Review guide · Vendor master services agreements
How to review a vendor MSA before you sign it
A plain-English MSA review checklist for owner-operators: the term and auto-renewal, liability caps, indemnities, price increases, assignment and governing law — and what to ask for.
A master services agreement is the umbrella contract a vendor signs once and then hangs every order form, statement of work and renewal under. That is what makes it dangerous to skim: the order form you are looking at this month is short and specific, while the terms that decide what happens when something goes wrong were agreed in the MSA, often years earlier, by whoever signed first.
An MSA review is not about reading every clause with equal attention. Eight or nine clauses carry almost all of the risk, and they are the same ones in nearly every vendor MSA. The list below is the order a reviewer checks them, with the clause explained and the fix you would ask for.
Who usually signs it: The owner, a head of operations or a finance lead, usually without counsel on the call.
The clauses to check, in order
- 01
Term and auto-renewal
Why it matters: Most MSAs renew for a full term unless you give written notice inside a window that closes weeks before the anniversary. Miss it and the whole order-form stack renews with it.
What to ask for: Month-to-month after the initial term, or a 90-day notice window measured from the renewal date — and the vendor must remind you in writing before it opens.
- 02
Limitation of liability
Why it matters: Vendors cap their own exposure at a few months of fees and sometimes leave yours uncapped. A single data incident or IP claim can then exceed the value of the deal.
What to ask for: Mutual caps at 12 months of fees, with narrow carve-outs (confidentiality, data breach, IP infringement) rather than a blanket exception.
- 03
Indemnification
Why it matters: A one-sided indemnity has you paying the vendor's legal costs for "any claim arising from your use of the service" — including things you cannot control.
What to ask for: A mutual indemnity. The vendor covers IP infringement and its own breach; you cover your misuse and your content, and nothing wider.
- 04
Price increases at renewal
Why it matters: "Then-current pricing" or an uncapped escalator lets the vendor reset the price every year, and the auto-renewal makes the new price binding before you see the invoice.
What to ask for: A hard cap on any renewal increase (a fixed percentage or CPI, whichever is lower) and 60 days' written notice of the new price before the notice window closes.
- 05
Termination rights
Why it matters: If only the vendor can terminate for convenience, you are committed for the term no matter how the service performs.
What to ask for: Termination for convenience on 30–90 days' notice, and termination for cause with a short cure period that you can actually use.
- 06
Assignment and change of control
Why it matters: The vendor can be acquired and the contract sold on to a company you never chose, while you need their consent to do the same.
What to ask for: Either party may assign on a change of control, or neither can; and you may terminate if the vendor is acquired by a competitor.
- 07
Data ownership and portability
Why it matters: Without it, getting your own records back at the end of the term can be slow, expensive or impossible.
What to ask for: You own your data; export in a standard format on request and for 30–90 days after termination, at no charge.
- 08
Governing law and venue
Why it matters: Disputes in a distant state under unfamiliar law raise the cost of ever enforcing the contract — which the vendor knows.
What to ask for: Your home state (Ohio, for a Columbus business) or at least a neutral venue, and arbitration terms you understand.
Before you sign: the checklist
- Find the renewal clause and write down the last day to give notice.
- Check whether the liability cap is mutual, and what the carve-outs are.
- Read the indemnity in both directions.
- Find every reference to "then-current" pricing or an escalator.
- Confirm who can terminate, for what, and on how much notice.
- Check assignment, data return and governing law.
- Note which order forms and SOWs the MSA governs — the risk flows down to all of them.
Run the interactive 12-point red-flag checklist → · Find the last day to give notice →
Have one of these on your desk?
Upload it and Sidecar returns a verdict, a 0–100 risk score, every clause above flagged with the text quoted, every date that can cost you, and the negotiation points with suggested wording. A Sidecar reviewer looks it over on request. The first review is free.
Questions
What is the difference between an MSA and a statement of work?
The MSA sets the legal terms that apply to every piece of work: liability, indemnity, termination, payment, confidentiality. A statement of work (SOW) or order form describes one specific engagement — scope, deliverables, price and dates — and inherits the MSA's terms. Reviewing the SOW alone misses most of the risk.
Do I need a lawyer to review a vendor MSA?
For a large or unusual agreement, yes, and nothing on this page replaces that. For the routine vendor MSAs a $1M–$100M business signs every month, most owners skim them or skip them. A structured review that flags the clauses above, with the clause quoted, is the step before counsel: it tells you whether this one needs a lawyer and what to ask them about.
How does Sidecar review an MSA?
You upload the MSA and any order forms, SOWs or DPAs that hang under it (up to 20 attachments), and Sidecar reviews them together. The review returns a verdict, a 0–100 risk score, the red flags with the clause quoted, every date that can cost you, and the negotiation points with suggested wording. A Sidecar reviewer looks it over on request. The first review is free.
Clauses explained
Other agreement types
Definitions and negotiation guidance here are educational business decision support, not legal advice. Consult an attorney about how any clause applies to your own agreement.