Limitation of Liability Caps in MSAs: Super-Caps, Carve-Outs & Waivers
Liability caps decide how much contract risk survives a bad outage, data issue, IP claim, payment dispute, or confidentiality breach.
Last reviewed: May 26, 2026 by the BizLeaseCheck Editorial Team
General information, not legal advice.
Overview
A limitation of liability clause is the contract math for worst-case scenarios. It may cap direct damages at fees paid, exclude consequential damages, create higher super-caps for sensitive claims, or leave some obligations uncapped.
The key review question is not whether a cap exists. It is which claims fit under the cap, which claims are carved out, and whether the cap is tied to annual fees, total fees, amounts paid in a lookback period, or a fixed dollar amount.
Topics to check
Create a table for breach of contract, payment obligations, confidentiality, data security, IP infringement, indemnity, willful misconduct, gross negligence, and regulatory fines.
A customer may ask for a privacy or security super-cap. A vendor may ask that indirect damages, lost profits, and lost revenue stay excluded even when a super-cap applies.
UCC § 2-719 — limitation of remedy frameworkA 12-month fees-paid cap can be much lower than total contract value. In a ramping SaaS contract, the cap may be tiny during implementation, when migration risk is high.
For a $12,000 monthly subscription, a three-month lookback creates a $36,000 cap. A 12-month lookback creates a $144,000 cap. A two-times annual-fees super-cap creates a different risk profile.
Uncapped confidentiality, IP, payment, misuse, and indemnity carve-outs can make a cap look protective while leaving the most likely dispute outside the limit.
If a clause says all indemnity obligations are uncapped, check whether indemnity includes ordinary customer claims, third-party claims only, or broad first-party losses.
Key takeaways
- The cap amount matters less than the claims included and excluded.
- Fees-paid lookbacks can make early-term exposure much lower than expected.
- Super-caps should be tied to specific high-risk claims, not vague categories.
- Consequential-damages waivers need to be read with the cap and remedies clauses.
- Uncapped indemnity or confidentiality can undo the practical value of the cap.
Official resources
Legal-review notes
Guide confidence marker: Medium confidence.
- Contract-law enforceability of liability caps, consequential-damages waivers, penalties, and unconscionability varies by state and transaction type.
- The UCC citations are included as a general commercial-law reference; many SaaS or services agreements are not governed by UCC Article 2.
Frequently asked questions
Is a one-year fees-paid liability cap normal?
It is common in SaaS and services contracts, but normal does not mean right for the deal. Check implementation risk, data sensitivity, dependency on the vendor, and all carve-outs.
What is a super-cap?
A super-cap is a higher liability cap for selected claims, such as data security, confidentiality, or IP infringement. It is usually lower than uncapped liability but higher than the ordinary fees-paid cap.
Should payment obligations be capped?
Vendors usually resist capping unpaid fees. Customers should check that payment carve-outs do not accidentally include disputed charges, future renewals, or unrelated amounts.