Limitation of liability clause: what it means and how to draft it

What a limitation of liability clause does

A limitation of liability clause (often shortened to “liability cap” or “LoL cap”) does two distinct jobs, and strong drafting keeps them separate.

First, it sets a cap on total liability, a ceiling on the dollar amount either party can be ordered to pay. The cap is usually tied to an objective figure such as the fees paid in the twelve months before the claim, a fixed multiple of those fees, or a stated dollar amount.

Second, it excludes categories of damages regardless of the cap. The most common exclusion is for consequential, indirect, incidental, special, and punitive damages, and for lost profits, lost revenue, and lost data. These indirect losses can dwarf the contract price, so a supplier typically insists on removing them entirely.

Well drafted clauses also carve out exceptions where neither the cap nor the exclusions apply. Typical carve-outs include indemnification obligations, breach of confidentiality, intellectual property infringement, gross negligence, willful misconduct, and a party’s payment obligations. Some contracts add a higher “supercap” for sensitive categories such as a data breach, sitting between the general cap and unlimited liability.

Together these three levers (cap, exclusions, carve-outs) let the parties allocate risk deliberately rather than leaving it to a court.

Drafting example

Limitation of Liability. (a) Exclusion of indirect damages. Except for the Excluded Claims, neither party will be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost revenue, or lost or corrupted data, even if advised of the possibility of such damages. [Removes the open-ended ripple-effect losses.]

(b) Cap. Except for the Excluded Claims, each party’s total aggregate liability arising out of or related to this Agreement will not exceed the total fees paid or payable by Customer in the twelve (12) months preceding the event giving rise to the claim. [Ties the ceiling to a knowable, mutual number.]

(c) Excluded Claims. Subsections (a) and (b) do not apply to a party’s indemnification obligations, breach of Section [X] (Confidentiality), infringement of the other party’s intellectual property, or a party’s gross negligence or willful misconduct. [The losses too serious to cap.]

Every bracketed note above is drafting commentary, not contract text, and should be deleted before signature.

What the law says

Courts across the United States generally enforce limitation of liability clauses between commercial parties, on the principle that businesses are free to allocate risk as they see fit. Enforceability is strongest when the clause is clear, conspicuous, and mutual, and when both sides had the sophistication and bargaining power to negotiate.

Several legal doctrines limit that freedom:

• Unconscionability. A clause that is grossly one-sided or buried in boilerplate can be struck down as unconscionable, particularly against a consumer or a party with no real bargaining power.
• Sale of goods (UCC). For contracts governed by Article 2 of the Uniform Commercial Code, Section 2-719 permits parties to limit or exclude consequential damages unless the limitation is unconscionable, and it treats a limitation on consequential damages for personal injury in consumer goods as prima facie unconscionable.
• Failure of essential purpose. Under UCC 2-719(2), if a limited remedy fails of its essential purpose, a court may set the limitation aside and allow otherwise available remedies.
• Gross negligence, fraud, and willful misconduct. Many states refuse to enforce a limitation that would excuse a party’s own gross negligence, fraud, or intentional wrongdoing as a matter of public policy, though the rule varies by state.
• Personal injury and statutory claims. Some states bar limiting liability for personal injury caused by negligence, and certain statutory or regulatory claims cannot be waived by contract.
• Conspicuousness. Provisions that exclude warranties or major categories of damages often must be conspicuous (for example, bold or capitalized) to be enforceable.

Because the outcome turns on the governing law chosen in the contract and on the specific facts, the clause should always be reviewed against the law of the controlling jurisdiction.

Common mistakes to avoid

• Capping the wrong obligations. A cap that accidentally limits a party’s duty to pay the fees it already owes, or its indemnity for third-party IP claims, gives away protection you meant to keep. List the carve-outs explicitly.
• Confusing the cap with the exclusion. Excluding consequential damages and setting a dollar cap are separate protections. Rely on only one and a large direct-damages claim, or an uncapped indirect claim, can slip through.
• A one-way clause in a negotiated deal. A cap that protects only the supplier invites pushback and looks unconscionable. Mutual caps enforce more reliably and negotiate faster.
• Silent on gross negligence and willful misconduct. Leaving these out of the carve-outs invites a court to rewrite or void the clause, since many states will not enforce a limitation that shields intentional wrongdoing.
• A cap with no floor. Tying the cap to fees paid can produce a near-zero ceiling early in a contract or in a low-fee, high-risk engagement. Consider a minimum dollar figure or a multiple of annual fees.
• Inconsistent defined terms. If Losses, Claims, or Excluded Claims are defined differently across the indemnity, insurance, and liability sections, the clause may not do what you think. Reconcile the definitions.
• Ignoring the insurance and indemnity interplay. The cap should be coordinated with required insurance limits and with the indemnity, so a covered risk is not accidentally capped below the insurance the parties already bought.

When it matters most

A limitation of liability clause earns its keep in exactly the deals where something can go badly wrong: software and SaaS agreements, professional services, supply and manufacturing contracts, data processing arrangements, and any relationship where one party’s work touches the other’s revenue, reputation, or customers. The higher the potential downstream loss relative to the contract price, the more the exclusion of consequential damages matters. The more concentrated the risk (a data breach, an outage, a product recall), the more a supercap or a tailored carve-out earns attention.

It also matters most when volume makes manual review impractical. Across a portfolio of hundreds of contracts, the danger is not one badly drafted cap but an invisible pattern of them. This is where disciplined contract management pays off: a searchable repository surfaces every liability clause, a compliance playbook defines the caps and carve-outs your organization will accept, and Pactolane’s PactAI can extract each clause, score the residual risk from 0 to 100, and run an exposure analysis that flags the agreements sitting outside policy. PactAI prepares the analysis; your legal team makes the call. Managed that way, the limitation of liability clause stops being a line you skim at signing and becomes a controlled, measurable part of how you run the business.