An indemnification clause requires one party to defend or compensate the other for specified third-party claims, losses, or liabilities.
An indemnification clause is a contractual promise by one party to defend and pay for specific claims brought by third parties against the other party. It is one of the heaviest commercial levers in any enterprise contract, and one of the easiest to get wrong.
The most common carve-out from the limitation of liability cap. When indemnification obligations sit outside the cap (as IP indemnity usually does), they create uncapped exposure that can dwarf the cap itself.
Industry research from Sirion, Ironclad, and Common Paper 2024-2025; WCC Most Negotiated Terms top 5.
TL;DR
- Indemnification = one party defends and pays for specific third-party claims against the other.
- Scope (what triggers it), procedure (notice, control), and cap treatment (in or out of the LoL) are the three big variables.
- Indemnity typically sits outside the limitation of liability cap, creating uncapped exposure.
- Vallor extracts indemnity structure and flags every divergence from your playbook.
Anatomy of indemnification clause
Sample clause — enterprise services agreement
9. INDEMNIFICATION.
(a) BY VENDOR. Vendor will 1defend and indemnify Buyer against any 2third-party claim alleging that the Services infringe a US patent, copyright, or trademark.
(b) BY BUYER. Buyer will defend and indemnify Vendor against claims arising from Buyer's misuse of the Services.
(c) PROCEDURE. The indemnified party shall 3promptly notify the indemnifying party and give it sole control of the defense and settlement.
(d) CAP. 4Indemnification obligations are excluded from the limitation of liability cap.
1
Trigger and scopeWhat kinds of claims trigger it. Narrow (IP only) vs broad (any third-party claim from services) is the biggest commercial swing.
2
Geographic scopeUS patent only vs worldwide IP. Foreign IP claims can multiply the exposure tenfold.
3
ProcedureNotice requirements, control of defense, settlement rights. Where most indemnity failures actually happen.
4
Cap treatmentWhether indemnity is inside or outside the LoL cap. Outside = uncapped exposure. Inside = exposure limited.
How Vallor handles indemnification clause
1
Extract indemnity structure from every contractTrigger, scope, geographic reach, procedure, and cap treatment pulled into structured fields with citations.
2
Compare each contract to your playbookVallor flags any indemnity that diverges: broader scope than preferred, weaker procedure, uncapped where you want capped.
3
Aggregate exposure across the portfolioShow which contracts create the largest uncapped exposure and which counterparties trend toward worse-than-playbook positions.
4
Brief the next negotiationWhen the contract comes up for renewal, Vallor surfaces the indemnity gap and recommends specific renegotiation targets.
Where teams trip up
✗
Treating indemnity as a defined conceptIt is not. The scope, procedure, and cap treatment vary materially from contract to contract. Read the actual language every time.
✗
Accepting 'sole control of defense' without limitsGiving the indemnifying party sole control can mean settling cases you would have fought. Sole control needs to be paired with consent rights.
✗
Forgetting reciprocityIf only one side indemnifies, the exposure is one-sided. Symmetric indemnities are the buyer-side standard.
✗
Missing the cap-treatment questionWhether indemnity is in or out of the LoL cap is often more important than the cap itself. Default-to-uncapped is fine for IP, dangerous for everything else.
See also
FAQ
What is the difference between indemnification and limitation of liability?
Limitation of liability caps how much you can be held liable for direct contract breach. Indemnification is a promise to pay third-party claims against the other party. They interact through whether indemnity sits inside or outside the cap.
Is indemnification always uncapped?
No, but it often is. IP indemnification is the most common carve-out from the LoL cap, meaning it has no cap. Other indemnities (e.g. for misuse) are sometimes subject to the cap.
What is 'sole control of defense' in an indemnification clause?
It means the party paying for the defense gets to make the strategic and settlement decisions. It is efficient but creates a conflict if the indemnifying party would rather settle than fight. Most enterprise clauses pair sole control with consent rights for material settlements.
Who indemnifies whom in a typical SaaS contract?
Both directions. Vendor indemnifies for IP infringement; Buyer indemnifies for misuse, content uploaded to the platform, and breach of acceptable use. Symmetric structure is the enterprise standard.
How does Vallor handle indemnification?
Vallor extracts the trigger, scope, procedure, and cap treatment from every indemnification clause in your portfolio. It then compares each to your playbook and surfaces the highest-risk gaps.
Last updated: 2026-05-21. Part of Vallor's contract intelligence glossary.
