Scope and Acceptance Criteria
Every managed services contract rests on the precision of its service description. Vague terminology — "best efforts", "standard industry practice", "as required" — creates exactly the grey areas providers exploit when scope is disputed. The description of services must be technical, granular, and exhaustive, and where deliverables exist, acceptance testing provisions should define what "done" means before payment is due. A common structure separates the master services agreement (governing liability, indemnity, IP, and other legal terms) from the statements of work (governing deliverables, dates, and service specifics), so that consistent legal protections apply across every engagement. This clause discipline underpins the wider IT outsourcing contract negotiation framework.
Limitation of Liability and Carve-Outs
The limitation of liability clause restricts the amount and types of damages recoverable if the provider fails. Providers typically propose a cap of 12 months' fees for direct damages while excluding consequential loss entirely. A 12-month cap can be a reasonable starting point — but only if the right carve-outs sit outside it. Breach of confidentiality, data protection breaches, IP infringement, and gross negligence or wilful misconduct should never be limited to a few months of fees, because those are precisely the failures that cause the largest losses.
A liability cap of 12 months' fees with no carve-outs is not protection — it is a ceiling on the provider's downside that leaves your largest risks uncovered. The carve-outs are where the real negotiation happens.
Indemnities and the Super Cap
Recovery under an indemnity is normally excluded from the general liability cap, or placed under a separate, higher "super cap". The logic is simple: an indemnity is a promise to cover the legal costs of defending you against a third-party claim, and those costs routinely run into tens or hundreds of thousands — capping them at a few months of fees would make the indemnity meaningless. Insist that IP-infringement indemnities, in particular, carry uncapped or super-capped liability, since a provider delivering on proprietary technology controls that risk entirely. Data protection breaches deserve the same treatment, a point we develop in data protection in IT outsourcing agreements and security requirements in IT outsourcing contracts.
Change Control
The change-control clause governs how modifications to scope, service levels, or pricing are handled — and a loosely drafted one is where providers recover the margin they conceded on headline rate. A strong change-control process requires written change requests, agreed pricing before work begins, and a defined approval path, so that no change can be billed without your explicit sign-off. Pair this with the service-level mechanics in SLA framework and penalties and the pricing structures in IT outsourcing pricing models, since change control, SLAs, and pricing model interact directly.
IP Ownership and Audit Rights
Intellectual property clauses should distinguish background IP — the provider's pre-existing tools, templates, and methods, which it keeps but must licence to you for ongoing use — from foreground IP, the new work created for you, which should transfer to you. Providers often try to delay foreground IP transfer until final payment or retain ownership of deliverables outright; secure ownership of bespoke work and a perpetual licence to any background IP embedded in it, so you are not held captive after exit. The right-to-audit clause then gives you transparency and accountability: it lets you verify security controls, SLA reporting, and sub-processor compliance, and it discourages the provider from quietly sub-contracting your work. Regulators increasingly expect service contracts to reflect documented controls, audit rights, and incident-notification timelines.
Get these clauses right and the managed services agreement becomes a genuine instrument of control rather than a one-sided template. For the full framework, download the IT Outsourcing Negotiation Guide, explore our IT outsourcing negotiation service, or request a confidential briefing on your specific contract.