Limitation of Liability

A limitation of liability clause caps what a vendor can be made to pay if its product causes you loss, and excludes whole categories of damage from recovery at all. The standard SaaS construction has two parts. The cap: total liability is limited to the fees paid in some preceding window, most commonly the twelve months before the claim. The exclusion: neither party is liable for indirect, incidental, consequential or special damages, or for lost profits, lost revenue, lost data or business interruption. Read those two sentences together and the practical meaning becomes clear. If a vendor's outage costs your business substantially more than you pay them in a year, the excess is not recoverable, and the losses that would make up most of that number are excluded by category regardless of the cap. This is not a scandal — it is how software is priced. A vendor charging a modest per-seat fee cannot underwrite unlimited downstream business risk, and a contract that made it do so would cost far more. What matters is that the cap is a deliberate allocation of risk, so you should know where it sits and insure or design around the gap rather than assume the contract protects you. Look for carve-outs, which are the clauses that sit above the cap: confidentiality breaches, data-protection violations, IP indemnity, and gross negligence or wilful misconduct are commonly excepted, and a super-cap — a higher multiple for security or privacy incidents specifically — is a normal ask on a deal handling sensitive data. Check also that the cap is not mutual in name only: a cap set at fees paid protects a vendor far more than a customer, because the customer's obligation is mostly to pay those fees in the first place.