SaaS & Business Software Glossary
Plain-English definitions of the terms you will encounter when choosing and managing software for your business.
A
A/B testing
A method of comparing two versions of a webpage, email, or feature by showing each to a subset of users and measuring which performs better on a defined metric like conversion rate or click-through rate.
Accounts payable (AP)
The money your business owes to suppliers, vendors, and service providers. AP automation tools streamline invoice approval and payment scheduling.
Accounts receivable (AR)
The money owed to your business by customers for goods or services delivered but not yet paid for. AR aging reports show which invoices are overdue.
Affiliate link
A special URL that tells a vendor which partner sent them a customer. When someone buys after clicking the link, the partner earns a referral fee.
AMS
Agency Management System — software built specifically for insurance agencies that combines CRM, policy management, carrier downloads, and commission tracking in one platform.
API
Application Programming Interface — a set of rules that lets one piece of software talk to another. If your CRM can automatically create invoices in your accounting tool, an API is doing the work.
API Gateway
A server that acts as an entry point for API requests, routing them to the appropriate backend services while handling authentication, rate limiting, and monitoring.
API-first
A product strategy where every feature is built as an API before a user interface is added. It makes integrations easier and keeps the platform flexible.
ARR
Annual Recurring Revenue — the total predictable subscription revenue a company expects to collect over the next 12 months. A key health metric for SaaS businesses.
ATS
Applicant Tracking System — software that manages the hiring pipeline from job posting to offer letter, including resume parsing, candidate scoring, interview scheduling, and offer management. Recruiters use ATS to avoid losing candidates in spreadsheets and email threads.
Autoscaling
The ability of a cloud platform to automatically increase or decrease compute resources based on real-time demand, so you only pay for what you use.
B
Bandwidth
The maximum amount of data that can be transmitted over a network connection in a given time, typically measured in megabits per second (Mbps).
Bandwidth
The maximum rate at which data can travel between two points on a network, usually measured in megabits per second (Mbps). Low bandwidth causes slow loading times and poor video quality.
Burn rate
The rate at which a company spends its cash reserves before generating positive cash flow. Usually expressed as a monthly dollar amount.
Business continuity
An organization's ability to maintain essential functions during and after a major disruption, such as a data breach, natural disaster, or vendor failure.
Business continuity
An organization's ability to maintain essential functions during and after a disruptive event — including natural disasters, cyberattacks, or system failures. A business continuity plan defines how operations continue when normal tools are unavailable.
C
CAC
Customer Acquisition Cost — how much it costs to win one paying customer, including marketing and sales spend. Lower CAC usually means a more efficient business model.
Cap table
A spreadsheet or table showing the equity ownership structure of a company — who owns what percentage, including founders, investors, and employees.
CAPEX
Capital Expenditures — large, long-term purchases like equipment, buildings, or major software licenses that are capitalized on the balance sheet and depreciated over years instead of expensed immediately. Distinct from OPEX (operating expenses like SaaS subscriptions).
CDP
Customer Data Platform — a system that collects and unifies customer data from multiple sources into a single profile, used for personalization and segmentation.
Channel management
The practice of distributing and updating rates, availability, and content across multiple booking or sales channels (OTAs, direct website, wholesalers) simultaneously.
Chargeback
A reversal of a credit-card transaction initiated by the cardholder's bank, often due to fraud or disputed purchases. Businesses that receive too many chargebacks may face higher processing fees.
Churn
The rate at which customers cancel or stop using a subscription service over a given period. High churn means you are losing existing revenue as fast as you gain new revenue.
CI/CD
Continuous Integration and Continuous Delivery/Deployment — a practice where code changes are automatically tested and deployed, reducing manual errors and speeding up releases.
CMS
Content Management System — software for creating, managing, and publishing digital content like websites and blogs. WordPress and Webflow are common examples.
COGS
Cost of Goods Sold — the direct costs of delivering a product or service, such as hosting fees, payment processing, or customer-support labor for existing accounts.
Comparative rater
An insurance-specific tool that pulls quotes from multiple carriers simultaneously so an agent can compare rates side by side for a single client.
Containerization
Packaging an application with all its dependencies (libraries, config files, runtimes) into a lightweight, portable container that runs consistently across any environment. Docker is the most widely used container platform.
CPA
Certified Public Accountant — a licensed accounting professional. Also used as Cost Per Acquisition in marketing contexts.
CRM
Customer Relationship Management — software that tracks leads, contacts, deals, and communications so a team can manage sales without losing context.
D
Data migration
The process of moving data from one system, format, or storage location to another. SaaS migrations (e.g. switching CRMs) require careful data mapping, deduplication, and validation to avoid information loss.
Data sovereignty
The principle that data is subject to the laws and regulations of the country in which it is collected or stored, affecting where cloud vendors can host your information.
Data sovereignty
The principle that data is subject to the laws of the country where it's physically stored. It affects which cloud providers and data center locations you can use when serving customers in regulated industries or specific geographic regions.
Data warehouse
A central repository where data from many sources is collected, cleaned, and stored for analysis. Common platforms include Snowflake, BigQuery, and Redshift.
Deductible
The amount a policyholder must pay out of pocket before insurance coverage kicks in. Higher deductibles usually mean lower premiums.
Demand forecasting
Using historical data and external signals to predict future customer demand. Common in hospitality, retail, and manufacturing to optimize staffing and inventory.
Disaster recovery (DR)
An organization's documented plan for restoring IT systems and data after a catastrophic event like a ransomware attack, server failure, or natural disaster. DR plans specify RTO (how fast you recover) and RPO (how much data you can lose).
Dispatch board
A visual interface in field service software that shows where technicians are, what jobs they are assigned to, and their real-time status. The central coordination tool for trades companies.
Double opt-in
A confirmation process where a user must verify their email address after signing up, usually by clicking a link in an email. It improves list quality and reduces spam complaints.
Dynamic pricing
A pricing model where the cost of a product or service changes in real time based on demand, supply, seasonality, or customer segment. Common in hospitality, airlines, and event ticketing — and increasingly in SaaS usage-based pricing.
E
EBITDA
Earnings Before Interest, Taxes, Depreciation, and Amortization — a measure of operating profitability that strips out financing and accounting decisions.
EDR
Endpoint Detection and Response — a cybersecurity solution that monitors laptops, desktops, and servers for suspicious activity and automatically responds to threats.
EHR / EMR
Electronic Health Record / Electronic Medical Record — digital versions of a patient's medical history, used by healthcare providers to track diagnoses, treatments, and prescriptions.
EOR
Employer of Record — a third-party organization that legally employs workers on behalf of another company, handling payroll, tax withholding, benefits, and compliance. Businesses use EORs to hire internationally without setting up legal entities in every country.
ERP
Enterprise Resource Planning — a large integrated system that handles finance, HR, supply chain, and operations in one place. Examples include NetSuite, SAP, and Odoo.
Escrow
A holding arrangement where money or assets are kept by a neutral third party until agreed conditions are met. In affiliate programs, it can mean delaying a payout until the refund period passes.
ETL
Extract, Transform, Load — the process of pulling data from multiple sources, reshaping it into a consistent format, and moving it into a database or warehouse.
F
First-party data
Information a business collects directly from its own customers through transactions, website behavior, surveys, or loyalty programs. First-party data is the most reliable and privacy-compliant data source, especially after third-party cookie deprecation.
Flat-rate pricing
A pricing model where a service is sold at a fixed price regardless of time or materials used. Common in HVAC and plumbing for predictable customer quotes.
Freemium
A pricing model where a basic version of a product is offered for free, with advanced features available through paid subscriptions. Common in SaaS for user acquisition.
Freemium
A pricing model where a basic version of a software product is offered free forever, with paid upgrades for advanced features, higher usage limits, or team collaboration. It relies on a small percentage of free users converting to paying customers.
FSM
Field Service Management — software for scheduling, dispatching, and tracking mobile workers. Usually includes a mobile app for technicians and a back-office dashboard for dispatchers.
G
GDPR
General Data Protection Regulation — a European Union law that governs how personal data must be collected, stored, and processed, with significant penalties for non-compliance.
GDPR
General Data Protection Regulation — a European Union regulation that governs how personal data of EU residents is collected, stored, and processed. It imposes strict consent, access, deletion, and breach notification requirements on any organization handling EU data.
Gross margin
Revenue minus COGS, expressed as a percentage of revenue. Higher gross margins mean more money is left to cover operating expenses and profit.
H
HIPAA
Health Insurance Portability and Accountability Act — U.S. legislation that sets standards for protecting sensitive patient health information. Any healthcare software must be HIPAA-compliant.
Horizontal SaaS
Software designed to solve a general business problem for many industries, such as email marketing, accounting, or project management. Think Mailchimp or QuickBooks.
HVAC
Heating, Ventilation, and Air Conditioning — the industry category covering climate-control installation, repair, and maintenance services.
I
Identity provider (IdP)
A service that stores and manages user identities and provides authentication (login) for multiple applications via standards like SAML or OAuth. Examples include Okta, Azure AD, and Google Workspace. IdPs enable single sign-on (SSO) across a tech stack.
Incident response
The structured process of detecting, containing, and recovering from a security incident like a data breach or ransomware attack. A good incident response plan minimizes downtime, data loss, and regulatory penalties.
Integration
A connection between two software tools that lets them share data or trigger actions automatically. Integrations reduce manual work and keep information in sync.
Interchange fee
The fee paid by a merchant's bank to a cardholder's bank every time a credit or debit card transaction is processed. It is typically the largest component of payment processing costs.
Inventory turnover
A ratio showing how many times a business sells and replaces its inventory over a period. Low turnover means capital is tied up in unsold stock.
Invoice factoring
Selling unpaid invoices to a third party at a discount in exchange for immediate cash. It helps businesses with long payment terms improve cash flow.
K
KDS
Kitchen Display System — a digital screen in restaurant kitchens that shows incoming orders, prep times, and routing instructions, replacing paper tickets.
Knowledge base
A self-service library of articles, FAQs, and documentation that helps users find answers without contacting support. Internal knowledge bases help onboard employees; external ones reduce support ticket volume.
L
Latency
The time delay between sending a request and receiving a response, typically measured in milliseconds. High latency in software tools reduces productivity and user experience.
Latency
The time delay between sending a request and receiving a response, typically measured in milliseconds. High latency makes software feel slow and unresponsive, even if the processing power is adequate.
Lead scoring
A methodology for ranking prospects based on their likelihood to buy, usually combining demographic fit (industry, company size) with behavioral signals (email opens, demo requests). Sales teams prioritize high-score leads first.
LMS
Learning Management System — software for creating, delivering, and tracking training or educational content. Common in employee onboarding and customer education.
Load balancer
A device or service that distributes incoming network traffic across multiple servers to ensure no single server is overwhelmed. It improves reliability, performance, and uptime for web applications.
Load balancing
Distributing incoming network traffic across multiple servers so no single server becomes overwhelmed. Load balancers improve application availability and responsiveness — a key feature to look for in cloud hosting and SaaS infrastructure.
LTV
Lifetime Value — the total revenue a business expects to earn from a single customer over the entire relationship. Often compared against CAC to gauge unit economics.
M
MFA
Multi-Factor Authentication — a security method that requires two or more verification factors (password + phone code, for example) to access an account. Significantly reduces breach risk.
MFA
Multi-Factor Authentication — a security method that requires two or more verification factors (something you know, something you have, something you are) before granting access. It's the single most effective defense against credential theft.
Middleware
Software that sits between two applications and translates or routes data between them. It is the glue that connects systems that do not speak the same language natively.
MRR
Monthly Recurring Revenue — the predictable subscription revenue collected every month. A direct cousin of ARR, just measured on a shorter cadence.
N
Net Promoter Score (NPS)
A customer loyalty metric measured by asking, 'How likely are you to recommend us to a friend or colleague?' on a 0–10 scale. Promoters (9–10) minus Detractors (0–6) equals your NPS. Used widely in SaaS to track customer sentiment.
NetSuite
A cloud-based ERP platform owned by Oracle that handles accounting, inventory, CRM, and e-commerce. Popular with mid-market companies that have outgrown entry-level tools.
Nightly close
The end-of-day reconciliation process in hospitality and retail where sales, tips, and cash are counted and matched against the POS system's recorded totals.
No-show
A customer who books an appointment or reservation but does not show up. No-show rates are a key metric for healthcare, hospitality, and service businesses.
O
Observability
The ability to understand a system's internal state by analyzing the data it produces — typically metrics, logs, and traces. Observability goes beyond monitoring by letting teams ask ad-hoc questions about system behavior without predefining every alert.
OEE
Overall Equipment Effectiveness — a manufacturing metric that measures how effectively equipment is used, combining availability, performance, and quality.
On-premise
Software that is installed and runs on computers physically located at the user's business, rather than on a vendor's cloud servers. On-premise offers full control but requires the business to handle maintenance, security, and upgrades.
Open API
A publicly documented API that any developer can use to integrate with a platform. Open APIs make it easier to build custom workflows and third-party apps.
OPEX
Operating Expenses — the ongoing costs of running a business, including rent, utilities, payroll, and software subscriptions. Distinct from capital expenditures (CAPEX).
OTA
Online Travel Agency — a third-party booking platform like Booking.com or Expedia that lists hotel rooms and takes a commission on each reservation.
P
P&L
Profit and Loss statement — a financial report summarizing revenues, costs, and expenses over a period. Also called an income statement.
PaaS
Platform as a Service — a cloud model where the provider gives developers a ready-to-use environment for building, running, and scaling applications without managing servers.
Payroll tax
Taxes withheld from employee wages and taxes employers must pay on wages, including Social Security, Medicare, unemployment, and state/local taxes.
PCI DSS
Payment Card Industry Data Security Standard — a set of requirements for businesses that handle credit card data, designed to reduce fraud and data breaches.
Per-diem
A fixed daily allowance for employees traveling on business, covering meals, lodging, and incidental expenses. Simplifies expense reporting.
Phishing
A social engineering attack where criminals send deceptive emails or messages that appear to come from legitimate sources to trick recipients into revealing passwords, credit card numbers, or other sensitive information.
PMS
Property Management System — hotel software that handles reservations, front desk, housekeeping, billing, and guest profiles. Cloudbeds and Mews are modern examples.
POS
Point of Sale — the hardware and software used to complete a retail transaction in person. Modern POS systems also track inventory, staff, and customer data.
Practice management software
Software designed for healthcare and professional services practices that combines scheduling, billing, patient/client records, and reporting.
Procurement
The process of sourcing, ordering, and paying for goods and services a business needs to operate. Procurement software automates approvals and vendor management.
Professional liability
Insurance that protects businesses against claims of negligence, errors, or omissions in the services they provide. Also called Errors & Omissions (E&O) insurance.
R
Ransomware
A type of malware that encrypts a victim's files and demands payment (usually in cryptocurrency) for the decryption key. Modern ransomware also threatens to leak stolen data, creating a double extortion risk.
REST
Representational State Transfer — a widely used architectural style for designing APIs. REST APIs use standard HTTP methods like GET, POST, PUT, and DELETE.
Revenue management
The practice of using data and pricing strategies to maximize revenue from a fixed inventory of rooms, seats, or appointments. Common in hotels and airlines.
RFP
Request for Proposal — a formal document that outlines a business's requirements for a product or service and invites vendors to submit competitive bids. RFPs are common in enterprise software procurement to ensure fair, documented vendor comparisons.
RLS
Row-Level Security — a database feature that restricts which rows a user can see based on their role or identity. It keeps multi-tenant data safely separated.
ROI
Return on Investment — the ratio of net profit to the cost of an investment, expressed as a percentage. A 300% ROI means the investment returned three times its cost. Used to justify and compare software purchasing decisions.
Runway
How long a company can operate before running out of cash, calculated by dividing cash on hand by monthly burn rate. A critical metric for startups.
S
SaaS
Software as a Service — applications hosted in the cloud and accessed via the web or mobile apps, usually on a subscription basis. You rent the tool instead of buying and installing it.
SaaS sprawl
The uncontrolled accumulation of overlapping software subscriptions across a business. It leads to wasted spend, duplicated data, and integration headaches.
SDK
Software Development Kit — a collection of tools, libraries, and documentation that makes it easier to build integrations or apps for a specific platform.
SDK
Software Development Kit — a collection of tools, libraries, and documentation that developers use to build applications for a specific platform or integrate with a specific service.
SIEM
Security Information and Event Management — a system that aggregates security alerts and logs from across a network to detect and respond to threats.
SKU
Stock Keeping Unit — a unique code assigned to each product variant for inventory tracking. Different sizes or colors of the same product have different SKUs.
SLA
Service Level Agreement — a contract that defines uptime guarantees, response times, and penalties if the provider fails to meet them.
SLA
Service Level Agreement — a contract that defines the performance standards a vendor commits to, such as uptime percentage (e.g., 99.9%), response times to support tickets, and penalties if commitments aren't met.
SMB
Small and Medium-sized Business — typically defined as companies with fewer than 500 employees, though the exact cutoff varies by industry and source.
SOC 2
Service Organization Control 2 — a voluntary compliance standard for SaaS companies that evaluates security, availability, processing integrity, confidentiality, and privacy.
SOC 2
System and Organization Controls 2 — an auditing framework that evaluates whether a service organization's controls around security, availability, processing integrity, confidentiality, and privacy meet trust service criteria. A SOC 2 Type II report covers 6+ months of audited operations.
SSO
Single Sign-On — an authentication method that lets users log in to multiple applications with one set of credentials, usually managed by an identity provider like Google Workspace or Okta.
SSO
Single Sign-On — an authentication method that lets users log in once with one set of credentials and access multiple applications without re-entering passwords. Reduces password fatigue and improves security through centralized access control.
Stripe
A popular payment-processing platform that lets businesses accept online payments, manage subscriptions, and handle payouts.
Subscription billing
A pricing model where customers pay a recurring fee (monthly or annually) for ongoing access to a product or service.
T
TACOS
Total Advertising Cost of Sales — a metric showing ad spend as a percentage of revenue generated by those ads. Used heavily in Amazon and e-commerce advertising.
Tax nexus
The legal connection between a business and a state or jurisdiction that obligates the business to collect and remit sales tax there. Rules vary by country and by U.S. state.
Total Cost of Ownership (TCO)
The complete cost of owning and operating a software tool over its lifetime, including subscription fees, implementation, training, integration, data migration, and ongoing maintenance. TCO reveals costs that the monthly subscription hides.
U
Unit economics
The financial performance of a single customer or transaction, usually expressed as LTV divided by CAC. If the ratio is below 3:1, the business may struggle to scale profitably.
Upsell
Encouraging an existing customer to buy a higher-tier plan or additional features. It is often cheaper than acquiring a new customer.
Uptime
The percentage of time a system or service is operational and accessible. 99.9% uptime allows about 8.7 hours of downtime per year. 99.99% allows about 52 minutes. The gap between 99.9% and 99.99% represents drastically different infrastructure investment.
Utilization rate
The percentage of available time or capacity that is actually used for billable work. Common in professional services, manufacturing, and healthcare.
V
Vendor lock-in
A situation where switching to a different software provider becomes prohibitively expensive or difficult because your data, workflows, and integrations are tightly coupled to the current tool.
Vertical SaaS
Software built for a specific industry rather than a general business need. Examples include Toast for restaurants, Shopify for e-commerce, and ServiceTitan for trades.
VPAT
Voluntary Product Accessibility Template — a document that explains how a software product conforms to accessibility standards like WCAG. Requesting a VPAT is the first step in evaluating whether a vendor's tool is usable by people with disabilities and compliant with accessibility regulations.
W
W-2
The U.S. tax form employers issue to employees reporting annual wages and taxes withheld. Distinct from 1099 forms used for independent contractors.
WCAG
Web Content Accessibility Guidelines — an international standard for making web content accessible to people with disabilities. WCAG 2.1 AA is the most commonly referenced level for legal compliance, covering requirements like color contrast, keyboard navigation, and screen reader support.
Webhook
A real-time message sent from one app to another when a specific event happens. Unlike polling, webhooks push data instantly, making integrations faster and more efficient.
WMS
Warehouse Management System — software that controls warehouse operations including receiving, put-away, picking, packing, and shipping.
Workers' compensation
Insurance that covers medical expenses and lost wages for employees injured on the job. Required by law in most U.S. states.
Workflow automation
Using software to trigger actions across multiple tools based on rules or events. Examples include sending a Slack message when a new lead is created in a CRM.
Z
Zapier
A no-code automation platform that connects thousands of apps and lets non-technical users build workflows between them.
Zero trust
A security model that requires every user and device to be authenticated, authorized, and continuously validated before accessing any resource, regardless of network location.
Zero trust
A security model that assumes no user or device should be trusted by default, even if they're inside the corporate network. Every access request is verified before granting permission, minimizing the blast radius of a compromised credential.