Clause Guide

Indemnity clause: meaning, risks, and what to negotiate

An indemnity clause requires one party (the indemnifier) to compensate the other (the indemnified party) for specified losses, costs, or claims — including third-party claims brought against them.

What it means

A broadly drafted indemnity can expose you to losses that dwarf the value of the contract itself — covering legal defence costs, third-party damages awards, regulatory fines, and consequential losses that would otherwise be excluded under your limitation of liability clause. Many businesses sign contracts without appreciating that indemnity obligations frequently sit outside the liability cap entirely, creating potentially unlimited exposure. The word 'defend' in an indemnity clause is not decorative — it means you may be required to fund another party's legal defence in real time, before any loss is established, from the moment a claim is filed. Understanding the scope, triggers, and limits of every indemnity you accept is one of the most important things you can do before signing a commercial contract.

Common risks

12 risks identified
A broadly drafted indemnity covering losses 'arising out of or in connection with' the contract can capture losses you had no meaningful ability to prevent, far beyond what you expected to be responsible for.
Indemnities are frequently carved out of the limitation of liability cap, creating potentially unlimited financial exposure on a contract where you assumed your liability was capped.
The word 'defend' creates a real-time obligation to fund legal proceedings — including appointing lawyers and managing litigation — before any loss is established, not just a reimbursement at the end.
First-party indemnities covering the other side's direct losses are significantly broader than third-party indemnities and can capture business losses ordinarily excluded under the limitation of liability clause.
One-sided indemnities leave you fully exposed while the other party carries no equivalent obligation — common in standard vendor terms.
IP indemnities with no carve-outs for customer modifications or combination with third-party products can expose a vendor to infringement claims caused entirely by the customer's own actions.
Data protection indemnities covering regulatory fines may create obligations that exceed your insurance coverage or that your insurer treats as uninsurable contractually assumed liability.
An absence of notice requirements means the indemnified party may manage and settle a third-party claim without your knowledge, presenting you with a bill after the fact for a settlement you had no say in.
Settlement control provisions giving the indemnified party sole discretion can result in you funding an unreasonable settlement or one that includes admissions of liability damaging to your other business interests.
Indemnities extending to affiliates, group companies, officers, directors, and employees of the other party multiply your exposure well beyond the contracting entity.
Vague triggering language such as 'any claim related to the services' creates uncertainty that tends to be resolved in the indemnified party's favour when disputes arise.
Accepting indemnity obligations without checking your insurance position can leave you contractually bound to pay sums your insurer will not cover due to contractually assumed liability exclusions.

What to check before signing

Checklist
Is the indemnity mutual or one-sided, and if one-sided, is that asymmetry genuinely justified by the risk profile of the arrangement?
What events trigger the indemnity — is it limited to material breach and proven negligence, or does it extend to any claim 'arising out of or in connection with' the contract?
Does the indemnity cover first-party losses suffered directly by the indemnified party, third-party claims brought against them, or both?
Does the obligation include a duty to 'defend' — meaning real-time litigation funding — or only to compensate after the fact?
Is the indemnity expressly carved out of the limitation of liability cap, and if so, is there a separate sub-cap on indemnity exposure?
Are there carve-outs reducing or eliminating the indemnity where the indemnified party's own acts, negligence, or breach contributed to the loss?
Are there notice requirements, and what are the consequences of late or defective notice — does it extinguish the indemnity right entirely?
Who controls the defence and settlement of third-party claims, and does the indemnified party need the indemnifier's consent before settling?
Does the indemnity extend to affiliates, group companies, directors, officers, or employees of the other party?
What categories of loss are expressly covered — legal costs on a full indemnity basis, regulatory fines, data subject compensation, consequential losses?
Does your existing insurance cover the specific indemnity obligations you are accepting, including contractually assumed liability?
For IP indemnities, are there carve-outs for infringement caused by the customer's modifications, combination with non-approved products, or use outside the agreed specification?
Is the indemnified party required to take reasonable steps to mitigate its loss, or is it a pure pay-out obligation regardless of mitigation?

Negotiation ideas

Actionable
Limit the indemnity to third-party claims only — resist first-party indemnities covering the other side's direct losses, which are better addressed through the general liability provisions subject to the cap.
Restrict the trigger to material breach of the contract or proven negligence — push back firmly on 'arising out of or in connection with' language, which is far too broad and open-ended.
Ensure the indemnity is mutual where the risk is genuinely symmetric — if both parties can cause harm to the other, both should carry the obligation on equivalent terms.
Replace 'indemnify, defend, and hold harmless' with 'indemnify and reimburse reasonable and documented defence costs' to avoid the real-time litigation funding obligation that 'defend' creates.
Even where indemnities are carved out of the main liability cap, negotiate a separate sub-cap — for example, two times annual contract value — to put a ceiling on indemnity exposure.
Include a contributory negligence or proportionate liability carve-out — the indemnifier's obligation should reduce in proportion to the indemnified party's own contribution to the loss.
Require prompt written notice as a condition (not just a covenant) of the indemnity, with a specific notice period, a named recipient, and clear consequences for late notice.
Negotiate joint control of defence — the indemnifier appoints lawyers and manages the case, but the indemnified party has the right to participate and must give prior written consent to any settlement involving admissions or restrictions that affect its business.
For IP indemnities, insist on carve-outs for infringement arising from customer modifications, combination with non-approved third-party products, or use materially outside the agreed specification.
For data protection indemnities, cap exposure at a defined multiple of fees paid in the preceding 12 months and exclude regulatory fines arising from the indemnified party's own independent processing failures.
Require the indemnified party to take reasonable steps to mitigate its loss as a condition of recovery — an indemnity should not be an excuse to sit back and let costs escalate.
Require the indemnifying party to maintain adequate insurance throughout the contract term and provide annual evidence of cover — an indemnity from an uninsured or underinsured counterparty may be worthless in practice.

Example clause

Each party (the 'Indemnifying Party') shall indemnify and reimburse the reasonable and documented legal costs of the other party, its officers, directors, and employees (collectively, the 'Indemnified Party') against any third-party claims, proceedings, damages, and losses arising directly from: (a) the Indemnifying Party's material breach of this Agreement; or (b) the Indemnifying Party's negligence or wilful misconduct in the performance of its obligations under this Agreement. The Indemnified Party shall: (i) notify the Indemnifying Party in writing promptly, and in any event within ten (10) business days, of becoming aware of any claim to which this indemnity may apply; (ii) not make any admission of liability or agree any settlement of such claim without the Indemnifying Party's prior written consent, not to be unreasonably withheld or delayed; (iii) give the Indemnifying Party reasonable control of the defence and settlement of any such claim, subject to the right of the Indemnified Party to participate at its own cost with counsel of its choosing; and (iv) take all reasonable steps to mitigate its losses. This indemnity shall not apply to the extent that the relevant claim arises from or is contributed to by the Indemnified Party's own negligence, breach of this Agreement, or wilful misconduct.

Frequently asked questions

8 questions
Is indemnity the same as liability?

No — they are related but distinct. Liability is the general legal obligation to compensate another party for loss caused by your breach or wrongdoing, subject to the usual rules on causation, remoteness, and mitigation. Indemnity is a specific contractual mechanism defining the circumstances in which one party must make good the other's losses — often going further than ordinary liability by covering costs a court might not award, bypassing remoteness rules, and operating regardless of fault. Think of liability as the general framework and indemnity as a targeted, contractually agreed extension of it.

Can an indemnity override a limitation of liability clause?

Yes — and this is one of the most consequential interactions in any commercial contract. Many agreements expressly carve indemnity obligations out of the overall liability cap, meaning the indemnifying party's exposure under the indemnity is potentially unlimited even where the rest of the contract contains a tight financial ceiling. Always read the indemnity clause and the limitation of liability clause together. If the indemnity is carved out of the cap, negotiate a separate sub-cap on indemnity exposure.

What does 'indemnify, defend, and hold harmless' mean in practice?

'Indemnify' means compensating for losses after they are established. 'Defend' means actively funding and managing the legal defence of claims in real time — before any loss is established — from the moment a claim is filed. 'Hold harmless' means absorbing the loss entirely without seeking any contribution from the indemnified party. The 'defend' obligation is the most operationally significant: it means you may need to instruct and fund lawyers on behalf of another business from day one of a dispute, regardless of whether the claim ultimately succeeds.

What is the difference between a mutual and a one-sided indemnity?

A mutual indemnity runs both ways — each party indemnifies the other in the same circumstances, such as losses arising from their own breach or negligence. A one-sided indemnity runs in one direction only. One-sided indemnities are not inherently unfair if the risk profile genuinely justifies them — for example, where one party's activities create significantly greater risk of harm. The question to ask is whether the asymmetry reflects the genuine commercial risk allocation, or whether it is simply the result of one side having more drafting leverage.

Does my insurance cover indemnity obligations I accept in contracts?

Not always, and this is a common and costly mistake. Professional indemnity and public liability policies cover claims arising from your negligence, but many policies expressly limit or exclude 'contractually assumed liability' — obligations you have taken on by contract that go further than your liability at law. Before accepting significant indemnity obligations, review your policy wording with your broker, confirm the specific obligations are covered, and check that your policy limits are adequate for the worst-case scenario.

What happens if I receive a claim but forget to notify the indemnifier promptly?

If the indemnity contains a notice condition — rather than just a notice covenant — late notice can extinguish your right to indemnification entirely, or reduce the amount you can recover. The rationale is that the indemnifier needs timely notice to exercise defence rights and mitigate the loss. If you are the indemnified party, treat any incoming third-party claim as time-critical and notify immediately. If you are the indemnifier, push for notice as a strict condition of the indemnity obligation rather than a general duty.

What is an IP indemnity and why does it matter?

An IP indemnity is a promise by the supplier that if a third party claims their product or service infringes that party's intellectual property rights — patents, copyright, trademarks, or trade secrets — the supplier will cover the customer's legal defence costs, any damages awarded, and the cost of procuring a non-infringing replacement or licence. It matters because IP infringement claims can be extremely expensive and are entirely outside the customer's control. The IP indemnity transfers that risk to the vendor, who created the product and is best placed to assess and manage the infringement risk.

Can I negotiate an indemnity clause?

Yes — in B2B contracts, indemnity provisions are almost always negotiable. The most commonly negotiated elements are the scope of triggering events, mutuality, interaction with the liability cap, defence and settlement control rights, contributory negligence carve-outs, and notice requirements. In high-volume standard contracts such as off-the-shelf SaaS, the vendor may refuse to negotiate. In mid-market and enterprise agreements, indemnity is typically one of the most actively negotiated provisions in the entire contract.

Want help reviewing the full contract?

A single clause rarely tells the whole story. Scan the full agreement to spot risks, missing protections, and negotiation points across the whole document.

This guide is for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction. Consult a qualified attorney for your specific situation.