How to Read a Limitation of Liability Clause

What limitation of liability does

This clause caps the total amount one party can recover from the other if something goes wrong — regardless of how much damage actually occurred. Without it, a vendor's software bug that shuts down your operations for a week could theoretically expose them to millions in lost revenue claims. The cap replaces that open-ended exposure with a defined maximum.

The cap structure

Caps are typically expressed as: a fixed dollar amount (e.g., $100,000); a multiple of fees paid in the prior 12 months (e.g., 1x or 2x annual fees); or the fees paid under the specific order giving rise to the claim. Compare the cap to the contract value and to the potential harm if the vendor fails. A $10,000 cap on a $500,000 annual contract is worth negotiating.

Excluded damages

Most limitation clauses exclude consequential, indirect, incidental, special, and punitive damages — for both parties. This means neither party can recover lost profits, lost data, business interruption, or reputational harm, even if the other party caused the problem. Understand that these exclusions cut both ways: they protect you from vendor claims too.

Carve-outs from the cap

Certain obligations often sit outside the liability cap:

• Indemnification obligations
• Breaches of confidentiality
• Data breach or privacy violations
• Gross negligence or willful misconduct
• Payment obligations
• IP infringement indemnification

Mutual vs one-sided caps

Balanced contracts apply the same cap and exclusions to both parties. Vendor form contracts sometimes cap the vendor's liability while leaving your liability uncapped or subject to a higher cap. Compare both sides — a mutual $100,000 cap is very different from a $100,000 cap on the vendor and unlimited liability on the customer.

When the cap is too low

If the liability cap is materially below the potential harm — a critical infrastructure vendor with a cap equal to one month of fees, for example — negotiate a higher cap, carve out specific risks, or require insurance. Accepting an inadequate cap is a business decision that should be documented, not an oversight.