Contracts

Vendor Agreement in India: 9 Essential Clauses You Cannot Skip

Scope of work, payment timelines under MSMED, limitation of liability, IP rights, and dispute resolution clauses every vendor agreement needs.

Check your DPDP readiness — free More on the blog

Vendor Agreement in India: 9 Essential Clauses You Cannot Skip

Commercial agreements between businesses and external vendors are often treated as standard procurement paperwork until a delivery fails, an invoice goes unpaid, or client data is leaked. In India, poorly drafted vendor contracts create severe exposures under the Indian Contract Act, the MSMED Act, and the DPDP Act.

The nine essential clauses every Indian vendor agreement needs

If your vendor agreement has no limitation of liability clause, you have effectively written a blank cheque for every direct business loss your counterparty incurs.

  • 1. Detailed Scope of Deliverables & Acceptance Criteria — Objectively defining deliverables, inspection windows, rejection timelines, and cure periods to prevent subjective payment withholding.
  • 2. Payment Terms Aligned with MSMED Act — Capping credit periods at 45 days if the vendor is Udyam-registered, and citing Section 16 interest terms to prevent disputes under MSMED Act Section 15.
  • 3. Limitation of Liability — Explicitly capping direct financial liability to a specific figure (e.g., 1x or 2x fees paid) and excluding indirect, consequential, and punitive losses under Section 73 of the Indian Contract Act.
  • 4. Indemnity Carve-Outs — Restricting indemnity obligations strictly to third-party IP infringement, gross negligence, wilful misconduct, and data privacy breaches, with clear defense procedures.
  • 5. Intellectual Property Rights & Work for Hire — Explicitly declaring whether custom deliverables belong to the client upon full payment, and safeguarding pre-existing vendor background IP.
  • 6. DPDP Data Processing Addendum (DPA) — Mandating technical safeguards, sub-processor consent, audit rights, and 24-hour breach notification if personal data is handled, complying with Section 8 of the DPDP Act.
  • 7. Confidentiality & Non-Disclosure — Protecting trade secrets, client lists, and technical architectures for a defined term (typically 2 to 3 years post-termination) backed by our standard NDA template.
  • 8. Termination for Cause & Convenience — Setting realistic notice periods (30 to 60 days), immediate termination triggers for material breach, and orderly transition handovers.
  • 9. Governing Law, Jurisdiction & Fast-Track Arbitration — Specifying domestic arbitration seated in a convenient Indian commercial city under Arbitration Act Section 7, avoiding multi-year civil litigation.

Drafting vs reviewing vendor contracts

Whether you are the enterprise customer engaging a supplier or an agency providing specialized services, always lead with your own balanced paper rather than signing standard supplier forms. Download our ready-to-execute vendor agreement template, execute a specialized master services agreement (MSA), or append our vendor DPA addendum to satisfy DPDP requirements.

Common questions

What are the most critical clauses in an Indian vendor agreement?

The non-negotiable clauses include: (1) Precise scope of work and milestones; (2) Statutory payment terms complying with the 45-day MSMED ceiling; (3) Limitation of liability capping monetary exposure; (4) Indemnity boundaries; (5) Intellectual property ownership and work-for-hire declarations; (6) DPDP data processing addendum; (7) Confidentiality; (8) Termination for convenience and cause; and (9) Governing law and arbitration seat.

What happens if a contract has no limitation of liability clause in India?

Under Section 73 of the Indian Contract Act, 1872, the breaching party is liable for all damages naturally arising in the usual course of things from the breach. Without an express monetary cap (e.g., total fees paid in the previous 12 months), liability is legally uncapped.

Can a vendor agreement stipulate 90-day payment terms for MSME vendors?

No. Section 15 of the MSMED Act, 2006 overrides private contract clauses, establishing an absolute statutory maximum of 45 days for registered micro and small enterprises. Any clause stipulating longer credit terms is void against the statute.

How does India's DPDP Act affect vendor contracts?

Section 8(5) requires Data Fiduciaries to bind third-party Data Processors by a valid contract ensuring reasonable security safeguards. A vendor handling customer personal data must sign a dedicated Data Processing Addendum (DPA).

Related reading

  • Understanding the Writing Requirement for Arbitration Agreements — Section 7 of the Arbitration and Conciliation Act mandates that arbitration agreements be in writing, and a mere venue clause does not satisfy the requirement, costing businesses delays and extra litigation if ignored
  • Cost of Ignoring Internal Committee Rules Under POSH Act — Failing to set up an Internal Committee or file the required annual report can attract a fine of up to fifty thousand rupees and, on repeat, double the penalty plus possible licence cancellation, threatening a small business’s ability to operate.
  • Understanding Section 73 Compensation for Breach of Contract — Section 73 limits recoverable damages to losses that naturally flow from a breach or were foreseen by the parties, excluding remote or indirect losses and reducing awards where the injured party failed to mitigate.

Written by Swaraj Layek

Founder & CEO at VidhiSar. I have watched four companies pay for the same mistake, and it was never the mistake anyone expected. VidhiSar is software, not a law firm: every answer names the section it relies on so you can check it, and anything turning on your specific facts is worth putting to a professional. More about who builds this