibility. Cyber Essentials is a common minimum, and products must meet WCAG 2.2 at Level AA. Many purchases run through government frameworks, which have their own application rounds. Health and care buyers add assessment criteria for clinical safety and data security. Knowing which buyers you want lets us build to their list from the start.
Where to go from here
Related serviceSaaS DevelopmentA subscription product needs more than features