Can SaaS vendors limit liability for third-party intellectual property infringement claims

Yes, SaaS vendors can legally limit liability for third-party intellectual property (IP) infringement claims, but these limitations are rarely absolute. In practice, enterprise-grade SaaS agreements almost always include a 'carve-out' that exempts IP indemnification obligations from the general liability cap, ensuring the vendor remains fully responsible for their product's legal compliance.

The Mechanics of Liability Caps in SaaS

Liability caps are designed to limit a vendor's total financial exposure to a specific amount, often tied to the fees paid in the 12 months preceding the claim. However, applying this cap to IP infringement is a major point of contention.

Why IP Infringement is Different

Unlike standard service failures, an IP infringement claim can result in a court-ordered injunction, effectively killing the customer's ability to use the software. Because the potential damages—including lost profits and legal fees—are unpredictable and potentially catastrophic, customers rarely accept a capped liability for IP claims.

Key takeaway: Always negotiate to have IP indemnification obligations explicitly excluded from the 'Limitation of Liability' section. If the vendor refuses, the cap should be significantly higher than the standard 1x annual fee.

Action Item: Review your current SaaS contracts to see if 'Indemnification' is listed under the 'Exclusions' section of your 'Limitation of Liability' clause.

Standard Market Positions

The following table outlines how different market segments typically handle IP liability.

Critical Red Flags in Indemnification Clauses

When reviewing a SaaS contract, look for these three red flags that signal a vendor is attempting to shift undue risk to your organization:

• The "Sole Remedy" Clause: If the contract states that indemnification is your "sole and exclusive remedy" for IP claims, you may be barred from seeking other damages if the software is pulled from the market.
• Knowledge Requirements: Vendors often try to limit their indemnity to claims they "knowingly" infringed. This is dangerous, as it forces you to prove the vendor's intent, which is nearly impossible.
• Notice Requirements: Some vendors require notice of a claim within 5-10 days. If you miss this window, they may deny coverage entirely.

Action Item: Ensure the notice period for indemnification is at least 30 days to allow your legal team sufficient time to assess the claim.

Negotiating the "Carve-Out"

To protect your organization, you must ensure the liability cap does not apply to the vendor's duty to defend and indemnify. A robust clause should look like this:

1. Define the Scope: The vendor shall defend, indemnify, and hold harmless the customer against any third-party claim that the software infringes a valid patent, copyright, or trademark.
2. Exclude from Cap: "Notwithstanding anything to the contrary, the limitations of liability set forth in this Agreement shall not apply to the Vendor's indemnification obligations under Section X."
3. Include Legal Fees: Ensure that the vendor is responsible for all reasonable attorney fees and court costs incurred during the defense.

Key takeaway: If a vendor insists on a cap for IP claims, push for a 'Super Cap'—a separate, higher liability limit specifically for IP and data security breaches, often set at 3x to 5x the annual contract value.

Action Item: Use a redlining tool to verify that the 'Indemnification' section is cross-referenced in your 'Limitation of Liability' clause.

The Role of AI in Contract Review

Manually auditing hundreds of SaaS contracts for liability gaps is prone to human error and is incredibly time-consuming. TermScore uses advanced AI to instantly scan your vendor agreements, identifying missing IP carve-outs and highlighting unfavorable liability caps against industry benchmarks. By automating this analysis, TermScore ensures your legal team focuses only on the high-risk clauses that require human intervention, significantly reducing your organization's exposure to third-party IP litigation.