An outline of a ready-made legal framework for procurement of cloud services by Dutch institutes of higher education, the document focuses mainly on data protection and availability aspects of contracted cloud services. It provides comprehensive templates for relevant legal documents under the Dutch law for personal data protection, and suggestions (incl. checklists) for the procurement conduct. It could potentially be made more generic for use outside Dutch jurisdiction, but would not ease of use suffer?