Limitation of Liability Clauses

Limitation of liability clauses cap how much one party can owe the other if something goes wrong. They're found in virtually every commercial contract — from SaaS agreements and vendor contracts to construction agreements and professional services engagements.

These clauses are often heavily negotiated because they directly determine the financial exposure of both parties. Understanding how they work is essential to evaluating whether a contract adequately protects your interests.

What Is a Limitation of Liability?

A limitation of liability clause restricts the types and amounts of damages one party can recover from the other. It typically does two things: sets a maximum dollar amount (a "cap") on total liability, and excludes certain categories of damages entirely.

Without a limitation of liability, a breaching party could be responsible for all foreseeable damages — which in commercial contracts can vastly exceed the contract value.

Types of Damages

Understanding the different categories of damages is essential to reading liability clauses.

Direct damages

The immediate, tangible losses caused by the breach. If a vendor delivers defective software, the direct damage is the cost to fix or replace it. Direct damages are almost always recoverable.

Consequential (indirect) damages

Secondary losses that flow from the breach but aren't the immediate result. Lost profits, lost revenue, business interruption, and reputational harm are all consequential damages. These are often much larger than direct damages and are frequently excluded by limitation of liability clauses.

Incidental damages

Costs incurred to mitigate the breach — like hiring a replacement vendor on short notice or expediting an alternative solution.

Punitive damages

Damages intended to punish the breaching party. These are rare in contract disputes and are typically excluded.

Liability Caps

The cap is the maximum dollar amount one party can owe the other under the contract. Caps come in several forms.

Common cap structures

• Fixed dollar amount — a specific number (e.g., "liability shall not exceed $100,000")
• Contract value — liability is capped at the total fees paid or payable under the contract
• Trailing 12-month fees — liability is capped at the fees paid in the preceding 12-month period. Common in SaaS contracts
• Multiple of contract value — 2x or 3x the fees paid, for higher-risk engagements

What to look for

• Whether the cap is proportional to the risk. A $10,000 cap on a contract handling millions of dollars of sensitive data may be inadequate
• Whether the cap is per-incident or aggregate. Aggregate caps mean all claims share the same pool
• Whether the cap applies to both parties equally

Consequential Damages Exclusions

Most commercial contracts include a mutual exclusion of consequential damages. This means neither party can recover lost profits, lost revenue, or business interruption damages from the other — regardless of the cap amount.

What to look for

• Whether the exclusion is truly mutual or only benefits one party
• How broadly "consequential damages" is defined — some clauses list specific categories; others use broad language
• Whether the exclusion applies "regardless of whether such damages were foreseeable" — this is the strongest form of exclusion

Carve-Outs: What the Cap Doesn't Cover

Well-drafted limitation of liability clauses include carve-outs — specific categories of liability that are not subject to the cap or the consequential damages exclusion. These typically cover the most serious types of misconduct.

Common carve-outs

• Indemnification obligations — third-party claims are often carved out from the cap
• Data breach or security incident — if a party mishandles sensitive data, the cap may not apply
• Intellectual property infringement — if a party delivers infringing work, the cap may not protect them
• Willful misconduct or gross negligence — the cap typically doesn't protect against intentional or reckless behavior
• Confidentiality breach — violating NDA obligations may be carved out
• Payment obligations — the obligation to pay fees owed under the contract is not subject to the cap

Red Flags to Watch For

• Cap set too low for the risk involved — a cap equal to one month's fees on a contract that handles critical business operations may be grossly inadequate
• Exclusion of all consequential damages without carve-outs — if the vendor causes a data breach that costs you millions, and consequential damages are excluded with no carve-out, you may recover almost nothing
• No carve-out for gross negligence or willful misconduct — the cap should not protect a party that intentionally breaches the contract
• One-sided cap — if only your liability is capped but the other party's is not, the clause doesn't protect you
• Cap includes indemnification — if third-party IP claims eat into the same cap as direct damages, your protection is diluted

Questions to Ask Before Signing

1. What is the total liability cap, and how is it calculated?
2. Is the cap per-incident or aggregate?
3. Are consequential damages excluded? Is this mutual?
4. What carve-outs exist (data breach, IP infringement, willful misconduct)?
5. Does the cap include or exclude indemnification obligations?
6. Is the cap proportional to the risk and value of the engagement?
7. Does the cap apply equally to both parties?

How DecipherDocs Can Help

Paste any limitation of liability clause into DecipherDocs for a free plain-English analysis. We'll break down the cap structure, flag missing carve-outs, and help you understand whether the clause adequately protects your interests.

DecipherDocs provides educational information about legal documents. This is NOT legal advice. Always consult a qualified attorney before making legal decisions. Read our full disclaimer.