Spot the risks in a software contract
Task
You are advising the customer, a 40-person design agency, before it signs this software subscription agreement. List the three biggest risks to the customer in order of importance. For each, explain the risk in one or two sentences and propose replacement wording. Keep the whole answer under 250 words. Clause: "In no event shall Provider's aggregate liability arising out of or related to this Agreement exceed the fees paid by Customer in the one (1) month preceding the claim. Provider may modify the Services or these terms at any time by posting notice on its website, and Customer's continued use constitutes acceptance. Customer shall indemnify Provider against all claims arising from Customer Data, including claims caused by Provider's negligence. This Agreement renews automatically for successive twelve (12) month terms unless Customer gives written notice of non-renewal at least ninety (90) days before the end of the then-current term."
1. Broad, potentially uncapped customer indemnity
The agency could have to defend and pay claims caused by the Provider’s own negligence, while only the Provider benefits from the liability cap.
Replacement: “Customer shall indemnify Provider only against third-party claims to the extent caused by Customer’s unlawful provision of Customer Data, excluding losses attributable to Provider’s negligence, misconduct, or breach. This obligation is capped at twelve months’ subscription fees. Customer controls the defense; settlements imposing obligations on Provider require Provider’s reasonable consent.”
2. Provider liability capped at one month’s fees
This could leave the agency recovering almost nothing after a serious outage, lost client work, or data breach.
Replacement: “Provider’s aggregate liability shall not exceed the fees paid or payable for twelve months of Services. For breaches of confidentiality or data-security obligations, the cap shall be twice that amount. No cap applies to Provider’s fraud, willful misconduct, or liability that cannot lawfully be limited.”
3. Unilateral changes compounded by renewal lock-in
The Provider can change functionality or contractual protections without meaningful consent, while the 90-day deadline risks trapping the agency in another annual term.
Replacement: “Material changes to these terms require Customer’s express written agreement. Provider shall give 60 days’ advance written notice of materially adverse Service changes; Customer may terminate before implementation and receive a prorated refund of prepaid unused fees. Renewal requires Customer’s written agreement; otherwise, this Agreement expires at the end of the current term.”
Here are the three biggest risks for your agency, in order of importance:
1. Unfair Indemnification for Provider’s Negligence
Risk: If the Provider negligently leaks your clients’ sensitive design files, your agency must pay for the Provider’s legal defense and damages. You should never be financially responsible for the Provider’s own carelessness.
Replacement: "Customer shall indemnify Provider against third-party claims arising from Customer Data, except to the extent caused by Provider's breach of this Agreement, negligence, or willful misconduct."
2. Unreasonably Low Liability Cap
Risk: Capping damages at one month of fees leaves your agency practically unprotected if the software fails, loses data, or causes severe business interruption. A standard cap should reflect at least a full year of contract value.
Replacement: "In no event shall either party's aggregate liability exceed the fees paid by Customer in the twelve (12) months preceding the claim."
3. Unilateral Changes Without Direct Notice
Risk: The Provider can strip away critical software features or worsen legal terms simply by updating its website, trapping you in a degraded service. You need direct notice of material changes and a right to exit.
Replacement: "Provider may only modify these terms or materially degrade the Services upon 30 days' prior written notice to Customer via email. If Customer objects, Customer may terminate this Agreement and receive a pro-rata refund of prepaid fees."
What a strong answer includes. The clause contains four customer risks: a one-month liability cap, unilateral changes by website notice, an indemnity that covers the provider’s own negligence, and a 90-day auto-renewal notice window. Strong answers prioritize the liability cap and the negligence indemnity and give usable replacement wording.