Is a limitation of liability clause normal in a SaaS contract?
The short answer
Many SaaS agreements cap the vendor's liability, often by referencing fees paid over a recent period, and exclude categories such as indirect damages. The practical question isn't whether a cap exists; it's whether the cap would cover a real incident — a data breach, an outage in your busiest week — and what's carved out of it. Caps, exclusions, and exceptions vary widely between agreements. Scan yours to see the cap, what it excludes, and what to ask the vendor to clarify.
No account requiredFile deleted after analysisNot legal advice
What the clause usually does
It sets a ceiling on what the vendor can owe you (the cap), lists damage types neither side can claim (consequential, indirect, lost profits), and sometimes carves exceptions back in — breaches of confidentiality, data-protection failures, or indemnification obligations may sit outside the cap in better-negotiated agreements.
A "12 months of fees" cap on a $500/month tool is $6,000 — set that against what an incident would actually cost your business, and the clause's real weight becomes visible.
Why people worry
The mismatch is the worry: the data a SaaS tool holds is often worth far more than the subscription costs. Buyers report assuming "limitation of liability" is boilerplate, then discovering after an incident that the cap and exclusions decided everything.
What to look for in your agreement
- The cap amount or formula — and what period of fees it references.
- Whether data-breach or confidentiality failures sit inside or outside the cap.
- The excluded damage types — lost profits, lost data, business interruption.
- Whether the cap is mutual or only protects the vendor.
- Any super-cap (a higher ceiling) for specific failure types.
Questions to ask before signing
- Ask the vendor what the cap would actually pay out in a worst-case incident.
- Ask the other party to clarify whether data-protection failures are carved out of the cap.
- Confirm whether the limitation is mutual.
- Consider having the agreement reviewed if the tool will hold business-critical data.
Why scan instead of guess
The general rule tells you the baseline. Your agreement tells you what you’re actually being asked to sign — and the wording is what binds. Dang reads the document and flags the clauses worth reviewing, in plain English.
The deterministic engine scores and decides what’s risky. The AI only enriches the plain-English wording — AI extracts, code decides, never the other way around.
Your original file is deleted promptly after processing — we keep only the report you can read. No account needed for a one-time scan. Free preview first; full report $6.99, one-time.
Common questions
What cap is most common in SaaS?
Fees paid in the preceding 12 months is a commonly seen formula, though multiples of fees and fixed-dollar caps also appear. What your agreement says is what counts.
Are these clauses negotiable?
Often, especially for paid B2B plans — carve-outs for data breaches and higher caps for specific failures are common asks. The agreement as signed is what binds, so clarify before signing.
No account required · File deleted after analysis · Not legal advice. Dang reports contract findings in plain English — general information, not legal advice about your situation. For consequential decisions, consult a licensed attorney in your state.