Indemnification Clause Guide: Duty to Defend, Anti-Indemnity Laws & Negotiation Strategies
Duty to defend vs. duty to indemnify, tender mechanics, broad/intermediate/limited form, 6 landmark cases, 15-state anti-indemnity comparison, additional insured gaps, industry rules for construction, SaaS, real estate, M&A, and government — everything you need before you sign or negotiate an indemnification clause.
Published March 21, 2026 · Educational guide, not legal advice. Consult a licensed attorney for specific contract questions.
In This Guide
Indemnification Fundamentals — What You Are Actually Agreeing To
An indemnification clause is a contractual obligation by one party (the indemnitor) to absorb specified financial losses suffered by another party (the indemnitee). The obligation typically covers three categories of costs: (1) damages paid to third parties; (2) attorney fees and legal defense costs; and (3) settlement amounts. Each category is negotiable; the default in most form contracts is all three, uncapped.
The critical distinction from ordinary contractual liability: ordinary breach of contract allows the non-breaching party to sue you for their own losses. Indemnification goes further — it obligates you to pay for claims brought against the indemnitee by third parties who are strangers to your contract. A freelance developer signs a services agreement with broad indemnification; a client's customer sues the client claiming the developer's software violated their privacy rights; the developer may now owe the client's entire defense bill regardless of whether the lawsuit has merit.
Key Principle
Scope is determined by three elements you must read separately: (a) the triggering event — what must happen to activate the obligation; (b) the indemnitee group — who is protected (every entity added to this list multiplies your potential claim exposure); and (c) the covered costs — which types of losses you must pay. Every word of each element matters in litigation.
Red Flag
Related guides: Limitation of Liability Guide and Insurance Clauses Guide.
Duty to Defend vs. Duty to Indemnify — A Critical Distinction
These two obligations look similar but operate very differently. The duty to indemnify is retrospective: it is triggered after liability is established, requiring the indemnitor to reimburse the indemnitee for damages actually awarded or settled. The duty to defend is prospective and immediate: it is triggered as soon as a claim is asserted that is potentially covered, requiring the indemnitor to fund the defense in real time — before anyone knows whether the claim has merit.
| Obligation | When Triggered | Standard | Key Risk |
|---|---|---|---|
| Duty to Indemnify | After liability is established by judgment or settlement | Broad: "arising out of or related to" | Covers damages and settlement amounts only |
| Duty to Defend | Immediately on assertion of a potentially covered claim | "Potentially covered" — very low threshold | Funds litigation in real time before outcome is known |
| Hold Harmless | Shields from initial imposition of liability | Prevention of liability in the first instance | Less litigation upside; broader in concept |
Red Flag
In Indemnity Insurance Co. of North America v. American Aviation, Inc., 891 F.2d 822 (11th Cir. 1990), the Eleventh Circuit addressed the scope of the duty to defend in the context of a commercial indemnification agreement. The court held that the duty to defend is triggered whenever the complaint alleges facts that, if true, would fall within the indemnification obligation — even if the indemnitee ultimately prevails on the merits. The indemnitor cannot refuse to fund a defense because it believes the claim is meritless; the “potentially covered” standard is the majority rule across U.S. jurisdictions and attaches at the pleading stage.
Watch Out
Is your indemnification clause fair and enforceable?
Get an instant AI review — red flags, one-sided clauses, and plain-English analysis in under 60 seconds.
Check My Contract Free →Tender of Defense — Mechanics, Timing, and Consequences
Tender of defense is the formal act of the indemnitee notifying the indemnitor of a covered claim and demanding that the indemnitor assume control of the legal defense. The mechanics matter enormously: tender must usually be in writing, must identify the specific claim and contract at issue, and must be made promptly after the indemnitee receives notice of the lawsuit or claim.
In Hermitage Corp. v. Contractors Adjustment Co., 166 Ill.2d 72 (Ill. 1995), the Illinois Supreme Court established a governing framework: an indemnitor who wrongfully refuses a properly tendered defense loses the right to object to the reasonableness of the defense strategy and attorney fees chosen by the indemnitee. After wrongful refusal, the indemnitee may retain its own counsel and recover those reasonable fees from the indemnitor — even if the indemnitor later claims it would have managed the defense more cheaply. The obligation to accept a valid tender is mandatory, not discretionary.
Key Principle
What to Do
Contracts sometimes specify additional mechanics: who controls defense strategy, whether the indemnitee can approve selection of counsel, whether the indemnitee can settle without the indemnitor's consent. Negotiate these terms explicitly. An indemnitor who must fund a defense they cannot control is in the worst possible position; an indemnitee who cannot settle without indemnitor approval may be locked into protracted and expensive litigation.
Types of Indemnification: Broad, Intermediate, Limited, Mutual
Broad Form (Negligence-Based)
Requires the indemnitor to cover losses caused by the indemnitee's own negligence. Key language: "regardless of the negligence of the indemnitee" or "including claims caused in whole or in part by indemnitee." Void under anti-indemnity statutes in construction in most states. Where enforceable, extraordinarily one-sided.
Intermediate Form (Comparative Fault)
The indemnitor's obligation is proportional to its share of fault. If the indemnitee is 40% at fault, the indemnitor covers only 60% of the loss. Mirrors comparative fault principles and is the most defensible commercial standard in jurisdictions that have abolished broad form indemnity.
Limited (Fault-Based)
Covers only losses arising from the indemnitor's own breach, negligence, or willful misconduct. The minimum standard that vendors and service providers should accept. Scope language should read "arising from Service Provider's own negligence or willful misconduct" — not "arising from or related to the Agreement."
Mutual (Reciprocal)
Both parties indemnify each other for their respective fault. The commercially standard form in balanced negotiations. Note: mutual indemnification does not mean equal practical exposure — a data processor handling sensitive PII has greater third-party claim exposure than its client even in a mutual structure.
Crawford v. Weather Shield Mfg., Inc., 44 Cal.4th 541 (Cal. 2008), is the leading California authority on broad vs. narrow indemnification in construction. The California Supreme Court held that an express indemnification clause could obligate a subcontractor to indemnify the general contractor for the general's own active negligence — but only if the language was sufficiently explicit. Ambiguous indemnity clauses are construed against the indemnitee seeking to avoid responsibility for its own negligence. California Civil Code § 2782 now largely prohibits such clauses in construction, but Crawford governs contract interpretation in non-construction commercial contexts where parties have freely bargained for broad form indemnity.
Express vs. Implied Indemnification: Express indemnification is created by contract; implied indemnification is judicially imposed even without contract language. Courts impose implied indemnification when one party is vicariously or passively liable for another party's active negligence — for example, an employer held liable for an independent contractor's torts may have implied indemnity rights against the contractor. Express indemnification clauses should explicitly state whether they supersede or supplement any implied indemnity rights.
Key Principle
Indemnification Triggers, Carve-Outs & Caps
Three elements of indemnification scope require separate analysis: the trigger (what activates the obligation), the carve-outs (what is expressly excluded), and the cap (the maximum dollar amount you can owe). Missing any one of these creates unacceptable risk.
Trigger Language Comparison
| Trigger Language | Breadth | What It Captures | Negotiation Target |
|---|---|---|---|
| Arising out of or related to the Agreement | 🔴 Broadest | Tangential claims with any connection to the contract | Strike; replace with causation standard |
| In connection with performance of services | 🟠 Very broad | Claims arising during the engagement | Push for nexus to specific acts or omissions |
| Arising from or attributable to | 🟠 Broad | Claims traceable in any way to the indemnitor | Request addition of "solely" or fault qualifier |
| Caused by | 🟡 Moderate | Claims where the indemnitor's conduct is a cause | Add "directly and proximately" for further narrowing |
| Directly and proximately caused by | 🟢 Narrow | Claims where indemnitor is the but-for cause | Standard commercial baseline — accept |
| Solely caused by indemnitor's gross negligence or willful misconduct | 🟢 Narrowest | Only the most egregious conduct | Reasonable for low-risk service providers; push if higher risk |
Standard Carve-Outs to Negotiate
Indemnitee's gross negligence or willful misconduct
Essential — prevents you from paying for the indemnitee's intentional wrongdoing
Losses covered by the indemnitee's own insurance
Prevents double recovery; insurers frequently require this carve-out
Consequential, indirect, punitive, or exemplary damages
Cap the categories of loss; uncapped indemnity for punitive damages is extreme risk
Claims arising after expiration of the survival period
Temporal limit on indemnification exposure
IP infringement caused by customer modifications (SaaS)
Standard vendor carve-out for infringement the vendor did not create
Claims settled without the indemnitor's consent
Protects indemnitor from inflated or manufactured settlements
Caps and Dollar Limits
Indemnification obligations are frequently uncapped by default. Without an express cap, your exposure is theoretically unlimited — a single third-party judgment could exceed the entire contract value. Negotiate a cap expressed as the higher of: (a) 12 months of fees paid under the agreement, or (b) your applicable insurance coverage limit. For IP indemnification, a separate, higher cap (or no cap) is commercially normal because IP infringement damages can be substantial.
Watch Out
Insurance Intersection — Additional Insured & CGL Coverage Gaps
A contractual indemnification obligation is only as good as the indemnitor's ability to pay. The mechanism that backs up contractual indemnity with insurance dollars is the additional insured (AI) endorsement. When you are named as an additional insured on the indemnitor's commercial general liability (CGL) policy, you gain direct rights against the insurer — you do not have to sue the indemnitor to access coverage.
In Queen Villas Homeowners Association v. TCB Property Management, 56 Cal.Rptr.3d 528 (Cal. App. 2007), a California appellate court addressed the intersection of anti-indemnity law and insurance requirements. The court held that while Civil Code § 2782 voided the broad form indemnification clause in a property management agreement, the separately negotiated insurance procurement obligation — requiring the vendor to maintain CGL coverage naming the HOA as additional insured — remained independently enforceable. The takeaway: separate your indemnification clause from your insurance procurement requirements. Even where the indemnity is voided by statute, courts will enforce the insurance obligation.
| Insurance Type | What It Covers | AI Endorsement Needed | Common Gap |
|---|---|---|---|
| CGL (Commercial General Liability) | Bodily injury, property damage, personal/advertising injury | ISO CG 20 10 / CG 20 37 for construction | Does not cover professional services, cyber, or IP claims |
| Professional Liability (E&O) | Errors and omissions in professional services | Require AI status specifically for E&O | Often not included unless explicitly required |
| Cyber Liability | Data breaches, network security failures, privacy claims | Require first- and third-party cyber AI endorsement | Limits frequently lower than indemnity exposure |
| Umbrella / Excess | Coverage above primary policy limits | Follow-form umbrella should include AI status | Excess carrier may dispute AI status without explicit endorsement |
Red Flag
In Bridgestone/Firestone, Inc. v. Royal & Sun Alliance Insurance Co., 285 F.3d 1217 (10th Cir. 2002), the Tenth Circuit addressed the interplay between contractual duty-to-defend obligations and insurance coverage. Firestone had agreed to indemnify and defend a counterparty against product liability claims. When mass tort claims arose from the tire recall, the court held that the duty to defend was triggered by any complaint alleging facts that, if true, would bring the claim within the scope of the indemnification agreement — not just claims that were ultimately proven. The insurer could not wait for a final determination; the defense obligation attached at the pleading stage.
Watch Out
Anti-Indemnity Statutes — 15-State Comparison
Most states have enacted anti-indemnity statutes that limit or void indemnification provisions in specific industries or contexts, primarily construction. The scope, coverage, and exceptions vary dramatically. In Perini Corp. v. Greate Bay Hotel & Casino, 129 N.J. 243 (N.J. 1992), the New Jersey Supreme Court addressed the enforceability of broad form indemnification clauses in construction against the backdrop of New Jersey's anti-indemnity statute. The court held that the anti-indemnity statute represented a clear legislative judgment that broad form indemnity — requiring one party to indemnify another for the other's own negligence — was against public policy in construction. Courts must give anti-indemnity statutes their full effect, even where sophisticated commercial parties have negotiated and expressly agreed to broad form indemnity.
Watch Out
| State | Statute | Broad Form Indemnity | Insurance Req. Enforced | Industry Scope | Standard Required |
|---|---|---|---|---|---|
| California | Civ. Code § 2782; § 2782.8 | Void in construction | Yes — separately enforced | Construction + design professionals | Intermediate form required |
| Texas | § 130.002; Express Negligence Doctrine | Void unless mutual | Yes — Tex. Ins. Code | Construction & engineering | Proportionate responsibility |
| New York | Gen. Oblig. Law § 5-322.1 | Void where indemnitee negligent | AI endorsements enforced separately | Construction only | Comparative fault applies |
| Florida | § 725.06 | Void — must be fault-based | Yes — separately enforced | Construction; specific cap required | Pro-rata fault allocation |
| Illinois | 740 ILCS 35 | Void — violates public policy | Yes | Construction — broad prohibition | Modified comparative fault |
| Washington | RCW 4.24.115 | Void for indemnitee negligence | Yes | Construction; intermediate allowed | Proportionate liability |
| Colorado | § 13-21-111.5 | Void in construction | Yes | Construction | Comparative fault required |
| Louisiana | La. R.S. 9:2780 | Void in oilfield & construction | Partial enforcement | Oilfield + construction — very broad | Solidary liability abolished |
| Georgia | O.C.G.A. § 13-8-2 | Void — against public policy | Separately enforced | Construction | Comparative fault applies |
| North Carolina | § 22B-1 | Void — fault-based only | Yes | Construction | Contributory negligence state |
| Arizona | A.R.S. § 32-1159 | Void — own negligence only | Yes | Construction | Comparative fault |
| Michigan | MCL 691.991 | Void — design professional limit | Yes | Construction | Comparative fault |
| Nevada | NRS 108.245 | Void for indemnitee fault | Yes | Construction | Comparative negligence |
| Oregon | ORS 30.140 | Void in construction | Yes | Construction | Modified comparative fault |
| Minnesota | Minn. Stat. § 337.02 | Void — fault-based only | Yes — broad AI enforcement | Construction + design professionals | Pro-rata fault required |
Table reflects general construction and commercial contract law as of March 2026. State statutes update frequently — verify current law before relying on these entries.
Related guide: Construction Contract Guide.
Industry-Specific Rules — Construction, SaaS, Real Estate, M&A, Government
Construction — AIA Standard Forms
- AIA A201-2017 § 3.18 provides the industry-standard fault-based indemnification framework — contractor indemnifies owner and architect for claims arising from contractor's performance only
- Owners who modify § 3.18 to expand scope should verify the modification is not voided by the applicable state anti-indemnity statute
- AIA A401-2017 § 4.6 creates cross-indemnification between prime and sub: each covers claims arising from their own scope of work
- Always coordinate AIA indemnity terms with your CGL and umbrella carriers before the project begins
SaaS & Technology
- IP indemnification — vendor covers third-party IP infringement claims; carve-outs for customer modifications, customer data, and unauthorized combinations
- Data breach indemnification — vendor covers losses from vendor's own security failures; cap against cyber insurance limits
- Customer content indemnification — customer covers claims from customer-uploaded content (copyright, defamation, privacy); enterprise customers routinely push back
- Negotiate separate caps per track — IP, data breach, and content indemnity have fundamentally different risk profiles
Real Estate
- Commercial leases: tenant indemnifies landlord for claims from tenant operations; landlord indemnifies for common area and landlord negligence
- Key scope issue: does "arising from tenant's use" capture environmental contamination conditions that predate the tenancy?
- Purchase agreements: seller indemnifies for pre-closing liabilities; buyer for post-closing; survival period typically matches relevant statute of limitations
- Coordinate tenant/buyer indemnification with CGL and umbrella coverage before signing
M&A Transactions
- Rep & warranty indemnification: seller indemnifies buyer for breaches of representations; survival typically 12–24 months (general), longer for fundamental reps and tax
- Negotiated baskets (deductibles) and caps (typically 10–20% of purchase price for general reps, 100% for fundamental)
- Representations & warranties insurance (RWI) has transformed M&A practice — sellers increasingly shift indemnity risk to an insurer
- Seller escrow arrangements backstop indemnification obligations during the survival period
Government Contracts — FAR
- FAR 52.228-7 governs indemnification and insurance on federal contracts; Anti-Deficiency Act prohibits open-ended government indemnification commitments
- Specific statutory indemnification programs exist for nuclear contractors (Price-Anderson Act) and anti-terrorism technologies (SAFETY Act)
- State and local government indemnification of vendors varies widely — review jurisdiction-specific restrictions
- Contractors seeking indemnification from the federal government must rely on statute, not contract
Professional Services
- Lawyers, accountants, engineers, and consultants face E&O-based indemnification — ensure E&O coverage aligns with contractual indemnity scope
- Many professional service contracts include mutual indemnification tied to each party's own professional standards violations
- Audit and consulting agreements increasingly include data breach indemnification obligations for client data handled by the professional
- Cap professional services indemnification at the engagement fee amount or the E&O policy limit — whichever is higher
Related guides: Master Service Agreement Guide · SaaS Agreement Red Flags · Commercial Lease Agreement Guide.
Is your indemnification clause fair and enforceable?
Get an instant AI review — red flags, one-sided clauses, and plain-English analysis in under 60 seconds.
Check My Contract Free →6 Landmark Cases Every Party Should Know
Indemnity Insurance Co. of North America v. American Aviation, Inc.
11th Cir. · 1990 · 891 F.2d 822
Impact: Established the majority-rule standard for duty-to-defend activation in commercial indemnification agreements. The standard is much lower than the duty-to-indemnify standard: the indemnitee need only show the claim is potentially covered, not actually covered. The practical consequence: an indemnitor must fund defense of frivolous claims. This is the foundational case for understanding why the word "defend" in an indemnification clause creates such costly exposure.
Queen Villas Homeowners Assn. v. TCB Property Mgmt.
Cal. App. 4th Dist. · 2007 · 149 Cal.App.4th 1 (2007)
Impact: Critical for any contract involving California construction or services: the insurance obligation survives even where the indemnification clause is voided by anti-indemnity statute. Practitioners must always draft the insurance procurement requirement as a standalone contractual obligation — not dependent on the enforceability of the indemnification clause. This creates a backup mechanism: even if the indemnity is void, the indemnitee can go directly against the indemnitor's insurer as an additional insured.
Bridgestone/Firestone, Inc. v. Royal & Sun Alliance Insurance Co.
10th Cir. · 2002 · 285 F.3d 1217 (10th Cir. 2002)
Impact: Confirmed in the context of mass tort product liability litigation that the "potentially covered" standard applies to contractual duty-to-defend obligations, not just insurance duty-to-defend analysis. Indemnitors who delay defending while waiting for liability to be established are in breach of the duty to defend and become liable for all defense costs the indemnitee incurred in the interim. This case is also significant for insurance coverage analysis: the insurer's duty to fund the indemnitor's own defense obligation is governed by the same potentially-covered standard.
Crawford v. Weather Shield Mfg., Inc.
Cal. Supreme Court · 2008 · 44 Cal.4th 541 (Cal. 2008)
Impact: Governs indemnification clause interpretation in non-construction commercial contracts in California and has been widely cited by other state courts. The court articulated three types of indemnification — Type I (broadest: indemnitor covers indemnitee's sole negligence), Type II (intermediate: covers concurrent fault), and Type III (narrowest: covers only indemnitor's fault). This classification framework is now the standard tool for analyzing California indemnification clauses. Post-Crawford, California Civil Code § 2782 largely prohibits Type I construction indemnity, but the analytical framework applies in all commercial contexts.
Perini Corp. v. Greate Bay Hotel & Casino
N.J. Supreme Court · 1992 · 129 N.J. 243 (N.J. 1992)
Impact: Demonstrates that commercial sophistication and express contractual agreement cannot override anti-indemnity statutes. Contractors and owners who knowingly negotiate broad form indemnity in states with anti-indemnity statutes are operating on unenforceable ground. The case is also important for its treatment of the "but for" causation test — the court distinguished between losses that were primarily caused by one party versus losses involving comparative fault, and held the statute voids the clause entirely rather than reforming it to a fault-based standard.
Puget Sound Energy, Inc. v. City of Seattle
Wash. App. · 2006 · 136 Wn.App. 515 (2006)
Impact: Clarifies the scope of Washington's anti-indemnity statute and illustrates the importance of the industry scope limitation in most anti-indemnity laws. A broad form indemnification clause that is void in a construction contract may be fully enforceable in a commercial services agreement in the same state. Parties in Washington contracting outside construction retain the freedom to allocate risk as they see fit — including placing the risk of the indemnitee's own negligence on the indemnitor. This distinction between construction and non-construction contexts appears in most states with anti-indemnity statutes.
15-State Indemnification Law Table
State law governs indemnification interpretation, anti-indemnity statute scope, and enforcement of survival clauses. Anti-indemnity statutes often apply based on project location rather than governing law. Verify current statutes before relying on these entries.
| State | Anti-Indemnity Statute | Broad Form Void? | AI Obligation Enforced Separately? | Implied Indemnity Recognized? | Key Case / Standard |
|---|---|---|---|---|---|
| CA | Civ. Code § 2782 (construction); § 2782.5 (commercial) | Yes — construction | Yes (Queen Villas) | Yes — passive vs. active negligence | Crawford v. Weather Shield (Type I/II/III) |
| TX | § 130.002; Express Negligence Doctrine | Yes unless mutual | Yes | Limited — express doctrine prevails | Getty Oil v. Insurance Co. of N. Am. |
| NY | Gen. Oblig. Law § 5-322.1 | Yes — indemnitee negligence | Yes | Yes — vicarious liability cases | Brown v. Two Exchange Plaza |
| FL | § 725.06 | Yes — must be fault-based | Yes | Limited | Fla. Stat. § 725.06(1) |
| IL | 740 ILCS 35 | Yes — public policy | Yes | Yes | Hermitage Corp. — tender framework |
| WA | RCW 4.24.115 (construction only) | Construction only | Yes | Yes | Puget Sound Energy — non-construction enforceable |
| CO | § 13-21-111.5 | Yes — construction | Yes | Limited | Comparative fault required |
| LA | La. R.S. 9:2780 (oilfield + construction) | Yes — broad scope | Partial | Yes | Very broad anti-indemnity application |
| GA | O.C.G.A. § 13-8-2 | Yes — construction | Yes | Limited | Comparative fault applies |
| NC | § 22B-1 | Yes — fault-based only | Yes | Yes | Contributory negligence state — important |
| AZ | A.R.S. § 32-1159 | Yes — own negligence | Yes | Limited | Comparative fault |
| MI | MCL 691.991 | Yes — design limitation | Yes | Yes | Comparative fault; MCL 691.1407 |
| NV | NRS 108.245 | Yes — indemnitee fault | Yes | Yes | Comparative negligence |
| OR | ORS 30.140 | Yes — construction | Yes | Yes | Modified comparative fault |
| MN | Minn. Stat. § 337.02 | Yes — construction + design | Yes — broad AI enforcement | Yes | Pro-rata fault; Minn. Stat. § 604.01 |
Table reflects general commercial and construction contract law as of March 2026. State statutes and case law evolve — verify current law before relying on these entries.
Negotiation Matrix — 8 Clause Scenarios
Use this matrix when reviewing an indemnification clause. Match the language you see to the scenario, assess the risk, and apply the counter-offer strategy.
| Clause Language / Structure | Risk Level | Your Leverage | Counter-Offer | Walk-Away Signal |
|---|---|---|---|---|
| Broad form unilateral — covers indemnitee's own negligence, includes duty to defend, no cap | 🔴 Critical | Low — client controls draft | Strike entirely; propose limited, fault-based, mutual indemnity with defense reimbursement after the fact | Client refuses any fault limitation and refuses mutual structure |
| Duty to defend included alongside duty to indemnify | 🔴 High | Medium — "defend" is often treated as boilerplate | Remove "defend" or require that defense must be formally tendered, indemnitor controls counsel, and indemnitee cannot settle without consent | Client refuses to remove "defend" and refuses any tender/control mechanics |
| Indemnitee group includes affiliates, officers, directors, employees, successors, assigns | 🔴 High | Medium — group expansion seems routine but doubles exposure | Limit to the named contracting party only; strike affiliates, successors, and assigns | Client insists on including unknown future assigns with no limitation |
| No dollar cap on indemnification; LOL clause expressly carves out indemnity | 🔴 High | Medium — cap is a standard ask in any negotiation | Cap at higher of: (a) 12 months of fees paid, or (b) applicable insurance coverage limit | Client refuses any cap and refuses to separate IP indemnification from general indemnification |
| Triggering language: "arising out of or related to the Agreement" | 🟡 Elevated | High — this is a clear drafting overreach | Replace with "directly and proximately caused by Service Provider's breach, negligence, or willful misconduct" | Client refuses any causation qualifier and insists on "related to" language |
| No carve-out for indemnitee's gross negligence or willful misconduct | 🟡 Elevated | High — this is a standard commercial carve-out | Add express carve-out: "notwithstanding the foregoing, Indemnitor shall have no obligation for losses caused by Indemnitee's own gross negligence or willful misconduct" | Client refuses any carve-out for its own intentional conduct — walk away |
| Mutual, fault-based indemnification with 24-month survival and no express cap | 🟢 Acceptable | Strong — commercially standard baseline | Add cap equal to 12–24 months of fees or insurance limits; confirm interaction with LOL clause; verify survival period | No walk-away signal; negotiate cap and survival only |
| IP indemnification with standard carve-outs (customer modifications, customer data, unauthorized combinations) | 🟢 Standard | Strong — this is the market-standard structure | Confirm carve-outs are reasonable in scope; negotiate right to approve any settlement above a threshold; verify cyber coverage separately | No walk-away signal; standard commercial clause |
8 Common Mistakes with Dollar Costs
Overlooking the duty-to-defend obligation
$50,000–$500,000+ in defense costsThe word "defend" creates an immediate, real-time financial obligation that triggers before liability is established. Many signatories focus on the damages indemnification and overlook the defense obligation, which can be equally or more expensive in commercial litigation. A multi-year patent infringement lawsuit can generate millions in defense costs even before trial — all owed in real time by the indemnitor.
Signing unilateral broad form indemnification without insurance coverage
Personal liability for full judgment amountSigning a broad form unilateral indemnification with no insurance coverage for the obligation is the most common and dangerous error. If your CGL or E&O policy does not cover the obligation — and CGL professional services exclusions frequently eliminate coverage — you are personally on the hook for every dollar of the indemnitee's claim. Always verify coverage alignment before signing.
Assuming the limitation of liability clause caps indemnification
Gap between $50K cap and $5M+ indemnification exposureLOL clauses frequently contain express carve-outs for indemnification obligations — meaning your $50,000 aggregate liability cap may not apply to your $5 million indemnification exposure. Courts enforce these carve-outs as written. Read both clauses together and document their interaction before finalizing any commercial agreement.
Ignoring the breadth of the indemnitee group definition
$25,000–$2M per additional entity coveredAgreeing to indemnify "Client and its officers, directors, employees, agents, subsidiaries, affiliates, successors, and assigns" means your obligation extends to entities you may never have contracted with. Each addition to the indemnitee group multiplies the potential number of claimants and the scope of covered claims. Limit the group to the named contracting entity and named individuals with a legitimate nexus to the work.
Failing to negotiate a survival period
Indefinite exposure after contract endsWithout an express survival period, indemnification obligations may survive contract termination indefinitely — or as long as the relevant statute of limitations allows a third party to bring a claim (which can be 6–10 years in some states). Negotiate a defined survival period: 24–36 months for general commercial contracts, longer for IP and data privacy obligations where delayed discovery is common.
Accepting "arising out of or related to" trigger language
Captures claims worth 3–10x direct contract exposureCourts routinely find that claims with only a tangential connection to the covered conduct satisfy the "arising out of or related to" standard. This can transform a small services contract into indemnification for a massive unrelated dispute where your work is mentioned in passing. Push for "directly and proximately caused by" as the trigger for your indemnification obligation in every negotiation.
Skipping anti-indemnity statute analysis on construction projects
Signing an unenforceable (or partially enforceable) clauseIf the contract involves construction or services performed in a state with an anti-indemnity statute, broad form indemnification may be void by operation of law — but that does not mean you are protected. You still signed it, and litigation is required to determine enforceability. Worse, the insurance procurement obligation often survives even when the indemnity is void (Queen Villas). Negotiate a compliant clause from the start.
Tendering defense late or failing to tender at all
$100,000–$1M+ in unreimbursable defense feesAn indemnitee who fails to properly tender — or tenders late — may waive indemnification rights entirely. An indemnitor who wrongfully refuses a valid tender loses the right to control defense costs (Hermitage Corp.). Both sides need written tender protocols: send the tender immediately on notice of any claim, confirm receipt, document the response, and never sit on a tender without responding in writing within days, not weeks.
14 Frequently Asked Questions
What is the difference between duty to defend and duty to indemnify?
What is broad form indemnification?
What is tender of defense and why does it matter?
Are anti-indemnity statutes the same in every state?
What is an additional insured endorsement and how does it relate to indemnification?
Should indemnification be mutual or one-way?
Can a limitation of liability clause cap indemnification obligations?
What is cross-indemnification?
What are common carve-outs to indemnification obligations?
How long does an indemnification obligation survive contract termination?
What is implied indemnification?
How does indemnification work in SaaS and technology contracts?
What is the difference between indemnification and a hold harmless clause?
What are the six most important things to negotiate in an indemnification clause?
What is the difference between indemnification and a hold harmless agreement?
How does indemnification interact with limitation of liability clauses?
What happens when both parties are at fault in an indemnification claim?
What is a "basket" or "deductible" in M&A indemnification, and how is it calculated?
When does an indemnification obligation survive contract termination, and for how long?
Can commercial general liability insurance cover indemnification obligations?
Related Guides
Limitation of Liability Guide
How caps and carve-outs interact with your indemnification clause
Insurance Clauses Guide
Additional insured requirements, CGL coverage, and procurement obligations
Master Service Agreement Guide
Where indemnification fits in a complete MSA framework
Warranties & Representations Guide
How breach of warranty triggers indemnification obligations
Construction Contract Guide
AIA indemnification, anti-indemnity statutes, and subcontractor flow-downs
Termination Clause Guide
How indemnification obligations survive contract termination
Drafting Best Practices
The following model clause language represents balanced, market-standard drafting. Adapt to your specific industry, deal size, and risk profile. Always pair indemnification obligations with aligned insurance requirements.
Model Mutual Indemnification Clause (Commercial Services)
Balanced / Market StandardEach party ("Indemnitor") shall defend, indemnify, and hold harmless the other party and its officers, directors, and employees ("Indemnitee") from and against any third-party claims, damages, losses, and expenses (including reasonable attorneys' fees) arising directly and proximately from the Indemnitor's (i) material breach of this Agreement, (ii) gross negligence or willful misconduct, or (iii) infringement of a third party's intellectual property rights. Each party's total indemnification liability shall not exceed the amounts paid or payable under this Agreement in the twelve (12) months preceding the claim giving rise to indemnification.Key features: mutual, proportionate trigger ("directly and proximately"), capped, limited indemnitee group, gross negligence/willful misconduct carve-outs.
Model IP Indemnification Clause (SaaS / Technology)
Vendor-FavorableProvider shall defend Customer against any third-party claim alleging that Customer's authorized use of the Service infringes a patent, copyright, or trademark ("IP Claim"), and shall indemnify Customer for amounts finally awarded by a court or agreed in settlement, provided that: (a) Customer promptly notifies Provider in writing; (b) Provider has sole control of the defense and settlement; and (c) Customer provides reasonable cooperation. Provider's obligations do not apply to claims arising from (i) Customer's modification of the Service, (ii) combination with third-party materials not provided by Provider, (iii) Customer's data or content, or (iv) use after Provider has offered a non-infringing alternative. Provider's IP indemnification liability shall be subject to the limitations in Section [LOL].Key features: includes standard carve-outs, notice + cooperation requirements, control of defense, links to LOL clause.
Model Anti-Indemnity Compliant Construction Clause
Construction ProjectsSubcontractor shall indemnify, defend, and hold harmless General Contractor and Owner from and against claims, damages, losses, and costs, including attorneys' fees, arising out of or resulting from performance of Subcontractor's Work under this Agreement, but only to the extent caused by the negligent or wrongful acts or omissions of Subcontractor, its sub-subcontractors, or anyone for whose acts they may be liable. This indemnification obligation shall not apply to claims, damages, losses, or costs to the extent caused by the negligence or wrongful act or omission of General Contractor, Owner, or any person or entity for whose acts they are responsible.
Key features: proportionate fault-based (anti-indemnity compliant in all 50 states), excludes indemnitee's own negligence, consistent with AIA A201 §3.18.
Model Cap Provision Tying to Insurance Limits
Cap AlignmentNotwithstanding any other provision of this Agreement, each party's total aggregate liability for indemnification obligations under this Section [X] shall not exceed the greater of: (a) the total fees paid or payable by Customer to Provider in the twelve (12) months immediately preceding the event giving rise to the claim; or (b) the per-occurrence limit of the indemnifying party's applicable commercial general liability insurance policy in effect at the time of the claim. The parties acknowledge that the indemnification caps set forth herein are commensurate with the insurance coverage each party is required to maintain under Section [Insurance] of this Agreement.
Key features: dynamic cap tied to insurance limits, ensures cap and insurance coverage are aligned, encourages adequate coverage.
Industry Quick Reference
Indemnification norms vary dramatically by industry. What is market-standard in SaaS is often unacceptable in construction, and vice versa.
💻Technology / SaaS
Key Issues
IP infringement indemnification is the central battleground. Customers demand uncapped IP indemnification from vendors; vendors push for caps tied to contract value. Data breach indemnification (covering regulatory fines, notification costs, credit monitoring) is increasingly negotiated separately from general indemnification with higher caps or no caps.
Market Standard
Vendor provides mutual general indemnification (capped at 12 months of fees) plus separate, often uncapped IP indemnification with standard carve-outs (customer modification, third-party combination, continued use after fix offered). Data breach indemnification capped at 2–5× contract value.
Watch Out For
Open source GPL/AGPL contamination risk — if vendor's software includes GPL components, combining with your proprietary software could trigger copyleft obligations. Demand a warranty of no GPL contamination plus indemnification coverage.
Red Flag
Vendor excludes IP indemnification for all "combination" scenarios — this can mean almost any enterprise integration.
🏗️Construction
Key Issues
Anti-indemnity statutes govern in 43+ states. Broad form (indemnitor covers 100% even if indemnitee is 99% at fault) is void in nearly all states for construction. Intermediate form (covers proportionate share of indemnitee negligence) is restricted in many states. Limited form (only covers indemnitor's own fault) is universally enforceable. Additional insured requirements often survive even when indemnification is void (Queen Villas).
Market Standard
AIA A201 Article 3.18 limited form: Contractor indemnifies Owner for claims "to the extent caused by" Contractor's negligent acts or omissions. Paired with additional insured endorsement on CGL policy (Form CG 20 10/CG 20 37). Indemnification obligation uncapped but proportionate to fault.
Watch Out For
Insurance procurement obligation is often enforceable even where indemnification is void under anti-indemnity statute (Queen Villas Homeowners Assn.). You may be required to maintain additional insured coverage for the owner even if the indemnification clause itself is unenforceable.
Red Flag
Broad form indemnification in a multi-state construction contract — clause may be enforceable in some states and void in others, creating unpredictable risk across project sites.
📈M&A / Private Equity
Key Issues
Indemnification is the primary post-closing risk allocation mechanism. Key negotiated terms: (1) basket/deductible (typically 0.5–1% of deal value, either "tipping basket" or "true deductible"), (2) cap (typically 10–15% of deal value for general reps, often 100% for fundamental reps and fraud), (3) survival period (12–24 months general, indefinite for fraud and tax, statute of limitations for environmental and title), (4) escrow (10–15% of deal price held 12–18 months).
Market Standard
Seller indemnifies buyer for breach of representations and warranties (subject to basket/cap/survival), specific indemnities for known issues disclosed in schedules, and tax indemnification. R&W insurance increasingly used to shift indemnification risk from seller to insurer.
Watch Out For
Sandbagging provisions — if the agreement is pro-sandbagging (buyer can claim indemnification even if it knew of the breach at closing), seller faces unlimited post-closing liability for issues disclosed in due diligence. Anti-sandbagging provisions eliminate this risk.
Red Flag
Fundamental representations (title, authority, capitalization) with same cap as general reps — fundamental reps should be uncapped or separately capped at 100% of deal value.
🏥Healthcare
Key Issues
HIPAA/HITECH breach indemnification is critical. A single breach notification can cost $100,000–$5M+ in regulatory fines, notification, credit monitoring, and class action exposure. Business Associate Agreements (BAAs) must contain indemnification provisions covering breach costs. Malpractice indemnification between health systems and employed physicians raises complex credentialing and insurance issues.
Market Standard
BAAs: covered entity and business associate mutually indemnify for breaches caused by their own non-compliance with HIPAA requirements. Standalone indemnification provisions in vendor agreements: vendor indemnifies for data breaches caused by vendor's systems, typically uncapped for HIPAA penalties and notification costs.
Watch Out For
HIPAA OCR can impose fines on both covered entities and business associates for the same breach. Ensure your indemnification arrangement with your BAA partner clearly allocates responsibility for potential double-exposure to regulatory fines.
Red Flag
Vendor agreement with access to PHI but no BAA or indemnification for HIPAA breach costs — you are both liable to OCR and have no contractual recourse against the vendor.
🏛️Government Contracts
Key Issues
Federal government contracts are subject to strict FAR limitations on contractor indemnification of the government. FAR 52.228-7 (Workers Compensation and War-Hazard Insurance) establishes the baseline. Government cannot be required to indemnify contractors against claims that the U.S. has sovereign immunity from (Zidell Marine). State and local government contracts vary — some states allow broader indemnification, others restrict it.
Market Standard
Contractor indemnifies government for personal injury and property damage caused by contractor's performance. Government does not provide indemnification to contractors (sovereign immunity). FEMA, DOE, and DOD contracts may contain special indemnification provisions for extraordinary risks.
Watch Out For
Anti-Assignment Act and Contract Disputes Act limit how indemnification claims against the government can be pursued — standard commercial litigation strategies do not apply.
Red Flag
Teaming agreement or subcontract that requires you to indemnify the prime contractor on a government project with no cap and no right to control defense — you assume the prime's entire government contract risk.
Key Definitions
Indemnitor
The party who agrees to bear responsibility and compensate the other party for losses, claims, or damages. The party giving the indemnification.
Indemnitee
The party who receives the benefit of the indemnification — protected against claims, losses, or damages by the indemnitor.
Duty to Defend
An obligation to assume control of and pay for the legal defense of a covered claim, triggered immediately on notice — even before liability is established.
Duty to Indemnify
An obligation to reimburse the indemnitee for damages, settlements, and judgments after final resolution of a claim. Narrower and less expensive than duty to defend.
Broad Form Indemnification
Indemnitor agrees to cover losses even when the indemnitee is partially or entirely at fault. Void in most states for construction contracts under anti-indemnity statutes.
Intermediate Form Indemnification
Indemnitor covers losses where both parties share fault, but not where the indemnitee is solely at fault. Restricted in some states.
Limited Form Indemnification
Indemnitor covers only losses caused by the indemnitor's own negligence or breach. Universally enforceable — the standard for construction post-anti-indemnity statutes.
Anti-Indemnity Statute
State law that voids or limits indemnification provisions requiring a party to indemnify another for that party's own negligence. Primarily applies to construction contracts in 43+ states.
Tender of Defense
Written notice from the indemnitee to the indemnitor asserting the right to defense and indemnification under the indemnification clause, typically sent upon receipt of a claim or lawsuit.
Basket / Deductible
In M&A agreements, a minimum threshold of losses that must be exceeded before indemnification obligations are triggered. "Tipping basket" triggers full liability once exceeded; "true deductible" covers only the excess.
Survival Period
The period after contract termination during which indemnification obligations remain in effect. Without express survival language, obligations may survive indefinitely under applicable statutes of limitations.
Additional Insured Endorsement
An amendment to the indemnitor's insurance policy that extends coverage to the indemnitee as an additional insured. Often required alongside indemnification in construction and commercial agreements.
Contract Review Checklist
Use this checklist before signing any agreement with an indemnification clause.
Scope & Trigger
- Is the trigger "directly and proximately caused" (narrow) or "arising out of or related to" (broad)?
- Are the covered claims limited to third-party claims or does it include first-party losses?
- Is the obligation mutual or one-way? If one-way, why?
- Does the indemnitee group include affiliates, successors, and assigns? Can you limit it?
- Are IP infringement and data breach separately addressed with appropriate carve-outs?
Caps & Baskets
- Is there a dollar cap on indemnification? Does it match your LOL clause?
- Does the LOL clause expressly carve out indemnification obligations?
- For M&A: What is the basket (deductible) and cap (typically 10–15% of deal value)?
- Is IP indemnification separately capped (often uncapped for vendor-provided IP claims)?
- Do gross negligence and willful misconduct override any caps?
Insurance Alignment
- Does the required insurance coverage actually cover the indemnification obligations assumed?
- Are you required to maintain additional insured status for the other party?
- Is the insurance procurement obligation independent of indemnification enforceability?
- For construction: Does the additional insured requirement comply with anti-indemnity statute?
- Are minimum coverage limits sufficient relative to the deal size and risk profile?
Survival & Procedure
- Is there an express survival period? Is it appropriate for the risk type (IP: longer, general: 24–36 months)?
- What are the notice and tender requirements? Are they conditions precedent to coverage?
- Who controls the defense? Can you reject a settlement that includes non-monetary terms?
- Is there a requirement to cooperate? What does cooperation require you to do?
- Does the anti-indemnity statute in the project state affect enforceability?
8 Indemnification Red Flags
Stop and negotiate before signing if you see any of these.
Unlimited indemnification with no dollar cap
Exposes you to liability exceeding the entire contract value. A $10,000 services contract could generate a $10 million indemnification obligation. Always negotiate a cap.
"Arising out of or related to" trigger language
Extremely broad — courts find even tangential connections satisfy this standard. Push for "directly and proximately caused by" to limit scope to your actual conduct.
One-way indemnification with no reciprocity
You assume all risk while the other party assumes none. At minimum, demand mutual indemnification for their breach, negligence, and IP infringement.
Indemnification for indemnitee's own negligence
Requires you to pay for the other party's mistakes. Many states void this via anti-indemnity statutes, but only after expensive litigation. Negotiate it out.
No cap on IP indemnification — vendor is indemnitor
If you are the vendor indemnifying for IP infringement, uncapped IP indemnification is an existential risk. Cap it at a reasonable multiple of contract value.
Indemnitee group includes all affiliates and assigns
Multiplies potential claimants to entities you never knew existed. Limit to named contracting entity and identified individuals with a contractual nexus to the work.
Insurance procurement obligation survives even if indemnity is void
Common in construction. Even where anti-indemnity statutes void the indemnification, courts often enforce the insurance procurement obligation — effectively requiring you to insure the other party.
Notice as a condition precedent with very short deadline
Some agreements require notice within 30 days of a claim as a condition precedent to indemnification coverage. Missing the deadline can permanently waive indemnification rights.
Key Takeaways
Trigger language is everything
"Directly and proximately caused" is narrow and fair. "Arising out of or related to" is dangerously broad. This single phrase determines your entire exposure.
Align with your insurance
Your indemnification cap should mirror your CGL policy per-occurrence limit. Never assume uncapped indemnification — your insurer will only pay to the policy limit.
Check anti-indemnity laws first
In 43+ states, construction contracts cannot require you to indemnify for the other party's own negligence. But litigation is still required to establish this — negotiate a compliant clause from the start.
Tender immediately on notice of any claim
Late tender can waive your indemnification rights entirely. As soon as you receive any notice of a potential claim covered by your indemnification clause, tender in writing — same day if possible.
Read LOL and indemnification together
Your $50K liability cap may expressly exclude indemnification obligations. These two clauses interact — courts enforce them as written, even when the result is dramatically asymmetric.
Mutual is the default market standard
One-way indemnification is a red flag. B2B agreements between parties of similar bargaining power should be mutual — each party indemnifies for its own breach, negligence, and IP violations.
Negotiate a defined survival period
Without one, indemnification obligations may survive indefinitely. Target 24–36 months for general commercial obligations; consider longer for IP and data privacy claims.
Construction is a special category
Anti-indemnity statutes, AIA A201 requirements, additional insured endorsements, and wrap-up insurance programs create a distinct legal landscape. Never use a generic commercial indemnification clause for construction contracts.
Understand your indemnification exposure before you sign
Upload your contract to ReviewMyContract.ai for a full AI-powered analysis — indemnification scope, duty-to-defend obligations, cap alignment with your LOL clause, anti-indemnity statute flags, and negotiation recommendations. One-time $4.99. No subscription.
Review My Contract Free →Educational analysis only. Not legal advice. For binding legal counsel, consult a licensed attorney.