Skip to main content

Term · Topic

Software-as-a-Service (SaaS)

Software-as-a-Service is a cloud-based software delivery model in which a provider hosts, operates, and maintains applications and makes them available to customers over a network on a subscription basis, which affects enterprise architecture, procurement, security, and operations practices.

  • 118 articles
  • 239 companies
  • Most covered: Netskope, Microsoft, Amazon Web Services (AWS)

What is Software-as-a-Service?

Software-as-a-Service (SaaS) is a cloud computing delivery model in which a provider hosts and manages application software and makes it accessible to customers over a network, typically the internet, on a subscription or metered basis.

SaaS delivers application functionality from provider-operated infrastructure, with users accessing the software via web interfaces, APIs, or client applications. The provider manages the underlying hardware, virtualization, operating systems, middleware, application code, and many operational controls.

Core characteristics include multitenancy, network-based access, standardized service offerings, and metered or subscription-based billing. The model typically centralizes updates, patches, and feature releases, which the provider deploys without customer-managed installation processes.

Enterprise Usage and Architectural Context

Enterprises use SaaS for business applications such as collaboration, customer relationship management, human capital management, enterprise resource planning, analytics, and security services. SaaS offerings integrate with existing directories, identity providers, data platforms, and other cloud or on-premises (on-prem) systems.

In enterprise architectures, SaaS sits at the application layer of cloud computing alongside Platform-as-a-Service (PaaS) and Infrastructure-as-a-Service (IaaS), often connected through APIs, integration platforms, and event streams. Architects evaluate SaaS in relation to data residency, access control, interoperability, and lifecycle management requirements.

Related or Adjacent Technologies

SaaS relates closely to other cloud service models, including IaaS, which provides virtualized compute, storage, and networking, and PaaS, which provides managed runtime and development environments. Organizations often combine these models within hybrid and multicloud strategies.

SaaS also intersects with identity and access management, data protection technologies, and security frameworks, because providers and customers share responsibilities for authentication, authorization, encryption, logging, and compliance controls. Integration technologies such as iPaaS and Application Programming Interface (API) management platforms often connect SaaS with enterprise systems.

Business and Operational Significance

SaaS alters how organizations procure and operate software by shifting from perpetual licenses and customer-managed deployments to subscription-based access and provider-managed operations. This change affects budgeting, vendor management, procurement processes, and contract structures.

Operationally, SaaS centralizes many aspects of maintenance, including availability, capacity planning, and security patching, under the provider’s control. Enterprises still retain defined responsibilities for configuration, identity management, access policies, data governance, and compliance oversight within the Shared Responsibility Model (SRM).

Our definition.

Companies in this area

Listed by how often coverage ties them to this term.

Recent coverage

Press release · Apr 2026 · Source: prnewswire.com OpenText and S3NS Partner to Deliver European Sovereign Cloud Solutions with Google Cloud OpenText announced a partnership with S3NS (Thales and Google Cloud) to deliver a hybrid, France-based trusted cloud using Google Cloud technology. The offering targets regulated organizations with data residency, GDPR support, SecNum 3.2 alignment, and governance controls, including dedicated private cloud and sovereign SaaS components. Blog post · Apr 2026 · Source: netskope.com Netskope examines how generative AI use changes healthcare security access Netskope’s 2025 Healthcare Threat Labs reports 60% off-oversight generative AI use and 88% integration in workflows, framing risk, compliance and continuity. Blog post · Mar 2026 · Source: delloro.com What 30+ RSAC Meetings Revealed About Where Security Control Is Consolidating Mauricio Sanchez distills RSAC 2026 into clear signals for vendors and investors, highlighting control-plane consolidation, data-centric policy, and the gap between vision and adoption. The post What 30+ RSAC Meetings Revealed About Where Security Control Is Consolidating appeared first on Dell'Oro Group.