legal aspects of saas