Liability Caps in UK Commercial Contracts: What ‘Market Standard’ Actually Looks Like
The art of the liability cap is a delicate dance between "I trust you" and "But if you burn my house down, I expect a very large check."
Every commercial lawyer you’ve ever met - bless their pinstriped souls - will tell you that liability caps are negotiable. What they rarely mention is what the numbers actually are in the real world.
I’ve looked under the hood of 100s of transactions - SaaS, M&A, outsourcing, the lot. I’ve seen what people actually sign when the coffee has gone cold and the 11:00 PM deal-pressure kicks in.
The Clause Nobody Reads Until the Building is On Fire
A limitation of liability clause is the most commercially significant part of a contract, yet it’s treated like the "Terms and Conditions" on an iTunes update. We click "agree" because we want the music to start.
The clause does one thing: it puts a ceiling on the chaos. Without one, your potential exposure is theoretically infinite - a terrifying, Lovecraftian abyss of debt. With one that’s too low, you’ve essentially agreed to be punched in the face for the price of a mid-range sourdough.
The "Don’t Get Cheeky" Rule (UCTA 1977)
In the UK, we have a marvellous bit of legislative parenting called the Unfair Contract Terms Act 1977. It essentially says that if you’re using your standard small-print to screw someone over, the court might just bin the whole clause.
Take the classic case of St Albans City Council v International Computers Ltd. ICL tried to cap their liability at £100,000. Their software error cost the council over £1 million. The court looked at the disparity and effectively said, "Nice try, but no." The lesson isn't that caps are useless; it’s that a cap so low it borders on the comical is a cap you cannot rely on when the metaphorical fan is hit by the metaphorical debris.
The Cheat Sheet: What People Are Actually Signing
There is no "standard" number, much like there is no "standard" amount of gin in a Friday afternoon cocktail. But there are ranges.
1. SaaS and Tech Subscriptions: The "12-Month" Myth
The standard opening gambit from vendors is a cap of 12 months of fees. It’s ubiquitous. It’s "market." It’s also often rubbish.
The Trap: If your £50k-a-year platform goes dark during peak trading and costs you £1M in lost enterprise clients, that £50k cap is about as useful as a chocolate teapot.
The Real Deal: Sophisticated buyers push for 24 months. Enterprise titans with actual leverage often squeeze out 200% of the annual contract value. If you’re signing for 6 months or less, you aren’t protected; you’re just a philanthropist.
2. IT Outsourcing: Where the Stakes Get Real
When you outsource payroll or cloud hosting, a failure isn't a "glitch" - it’s an existential crisis.
The Range: Usually 100% to 150% of annual charges.
The Red Flag: Never, under any circumstances, accept a cap based on "fees paid in the last 3 months." That’s not a protection clause; it’s a "Get Out of Jail Free" card for the supplier, dressed up in legalese.
3. Professional Services: The Consultant’s Shield
Most consultants try to cap at Total Contract Value or 12 months' fees, whichever is higher.
The Reality Check: If a consultant’s mistake could potentially bankrupt your project, the cap needs to reflect the value of the risk, not just the size of their invoice. If their cap looks like a rounding error compared to your potential loss, put the pen down.
4. M&A: The High-Stakes Poker Game
Here, we’re talking warranty caps linked to deal value - commonly 25% to 100% of the enterprise value. This is a different beast entirely, requiring a surgical level of negotiation that makes a standard SaaS deal look like a playground trade for a shiny Charizard.
The Carve-Outs: The Holes in the Ceiling
A cap is only as good as what it doesn't cover. You want a "Super-Cap" or "Uncapped" status for the big stuff:
The "Must-Haves": Fraud, death, and personal injury (you can't legally cap these anyway, but it’s nice to see it in writing).
The 2026 Nightmare: Data Protection and AI. With UK GDPR fines reaching £17.5M and the EU AI Act threatening 7% of global turnover, a standard "12-month fee" cap for data breaches is like bringing a toothpick to a tank fight.
Three Questions to Ask Before You Sign
Is it Mutual or a One-Way Street? Often, the vendor caps their liability but leaves yours (via indemnities) as wide as the Atlantic. Read the indemnity and the cap together, or you'll find yourself on the wrong side of an asymmetric nightmare.
Is it "Per Incident" or "In Aggregate"? A £500k cap per incident is a sturdy roof. A £500k cap in aggregate over five years is a roof made of wet tissue paper.
Does it Reflect Reality? Forget what the vendor "usually does." Does the cap represent a meaningful percentage of what you stand to lose if they fail? If the math doesn't make sense, the contract doesn't make sense.
The Bottom Line
When your lawyer looks at a cap, don't ask "Is this legal?" Ask "Is this appropriate?" It’s a commercial question disguised as a legal one.
If you aren’t sure if your current agreements are protecting you or just politely asking the universe not to hurt you too badly, it’s time for a proper review.
Don't wait for the breach to find out your ceiling is too low.
Book a free discovery call with RMOK Legal
This article is general guidance only and does not constitute legal advice. The law on liability caps involves fact-specific analysis and you should seek advice on your specific position. RMOK Legal is authorised and regulated by the Solicitors Regulation Authority.