January 21st, 2008
by

SAS, Outsourcing and Business Risk

Update:  This post has nothing to do with these guys.

I have long been a fan of outsourcing (not necessarily offshoring, which is a different animal).  Take the stuff that’s not the core of your business and move it off to those who are experts in it.  I think it gets even better when that service can come through a nifty lightweight web 2.0 interface.  In other word, Software As a Service (SAS) UPDATE: Sorry – this should actually have been abbreviated “SaaS”. Acronym fixed in the rest of this post.

So, along those lines, we here at Ai use a number of web-based outsourcing services to handle our non-core activities.  We use BaseCamp as a collaborative project management tool, and Harvest for time tracking, to name a few.  These decisions are cost-effective for us, because we’re not in the collaborative project management tool business, nor the time tracking tool business.  We build websites for clients.
There’s a catch, however (you knew the catch was coming, didn’t you?).   There is a question of risk for each business function that is outsourced to a SaaS.  This risk can be difficult to quantify, so it can be a bit much for the more risk-averse business people.
SaaS-related business risk generally falls into two categories:
  • Availability:  How often does the SaaS go down, and become unavailable to its clients?  Depending on the level that business depends on the SAS, lack of availability can have a serious business cost, usually taking the form of paralyzing the business in some way.
  • Data Loss:  Much worse than availability, when mission critical data is put into an SaaS, data loss can be deadly.  Data loss can kill a business.  Dead.  A less deathly, but still damaging variant on this is vendor lock-in, where there’s no expedient way  to leave the SaaS, because all of the business’ data  is in the SaaS system, with no way to export it. 
Am I being hyper-cautious?  Are these risks just hypothetical?  Well, in the last week BaseCamp (actually all of the 37 Signals apps) went down because of a bad router.  There was no backup router in the rack, apparently, meaning that the entire suite of SaaS apps from 37 Signals had a single point of failure which, well, failed.  For all of Friday morning, no one derived any benefit from BaseCamp.
Last week Twitter (admittedly not the first thing one thinks of for business-facing SaaS, but still…) died unceremoniously during the Steve Jobs Macworld keynote.  Too many Apple fans live-blogging for Twitter to stand, apparently.

These risks slow SaaS adoption.  In order to make the leap across the chasm from early adopter types to the majority, SaaS providers must find a way to mitigate these risks.  This kind of thing  will be tolerated by a certain breed of early adaptors, but the more  conservative majority need more assurances.

Hello, SaaS providers – I’m talking to you now:
  1. Service Level Agreements for SaaS:  How about an uptime guarantee.  That is typically followed by an investment by the provider in the technical infrastructure to provide the agreed upon service level.  Like backup routers.
  2. Data backup and export:  Some assurance that a) our data is safe and b) we can get it away from you would go a long way to mitigating fears of certain business death in the event of a technical failure of an SaaS, or should we decide that we want to switch to another SaaS.

Now I’m not asking for regulation or anyone to pass a law or anything.  But it would be nice to have a certifying body out there somewhere for this kind of thing – a “Hacker Safe” for mitigating SaaS business risk.  That would provide businesses the assurance they need, and allow SaaS to fully cross over into the mainstream.

Business

6 Comments

  1. I’m also a memeber of a Web-site building team. We’re using Wrike for our projects. I think its nie to have one tool for everything – you save a lot of time. Wrike developers are releasing the new time-tracking feature this week and I’m really looking forward to it. I think you should check out their site, might seem useful for you too.

    Dru Len on January 22, 2008 at 2:30 pm

  2. You mention using Basecamp for project management and Harvest for your time tracking. Have you thought about using one application to do both? My company developed Intervals because we need all of our data under one login.

    john on January 22, 2008 at 4:08 pm

  3. muirhouses

    muirhouse on March 27, 2008 at 4:30 pm

  4. whoops, sorry, I was trying to sign in to leave a comment.Which was, SaaS is the acronym used to distinguish software as service from SAS.

    muirhouse on March 27, 2008 at 4:31 pm

  5. I actually am more in the “small tools doing one thing well” camp than the “one tool that does everything” camp. I want the flexibility of being able to switch out different software for different functions, and let companies focus on the things they do really well.What I would encourage amongst vendors is to work on interoperability. For example, the single login issue can be addressed by support for OpenID and OAuth.@muirhouse: whoops – you’re completely right. I’ll correct the post.

    Loren Davie on April 4, 2008 at 8:46 pm

  6. HourDoc is tool for Time Tracking. http://www.HourDoc.com is right treatment for time and labor management processes has to be an easy-to-administer and affordable solution for Freelancers, supervisors, employees and HR and payroll managers. They offer free application to companies less than 50 employees.

    Anonymous on December 1, 2009 at 1:31 am

Leave a Comment

* = required