A SaaS provider's main responsibility is that its software is supported and:

1. The consumer cannot inspect or patch the application. 2. Quality is therefore entirely the provider's duty. 3. The SaaS provider's main responsibility is to ensure the software supplied is solidly supported and tested. 4. So the answer is tested. _Source: NIST SP 800-146, 'Cloud Computing Synopsis and Recommendations'_