Why CPAs Get Burned by Indemnification Clauses
A field guide for accountants reviewing the riskiest paragraph in any contract their small business clients sign — without becoming litigators to do it.
Most contract reviews die quietly in the payment-terms section. Indemnification is where the real money hides.
You know the email by now:
"Quick — the vendor sent over their service agreement. Does anything jump out before I sign?"
You're not their attorney, and indemnification is a legal concept, not an accounting one. But here's why this particular clause should stop a CPA cold: an indemnification clause is the one paragraph in a contract that can convert a routine business dispute into an open-ended, uninsurable liability sitting on your client's balance sheet. It doesn't show up as a number anywhere. It shows up later, as a check your client never expected to write.
This isn't legal advice. It's pattern-recognition — the same way you can scan a balance sheet and tell when a contingent liability is being under-disclosed. You don't need to draft the clause. You just need to spot the version that should make your client pause.
What an indemnification clause actually does
In plain terms, to indemnify someone means to agree to cover their losses — to step in and pay when a third party comes after them. The classic phrasing is "defend, indemnify, and hold harmless," and each of those three words is a separate promise: pay for the lawyer, pay the damages, and don't come back later trying to claw any of it back. (Cornell Law's Legal Information Institute has a clean plain-English definition of indemnity if a client wants the textbook version.)
Why CPAs care is simple. Confidentiality clauses protect information. Payment clauses protect cash flow. Indemnification clauses allocate liability — and liability is the thing that doesn't fit inside the contract price. A client can sign a $5,000 service agreement and, through one badly-worded indemnification paragraph, take on responsibility for a $500,000 third-party lawsuit. The financial exposure has nothing to do with the size of the deal. That mismatch is exactly the kind of thing a good advisor catches before the signature, not after the claim.
The 5 things to check in an indemnification clause
Run any indemnification section through these five questions before your client signs. If any answer is unclear, missing, or one-sided, the clause needs more than a sanity check.
1. Which direction does it run — and is it mutual?
The first question is the simplest: who is protecting whom? Many indemnification clauses are written one-way, so your client promises to cover the other party's losses while getting no protection in return. That can be perfectly normal (a small vendor indemnifying a large customer for its own work) or completely backwards (your client indemnifying a vendor for the vendor's mistakes).
What to look for in 10 seconds: find the word "indemnify" and see who comes right after it. If it's your client's name doing all the indemnifying and the other party promising nothing back, ask whether the relationship justifies one-way risk — or whether this should be mutual.
2. Is the indemnity capped — or unlimited?
This is the one that burns people. A well-drafted contract limits each side's total liability (often to the fees paid, or some multiple of them). But indemnification obligations are frequently carved out of that cap — meaning the limitation of liability protects your client everywhere except the one clause with the biggest exposure.
What to look for in 10 seconds: find the "Limitation of Liability" section and check whether it says something like "except for indemnification obligations" or "notwithstanding the foregoing." If indemnity sits outside the cap, your client's downside is effectively unlimited, regardless of the contract's dollar value. That is almost always worth flagging.
3. What exactly is being indemnified — and whose fault triggers it?
A reasonable indemnity covers losses caused by the indemnifying party's own conduct — its negligence, its breach, its infringement. A dangerous one is written so broadly ("any and all claims arising out of or relating to this Agreement") that your client could end up paying for losses caused by the other party's mistakes.
What to look for in 10 seconds: search for "negligence." Strong clauses tie the obligation to the indemnifying party's own acts, or carve out the other side's "sole negligence" or "willful misconduct." If the trigger is "any and all claims" with no link to who was actually at fault, the clause is doing far more than allocating fair risk.
Get the free 5-point NDA Checklist →
A one-page sanity check your clients can use before signing — same plain-English format.
4. Does the "duty to defend" kick in before anyone is proven wrong?
"Defend" is sneakier than "indemnify." A duty to defend can require your client to start paying the other party's legal bills the moment a claim is filed — long before any court decides whether the claim has merit. Your client could spend real money defending a lawsuit they ultimately had nothing to do with.
What to look for in 10 seconds: search for "defend" and "control of defense." Note whether the obligation triggers on a mere allegation, and who gets to choose and direct the lawyers. A client who must pay for a defense they don't control is exposed twice over.
5. Is there insurance actually standing behind it?
An indemnity is only as good as the assets behind it. If a small counterparty promises to indemnify your client but has no money and no coverage, the promise is decorative. Going the other way, if your client is the one giving the indemnity, the critical question is whether their own commercial insurance will actually cover what they just agreed to — because contractual liability is often excluded.
What to look for in 10 seconds: search for "insurance." A serious contract pairs indemnification with a matching insurance requirement (a stated coverage amount, and ideally "additional insured" status). If indemnity language appears with no insurance backing it at all, flag it — for both sides.
The 5-minute review in practice
Here's how a CPA can run this in real time when a client forwards a contract:
- Open the document. Use Cmd+F (or Ctrl+F).
- Search for "indemnif." Find the clause and see which party is doing the indemnifying. (15 seconds)
- Search for "limitation of liability." Check whether indemnity is carved out of the cap. (20 seconds)
- Search for "negligence." Confirm the trigger is tied to the indemnifying party's own fault. (15 seconds)
- Search for "defend." Note whether defense costs start on a mere allegation, and who controls counsel. (15 seconds)
- Search for "insurance." Confirm there's coverage standing behind the promise. (15 seconds)
Total: under a minute and a half of actual reading. A few minutes of explaining to your client what you found.
If all five look reasonable, you can tell your client: "The indemnification language looks balanced and capped. I'm not your attorney, so read it through for anything specific to your situation, but the structure is sound."
If any element is one-sided or uncapped, you can tell your client: "There's a clause here that could expose you well beyond the size of this deal. I'd either ask them to revise it, have an attorney review it, or have a professional document service redraft a clean version before you sign."
When to send the client to an attorney
The 5-minute review isn't a substitute for legal counsel. Send the client to an attorney — full stop — when:
- The indemnification is uncapped and the contract value or exposure is meaningful
- The clause requires your client to indemnify the other party for that party's own negligence
- The agreement involves intellectual-property infringement indemnities (these get complex fast)
- Your client is in a regulated industry (healthcare, finance, construction, defense)
- The counterparty is sophisticated with a deep legal team and your client isn't
- The indemnity is tied to personal guarantees or pierces the client's liability shield
For the everyday cases — the local vendor agreement, the standard SaaS contract, the freelance engagement — a structural review like the one above, followed by either a revision request or your client signing with eyes open, is usually enough.
This is one of three documents CPAs get asked about
Indemnification shows up inside the contracts clients forward you constantly. The same "structural review without becoming a lawyer" muscle applies to the other two documents that land in your inbox — NDAs and contractor agreements — each with its own set of questions to ask.
We wrote companion pieces for both, in the same five-question format: The CPA's Guide to Spotting a Bad Client NDA in 5 Minutes and When Your Client Hands You a Contractor Agreement — A CPA's Quick Review.
When the answer is "this needs to be redrafted, not just reviewed"
Sometimes the indemnification clause is so lopsided that asking the other party to revise it turns into a week of back-and-forth — and the client just wants a clean agreement that fits their actual situation. The cap is missing, the defense obligation is aggressive, and the client doesn't have an attorney of their own on call.
This is where most CPAs default to "send the client to a lawyer." The honest problem with that handoff: it's a $500–1,500 bill, a one-to-three-week wait, and the client often disappears into the lawyer's relationship — taking the CPA out of the loop.
There's a third option. IntelliDoc Agency drafts and redrafts NDAs, contractor agreements, and operating agreements for small businesses in 2–4 hours, starting at $75. No retainer. No discovery call. The CPA stays in the loop because the document goes back to the client through the same email thread the CPA started.
A handful of CPAs across the country have started referring document work this way when a clause needs more than a comment or two. It keeps the relationship warm, gives the client a real answer, and skips the law-firm wait.
Need a clean agreement drafted?
NDAs, contractor agreements, and operating agreements drafted in 2–4 business hours, starting at $75. No retainer, no discovery call.
Start an Order →Want the checklist as a one-page PDF?
We put together a free 5-point NDA Checklist your clients can use as a quick sanity check before signing anything. No spam, no retainer — built specifically so professional services firms (CPAs, consultants, financial advisors) can hand it to small business clients.
Download the 5-point NDA Checklist (free) →
This article is for informational purposes only and does not constitute legal advice. Indemnification provisions vary significantly by state and by contract type. CPAs are encouraged to know the limits of their professional scope; for material exposure or industry-specific questions, consult a licensed attorney in your state.
Written by the team at IntelliDoc Agency — a professional document service for small businesses in the US, based in Charlotte, NC. We are not a law firm.