Indemnification clauses are one of the most under-negotiated parts of UK service agreements, and one of the most expensive when something goes wrong. An indemnity is a contractual promise to pay another party for losses they suffer in specific circumstances — typically third-party claims, breach of contract, or specific identified events. Unlike ordinary contract damages (which are subject to remoteness rules and mitigation), indemnities can be drafted to cover all losses 'arising out of' or 'in connection with' specified events, including legal fees on an indemnity basis. In UK practice, indemnification clauses often appear one-sided — the supplier indemnifies the customer broadly while the customer offers narrow or no equivalent protection. They also frequently sit outside the liability cap in the rest of the agreement, exposing the indemnifying party to uncapped, unlimited liability. The result is that an apparently routine 'standard indemnity' can create open-ended risk that dwarfs the value of the contract.
What is a Indemnification Clause?
An indemnification clause is a contractual promise by one party (the indemnifying party) to compensate the other (the indemnified party) for specific losses, costs, claims, expenses, or damages. UK common law treats indemnities as primary obligations — the indemnified party can claim without first having to suffer a loss in the same way as ordinary damages. The scope of an indemnity is defined by its trigger ('arising out of', 'in connection with', 'caused by') and its subject matter (third-party claims, IP infringement, data breaches, breach of warranty). UK courts construe indemnities strictly against the indemnified party where ambiguity exists (the contra proferentem rule), and the Unfair Contract Terms Act 1977 may control indemnities in B2C and certain B2B contexts. In B2C contracts, the Consumer Rights Act 2015 governs fairness of unilateral indemnity terms.
Red flags to watch for
If indemnification claims sit outside the limitation of liability clause, the indemnifying party has uncapped exposure. This can turn a £50k contract into a £5m liability for a serious third-party claim. The cap should apply to all liability including indemnification, with narrow carve-outs only for fraud and death/personal injury.
The broader the trigger, the broader the indemnity. 'In connection with' has been held to capture losses with only a tenuous link to the trigger event. Narrower triggers — 'directly caused by' or 'arising from a breach of' — significantly reduce exposure.
Service agreements commonly require the supplier to indemnify the customer for IP infringement, data breaches, and third-party claims. The customer's equivalent indemnity (for customer-supplied content, customer instructions, customer misuse) is frequently missing or weaker. Mutuality is the negotiating baseline.
Without conduct-of-claim rules, the indemnified party can settle a claim on any terms and demand reimbursement. A well-drafted clause requires prompt notice, control of defense by the indemnifying party, no settlement without consent, and cooperation. Missing these provisions is a major risk.
An uncapped indemnity covering indirect, consequential, or special losses creates extraordinary exposure. Indirect losses (e.g., lost profits, loss of business opportunity) can dwarf direct losses. The scope of recoverable losses should be defined narrowly.
A well-drafted indemnity has a de minimis (minimum claim amount) and an aggregate cap. Without these, small claims accumulate to large liability and administrative burden.
Indemnification obligations frequently survive termination. Without a sunset clause (e.g., 'for claims notified within 3 years of termination'), the indemnifying party faces indefinite liability. A reasonable survival period tied to the relevant limitation period (6 or 12 years under the Limitation Act 1980) is the negotiating norm.
Your legal rights
UK indemnification clauses are governed by general contract law principles, the Unfair Contract Terms Act 1977 (UCTA) for B2B contracts, and the Consumer Rights Act 2015 for B2C contracts. UCTA s 3 controls contractual terms in standard-form contracts, including indemnities, and may render unreasonable indemnities unenforceable. The contra proferentem rule construes ambiguous indemnities against the party seeking to rely on them. Conduct-of-claim provisions are governed by the contract terms; without them, common law rules on mitigation apply. The Limitation Act 1980 sets the period within which indemnification claims must be brought (6 years for simple contracts, 12 years for deeds). For data-related indemnities, the UK GDPR (UK GDPR + Data Protection Act 2018) governs allocation of liability between controllers and processors.
Questions to ask before you sign
- 1Does the indemnity sit inside or outside the overall liability cap? If outside, what is the rationale, and can it be capped or aggregated?
- 2What is the trigger language — 'directly caused by', 'arising out of', 'in connection with'? Can it be narrowed?
- 3Is the indemnity mutual, and if not, what equivalent protection do you have for losses caused by the other party?
- 4What conduct-of-claim provisions apply — notice period, control of defense, settlement consent, cooperation?
- 5Does the indemnity cover indirect, consequential, or special losses? Can these be expressly excluded?
- 6Are there de minimis, aggregate cap, or sunset provisions limiting exposure?
- 7How long does the indemnity survive termination, and is the period tied to the relevant limitation period?
Disclaimer: This guide is for educational purposes only and does not constitute legal advice. Contract law varies by jurisdiction and individual circumstances. Always consult a qualified legal professional before making decisions based on this information.