MSA: At the Negotiation Table

MSA: 10 Patterns That Matter in Negotiation

Forget drafting theory. When MSAs go sideways in negotiation, it's usually the same handful of issues: incorporated documents you never saw, remedies that gut the warranty, caps that swallow breach exposure, and renewal mechanics buried where no one looks. Based on patterns identified across more than 110 contract negotiation analyses, here are the 10 things that most often create real downstream pain for in-house counsel.

1. You're not signing one document -- you're signing five.

The MSA points to an Order Form, SOW, DPA, Acceptable Use Policy, and often a new AI Addendum. The vendor may have updated an incorporated document before your renewal. You never saw it. It's part of your agreement.

This is The Invisible Operative Document / The Order of Precedence. -> pattern analysis

2. Whose paper you're on matters more than any individual clause.

Vendor paper means vendor's definitions, vendor's remedies, vendor's defaults -- everywhere. The first question isn't "can I change this clause" -- it's "should I be on their paper at all?"

This is Template Contamination / The House Form. -> pattern analysis

3. The warranty and the remedy are not the same thing. Read them together.

A warranty of "commercially reasonable performance" with an exclusive remedy of "termination + pro-rata refund" is functionally no protection. This structure appears in many tech agreements. You won't see it unless you read the warranty, the exclusive remedy, and the liability cap side by side.

4. Your maximum recovery for a data breach may be capped at 12 months of fees.

The liability cap applies. The indirect damages exclusion removes notification costs, regulatory fines, and reputational harm. Only a small minority of vendor agreements carve out data security -- most companies discover this after something goes wrong.

5. The auto-renewal clause is often not in the pricing section.

It tends to appear in the termination section, with a 60-90 day opt-out window, renewing at list price. The opt-out deadline is easy to miss. Calendar it the day you sign.

6. Indemnification determines whether you're on your own when a third party shows up.

The vendor indemnifies you for IP infringement -- meaning if their software gets sued for copying someone else's code, they defend you. Or they don't, if their indemnification clause is narrow enough. For AI vendors specifically: check whether AI-generated outputs are carved out of the IP indemnification. If the vendor's AI tool produces content that infringes copyright and they've excluded AI outputs from indemnification, you're handling that exposure without them.

7. The AI addendum may have changed your terms at renewal without a redline.

Vendors aren't updating the MSA itself -- they're updating incorporated documents: the AUP, the DPA, a new AI Addendum. The MSA looks identical to last year's. The AI terms may not. Three things to check in any AI addendum:

• Training data: Does "improve the Services" mean your data trains their model? It often does, opt-out only, with a window that closed at signing.
• Compliance liability: Who's responsible when the AI output triggers a regulatory obligation? The vendor's template typically puts this on you -- even though they built and control the model.
• Warranty coverage: Are AI-generated outputs excluded from the standard warranty? If the product is increasingly AI-driven, this exclusion may hollow out your core protection.

This is The Dynamic Document / The Living Agreement. -> pattern analysis

8. The SLA uptime guarantee may be your exclusive remedy for downtime.

"99.9% uptime" sounds like a real commitment. Read the remedy: typically a service credit equal to a fraction of one month's fee, claimable only if you file within 30 days of the incident. That credit may be your only recourse for an outage that cost you a day of operations. Check whether the SLA remedy is exclusive and what the credit cap actually is.

9. Disputed charges often have no defined process.

"The parties will resolve disputes in good faith" -- no timeline, no escrow right, no escalation path, no right to withhold payment. You may owe the money while you're disputing it.

10. The SOW is where the money is. The MSA is where the risk ceiling is.

The MSA sets your maximum recovery. The SOW sets your minimum spend. Most people negotiate the SOW and click through the MSA. That's backwards -- the MSA governs everything that goes wrong across the entire relationship.

Each pattern links to a full analysis -- both sides of the table, the recognition signals, and cross-industry variations. Start with whatever caught your attention first.