How to Review an MSA Liability Cap Before Signing

You are one signature from a ~20-page vendor MSA and the heading looks like a fair refund. Find the cap base, compute the real number on this order form, map the waiver and carve-outs, test whether indemnity sits inside the cap, then redline, escalate a High item, or walk.

In August 2026, Amira — ops lead at a 22-person UK SaaS — has a 22-page US vendor MSA plus a 3-page order form for a £4,000/month analytics tool. Legal is too busy until Friday. Section 12 caps liability at fees paid in the twelve months preceding the claim. A claim in month two is an £8,000 ceiling. Section 11’s IP indemnity is subject to Section 12. Typical mistake and hidden risk: treating twelve months of fees as the deal value.

Disclaimer: Checkory provides AI support, not legal advice. Consult a qualified lawyer for binding decisions.

How do you find the cap base: fees-paid, annual fees, or a fixed number?

Write the cap formula in one sentence before anyone debates market. Fees paid, paid or payable, annual fees, a fixed dollar, or the greater of those bases are different numbers. Compute this order form for month two and month fourteen.

Freeze the packet — the exact file set that will be signed: MSA, order form, SOW, SLA, DPA — a data processing agreement — and the insurance exhibit — an attached schedule or appendix. Aber Law on BHMI v. Early Warning (8th Cir. 2025): $0 paid, $1.884 million recovered nothing — US illustration, not UK precedent. KO Law flags a 1× paid-or-payable default and a floor when early fees are tiny. For example, Amira’s lookback is £8,000 in month two and £48,000 in month fourteen.

• Do: write the formula, the lookback date, and two computed numbers.
• Do not: treat “12 months of fees” as a fair refund without the month-two maths.

What does a consequential-damages waiver actually exclude?

Read the waiver as a list of killed categories, not as a heading that says standard. Lost profits, lost data, and regulatory fines often sit in that list. Check whether it is mutual. On English-law paper, a bare consequential heading does a narrower job than a US-style list of heads.

Under English law, CMS reads a bare “consequential loss” waiver as only the second limb of Hadley v Baxendale — a narrow bucket. First-limb lost profits that arise naturally can still be direct. LawSnap maps the typical US pair: a 12-month cap plus a list that removes lost profits, lost data, and fines. Foley adds the mutuality check: a one-sided waiver is a one-sided cap.

• Do: mark which heads survive as direct and which the list deletes.
• Do not: assume “consequential” already killed lost profits.

Which carve-outs sit outside the cap: IP, data breach, gross negligence?

Build three buckets: general cap, super-cap, and uncapped. Map IP infringement, data or security breach, gross negligence or willful misconduct, death and personal injury, and each indemnity. Silence on data breach means the general cap until someone writes otherwise.

A super-cap is a higher ceiling for named claims — data, IP — still not unlimited. Do not rely on implied carve-outs. Mayer Brown (NY) will not enforce a clause that immunises willful misconduct or gross negligence — proving it is a fight. Do not treat a silent cap as automatically uncapped.

• Do: fill a three-bucket table for IP, data, gross negligence, death and PI, and each indemnity.
• Do not: assume a missing data-breach line is already outside the general cap.

How does the cap interact with indemnity?

Indemnity answers who pays a third-party claim. The cap answers how much can ever be owed. Search the indemnity for “subject to,” “except as limited,” or a cross-reference to Limitation of Liability. Silence is probably inside. Treat a generous IP indemnity subject to last year’s fees as last year’s fees.

That split is the point of Oseran Hahn’s indemnity-versus-cap explainer: a strong indemnity subject to the cap is only worth the cap. The usual buyer ask is IP outside the general cap and data under a super-cap — a negotiation position, not a rule. An uncapped indemnity running the other way is a High item.

• Do: write each indemnity as inside, super-cap, or outside.
• Do not: celebrate the IP indemnity before you read “subject to Section 12.”

What does a worked example show on a ~20-page vendor MSA?

Open the packet you will sign and hunt pages, not headings. On Amira’s 22-page MSA, Limitation of Liability sits around page 16, the IP indemnity two pages earlier, and SLA credits live in an exhibit. Compute the month-two number, then log the interactions on one page.

In practice: £4,000 a month; trailing fees-paid; month two = £8,000; month fourteen = £48,000. Waiver lists lost data and regulatory penalties. Breach sits inside the general cap. IP indemnity is subject to Section 12. SLA credits are the exclusive remedy for downtime. Answer BIO.LAW’s four mechanics without guessing. A missing answer is a redline. A SOW that can override the MSA cap is a walk trigger. Workflow: packet → find formula → compute £/$ → waiver + carve-outs → indemnity → exclusive remedy → redline / escalate / walk.

• Do: hunt page numbers and write the month-two number before redlines.
• Do not: review Section 12 in isolation from the SLA exhibit or SOW precedence.

When do you escalate the cap number to counsel?

Escalate the number when the paper plus the deal facts will not fit a four-to-six-line redline. English standard terms with aggressive exclusions need a UCTA reasonableness read. A data-heavy tool with no data treatment is counsel work.

For English law, UCTA 1977 section 11 judges reasonableness at contracting time; the relying party must show it. Lewis Silkin: you cannot exclude death or personal injury from negligence; a failed standard-term limit is ineffective. US paper is UCC § 2-719, not a jurisdiction-free “unenforceable.” Redline paid-or-payable plus a floor, a data super-cap, and indemnity outside the general cap. Success bar: fill the one-page log, then send 4–6 redlines, escalate a named High flag, or stop. Checkory can run a first-pass — the first machine pass that extracts clauses before a human reads every page — then a human still opens every High clause.

• Do: send counsel the frozen packet, the computed £/$, and the redlines you want.
• Do not: escalate every Medium row, or treat a silent gross-negligence line as uncapped.

If Section 11 is an indemnity, not a cap, open the indemnity clause review checklist.