Last updated on August 12th, 2026 at 10:03 pm
At a glance: an indemnity clause is a contract provision where one party agrees to cover specific losses, damages, legal costs, or liabilities suffered by the other party if certain events occur. These clauses are commonly used in commercial, SaaS, employment, and technology agreements to allocate financial risk between the parties. Depending on how the clause is drafted, an indemnity can create significant financial exposure, including responsibility for third-party claims and legal defence costs.
What “indemnity clause” means and why it matters
If you have ever signed a commercial contract and skimmed past a section that started with “Party A shall indemnify, defend, and hold harmless Party B,” you have skimmed past one of the most financially significant clauses in the entire document.
An indemnity clause can make you responsible for paying the other party’s legal costs, damages, and losses in circumstances you may not have anticipated when you signed. Getting this wrong is expensive. Understanding it before you sign costs nothing.
What is an indemnity clause?
An indemnity clause is a contractual provision where one party (the indemnifying party) agrees to compensate the other party (the indemnified party) for specific losses, costs, or liabilities that arise from defined events or circumstances.
The key word is specific. An indemnity is not a general agreement to be responsible for everything. It is triggered by the events listed in the clause. If the triggering event occurs and causes loss, the indemnifying party pays, regardless of fault in some cases.
Indemnity clauses are different from limitation of liability clauses. A liability cap controls the maximum amount either party can be required to pay. An indemnity clause defines who pays for what category of loss. In many contracts, both provisions appear, and the interaction between them needs to be read carefully because indemnity obligations are frequently carved out from liability caps.
Many businesses discover the indemnity clause only after a dispute starts because they assumed the liability cap protected them. It often does not.
What does “indemnify, defend, and hold harmless” actually mean?
These three words appear together so often they can feel like a single phrase. They are not.
Indemnify means to compensate the other party for financial loss they have suffered.
Defend means to pay for and run the legal defence if a third party brings a claim against the indemnified party in connection with the relevant event. This obligation can arise before any loss has crystallised, simply because a claim has been made.
Hold harmless means to accept that the indemnified party has no responsibility for the relevant category of loss and cannot be required to contribute to it.
Together, these three obligations can be significant. The defend obligation is particularly worth paying attention to because it can require you to fund litigation the moment a claim is made, not after liability has been established.
Common situations where indemnity clauses apply
IP infringement. A software supplier typically indemnifies the customer against third-party claims that the supplier’s software infringes someone else’s intellectual property. If a patent holder sues your customer because your product allegedly infringes their patent, you are picking up the defence costs and any damages.
Data breaches. Technology contracts frequently include indemnities from the service provider for losses caused by their failure to protect personal data. Given the scale of GDPR and DPDP fines and the cost of breach notification and remediation, this can be a very large exposure. Our complete DPDP Act guide covers the current Indian penalty framework this exposure sits against.
Personal injury or property damage. Service contracts where a party’s personnel work on the other party’s premises typically include indemnities covering physical harm caused by negligence.
Breach of contract or law. Many contracts include an indemnity where the losses are caused by one party’s breach of the agreement or violation of applicable law. This can significantly expand liability beyond what the general limitation of liability clause would otherwise allow. Our complete guide to breach of contract covers the underlying remedy framework this interacts with.
Third-party claims arising from customer’s use. SaaS providers often include indemnities from customers covering claims that arise from the way the customer uses the software, including claims arising from the customer’s own data or the customer’s users. Our complete guide to the SaaS legal document stack covers where this fits alongside your other SaaS agreements.
AI-related indemnity: the risk most contracts still don’t address properly
This is genuinely new territory, and most indemnity clauses in circulation today were drafted before it became relevant. If your product uses or embeds AI, whether your own model or a licensed AI API, the indemnity questions multiply in ways a standard technology indemnity clause doesn’t anticipate.
Who is responsible if AI-generated output infringes someone’s IP? Major AI API providers vary in what indemnification they offer their customers for this specific risk, and the position has shifted meaningfully over the past couple of years as providers compete on enterprise trust. Some now offer their own indemnification for IP claims arising from output generated through their API, within defined conditions, while others push that risk entirely onto the customer. If you’re building a product on a licensed AI API, confirm exactly what indemnity your upstream provider actually offers before promising your own customers a broader indemnity than you yourself are covered by. Our complete API licensing agreement guide covers this upstream-to-downstream flow-through problem directly.
Who is responsible when an AI system’s decision or output causes harm? Where an AI feature makes or materially influences a decision that affects your customer’s business, an incorrect recommendation, a flawed automated decision, unreviewed generated content, the question of who indemnifies whom is still being worked out contract by contract, since the underlying legal liability question itself remains genuinely unsettled in most jurisdictions. Our guide on who is actually liable when AI causes harm and our guide on essential contracts every AI startup must have cover the broader liability framework this indemnity question sits inside.
The practical drafting point: an indemnity clause written for a traditional software product, “infringement of any intellectual property rights by the Services,” may or may not actually be read to cover AI-generated output specifically, depending on how the underlying service is described elsewhere in the agreement. If your product has meaningful AI functionality, don’t rely on a generic indemnity clause to cover it by implication; address AI-generated output and AI-driven decisions explicitly, on both the upstream (what your vendor covers you for) and downstream (what you promise your own customers) sides. Our guide on AI vendor contracts covers exactly what to check on the upstream side.
Mutual vs one-sided indemnities
A mutual indemnity means both parties take on indemnification obligations for their own respective failures. This is generally the fairer structure in a balanced commercial relationship.
A one-sided indemnity means only one party is exposed to indemnification claims. This is common in standard-form contracts drafted by the party with more bargaining power. If you are signing a standard services agreement where you are providing the indemnities and the other party is not, that asymmetry is worth pushing back on.
Large companies often push aggressive indemnities into standard-form agreements simply because most counterparties never negotiate them.
Indemnity clause vs limitation of liability vs warranty
| Clause | Purpose | Main risk |
|---|---|---|
| Indemnity Clause | Allocates responsibility for specific losses or claims | Can create very large financial exposure |
| Limitation of Liability Clause | Caps the amount one party can recover | May not apply to indemnity obligations |
| Warranty Clause | Creates contractual promises about facts or performance | Breach can trigger damages claims |
Real-world example
A startup signs an enterprise SaaS agreement with a broad IP infringement indemnity. Months later, a third party alleges that part of the startup’s software infringes its patent rights.
Even before a court decides who is correct, the startup may already be contractually obligated to fund the customer’s legal defence, manage the litigation, pay settlement costs, and cover damages if the claim succeeds.
This is why indemnity clauses are often among the most negotiated provisions in technology contracts, and it’s exactly the kind of exposure our guide on the contract clauses that quietly slash startup valuation during due diligence covers from the investor’s side of the table.
What to look for before you sign
The scope of the triggering events. What exactly must happen to trigger the indemnity? Broad language like “any claims arising from the relationship” gives the indemnified party enormous reach. Narrower language tied to specific failures is a more proportionate commercial position.
Whether the indemnity obligation sits inside or outside the liability cap. Indemnities that sit outside the cap are effectively unlimited in financial exposure. This is common but worth understanding before you commit to it.
The defend obligation specifically. Agreeing to defend a party against third-party claims means funding litigation you do not control, in disputes you may know nothing about, before any fault has been established. Some contracts allow the indemnified party to manage its own defence at the indemnifying party’s cost. Others require the indemnifying party to run the defence directly. Both have practical implications.
Paying damages after losing a case is one thing. Paying lawyers from day one while the case is still unfolding is another.
Carve-outs for the indemnified party’s own negligence or misconduct. A well-balanced indemnity clause should not require you to indemnify the other party for losses caused by their own failures. Check whether the clause includes this protection. Our complete guide to what should be included in every business contract covers this alongside every other clause a properly balanced agreement needs.
What businesses usually negotiate
Courts have generally enforced clearly drafted indemnity provisions and have recognised that commercial indemnities between sophisticated parties are legitimate allocations of risk. The key requirement, consistent across jurisdictions, is that the triggering events and the scope of the indemnity obligation must be clearly defined.
Sample indemnity clause
“The Supplier shall indemnify, defend, and hold harmless the Customer, its directors, employees, and affiliates against any third-party claims, losses, damages, liabilities, penalties, costs, and expenses, including reasonable legal fees, arising out of or relating to: (a) the Supplier’s breach of this Agreement; (b) infringement of any intellectual property rights by the Services; or (c) violation of applicable law by the Supplier.”
Frequently asked questions
Is an indemnity clause the same as insurance?
No, though they serve a related purpose. Insurance is a product that provides financial protection against defined events. An indemnity clause is a contractual obligation on the other party to compensate you. Many well-advised parties require both: contractual indemnification backed by a requirement that the indemnifying party hold adequate insurance to meet any indemnity obligation.
Can an indemnity clause be unlimited?
Yes, if the contract says so and it is not overridden by applicable law. Indemnity obligations are frequently carved out from liability caps, making them effectively unlimited in financial exposure. This is why the interaction between the indemnity clause and the limitation of liability clause needs to be read together rather than in isolation.
Does signing an indemnity mean I am always liable regardless of fault?
It depends on how the clause is drafted. Some indemnities are triggered by fault, such as breach of contract or negligence. Others are triggered simply by the occurrence of a defined event, regardless of fault. Strict indemnities that operate without a fault requirement are a more aggressive risk allocation and should be negotiated where possible.
What is a cross-indemnity?
A cross-indemnity is where each party provides an indemnity to the other for different categories of risk. For example, the supplier indemnifies the customer against IP infringement claims arising from the supplier’s technology, and the customer indemnifies the supplier against claims arising from the customer’s data or use of the service. This structure is common in technology contracts and represents a reasonable allocation of risk where each party controls different sources of potential liability.
Does an indemnity clause need to specifically mention AI to cover AI-related risk?
It’s genuinely safer to address it explicitly rather than assume a generic technology indemnity extends to it. Whether a broadly worded IP infringement indemnity is read to cover AI-generated output specifically can depend on how the underlying service is described elsewhere in the agreement, and this remains an area without settled, consistent market practice. If your product has meaningful AI functionality, address AI-generated output and AI-driven decisions explicitly, on both what your vendor covers you for and what you promise your own customers.
Can I remove an indemnity clause entirely during negotiation?
Sometimes, particularly in a genuinely balanced commercial negotiation, but it depends heavily on your negotiating position and the specific risk involved. A more realistic goal in most negotiations is narrowing the scope of triggering events, adding carve-outs for the other party’s own negligence, capping the indemnity even where the general liability cap doesn’t apply, or making the obligation mutual rather than one-sided.
This article is general information, not legal advice. Indemnity clause enforceability and drafting best practice vary by jurisdiction and contract type. For advice on your own agreement, speak to a qualified lawyer.
Authored and reviewed by Prakhar Rai, Advocate, founder of My Legal Pal, with input from the My Legal Pal legal team. Connect on LinkedIn.
My Legal Pal reviews, negotiates, and drafts commercial contracts including indemnity provisions for businesses at every stage. If you have a contract where the indemnity clause concerns you, speaking to one of our commercial lawyers before you sign is the right step. We handle contract drafting and contract review and revision, and you can speak to our contract lawyers in India or the USA.
