An indemnity clause is a contractual promise where one party agrees to cover another party’s losses if a specified bad event occurs, and indemnity clause examples look very different depending on the deal: a seller promising to make a buyer whole for undisclosed liabilities in an acquisition, a consultant covering a client for a data breach the consultant caused, a tenant protecting a landlord from slip-and-fall claims inside the leased space, or a software vendor defending its customer against patent infringement suits. The same basic promise shows up in all of them. What changes is the triggering event, how much money is at stake, how long the promise lasts, and which losses count.
The Parts Every Indemnity Clause Has
Before the examples make sense, it helps to know the moving pieces every version shares: a list of triggering events, a scope that covers either defense or payment or both, and procedural requirements around notice.
The indemnitor’s obligation kicks in only when a specific event defined in the contract actually happens. Common triggers include a breach of a representation or warranty in the contract, a third-party lawsuit arising from the indemnitor’s work or negligence, violations of law by the indemnitor, and infringement of intellectual property rights. If the event isn’t listed, the indemnity doesn’t cover it.
The duty to defend and the duty to indemnify sound similar and behave differently. The duty to defend requires the indemnitor to step in and handle the legal defense when a covered claim is made, hiring lawyers, paying court costs, and managing the litigation, regardless of whether the claim ultimately has merit. It’s triggered by the possibility that a claim falls within the indemnity’s scope, not by proof that the indemnitor is actually liable. The duty to indemnify is narrower: it requires the indemnitor to pay the actual loss, a settlement, judgment, or regulatory fine, but only after the underlying claim has been resolved. A contract can include one obligation without the other, and many do. The clause should also specify who controls the defense strategy and whether the indemnitee must consent before the indemnitor settles a claim on its behalf.
Notice is where parties most often trip up. Nearly every indemnity clause requires the indemnitee to notify the indemnitor promptly after learning of a claim or potential claim. Miss the notice window or fail to follow the specified procedure, and you risk losing your indemnification rights entirely. Contracts typically spell out a specific timeframe for notice, require written notification to a designated address or contact, and sometimes demand that the indemnitee include particular details about the claim. The most generous indemnity in the world is worthless if you forfeit it by sending notice late.
Common Examples by Contract Type
Indemnity provisions look different depending on the industry and what’s actually at stake. These are the contexts where they matter most.
Mergers and Acquisitions
In a typical acquisition, the seller makes dozens of representations and warranties about the company being sold: that the financial statements are accurate, that there are no undisclosed lawsuits, that the company owns its intellectual property, and so on. The indemnity clause is the buyer’s recourse if any of those statements turn out to be wrong. If the buyer discovers after closing that the company had a material tax liability the seller failed to disclose, the indemnity provision is the mechanism for recovering that loss.
M&A indemnity provisions are among the most heavily negotiated in commercial law. They typically include financial baskets, caps tied to a percentage of the purchase price, and survival periods that limit how long the buyer can bring claims. According to the 2023 American Bar Association Private Target Deal Points Study, the mean indemnity cap across private transactions was approximately 10% of the purchase price. Sellers routinely push for lower caps and shorter windows; buyers push the opposite direction.
To make sure the seller can actually pay indemnity claims after closing, when the sale proceeds may already have been distributed, buyers often negotiate for an escrow or holdback. A portion of the purchase price is deposited into escrow at closing and held for the duration of the survival period, with any remainder released to the seller once that window expires without unresolved claims.
Service and Consulting Agreements
Service providers such as IT consultants, marketing agencies, and staffing firms routinely indemnify their clients against third-party claims arising from the provider’s negligence. If a consultant causes a data breach through careless handling of the client’s servers, and affected customers sue the client, the indemnity clause shifts the defense costs and any resulting liability back to the consultant whose mistake caused the problem.
Intellectual property indemnification is equally common in service agreements. If a marketing agency uses a copyrighted image without proper licensing in a client’s campaign, the copyright holder will typically sue the client, whose name is on the campaign, not the agency. The indemnity clause requires the agency to step in, cover the legal defense, and pay any damages or settlement resulting from the infringement claim.
Commercial Leases
In commercial real estate, tenants almost always indemnify the landlord against liabilities arising from the tenant’s use of the space. If a customer slips and falls inside a tenant’s retail store, the injured person may sue both the tenant and the landlord as property owner. The lease’s indemnity clause shifts the landlord’s defense costs and any resulting liability to the tenant, since the hazard arose from the tenant’s operations.
Landlords typically reinforce the indemnity obligation by requiring tenants to maintain commercial general liability insurance and to name the landlord as an additional insured on the policy. The insurance provides a funding mechanism, but the contractual indemnity obligation exists independently. If the tenant’s insurance is insufficient or lapses, the tenant still owes the indemnity.
Software Licensing
Enterprise software agreements almost always include an indemnity from the licensor covering intellectual property infringement claims. The licensor warrants that the software doesn’t violate anyone’s patents, copyrights, or trade secrets, and promises to defend the licensee if a competitor alleges otherwise. The licensee has no practical way to verify the software’s IP clearance before buying it. The licensor is the only party with that knowledge, so the licensor carries the risk.
One-Way vs. Mutual Indemnification
Most commercial indemnity provisions run in one direction: Party A indemnifies Party B, full stop. This is typical in relationships with a clear power imbalance or where risk flows mainly one way, such as a vendor indemnifying its client, a tenant indemnifying a landlord, or a seller indemnifying a buyer in an acquisition. The party with more bargaining power usually ends up as the indemnitee.
Mutual indemnification, where both parties agree to cover each other for their respective acts and omissions, is less common but appears regularly in joint ventures, construction contracts where multiple parties perform work on the same project, and partnerships where both sides bring meaningful risk to the table. The key distinction isn’t just the direction. It’s the scope. Mutual clauses can still be asymmetric, with one party’s indemnity covering a broader set of risks or carrying a higher cap than the other’s.
The Financial Guardrails: Baskets, Caps, and Survival Periods
The indemnity obligation itself is only half the negotiation. The dollar limits and time limits around that obligation often matter more in practice than the underlying promise.
Baskets
A basket is a minimum threshold that losses must reach before the indemnity obligation activates. It prevents the indemnitee from pursuing trivial claims and gives the indemnitor breathing room for minor issues. Baskets come in two very different flavors, and confusing them is a common and expensive mistake.
A “tipping” basket works like a trigger: once total losses hit the threshold amount, the indemnitor owes everything from the first dollar. If the basket is $50,000 and the buyer suffers $60,000 in losses, the seller pays the full $60,000. A “true deductible” basket works like the deductible on an insurance policy: the indemnitee absorbs all losses up to the threshold and recovers only the excess. With the same $50,000 threshold and $60,000 in losses, the seller pays only $10,000. On a contract with substantial claims, the difference between these two structures can be enormous, and the label used in the contract doesn’t always match common usage. Read the actual mechanics, not just the heading.
Caps
A cap sets the maximum amount the indemnitor will pay regardless of how large the actual losses turn out to be. In acquisitions, caps are commonly expressed as a percentage of the purchase price. Market data consistently shows the median falling roughly in the range of 9% to 11% of the deal value, though individual transactions vary widely based on risk profile and leverage. Certain categories of claims, particularly fraud, intentional misrepresentation, and breaches of fundamental representations about ownership and authority, are frequently carved out from the cap entirely. That leaves the indemnitor exposed to the full purchase price, or even unlimited liability, for those specific issues.
Survival Periods
A survival period limits how long after closing the indemnitee can bring indemnity claims. Once the survival period expires, the right to make claims dies with it, regardless of whether losses surface later. For standard representations and warranties in M&A transactions, the typical survival period runs 12 to 18 months. Fundamental representations, covering core matters like ownership of the assets, corporate authority, and capitalization, generally survive longer, often 5 to 6 years or the applicable statute of limitations, whichever is shorter. Claims based on fraud almost always get an indefinite or significantly extended survival period.
The survival period in the contract is usually shorter than the statute of limitations that would otherwise apply, which is precisely the point for the indemnitor. The survival period binds only the contract parties, though. Third parties can still bring claims against either side long after the contractual window has closed.
What Counts as a “Loss”
What counts as a covered loss under an indemnity clause is itself a negotiation. Not all damages are created equal, and the clause needs to specify which categories the indemnitor is responsible for.
Direct damages are the immediate, quantifiable costs flowing from the triggering event, such as the cost of fixing a defective product, the settlement paid to a third-party claimant, or the expense of remediating a data breach. These are almost always covered under a standard indemnity provision. Consequential damages are the downstream ripple effects: lost profits, reputational harm, business interruption, loss of customers. These can dwarf the direct damages, which is exactly why indemnitors fight to exclude them. A breach that costs $100,000 to fix directly might cause $5 million in lost business. Most sophisticated commercial contracts explicitly address whether consequential damages are in or out, and the answer significantly changes the indemnitor’s risk exposure.
Indemnity clauses also routinely exclude coverage for losses caused by the indemnitee’s own gross negligence, willful misconduct, or fraud. The logic is straightforward: you shouldn’t be able to collect on an indemnity for harm you caused yourself through reckless or dishonest behavior.
Even with a broad indemnity in your favor, you can’t sit back and let losses pile up. The duty to mitigate requires the indemnitee to take reasonable steps to minimize damages once a problem is discovered. If you learn about a data breach covered by your vendor’s indemnity, you still need to act promptly to contain the breach. You can’t ignore it for six months and then hand the vendor a bill for losses that could have been prevented. Failure to mitigate can reduce the amount you’re entitled to recover. Some contracts address this duty explicitly; where the contract is silent, courts generally impose it as a default principle.
When an Indemnity Clause Won’t Be Enforced
Not every indemnity clause you write will hold up. Forty-five states have enacted anti-indemnity statutes that limit or void certain types of indemnification agreements, primarily in the construction industry. These laws exist for two reasons: a party indemnified for its own negligence has less incentive to work safely, and general contractors with superior bargaining power can force subcontractors to accept unreasonable risk transfers.
The restrictions target three forms of indemnity with increasing severity:
- Broad form indemnity requires the subcontractor to indemnify the general contractor regardless of who was at fault, including the general contractor’s sole negligence. This is the most heavily restricted form, and most states with anti-indemnity statutes void it entirely.
- Intermediate form indemnity covers the subcontractor’s own negligence and shared fault, but not the general contractor’s sole negligence. Some states permit this; others do not.
- Limited form indemnity covers only the subcontractor’s own negligence. All states allow this. It simply holds each party responsible for its own mistakes.
Most anti-indemnity statutes apply exclusively to construction contracts, though a handful of states extend similar restrictions to other industries including oil and gas. Even outside construction, courts in many jurisdictions require indemnity clauses covering a party’s own negligence to be written in clear, unambiguous language. A vaguely worded clause may be unenforceable even where no anti-indemnity statute applies.
Punitive damages are a separate enforceability problem. Many courts have declined to enforce indemnification provisions covering punitive damages, reasoning that allowing one party to shift punitive liability to another defeats the entire purpose of punishment. Enforceability varies significantly by jurisdiction, and the safe assumption when drafting is that a court may refuse to honor it.
How Indemnity Differs from Insurance, Guarantees, and Warranties
Indemnity, insurance, guarantees, and warranties all manage financial risk, but they work through different mechanisms and trigger under different circumstances.
Insurance involves a third party, the insurer, accepting risk in exchange for premium payments. An indemnity clause is a direct obligation between the two contract parties with no third-party insurer involved and no premium paid. In practice, the two often work together: a contract requires one party to indemnify the other, and the indemnitor purchases insurance to fund that obligation. The indemnity exists independently of the insurance. If the policy lapses or the insurer denies coverage, the indemnitor still owes the indemnity.
A guarantee is a promise to answer for someone else’s debt or obligation, typically a third party promising that a primary obligor will perform. The guarantor steps in only if the primary party defaults. Indemnity, by contrast, covers losses from third-party claims or contractual breaches, not the failure of another party to pay a debt.
A warranty is a factual statement or promise about the condition of something: a product, a service, a company’s financial health. When a warranty turns out to be wrong, the breach gives rise to a damages claim. The indemnity clause is what governs the mechanics of how those damages get paid: through what process, subject to what basket and cap, within what survival period. The warranty creates the right; the indemnity defines the remedy.