The indemnity clause in a master services agreement (MSA) under Singapore law

Standard position

In Singapore MSAs, an indemnity clause typically requires one party (the indemnifier) to compensate the other (the indemnified party) for losses arising from specified events or breaches. The service provider usually indemnifies the client against third-party claims related to intellectual property infringement, data breaches, or regulatory violations. The client may indemnify the service provider against claims arising from the client's instructions, data, or misuse of services. Indemnity is broader than contractual liability limitations and operates independently, meaning indemnity obligations typically survive termination and are not capped by liability caps.

Legal basis

Singapore contract law recognises indemnity as a separate contractual obligation distinct from damages for breach. The courts apply the contra proferentem rule: ambiguous indemnity language is construed against the drafter. Under the Contract Act (Cap. 73), indemnity clauses must be sufficiently clear to identify the indemnified party, the indemnifier, and the scope of indemnifiable events. Singapore courts will not imply broad indemnity; it must be expressed. The Unfair Contract Terms Act (UCTA, Cap. 396) does not directly regulate indemnity but may scrutinise one-sided indemnity provisions if they are unreasonable in certain B2B contexts, particularly where one party is a consumer or where the term excludes liability for fundamental breach.

Drafting and negotiation

Clarity on scope is critical. Specify which losses are covered: third-party claims, regulatory fines, direct losses, consequential damages, or reputational harm. In Singapore practice, indemnity for IP infringement commonly includes the cost of modifying infringing deliverables or obtaining a licence. Define the trigger: "third-party claims" requires a formal notice or demand, not mere allegation. Specify notice and defense procedures: the indemnified party must notify the indemnifier promptly, and the indemnifier typically has the right to control the defense and settlement, though indemnified parties often negotiate a right of approval for settlements.

Allocate the burden of proof: require the indemnified party to prove the loss and causation. Consider carve-outs: service providers should exclude indemnity for claims arising from client modifications, misuse, or breach of the service provider's instructions. Clients should exclude indemnity for claims arising from their own negligence or breach. Most market-standard MSAs in Singapore now include "sole remedy" language: indemnity is the exclusive remedy for the specified loss, displacing contractual damages claims. This protects both sides but requires negotiated agreement on scope.

Consider whether indemnity applies only to third-party claims or extends to first-party losses (e.g., the client's own IP infringement risk from using the deliverable). IP indemnity often includes a cap on the indemnifier's obligation to procure alternative solutions if the original deliverable cannot be used. Data-breach indemnity should reference compliance with the Personal Data Protection Act (PDPA) and should clarify whether the indemnifier indemnifies for the indemnified party's own PDPA liability or only third-party claims.

Common pitfalls

Overly broad indemnity triggers (e.g., "any claim relating to the services") create unlimited exposure; Singapore courts narrowly interpret these. Failing to exclude the indemnified party's own negligence or willful misconduct may be unenforceable if courts view it as indemnifying against one's own breach. Indemnity without a notice or defense-control clause leaves the indemnifier unable to manage claims and may invite collusion. Indemnity for "all losses" including indirect, consequential, or punitive damages can conflict with UCTA reasonableness tests in certain B2B relationships. Not aligning indemnity scope with insurance coverage creates uninsured risk. Conflating indemnity with insurance: indemnity is a contractual obligation; it does not transfer risk to an insurance policy unless the policy explicitly covers indemnified losses.

Sample language

The Service Provider shall indemnify and hold harmless the Client from and against all third-party claims, damages, and costs (including reasonable legal fees) arising out of or resulting from (a) infringement of intellectual property rights by the Deliverables, or (b) breach of applicable law by the Service Provider in performing the Services, provided that the Client promptly notifies the Service Provider of the claim and grants the Service Provider sole control of the defense and settlement. This indemnity shall not apply to claims arising from the Client's modification of the Deliverables or use of the Services in breach of this Agreement.

This is general drafting guidance, not legal advice, and not a substitute for advice on your specific facts and jurisdiction. Sample language is a starting point to adapt, not a finished clause.