The short version
- The duty to defend is separate from the duty to indemnify and is triggered earlier: on the claim being made, not on liability being established.
- In California, Crawford v. Weather Shield (2008) confirmed a promise to defend applies from tender even where the indemnitor is later found not negligent.
- Indemnities normally sit outside the liability cap. An uncapped indemnity under a capped agreement means the cap describes your best case, not your worst.
- A standard general liability policy covers assumed tort liability for bodily injury and property damage. Most commercial indemnities cover economic loss, which it does not.
An indemnity is the only clause in a normal commercial contract that can produce a liability larger than the whole deal. That is not rhetoric; it is the arithmetic of a clause with no ceiling attached to a contract worth a fixed annual fee.
Three words, and only two of them do separate work
Indemnify means to reimburse. The indemnitor pays the indemnitee for defined losses — judgments, settlements, usually costs — once those losses have been suffered. It resolves at the end.
Defend is a different promise. It obliges the indemnitor to take on and fund the defence of a claim from the moment it is tendered, regardless of whether the claim has any merit. It starts on day one.
Hold harmless is where the drafting industry disagrees with itself. Most courts and commentators treat it as meaning nothing more than indemnify. A minority read it as separate protection against being sued at all by the other contracting party. Since you cannot pick your court, say what you mean: if you want protection from direct claims by your counterparty, draft a release rather than relying on the phrase.
An indemnity clause, taken apart
A commercial indemnity clause
Why the duty to defend is the expensive half
Under the common law of most states an indemnitor has no duty to defend unless the contract creates one. Where it does, that duty behaves very differently from the indemnity beside it: the indemnity is settled by the outcome, the defence obligation by the allegations.
California put this beyond argument in Crawford v. Weather Shield Mfg., Inc. (2008) 44 Cal.4th 541. A window subcontractor had promised to defend claims "founded upon" its work. A jury found the subcontractor had not been negligent — and it was still liable for the developer's defence costs, because the duty to defend arose when the claim was tendered and did not wait for a finding of fault. California Civil Code § 2778 codifies the same split as a set of default rules: an indemnity against claims embraces the costs of defence, and the indemnitor is bound on request to defend, unless the contract says otherwise.
What the word "defend" adds
Is the indemnitor at fault?
Does the clause say "defend"?
Indemnify only
Indemnify and defend
Ultimately not at fault
Each side pays its own
No indemnity, no defence duty. The ordinary outcome.
You fund a defence anyway
The duty runs from tender to judgment even though you owe nothing at the end.
At fault
Reimbursement, eventually
Costs recovered only if the clause covers them, and only after the case ends.
Defence from day one, plus the judgment
The full exposure the clause was written to produce.
Mutual, one-way, and when one-way is actually fine
A one-way indemnity is not automatically unfair. Some risks genuinely sit with one side. A vendor indemnifying its customer against a claim that the software infringes someone's patent is appropriate, because only the vendor controls that risk; the customer indemnifying the vendor for the content it uploads is appropriate for the same reason. What matters is whether each indemnity matches something that party actually controls.
The pattern to challenge is the general indemnity that runs in only one direction: "the Supplier shall indemnify the Customer against all claims arising out of or in connection with this Agreement" with no mirror clause. That is not risk allocation, it is risk transfer, and it belongs in the same category as the asymmetries listed in 12 contract red flags. Asking for the same sentence with the names reversed is the cheapest test of whether the other side believes their own drafting.
Service agreement template
A full service agreement with a mutual indemnity: a fault-based trigger, notice and control of defence, a carve-out for the indemnitee's own negligence, and a stated relationship to the liability cap.
The carve-out that matters most is for their own negligence
A broad indemnity worded "against all claims arising out of the Services" makes you pay for losses that the other side caused. Courts treat that as an extraordinary shifting of risk and, in a number of states, will not enforce it unless it was made unmistakably clear.
Texas is the strictest example. Under the express negligence doctrine — from Ethyl Corp. v. Daniel Construction Co. (1987) and Dresser Industries, Inc. v. Page Petroleum, Inc., 853 S.W.2d 505 (Tex. 1993) — a party seeking indemnity for its own negligence must say so in specific terms within the four corners of the contract, and the language must be conspicuous enough that a reasonable person would notice it. That is why these clauses appear in block capitals: the capitals are a legal requirement, not emphasis.
Your insurance probably does not cover what you just promised
This is the assumption that causes the most damage. A commercial general liability policy excludes liability assumed under a contract, then carves that exclusion back for an "insured contract" — defined as the part of a contract under which you assume the tort liability of another party to pay for bodily injury or property damage. Many policies narrow it further, requiring that the injury or damage was caused in whole or part by you.
Read that against a typical technology or services indemnity. Intellectual property infringement, breach of confidentiality, data protection claims, regulatory fines and pure financial loss are none of them bodily injury or property damage. The indemnity is real, the policy does not respond, and the money comes out of the business. Professional indemnity and cyber policies pick up some of this, but often exclude liability assumed by contract beyond what you would have owed anyway.
Before you accept an indemnity, ask your broker three questions
- Does any policy we hold respond to this specific indemnity, or only to the underlying claim if it happened to be brought against us directly?
- Is the policy limit at least the size of the exposure the indemnity creates, and is defence inside or outside that limit?
- Does naming the other party as an additional insured actually help here, or does it duplicate cover we already owe them contractually?
Uncapped indemnity plus capped liability is the worst combination
Indemnities conventionally sit outside the limitation of liability clause. That is defensible where the indemnity is narrow and covers a risk the indemnitor controls. It becomes a trap when a broad indemnity sits above a modest cap, because the cap then describes only the liability nobody was going to claim under.
The specific pattern to look for: a cap set at twelve months' fees, an indemnity worded "arising out of or in connection with this Agreement", and a sentence excluding indemnity obligations from the cap. Those three lines are usually in three different places in the document, and read together they mean the agreement is uncapped. The limitation of liability clause guide covers how to read the cap and its carve-outs; the point here is that the two clauses only make sense read as a pair.
How to negotiate it down
Indemnities are more negotiable than people assume, because the party holding the pen usually cares about two or three specific risks and drafted broadly out of habit. Work up the rungs; the early ones are almost always conceded.
Five asks, easiest first
- Almost always agreed
Add notice, cooperation and control of defence
You choose counsel, you approve settlements, and no admission binds you without consent.
- Usually agreed
Narrow the trigger to fault
"Caused by our breach, negligence or wilful misconduct" instead of "arising out of or in connection with".
- Usually agreed
Carve out the indemnitee's own negligence
And add comparative reduction, so a shared-fault claim is shared rather than transferred.
- Negotiable
Make it mutual
The same protection for the same categories, with the names reversed. Refusal is the informative answer.
- The hard ask
Bring it inside the cap, or add a supercap
Failing that, a separate higher ceiling for the indemnity alone — a finite number instead of an open one.
Most negotiations settle around rung three or four with a supercap on the IP and data limbs.
Where the contract is a master agreement with work orders underneath it, negotiate the indemnity once at the master level and make sure no work order can vary it — the mechanics are in MSA vs SOW. For technology purchases, the SaaS agreement and software licence templates show where the indemnity, the cap and the insurance clause need to line up with each other.
The test for a defensible indemnity is short. It covers losses caused by something the indemnitor actually controls, it runs both ways or has a clear reason not to, it gives the paying party some say in the defence, and somebody has checked whether an insurer will stand behind it. An indemnity that fails all four is not a risk allocation. It is a blank cheque with a signature block underneath.
Sources
- Crawford v. Weather Shield Mfg., Inc. (Cal. 2008)
- California Civil Code § 2778 — rules for interpreting contracts of indemnity
- FindLaw — the express negligence doctrine and fair notice
- Saxe Doernberger & Vita — construction anti-indemnity statutes by state
- The CGL contractual liability exclusion and the "insured contract" exception
General information, not legal advice. This guide explains how these documents and rules generally work. Law varies by jurisdiction and changes, and none of it is applied to your circumstances here. For anything consequential, consult a licensed attorney where you are.
Frequently asked
Is "hold harmless" different from "indemnify"?
Usually not. Most courts and commentators treat the pair as meaning the same thing, and drafting authorities recommend using one word rather than both. A minority of decisions read hold harmless as separate protection against being sued by the other contracting party. Because the outcome depends on the court, the safer approach is to draft the protection you want explicitly instead of relying on the phrase.
What is the difference between an indemnity and a warranty?
A warranty is a statement of fact. If it is untrue you have a damages claim, but you must prove loss, prove causation and mitigate. An indemnity is a promise to reimburse specified losses, generally payable without those hurdles and often without proving breach of anything else. That is why indemnities are worth considerably more to the party receiving them and are negotiated much harder.
Does an indemnity cover the other side's legal fees?
Only if the clause says so. Some indemnities cover judgments and settlements alone; others extend to costs and expenses; a clause that adds "and defend" goes further still, funding the defence from the moment the claim is tendered rather than reimbursing at the end. Read which of the three you have agreed to, because the cash-flow difference between them is enormous.
Should an indemnity be capped?
From the indemnitor's side, yes wherever possible. Indemnities conventionally sit outside the liability cap, which means a broad one makes the cap meaningless. If the counterparty will not bring the indemnity inside the general cap, the usual landing zone is a supercap: a separate, higher, finite ceiling for that category alone. Uncapped should be reserved for risks entirely within one side's control.
Can I be forced to indemnify someone for their own negligence?
Sometimes, but the drafting has to be explicit. Several states require the intention to be stated in specific terms and, in Texas, to be conspicuous on the face of the document. In construction contracts most states have anti-indemnity statutes that void or limit such provisions altogether. Outside construction and outside those states, a clearly drafted clause of this kind is generally enforceable.