An indemnification clause makes one party (the indemnitor) cover the other party's (the indemnitee's) losses from defined risks, usually third-party claims. The clause has three moving parts that matter on review: what it covers (scope), whether the indemnitor must run the defense (the duty to defend), and how much it pays (the cap and the carve-out that lets it exceed the cap). Read in isolation an indemnity looks generous; its real value depends on whether it sits inside or outside the liability cap.
TL;DR
- An indemnification clause shifts a defined risk from one party to the other. It almost always covers third-party claims, and the strong versions also add a separate, immediate duty to defend.
- The duty to defend is the most valuable and most contested word. "Defend and indemnify" means the indemnitor pays your lawyers as the case runs; "indemnify" alone often means you front the defense and get reimbursed later, if you win.
- An indemnity capped at fees paid is usually worthless. The standard fix is a carve-out that puts the indemnity outside the general limitation of liability cap, often subject to a higher super-cap.
- Common triggers: IP infringement, breach of confidentiality, data incidents, and the indemnitor's negligence or willful misconduct. IP infringement indemnity is table stakes when you license a vendor's product.
- The procedure terms (prompt notice, control of defense, no settlement without consent) decide whether the indemnity actually pays out. Sloppy notice provisions void real coverage.
What an indemnification clause actually does
An indemnity is a contractual promise to absorb someone else's loss. Three mechanics do the work.
1. The indemnity (the duty to pay). The indemnitor agrees to cover losses, damages, liabilities, and usually costs and reasonable attorneys' fees that the indemnitee suffers from a defined event. Most commercial indemnities are limited to third-party claims, meaning a claim brought by someone outside the contract. A broader "first-party" indemnity that covers direct claims between the parties is really a fee-shifting and damages provision in disguise, and counsel should flag it.
2. The duty to defend. This is separate from the duty to pay. A duty to defend means the indemnitor must take over and fund the defense of a covered claim from the start, before anyone knows who wins. Without it, the indemnitee carries its own defense costs and looks to the indemnitor only at the end. The difference is cash flow and control over a live lawsuit.
3. The procedure. Notice deadlines, who controls the defense, settlement consent, and cooperation duties. These are not boilerplate. A missed notice deadline or an unauthorized settlement can forfeit the entire indemnity.
Why it matters: the dollars at stake
Consider a company that licenses a vendor's software for $200,000 a year and builds it into a customer-facing product. A patent troll sues the company, alleging the vendor's code infringes a patent.
This is an illustrative example. Assume defense costs run $1.2M over two years and the case settles for $3M.
- With a "defend and indemnify" IP clause carved out of the cap, the vendor funds the $1.2M defense as it accrues and covers the $3M settlement. The company's out-of-pocket is near zero.
- With "indemnify" only, capped at fees paid, the company funds its own $1.2M defense, then recovers at most $200,000 from the vendor and eats the rest.
Same infringement, same contract. The gap between the two versions is over $4M, decided by one verb ("defend") and one carve-out (indemnity outside the cap). That is why the indemnity and the liability cap have to be read together.
Who wants what
| Indemnitee (the protected party) | Indemnitor (the paying party) | |
|---|---|---|
| Trigger scope | Broad ("arising out of or relating to") | Narrow ("to the extent caused by") |
| Duty to defend | Express duty to defend, paid as incurred | Reimbursement of defense costs after the fact |
| Cap | Indemnity outside the liability cap | Indemnity inside the general cap |
| Control of defense | Wants approval rights, own counsel option | Wants sole control of the defense |
| Comparative fault | No reduction for indemnitee's own conduct | Pro-rata reduction "to the extent" of indemnitee fault |
| IP infringement | Uncapped or high super-cap | Capped, with a right to cure (replace or modify) |
The pattern: the indemnitee wants broad triggers, a real duty to defend, and the indemnity outside the cap. The indemnitor wants narrow "to the extent caused by" triggers, control of the defense, and everything inside a predictable number.
Market-standard language
A typical mutual third-party indemnity for a software or services agreement reads close to this:
INDEMNIFICATION.
(a) By Vendor. Vendor will defend Customer against any third-party
claim alleging that the Services, as provided by Vendor and used in
accordance with this Agreement, infringe or misappropriate any U.S.
patent, copyright, trademark, or trade secret (a "Claim"), and will
indemnify Customer for damages, liabilities, and reasonable attorneys'
fees finally awarded against Customer or agreed in settlement, to the
extent arising from such Claim.
(b) Procedure. The indemnified party will: (i) promptly notify the
indemnifying party in writing of the Claim (provided that failure to
give prompt notice will not relieve the indemnifying party except to
the extent it is prejudiced); (ii) give the indemnifying party sole
control of the defense and settlement; and (iii) provide reasonable
cooperation at the indemnifying party's expense. The indemnifying
party will not settle any Claim in a way that imposes liability or
admission on the indemnified party without its prior written consent.
(c) Exclusions. Vendor has no obligation for any Claim arising from
(i) modification of the Services by anyone other than Vendor,
(ii) combination of the Services with items not provided by Vendor, or
(iii) use of the Services other than as permitted under this Agreement.
Two words carry the value. "Will defend" creates the immediate duty to defend. "To the extent arising from" is a proportionate trigger that lines up with comparative fault, narrower than "arising out of or relating to."
The negotiation: standard, fallback, walk-away
Treat scope, defense, and cap as three separate trades.
| Issue | Opening position | Fallback both sides accept | Walk-away |
|---|---|---|---|
| Trigger language | "Arising out of or relating to" | "To the extent caused by or arising from" | Trigger so narrow it covers almost nothing |
| Duty to defend | Express duty to defend, paid as incurred | Defend, with indemnitor's choice of counsel and indemnitee approval rights | Reimbursement only, after final judgment |
| Cap treatment | Indemnity fully outside the cap | Outside the general cap, subject to a super-cap | Indemnity folded inside the fees-paid cap |
| Control of defense | Indemnitee controls, indemnitor funds | Indemnitor controls, indemnitee may join with own counsel | Indemnitor controls with no consent on settlement |
| IP cure right | None; vendor pays | Vendor may replace, modify, or refund and terminate | Vendor's only remedy is to terminate and refund a pro-rated fee |
The most common compromise is a super-cap: the indemnity sits outside the general liability cap but is itself capped at a higher, separately negotiated number, so the indemnitor still has a known ceiling.
Common carve-outs / variations
Indemnities vary by what triggers them and how the parties limit them. The high-frequency variations:
- IP infringement indemnity. The buyer's baseline ask when licensing a product. Usually paired with a vendor cure right (replace, modify, or refund and terminate) and exclusions for buyer modifications or unapproved combinations.
- Data and security indemnity. Covers third-party claims and regulatory actions from a breach the indemnitor caused. Often given its own super-cap.
- Comparative-fault reduction. "To the extent" language reduces the indemnitor's obligation by the indemnitee's share of fault. The indemnitee resists this for IP claims it cannot control.
- Mutual general indemnity. Each party indemnifies for its own negligence, willful misconduct, and breach. Common in services deals.
- Anti-indemnity carve-back. In construction and some other contexts, statutes void indemnities that cover the indemnitee's own negligence, so the clause is drafted to comply.
A mutual general indemnity fallback often reads:
Each party (as indemnitor) will defend and indemnify the other against
third-party claims to the extent arising from the indemnitor's
negligence, willful misconduct, or breach of its confidentiality
obligations under this Agreement, subject to the procedure in
Section [Procedure] above.
Jurisdiction and enforceability notes
Indemnities are generally enforceable in commercial contracts between sophisticated parties, but several rules constrain them:
- Indemnifying a party for its own negligence. Most US states require clear and specific language for an indemnity to reach the indemnitee's own negligence. General "any and all claims" wording is often read not to cover it. Some states apply an express-negligence or conspicuousness test.
- Anti-indemnity statutes. Many states void or limit indemnities that shift liability for the indemnitee's sole negligence, especially in construction and oilfield contracts. These are statutory and vary widely.
- Duty to defend can outrun the duty to indemnify. In several states the duty to defend is broader and triggers on the allegations, not the proven facts, so an indemnitor can owe a defense even for a claim it ultimately does not have to pay.
- Insurance interaction. An indemnity is only as good as the indemnitor's ability to pay. Pairing it with an insurance requirement and additional-insured status is what makes it collectible.
This is general information, not legal advice for a specific deal. Enforceability turns on the governing law and the facts, and anti-indemnity rules differ sharply by state, so confirm against the controlling law before you rely on a clause. For how caps differ across states, see our guide on indemnification caps by state.
Review checklist: red flags to catch
- The clause says "indemnify" but not "defend", so you fund your own defense and only recover after a win.
- The indemnity is capped at fees paid with no carve-out from the general liability cap.
- Notice is a strict condition of coverage with no "to the extent prejudiced" qualifier.
- The indemnitor gets sole control of defense and settlement with no consent right when a settlement admits your liability.
- The trigger is one-sided (only you indemnify) when the deal is presented as mutual.
- No IP infringement indemnity at all, or one whose only remedy is termination and a partial refund.
- A first-party indemnity dressed up as a third-party clause, turning ordinary breach claims into fee-shifting.
How it interacts with other clauses
The indemnity is part of a system; read it with:
- Limitation of liability: the carve-out that puts the indemnity outside the cap is what gives it real value.
- Insurance: additional-insured status and minimum limits make the indemnity collectible.
- Representations and warranties: a breached warranty is a common indemnity trigger.
- Confidentiality: breach of confidentiality is a standard indemnified event.
- Survival: the indemnity must survive termination, or it expires before the claims do.
For the broader workflow, see the in-house contract review playbook.
FAQ
What is an indemnification clause? It is a contract provision where one party agrees to cover the other party's losses from a defined risk, usually third-party claims. Strong versions also add a separate duty to defend, meaning the indemnitor funds and runs the defense of a covered claim from the start.
What is the difference between "defend" and "indemnify"? "Defend" means the indemnitor takes over and funds the defense as the case runs. "Indemnify" means it covers losses, often only after a final judgment or settlement. A clause with both is far more valuable than one with only "indemnify," because you do not front your own defense costs.
Should the indemnity be inside or outside the liability cap? The indemnified party wants it outside the cap. An indemnity capped at fees paid is usually too small to matter. The standard compromise puts the indemnity outside the general cap but subject to a higher super-cap, so the indemnitor still has a known ceiling.
What does "to the extent caused by" do? It makes the indemnity proportionate to fault. The indemnitor pays only for the share of the loss its conduct caused, so the indemnitee's own fault reduces recovery. It is narrower than "arising out of or relating to," which can reach losses the indemnitor did not cause.
Can you indemnify someone for their own negligence? Sometimes, but most US states require clear and specific language to do it, and some have anti-indemnity statutes that void indemnities covering the indemnitee's own negligence, especially in construction. General "any and all claims" wording is often read not to reach the indemnitee's negligence.
Why does the notice provision matter so much? Because a strict notice condition can forfeit a valid indemnity over a short delay. The safer drafting ties forfeiture to actual prejudice, so a late notice only reduces the obligation to the extent the delay actually harmed the indemnitor.
What is an IP infringement indemnity? It is the indemnitor's promise to defend and cover claims that its product infringes a third party's patent, copyright, trademark, or trade secret. It usually comes with a vendor cure right (replace, modify, or refund and terminate) and exclusions for buyer modifications or unapproved combinations.
Related clauses
Clauses that get negotiated alongside this one.
