FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Apex Insurance Brokers
Speak to a brokerGet a quote →

IT contracts

Limitation of liability clauses in IT and SaaS contracts, explained

A limitation of liability clause caps what a supplier must pay under an IT, software or SaaS contract and lists the losses it will never pay. It matters for insurance because professional indemnity (PI) cover pays only what you are legally liable for, up to its own limit: if the contract cap is higher, or some liabilities are uncapped, the difference falls on your business.

In short

Most IT and SaaS contracts cap each party’s liability, usually at a fixed sum or a multiple of the fees, and exclude indirect loss and lost profits. Some liabilities sit outside the cap: death or personal injury caused by negligence cannot be limited, and customers often negotiate carve-outs or higher super-caps for data protection, confidentiality, IP indemnities and wilful default. Between businesses, a cap on standard terms must pass the reasonableness test in the Unfair Contract Terms Act 1977, and courts read caps by their exact words. Keep the cap at or below your PI limit, on a matching basis, and avoid uncapped indemnities you cannot insure.

Start your PI proposal →or call 0117 325 0027 to speak to a broker

How a limitation of liability clause works

Last reviewed 7 October 2026 by the Apex professional indemnity team.

A liability clause in a technology contract usually has four parts. Read them together: a generous cap can be undone by a wide carve-out.

PartWhat it doesTypical drafting
Unlimited liabilitiesLists what is not capped at allDeath or personal injury caused by negligence, fraud, and anything the law does not allow you to limit
The capSets the most one party will payA fixed sum, or a multiple of the charges. The government’s Model Services Contract starts from 150% of the charges in the previous contract year
Excluded lossesLosses that are never recoverableIndirect or consequential loss; loss of profits, revenue, savings, goodwill or data
Carve-outs and super-capsMove named liabilities outside the main cap, or under a separate higher oneData protection breaches, confidentiality, IP infringement indemnities, wilful default or abandonment

Caps come in two main shapes. An aggregate cap is one total for all claims, sometimes reset each contract year. A per-claim cap applies afresh to every claim. The Cabinet Office guidance on its Model Services Contract notes that annual aggregate caps are used “to align with typical insurance policy terms”, and warns that a per-claim cap arguably means there is no maximum at all.

When a cap is enforceable: UCTA reasonableness between businesses

In England, Wales and Northern Ireland, Part I of the Unfair Contract Terms Act 1977 (UCTA) controls exclusion and limitation clauses between businesses. Scotland has its own rules in Part II. For an IT supplier, the provisions that matter are these:

Schedule 2 adds guidelines such as relative bargaining strength, any inducement to accept the term, and whether the customer knew of it. The Act applies them formally to goods contracts, but in Kingsway Hall Hotel v Red Sky IT [2010] EWHC 965 (TCC) the judge called them helpful and held a hotel software supplier’s standard limitation terms unreasonable: bargaining power was unequal, the parties had negotiated only on price, and the hotel got no inducement to accept the terms.

Section 11(4) is where your insurance becomes evidence: a cap far below the cover you hold, or could readily buy, may be harder to defend. UCTA does not apply to consumer contracts; if you sell software or services to consumers, sections 47 and 57 of the Consumer Rights Act 2015 stop you excluding the core statutory rights.

What the courts have said about caps in IT contracts

Courts start from the words. Four technology disputes show how much turns on them.

  1. A carve-out can swallow the cap. In Triple Point Technology v PTT [2021] UKSC 29, a software contract excluded “negligence” from the cap. The Supreme Court held this took damages for negligent breach of the contractual duty of skill and care outside the cap, not just some separate tort. It also held that liquidated damages for delay counted towards the cap. Lord Leggatt said clear words are needed before a contract takes away valuable rights (paras 106–108).
  2. “Total liability” can mean one cap for everything. In Drax Energy Solutions v Wipro [2023] EWHC 1342 (TCC), a cap of 150% of the charges paid or payable in the previous twelve months was held to be a single aggregate cap, not a cap per claim. Claims of around £31 million could recover no more than about £11.5 million.
  3. Excluding “loss of profit” may not exclude wasted spend. In [2022] EWCA Civ 440, a customer’s claim against IBM over an IT system that was never delivered, the Court of Appeal held that excluding “loss of profit, revenue, savings” did not exclude a claim for wasted expenditure. It found about £80.6 million due, the level of the applicable contractual cap.
  4. A cap can cover deliberate breach. In Mott MacDonald v Trant Engineering [2021] EWHC 754 (TCC), a £500,000 aggregate cap was held to apply even to alleged deliberate and wilful refusals to perform. If the customer wants wilful default outside the cap, the contract has to say so.

How the cap should relate to your PI limit

PI insurance pays what you are legally liable to pay a client for breach of professional duty, plus defence costs, up to the limit and subject to the policy terms. The contract sets how much you can owe; the policy sets how much of that is insured.

Contract positionWhat PI usually doesWhere the gap is
Cap at or below the PI limit, on the same basisCan respond up to the capped amount, subject to the terms and excessSmall, if the wording fits the work you do
Cap above the PI limitPays up to the PI limit onlyEverything between the limit and the cap is uninsured
Per-claim cap, but an aggregate PI limitOne limit for all claims in the policy yearSeveral claims can exhaust the policy while each is still inside the contract cap
Uncapped indemnity, often for IP or dataMay respond up to the PI limit, if the loss is covered at allEverything above the limit. Cabinet Office guidance says plainly that unlimited indemnity cannot be insured
Warranties, fitness for purpose or indemnities wider than negligenceCommonly excluded or limited by a contractual liability exclusionLiability beyond what you would owe under the general law
Data protection super-capSome PI wordings cover data claims; others leave them to a cyber policyDepends on how the two policies fit together

Check three things in your wording: whether the limit is each and every claim or in the aggregate; whether there is an exclusion for liability assumed under contract, and what it carves back; and whether the insured activities describe what the contract actually buys, such as hosting, managed services or software licensing, not only “IT consultancy”.

Common misunderstandings

What to check before you sign

  1. List every liability outside the main cap, including indemnities in schedules, data processing agreements and statements of work.
  2. Compare the cap with your PI limit and its basis. If the cap is higher, negotiate it down or raise the limit before signature.
  3. Ask for one aggregate cap per contract year rather than a cap per claim.
  4. Make sure the excluded losses cover profits, revenue and savings “whether direct or indirect”, and decide on purpose whether wasted expenditure is recoverable.
  5. Resist fitness-for-purpose warranties and broad indemnities that go beyond reasonable skill and care.
  6. Keep any data protection super-cap within the limits you actually hold under PI or cyber cover.
  7. Send the liability, indemnity and insurance clauses to your broker while you can still negotiate them.

Signing an IT or SaaS contract with a liability cap?

If this affects your business, these are the points a broker will ask about:

Speak to a broker

PI for IT and software firms, placed by a named broker

Start the online proposal and save it as you go, or leave your number and a named broker will call you back, usually the same working day.

Start your PI proposal →or call 0117 325 0027

How Apex places this cover

Apex Insurance Brokers is an independent insurance broker based in Bristol, established in 2009 and authorised and regulated by the Financial Conduct Authority. We are not tied to one insurer: we work with over 30 markets, including Lloyd’s syndicates through wholesale brokers, and every client has a named broker who handles the placement, mid-term changes, certificates for clients and the renewal.

Related guides

Sources

Frequently asked

Can an IT company limit its liability in the UK?

Yes, between businesses, within limits. You cannot restrict liability for death or personal injury caused by negligence. Other limits on negligence liability, and caps in your written standard terms, must be reasonable under the Unfair Contract Terms Act 1977, which looks at your resources and insurance. Consumer contracts fall under the Consumer Rights Act 2015.

What is a reasonable liability cap in an IT contract?

There is no fixed figure. Reasonableness is judged at the time of contracting, looking at bargaining power, whether the terms were negotiated, the supplier’s resources and the insurance available. Many contracts use a multiple of the fees; the government’s Model Services Contract starts from 150% of a year’s charges. The cap should also sit comfortably within your PI limit.

Should my liability cap match my PI limit?

It should not exceed it, and it should be on the same basis. If the contract cap is higher than your limit, the difference is uninsured. If the cap applies per claim but your PI limit is an annual aggregate, several claims can use up the policy while each remains inside the cap. Many suppliers set the cap at or below the limit.

Does PI insurance cover an uncapped indemnity?

Only up to the policy limit, and only if the loss falls within the cover. An IP or data indemnity may be partly insured under a technology PI or cyber policy, subject to the terms, but no policy matches an unlimited promise. Cabinet Office contract guidance states that unlimited indemnity cannot be insured.

Is loss of profits always an indirect loss?

No. Lost profits can be a direct loss, so excluding only “indirect or consequential loss” may leave them recoverable. Careful drafting excludes loss of profit “whether direct or indirect”. Even then, the Court of Appeal held in 2022 that excluding loss of profit, revenue and savings did not exclude a customer’s claim for wasted expenditure on a failed IT system.

Ready to compare cover?

Send us the liability and insurance clauses with your proposal and a broker will check them against the PI limit and wording you need. Or call 0117 325 0027.

Start your PI proposal Call 0117 325 0027

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information, not advice on your individual circumstances. Cover is always subject to the insurer’s acceptance and the policy terms, and this page does not guarantee that cover will be available or on what terms.