The limitation of liability clause in a master services agreement (MSA) under the United States law

Standard Position

In US MSAs, limitation of liability (LOL) clauses are enforceable and heavily negotiated. The standard approach caps the service provider's total liability to the customer at either a fixed dollar amount (often 12 months of fees paid) or a multiple of annual fees (commonly 1x to 2x). Most vendors also exclude indirect, consequential, incidental, and punitive damages entirely. Service providers typically carve out exceptions for indemnification obligations, breach of confidentiality, and gross negligence or willful misconduct, while customers seek to preserve liability for data breach, IP infringement, and critical service failures.

Legal Basis

US common law enforces negotiated limitation of liability clauses when both parties have meaningful bargaining power and the language is clear. The Uniform Commercial Code (UCC) Article 2 (goods) applies to software licensing in many jurisdictions but does not override parties' negotiated liability caps unless the clause is unconscionable under UCC 2-302. Courts in most states will enforce caps that allocate known and foreseeable risk, even if damages far exceed the cap, provided the clause is not one-sided or oppressive. However, clauses excluding liability for a party's own gross negligence or fraud are disfavored and may be struck down. The Restatement (Second) of Contracts Section 356 permits liquidated damages and liability limitations as long as they reflect a reasonable forecast of potential harm and are not penalties.

Drafting and Negotiation

For the service provider, the key is specificity: define the cap clearly ("the fees paid in the 12 months preceding the claim"), enumerate excluded categories (indirect, consequential, special, exemplary, incidental damages, loss of profit, revenue, or use), and preserve carve-outs only for IP indemnification, data breach, and gross negligence. Avoid blanket wording like "all damages" without defining them; courts may interpret ambiguity against the drafter.

For the customer, push back on caps that are unreasonably low relative to the contract value or the customer's exposure (e.g., a cap equal to one month of fees for a mission-critical service is often rejected in negotiation). Carve out liability for your own indemnification obligations, confidentiality breaches, and data security failures. Consider a tiered structure: a general cap plus higher caps for specific, foreseeable harms (e.g., data loss). Require that the service provider maintain errors and omissions insurance and that the cap does not limit insurance proceeds.

Define what constitutes "indirect" and "consequential" damages explicitly, as courts differ on interpretation. Common practice: exclude "loss of profits, revenue, use, data, or business opportunity" but preserve claims for direct costs to remediate or replace services.

Common Pitfalls

Vagueness about what the cap covers: stating a cap without cross-referencing the damages exclusion creates uncertainty. Unconscionable asymmetry: if the customer has no recourse for the vendor's negligence but the vendor can sue for payment, courts may strike the clause. Conflicting carve-outs: failing to reconcile the cap with indemnification or insurance provisions leads to disputes over which clause controls. Ignoring state law: a few jurisdictions (e.g., California) scrutinize caps more closely in adhesion contracts or consumer contexts. Failing to define the measurement period: clarify whether the cap resets annually or is cumulative over the contract term. Excluding liability for breach of warranty without also limiting the warranty itself creates a logical gap that courts may exploit.

Sample language

Except for claims arising from either party's gross negligence, willful misconduct, breach of confidentiality, or infringement of intellectual property rights, in no event shall either party's total aggregate liability arising out of or related to this Agreement exceed the fees paid by Customer in the 12 months immediately preceding the event giving rise to liability. In no event shall either party be liable for indirect, incidental, consequential, special, exemplary, or punitive damages, including loss of profits, revenue, use, data, or business opportunity, even if advised of the possibility of such damages.

This is general drafting guidance, not legal advice, and not a substitute for advice on your specific facts and jurisdiction. Sample language is a starting point to adapt, not a finished clause.