contracts
Negotiating a Limitation of Liability Clause: Fallback Positions (2026)
The limitation of liability clause decides how much one party can recover from the other when something goes wrong. It is often the last clause to settle and the one that kills more deals than any other, because it allocates real money. This guide explains the moving parts, sets out what each side wants, and gives a ladder of fallback positions you can move through in a negotiation. It is general information, not legal advice, and the enforceability of these clauses varies by country, so take local advice on a material contract. ## The two parts of a liability clause Almost every limitation of liability clause does two separate things, and it helps to negotiate them separately. 1. The exclusion. It excludes certain types of loss altogether, usually indirect and consequential loss, lost profits, lost revenue, loss of data and loss of goodwill. These are excluded no matter how large. 2. The cap. It caps the remaining (direct) losses at a number, commonly the fees paid under the contract over a set period, often the prior 12 months. So a typical clause says: we are not liable for indirect or consequential loss at all, and our total liability for everything else is capped at the fees you paid us in the last year. Understand which lever you are pulling before you negotiate. Raising the cap does nothing if the loss you fear is excluded as consequential. ## What each side wants The party more likely to cause loss (often the supplier) wants a low cap, a broad exclusion of consequential loss, and no carve-outs. The party more likely to suffer loss (often the customer) wants a high cap, carve-outs for the risks that can really hurt it, and a mutual clause so both sides are treated the same. The honest middle ground recognises that a supplier charging modest fees cannot sensibly accept unlimited exposure, while a customer should not be left with a remedy worth only a few months of fees when a serious failure could cost it far more. ## Carve-outs: the real battleground Most of the fight is not over the headline cap but over what sits outside it. Common carve-outs that are either uncapped or subject to a higher cap: - Breach of confidentiality.
- Data protection breaches and security incidents. Often the single biggest real-world exposure.
- Indemnities, especially the IP infringement indemnity.
- Breach of a party's own IP rights.
- Death or personal injury caused by negligence, and fraud. In many jurisdictions these cannot lawfully be excluded or capped at all, so a clause attempting to do so may be unenforceable to that extent.
- A party's payment obligations. The customer should still have to pay what it owes. Deciding which of these are fully uncapped and which get a higher "super cap" is where most of the negotiation happens. ## A fallback ladder for the customer (buyer) Work from your strongest reasonable ask down to your walk-away: 1. Mutual cap at a multiple of annual fees (2x or 3x), with data breach, confidentiality and IP indemnity all uncapped.
- Cap at 12 months' fees for general claims, with a higher super cap (for example 3x fees, or a fixed sum tied to insurance cover) for data breach and confidentiality.
- Cap at 12 months' fees, but with data-protection and IP indemnities carved fully out of the cap.
- Standard 12-month cap, but confidentiality and data breach carved out of the exclusion of consequential loss, so you can at least recover those losses up to the cap.
- Walk-away test: is the cap at least large enough to cover your realistic worst case, or your cost of switching suppliers? ## A fallback ladder for the supplier (seller) 1. Cap at the fees paid in the prior 12 months, broad exclusion of all indirect and consequential loss, no carve-outs beyond those required by law.
- Accept uncapped liability only for the items law will not let you exclude anyway (death, personal injury, fraud), plus perhaps your IP indemnity.
- Offer a modest super cap for data breach (for example 2x fees or the limit of your cyber insurance) rather than uncapped exposure.
- Accept a higher general multiple (2x fees) in exchange for keeping all consequential loss excluded and tying any data-breach liability to your actual insurance cover.
- Hold the line that your liability should never exceed what your insurance can pay, and offer to share the policy limits as evidence. ## Practical tactics - Tie your cap to insurance. A supplier who says "our cover is X, and we will carry liability up to that limit" gives the customer a real, fundable remedy and a reason to stop pushing.
- Make the clause mutual. A mutual cap feels fairer and is easier to agree than a one-sided one.
- Separate the exclusion fight from the cap fight. Agreeing the exclusion of lost profits is often easier once the customer sees its key risks are carved out.
- Quantify the fear. Ask what loss the other side is actually worried about. Often a single carve-out solves it and the headline cap can stay low.
- Do not confuse a high cap with a good remedy. A high cap on direct loss is worth little if the loss you fear is excluded as consequential. Fix the exclusion first. ## Common mistakes to avoid - Negotiating the cap number while ignoring the exclusion that guts your recovery.
- Trying to cap or exclude liability for death, personal injury or fraud where the law forbids it, leaving the clause partly unenforceable.
- Accepting a cap of a few months' fees for a system whose failure could stop your business.
- Forgetting to carve the customer's payment obligations out of the cap.
- Agreeing a super cap for data breach without checking it matches the supplier's actual insurance. ## Seeing your liability position across every contract One contract's liability clause is manageable by hand. A portfolio of them is not. Companies routinely lose track of which suppliers accepted an uncapped data-breach carve-out, which caps are tied to insurance, and where they signed a one-sided clause years ago. Keeping contracts in one connected workspace, where each agreement's liability position is reviewed clause by clause and shown as favourable, neutral or unfavourable to you, turns that scattered risk into something you can actually see. Adira is built around that idea, on frontier AI, so your negotiated positions and their risk sit together rather than buried in signed PDFs. If you cannot answer "which of our contracts have uncapped liability?" quickly, that is the gap worth closing. More at Adira. The fallback ladders above work with any tool. ## Bottom line Treat the limitation of liability clause as two negotiations: the exclusion and the cap. Spend most of your effort on carve-outs for data breach, confidentiality and indemnities, because that is where real money lives. Suppliers should tie exposure to insurance; customers should test the cap against their worst realistic case. And remember that some liability cannot lawfully be limited in many countries, so confirm enforceability locally before you rely on the words.
Frequently asked questions
- What are the two parts of a limitation of liability clause?
- The exclusion and the cap. The exclusion removes certain loss types entirely, usually indirect and consequential loss, lost profits and lost data. The cap limits the remaining direct losses to a number, commonly the fees paid over the prior 12 months. Negotiate them separately, because raising the cap does nothing if your feared loss is excluded as consequential.
- What are the most important liability carve-outs to negotiate?
- The risks that can genuinely hurt you: breach of confidentiality, data protection and security incidents, the IP infringement indemnity, and breach of IP rights. Death, personal injury caused by negligence, and fraud usually cannot be capped at all in many jurisdictions. Deciding which carve-outs are uncapped and which get a higher super cap is where most of the negotiation happens.
- What is a super cap?
- A super cap is a higher liability limit that applies to specific high-risk items, most often data breach, while the general cap stays at the standard level like 12 months' fees. For example, a contract might cap general liability at one year's fees but allow recovery up to three times fees, or the limit of the supplier's cyber insurance, for a data breach.
- Can a contract limit all liability?
- No. In many countries you cannot lawfully exclude or cap liability for death or personal injury caused by negligence, or for fraud, and sometimes for certain statutory duties. A clause that tries to do so may be unenforceable to that extent. Enforceability varies by jurisdiction, so take local advice on a material contract.
- Should a supplier tie its liability cap to insurance?
- It is a strong, honest position. A supplier that carries liability up to the limit of its actual insurance cover gives the customer a real, fundable remedy and a principled reason to stop pushing for uncapped exposure. Sharing the policy limits as evidence often closes the point.
Sources
See how Adira drafts in your voice and reads contracts from your side.
Explore the showroomWorking through a contract like this? Weave is Adira’s free tool to read, mark up, and connect any contract in your browser — no account needed.
Try Weave — free