Liability caps explained: 1×, 3×, super-caps, and the carve-outs that matter

The cap is the contract's safety net

The limitation of liability clause is what stops a single mistake from becoming an existential event. It says: no matter what goes wrong, the aggregate liability of either party will not exceed [X]. That number is the single most important figure in any commercial contract.

How caps are usually expressed

Three common forms: (1) fixed dollar amount — "$100,000" — common in small-vendor deals; (2) fees paid in trailing X months — "the fees paid in the 12 months preceding the claim" — by far the most common in SaaS; (3) multiple of annual fees — "3× the annual fee" — common in larger enterprise deals. Each has different implications when the deal is small in year one but grows over time.

What a cap does not limit

Standard exclusions from the cap (i.e. liabilities that remain uncapped) include: (1) breach of confidentiality, (2) indemnification obligations, (3) gross negligence or wilful misconduct, (4) infringement of IP rights, and (5) payment obligations. If a vendor's cap is the only limit on liability with no carve-outs, you're protected from real risks but exposed to their non-payment of fees, which makes no sense — push for proper carve-outs.

Direct vs. consequential damages

Most caps come paired with an exclusion of "consequential, incidental, special, indirect, or punitive" damages — including lost profits and lost revenue. That means even within the cap, you can't recover the most common form of damage. Push for direct damages including reasonably foreseeable lost profits up to the cap.

How to pick the right multiple

A rough sizing rule: the cap should be large enough to cover (a) the cost of switching to an alternative vendor, plus (b) the foreseeable downstream cost of a typical failure. For a $50K/year tool, a 1× cap covers about 1 month of replacement work — light. For mission-critical infrastructure, push for 3× or unlimited for specified categories.

Super-caps

On larger enterprise deals, the answer is often a two-tier cap: a standard cap (e.g. 1× annual fees) for general liability, plus a higher "super-cap" (e.g. 3× or 5×) for specified categories like data-breach liability or indemnification. This compromise lets both sides quantify their worst case without going uncapped.

The cap and the insurance policy

Vendors often resist large caps because their professional liability insurance is capped at $1M-$5M per occurrence. Ask for a copy of their certificate of insurance and align the cap to the policy limit where possible. This converts a contract negotiation into an insurance procurement question, which is usually easier to resolve.

Reading the cap in 30 seconds

Find the "Limitation of Liability" section. Find the dollar amount or formula — that's the cap. Find the word "except" — those are the carve-outs that remain uncapped. Find the word "consequential" — that's the exclusion. Now compare the cap to your worst-case downside. If the cap is less than 10% of the downside, renegotiate.

Where AI helps

Caps and carve-outs are exactly the kind of structured, language-pattern problem AI is good at. ContractScan AI extracts the cap formula, normalises it against annual fees, lists every carve-out, and flags missing standard carve-outs (especially indemnity and IP infringement). On a procurement review of 30 vendor contracts, you get a single benchmark table.