Indemnification Clause

What Is an Indemnification Clause?

An indemnification clause is a risk-shifting provision in a commercial contract. It says that if a defined category of harm comes through the door (typically a third-party claim), one party (the indemnitor) will pay the cost and absorb the loss so the other party (the indemnitee) does not. Indemnification is one of the most negotiated clauses in any US services contract because it is where money actually moves when something goes wrong.

The clause typically combines three obligations: a duty to defend (run the legal defence of the third-party claim), a duty to indemnify (reimburse the loss), and an undertaking to hold harmless (ensure the indemnitee is made whole). The Restatement (Second) of Contracts treats indemnification as a freely allocable risk between contracting parties, and US courts will generally enforce indemnity clauses as written subject to public-policy limits (you cannot indemnify intentional torts or, in some states, your own sole negligence without explicit language).

Mutual vs. One-Way

A one-way indemnity runs in a single direction. The customer wants the contractor to indemnify it for infringement and breach, but the customer does not promise the same in return. One-way indemnities are common where one party has significantly greater leverage (large customer engaging small vendor) but are increasingly disfavoured as a default.

A mutual indemnity runs both ways. Each party indemnifies the other for losses caused by its own breach or wrongdoing. This is the fairer construction and the dominant pattern in most US services agreements between roughly comparable counterparties. The standard formulation is something like: “Each party shall indemnify the other from third-party claims arising from the indemnifying party’s breach of this Agreement, negligence, or willful misconduct.”

Mutuality does not necessarily mean symmetry. Mutual clauses often have asymmetric carve-outs: the customer’s indemnity might cover its provision of harmful inputs or data, while the contractor’s indemnity covers its work product. Both directions exist but each direction is shaped by the risk that party actually controls.

Typical Scope

The categories that most US services contracts include in some form:

IP infringement. Almost universal. The contractor indemnifies the customer for third-party claims that the contractor’s work product infringes copyright, patent, trademark, or trade-secret rights. This is the headline indemnity in services contracts because IP litigation is expensive and the contractor is in the best position to know whether its code is clean.

Breach of confidentiality. Either side may indemnify the other for losses caused by leaking confidential information.

Breach of applicable law. Each party indemnifies the other for losses caused by the indemnifying party’s violation of applicable law, including data-protection law, export-control law, anti-corruption law, and employment law.

Bodily injury and property damage. Where contractors have personnel on customer premises, the contractor typically indemnifies the customer for injury or property damage caused by its personnel (and the customer indemnifies the contractor for the reverse).

Data incidents. With the rise of data-protection law, breach of data-protection obligations is increasingly carved out as a separate, often uncapped, indemnity category.

A safer drafting pattern ties each category to third-party claims “to the extent caused by” the indemnifying party’s breach or fault, rather than as a blanket assumption of all losses. This prevents the indemnity from sweeping in losses the indemnifying party did not actually cause.

Caps and Exclusions

Indemnity exposure is usually framed inside the limitation-of-liability clause. The standard pattern is:

Aggregate liability cap. Each party’s total liability under the contract is capped at one to two times fees paid in the preceding twelve months. This puts a floor under the contract’s commercial value but a ceiling on either side’s exposure.

Carve-outs from the cap. Specific high-severity categories are excluded from the cap and remain uncapped or capped at a higher multiple. The most common carve-outs are:

• IP infringement indemnity (the contractor cannot benefit from a low cap if it shipped infringing code)
• Breach of confidentiality
• Gross negligence and willful misconduct
• Breach of data-protection obligations
• Indemnity for bodily injury
• Fraud
• Payment obligations (unpaid fees, which are not really “damages”)

This two-layer structure (general cap with explicit carve-outs) is the dominant pattern in US commercial contracts. It lets the parties price risk for routine breaches while preserving full recovery for the rare catastrophic events.

Procedural conditions. Indemnity clauses typically require the indemnitee to give prompt notice of a claim, allow the indemnitor to control the defence (with counsel of its choice), and cooperate in the defence. Failure to comply usually reduces or eliminates the indemnity to the extent of any prejudice caused.

Where Omnivoo Helps

Omnivoo’s Contract Management templates ship with a market-standard mutual indemnification clause covering IP infringement, breach of confidentiality, breach of law, and willful misconduct, paired with a tiered limitation-of-liability cap and explicit carve-outs for the high-severity categories. US customers running global contractor engagements can apply consistent risk allocation across every SOW without rebuilding the indemnity stack each time, which is the operational benefit of the MSA + SOW model.