Nine things you need to know about SaaS

Computerworld - Software-as-a-service may have come into the enterprise through "the bathroom window," but it's definitely becoming part of the mainstream, says SaaS expert Mike West, vice president at Saugatuck Technology Inc., a boutique management consulting and subscription research company focused on disruptive technologies.

And it's an alternative to in-house operations and outsourcing that IT shops can and should use to deliver services and improve their infrastructure in a cost-effective way. SaaS can offer high-quality services at a lower cost than other alternatives, and it's particularly good for supporting mobile and geographically disbursed populations, whether they are sales staffers, telecommuters, customers or business partners worldwide. And in its latest iteration, says West, the technology is offered by leading SaaS vendors as complete platforms unifying normally stovepiped sets of services, supporting underlying data capture and analysis.

Here are West's answers to some basic questions about the SaaS market. IT and business users (and Internet service providerss trying to evolve into SaaS providers) need to know the following information about this new and quickly evolving option for purchasing IT services:

1. What is SaaS?

"Software as a service, sometimes known as on-demand software, is a new model for deploying business services ... that requires the provider ... to make access to the functionality available typically through a browser," West says.

It can be seen as the evolution of the application service provider (ASP) model. It differs from ASP in part in that while that model usually provides a unique instance of the underlying application for each user organization, SaaS typically uses a multitenancy architecture, sharing a single instance of an application and a single database of user data among all of a service's customers. This model provides enormous economies of scale, often allowing SaaS providers to sell services at a significantly lower cost than traditional outsourcers or even ASPs, and to deliver superior return on investment to customers.

The ASP model was criticized for providing generic versions of complex applications such as enterprise resource planning. Advances in underlying technology now allow SaaS providers to provide limited amounts of customization of user interfaces, functionality and even underlying data structure. Basically, West says, the software is aware of the identity of each user and consults a customization database to determine what customized features to apply.

However, SaaS solutions typically don't provide the full customization that would be available with the internal installation of a complex software package such as SAP. Definitely, one of the things users considering SaaS must determine is whether their organization can live with the managed customization that SaaS supports.

2. What about security? If our data is sharing a database with other organizations, possibly including competitors, how can we be sure we are safe?

"The security solutions offered by SaaS vendors are quite excellent," West says, and the danger of corporate espionage is virtually nonexistent. In some cases, some SaaS providers can even keep critical data inside firewalls for those clients who may require it. However, SaaS clearly isn't the right solution for preserving the nation's nuclear secrets. Obviously, this is another element that potential users need to consider, and many will prefer to keep some data and applications in-house for security reasons. On the other hand, internal corporate security isn't perfect, either.