Indemnification clauses are the part of every contract you skim through and then sign. They are also the part where most of the money is, when something goes wrong, the indemnification clause determines who pays for the lawsuit, the settlement, and the attorney fees.
You can negotiate a reasonable indemnification clause without hiring a lawyer for every contract. Here is the working framework.
What indemnification actually does
An indemnification clause is a contractual promise by one party (the indemnitor) to cover certain costs that the other party (the indemnitee) incurs from specified claims. The classic example: a vendor agrees to indemnify a customer if the vendor product infringes someone else patent.
Three pieces always show up:
- Scope: what kinds of claims are covered.
- Trigger: what has to happen for the obligation to kick in.
- Procedure: how the parties handle a covered claim when it arises.
Most disputes about indemnification clauses are not about whether to have one, most contracts have mutual indemnification clauses by default, but about the scope, the trigger, and a small set of practical procedural points.
Step 1: Read the scope carefully
"Indemnify, defend, and hold harmless" sounds standard, but it actually does three different things:
- Indemnify: reimburse the indemnitee for amounts it has already paid (judgments, settlements).
- Defend: pay the indemnitee defense costs as they are incurred, before any judgment.
- Hold harmless: a belt-and-suspenders provision that varies by state on exactly what it adds.
For the indemnitor, defend is more burdensome than indemnify alone, you are advancing legal fees, not just reimbursing them after the dust settles. For the indemnitee, defend is more valuable for the same reason.
Then look at what claims are covered. "Any and all claims arising out of or in connection with this Agreement" is far broader than "third-party claims for IP infringement arising from the Services." The broader the scope, the more risk for the indemnitor.
Step 2: Push the scope to third-party claims
The most common over-broad scope is one that covers claims between the contracting parties themselves. This is generally inappropriate, disputes between the parties to a contract are resolved under the contract limitation-of-liability clause, not under indemnification.
A clean indemnification clause covers third-party claims, not first-party claims. If you see a clause that does not have the words third-party, push for them.
Then narrow the trigger. Standard formulations, weakest to strongest from the indemnitor side:
- "Arising out of this Agreement", broadest, covers anything connected.
- "Arising out of or in connection with this Agreement", even broader.
- "Arising from a breach of this Agreement by Indemnitor", much narrower.
- "Arising from Indemnitor negligence or willful misconduct", narrowest.
What is right depends on what each party is delivering. If you are the vendor providing services, "arising from Vendor breach or negligence" is a fair scope. If you are the customer, you want broader, but you should also be ready to indemnify the vendor for claims arising from how you use the services.
Step 3: Make sure it is mutual
For a balanced commercial contract, both parties should indemnify each other for risks they bring to the relationship.
A typical structure:
- The provider indemnifies for IP infringement claims arising from the deliverables.
- The customer indemnifies for claims arising from how it uses the deliverables.
- Each party indemnifies for claims arising from its own employees or its own breach of confidentiality.
One-sided indemnification clauses are red flags. Either the parties are not in a balanced commercial position, or the drafting party is hoping you do not notice.
Step 4: Check the procedural mechanics
A well-drafted indemnification clause includes procedure for handling a covered claim. The standard requirements:
- Prompt notice: the indemnitee has to tell the indemnitor about the claim within a reasonable time (often 10 to 30 days) so the indemnitor can defend it.
- Defense control: who picks the lawyers, who decides settlement, who controls strategy.
- Cooperation: the indemnitee has to cooperate in the defense.
- Settlement consent: settlements that would impose obligations on the indemnitee (admissions of liability, injunctions) typically require the indemnitee consent.
The procedural mechanics matter more than they look. An indemnification clause that requires immediate notice can be triggered (or claimed to be triggered) by a one-day delay, voiding coverage. Prompt or reasonable or a specific number of days is safer.
Step 5: Watch for the carve-outs
A few cases where the standard scope should be narrower than the boilerplate:
- Modifications by the indemnitee: if the customer modifies the deliverable and the modification causes the infringement, the vendor should not have to cover it.
- Combinations: if the deliverable infringes only when combined with the customer other products, the vendor should not have to cover it.
- Customer-provided specs: if the deliverable infringes because it was built to the customer specifications, the vendor should not have to cover it.
Standard IP-infringement indemnification clauses carve out these scenarios. If the clause does not have them, add them.
Step 6: Check against the liability cap
The indemnification clause and the limitation-of-liability clause have to interact correctly.
If the limitation of liability caps damages at fees paid under this Agreement, that cap usually has to carve out indemnification obligations, otherwise the indemnification clause is illusory. The standard formulation: "The limitation of liability above does not apply to indemnification obligations under Section X."
Without that carve-out, indemnification is capped at the contract fees, which is often a tiny fraction of the cost of a third-party IP claim. Make sure the carve-out is there.
When this is enough and when it is not
This framework will get you a reasonable indemnification clause for most standard commercial contracts. Bring in an attorney if:
- The contract is high-value (over $250,000) or covers high-risk activity.
- You are taking on indemnification obligations that are not symmetrical with what you are receiving.
- The other side is refusing to accept reasonable carve-outs.
- There is industry-specific regulatory exposure (healthcare, financial services, government contracting).
If any of those apply, LawSens.ai can match you with a contract attorney in your state.