15+ Years Experience

10,000+ Clients

Master Service Agreement

Master Service Agreement drafting — MSA + Order Forms / SOWs framework for B2B services; DPDP Act 2023, IT Act 2000, IP, indemnity, exit / portability.

Consult an Expert

4.9/5 Client Rating

100% Secure Process

MSA + SOW template drafting & negotiation: 3–6 weeks. Subsequent SOW signing under MSA: 2–5 working days each.

Quick Navigation

Overview Why It Matters How It Works Documents FAQs

In This Guide

Overview of Master Service Agreement

A Master Service Agreement (MSA) is the framework contract that governs an ongoing B2B service relationship — consulting, IT / SaaS, BPO, KPO, agency, marketing, engineering, design, professional services. The MSA sits on top, locking down the legal, commercial and risk terms once; specific engagements run underneath as Order Forms, Statements of Work (SOWs), Schedules or Work Orders that reference the MSA and add only the deal-specific terms — scope, timeline, fees, deliverables, acceptance criteria. By 2026, the MSA is also the contract that carries DPDP Act 2023 data-processing terms, IT Act 2000 reasonable security practices, IP ownership and licensing rules, indemnity caps, change control, termination and exit / portability obligations.

The legal architecture cuts across the Indian Contract Act 1872, the Specific Relief (Amendment) Act 2018 (which makes specific performance the default remedy and tightly regulates injunction / interim relief), the Digital Personal Data Protection Act 2023 (Data Fiduciary / Data Processor obligations, cross-border transfer rules, breach reporting), the Information Technology Act 2000 + SPDI Rules 2011 (reasonable security practices, sensitive personal data), and sector-specific overlays — RBI for financial services, IRDAI for insurance, SEBI for capital markets, MeitY guidelines for cloud / data hosting.

We draft MSAs end-to-end — buyer-side and supplier-side — for IT / SaaS providers, consulting firms, BPO / KPO operators, marketing / creative agencies, engineering services firms, and global capability centres (GCCs / GICs). The same team also drafts the Order Form / SOW templates that get used hundreds of times under the MSA umbrella.

The MSA + Order Form / SOW Architecture

MSA (Master / Framework):: Negotiated once, signed once, lasts the term of the relationship. Carries: governing law, IP, confidentiality, DPDP, indemnity, liability cap, insurance, termination, exit, dispute resolution, audit rights, anti-bribery, FCPA / UK Bribery Act, sub-contracting, assignment.

Order Form / SOW / Work Order:: Per-engagement document, references and is governed by the MSA. Carries only: scope of services, deliverables, milestones, fees, payment terms, project timeline, acceptance criteria, project-specific resources, project-specific change control. Should be signable in days, not weeks.

This architecture is the difference between a procurement organisation that signs ten MSAs a year and runs hundreds of SOWs under them, versus an organisation that re-negotiates the same legal terms on every project. Done right, MSA + SOW cuts contracting cycle time by 70-80%.

Pricing Models We Draft

Fixed Fee / Fixed Price:: Lump-sum for a defined scope; change orders priced separately; cost overrun on supplier; clearest acceptance criteria essential.

Time & Materials (T&M):: Hourly / daily rate cards by role / seniority; not-to-exceed cap; monthly time sheets; volume discounts at slab milestones.

Milestone / Deliverable-Based:: Payment tied to deliverable acceptance; staged release; retention until final acceptance.

Outcome / Output-Based:: Payment linked to KPIs (transactions processed, leads generated, uptime, response time); SLA-credits and bonus mechanism.

Subscription / Recurring (SaaS / Managed Services):
Monthly / annual subscription; auto-renewal; price escalation cap; user-based / consumption-based metering.

Clauses That Decide the Outcome

IP Ownership & Licensing:: Pre-existing IP retained; foreground IP allocated (work-for-hire to customer in most service deals; licence-back where supplier needs to reuse); residual knowledge clause; open-source disclosure.

DPDP Act 2023 Data Processing:: Data Fiduciary / Data Processor allocation; purpose limitation; security safeguards; breach notification timeline; data subject rights handling; cross-border transfer compliance; deletion / return on termination.

Confidentiality & Trade Secrets:: Survival period (typically 3-5 years post-termination, indefinite for trade secrets); permitted recipients; injunctive relief carve-out under Specific Relief 2018.

Indemnity, Liability Cap & Insurance:: Indemnity (IP infringement, data breach, third-party claims); liability cap (typically 1x-2x annual fees, uncapped for IP / data / wilful breach); professional indemnity + cyber insurance with customer named as additional insured.

Change Control & Service Levels:: Change request process, pricing impact, timeline impact, written approval; SLA targets, measurement, credits, chronic failure termination.

Termination, Exit & Portability:: Termination for cause, convenience, change of control; exit assistance period (typically 90-180 days); data return / migration; knowledge transfer; reverse-transition fee discipline.

Why Master Service Agreement Matters

MSA + SOW Architecture That Scales

Negotiate the legal terms once in the MSA; run hundreds of SOWs in days, not weeks — contracting cycle cut 70-80%.

Right Pricing Model Picked

Fixed / T&M / milestone / outcome / subscription — chosen on scope clarity, risk allocation, cash-flow, SLA architecture.

DPDP Act 2023 Data Processing Built In

Data Fiduciary / Processor roles, purpose, safeguards, breach notification, cross-border transfer, data subject rights — drafted, not bolted on.

IP Ownership Allocated Cleanly

Pre-existing / foreground IP, work-for-hire vs licence-back, residual knowledge, open-source disclosure — no post-deal IP disputes.

Indemnity Cap & Insurance Calibrated

1x–2x annual fees standard cap; uncapped for IP / data / wilful breach; professional indemnity + cyber insurance with customer as additional insured.

Termination, Exit & Portability Drafted Tight

90-180 day exit assistance; data return / migration; knowledge transfer; reverse-transition fee — locks supplier into orderly exit.

Process of Master Service Agreement

Step 1: Brief & MSA Architecture (1–2 Days)

Step 01

Service type, parties, sector, data sensitivity, regulatory overlay (DPDP, IT Act, RBI / IRDAI / SEBI), pricing model preference — captured.

Step 2: MSA Drafting (3–7 Days)

Step 02

Full MSA — governing law, IP, confidentiality, DPDP, indemnity, liability cap, insurance, termination, exit, dispute resolution, audit, anti-bribery.

Step 3: Order Form / SOW Template (2–3 Days)

Step 03

Standardised SOW template — scope, deliverables, milestones, fees, payment terms, timeline, acceptance criteria, project-specific change control.

Step 4: Negotiation & Mark-Up (1–4 Weeks)

Step 04

Counter-party mark-ups; commercial points (liability cap, IP, termination, exit, SLA credits, indemnity scope) negotiated; signature-ready version.

Step 5: Execution & Onboarding

Step 05

Stamping, signing, supplier onboarding (DPDP DPA, security questionnaire, insurance certificates, KYC, anti-bribery declaration); first SOW signed.

Step 6: Ongoing SOW Run-Rate & Governance

Step 06

Subsequent SOWs signed within days under MSA umbrella; quarterly governance reviews; SLA reporting; audit rights exercised; renewal / amendment cycle.

Documents Required for Master Service Agreement

Parties & KYC

CIN / PAN / GST of customer & supplier; constitutional documents; board resolutions; authorised signatory; PAN / Aadhaar of signatories

Commercial

Pricing model & rate card; payment terms; volume forecast; existing relationship contracts; vendor empanelment documents

Service Scope

Service catalogue / capability statement; SLA framework; project methodology; resource profiles; sub-contractor list

Compliance & Security

ISO 27001 / SOC 2 certificates; DPDP / privacy policy; security questionnaire; insurance certificates; anti-bribery / sanctions declaration

IP & Confidentiality

Pre-existing IP register; open-source inventory; trademark / patent / copyright register; existing NDA; confidentiality breach history

FAQs for Master Service Agreement

An MSA (Master Service Agreement) is the framework contract — negotiated once, signed once, lasts the relationship. It carries the legal, commercial and risk terms: governing law, IP, confidentiality, DPDP, indemnity, liability cap, insurance, termination, exit, dispute resolution. An SOW (Statement of Work) or Order Form is the per-engagement document that sits under the MSA — it carries only scope, deliverables, milestones, fees, timeline and acceptance criteria. Done right, this architecture cuts contracting cycle time on subsequent engagements from weeks to days.

Default Indian-law position is that the creator owns the IP unless assigned. In an MSA / SOW context, foreground IP (created specifically for the customer under the SOW) is typically assigned to the customer on a work-for-hire basis. Pre-existing IP (the supplier's tools, methodologies, frameworks, code libraries) is retained by the supplier with a licence-back to the customer for use of the deliverables. Residual knowledge — generalised know-how absorbed by employees — is typically excluded. Open-source components must be disclosed and licence terms passed through.

Where the supplier processes personal data on behalf of the customer, the customer is the Data Fiduciary and the supplier is the Data Processor. The MSA / DPA must specify: purpose and means of processing, categories of data, security safeguards, breach notification timeline (typically 24-72 hours), data subject rights handling, cross-border transfer rules, sub-processor approval, audit rights, deletion / return on termination, and cooperation in regulator inquiries. Without these, both parties face DPDP Act penalties (up to ₹250 crore for serious breaches) and contractual indemnity exposure.

Standard market practice in India is a liability cap of 1x to 2x the annual fees paid under the MSA / SOW for general damages. Uncapped (or super-cap) liability typically applies to: IP infringement indemnity, data breach / DPDP non-compliance, breach of confidentiality, gross negligence, wilful misconduct, fraud, and breach of anti-bribery covenants. Consequential / indirect damages (lost profits, business interruption) are typically excluded. The exact cap depends on deal size, sector, data sensitivity, and supplier insurance coverage.

Termination is the easy part — exit is where the relationship breaks. A well-drafted exit clause requires the supplier to provide reverse-transition assistance for 90-180 days post-termination, return / delete customer data in agreed format, hand over knowledge and documentation, train customer / replacement supplier resources, and continue to provide services at then-prevailing rates during the exit period. Without these, customers face data lock-in, knowledge loss and operational disruption — even after a clean termination on paper. This is especially critical in IT / SaaS, BPO and managed services.

Content Reviewed By

Mayank Wadhera

CA | CS | CMA | Lawyer | Insolvency Professional | IBBI Valuator

"I help founders increase real business value and achieve stronger valuations | Turning messy workflows into scalable, time-saving systems"

Next Steps for your Growth

Explore Other Services

Highly recommended professional services to further solidify your business compliance and operational reach.

Business Partnership Agreement

Partnership deed drafting under Indian Partnership Act 1932 / LLP Act 2008 — capital, profit-sharing, decision rights, exit, dispute resolution and tax-aligned structuring.

View Service

Change in LLP Agreement

Supplementary LLP Agreement and Form 3 / Form 4 LLP filings under the LLP Act 2008 — capture changes in business activity, contribution, profit-share or partner composition within 30 days.

View Service

Changes to LLP Agreement

Drafting, stamping and MCA filing of supplementary LLP Agreements — partner change, profit-sharing, contribution, business object — Section 23 & 30-day compliant.

View Service

Worked with 10000+ Clients & Associate Partners!

Why Choose Us

Why Legal Suvidha is The Right Choice for You

Expert Oversight

Every document is meticulously reviewed by our senior CAs and legal professionals to ensure zero errors.

Speed & Accuracy

Tech-enabled processes combined with domain expertise ensure the fastest turnaround times in the industry.

650+ High-Impact Compliance Services

From incorporation to monthly tax filings and complex legal agreements, we provide an end-to-end ecosystem for your business growth.

10K+

Clients

99%

Success

Dedicated Relationship Managers

Get personalized assistance from experts who understand your business goals. We don't just file papers; we build partnerships.

Consistently good service. Very accommodating to quick requests. I've been their customer for more than 4 years now.

5/5 Rating

VERIFIED

Vijay Jaganathan

Applied for gst registration and was done exactly in 3 days as promised... Good service...

5/5 Rating

VERIFIED

Pratiksha Tayal

Very nice experience to work with possessive precise knowledge and updated commercials in all fields

5/5 Rating

VERIFIED

Karthik Gupta

5/5 Rating

VERIFIED

Milind Chandwe

5/5 Rating

VERIFIED

Manish Bhatia

5/5 Rating

VERIFIED

Akhil Dutt

Very well and experienced team and really appreciate the whole team for the work. Very much satisfied and will keep continuing with them in future.

5/5 Rating

VERIFIED

Riyaz Rizvi

A great experience working with legal suvidha providers, they are wonderful in their response and meeting timelines.

5/5 Rating

VERIFIED

Sat World Capital Pvt Ltd

Excellent support & timely response. I am very happy with the overall service & their knowledge.

5/5 Rating

VERIFIED

sumanta bhattacharya

5/5 Rating

VERIFIED

Read Article

Section 8 Company Registration — NGO, Foundation and Non-Profit Setup Guide 2025

Set up a Section 8 Company for your NGO or foundation in 2026. Learn the INC-12 licence, 12AB & 80G, CSR-1 and FCRA steps in one structured guide.

Read Article

Master Service Agreement

Master Service Agreement drafting — MSA + Order Forms / SOWs framework for B2B services; DPDP Act 2023, IT Act 2000, IP, indemnity, exit / portability.

4.9/5 Client Rating

100% Secure Process

MSA + SOW template drafting & negotiation: 3–6 weeks. Subsequent SOW signing under MSA: 2–5 working days each.

The MSA + Order Form / SOW Architecture

MSA (Master / Framework):: Negotiated once, signed once, lasts the term of the relationship. Carries: governing law, IP, confidentiality, DPDP, indemnity, liability cap, insurance, termination, exit, dispute resolution, audit rights, anti-bribery, FCPA / UK Bribery Act, sub-contracting, assignment.

Order Form / SOW / Work Order:: Per-engagement document, references and is governed by the MSA. Carries only: scope of services, deliverables, milestones, fees, payment terms, project timeline, acceptance criteria, project-specific resources, project-specific change control. Should be signable in days, not weeks.

Pricing Models We Draft

Fixed Fee / Fixed Price:: Lump-sum for a defined scope; change orders priced separately; cost overrun on supplier; clearest acceptance criteria essential.

Time & Materials (T&M):: Hourly / daily rate cards by role / seniority; not-to-exceed cap; monthly time sheets; volume discounts at slab milestones.

Milestone / Deliverable-Based:: Payment tied to deliverable acceptance; staged release; retention until final acceptance.

Outcome / Output-Based:: Payment linked to KPIs (transactions processed, leads generated, uptime, response time); SLA-credits and bonus mechanism.

Subscription / Recurring (SaaS / Managed Services):
Monthly / annual subscription; auto-renewal; price escalation cap; user-based / consumption-based metering.

Clauses That Decide the Outcome

IP Ownership & Licensing:: Pre-existing IP retained; foreground IP allocated (work-for-hire to customer in most service deals; licence-back where supplier needs to reuse); residual knowledge clause; open-source disclosure.

DPDP Act 2023 Data Processing:: Data Fiduciary / Data Processor allocation; purpose limitation; security safeguards; breach notification timeline; data subject rights handling; cross-border transfer compliance; deletion / return on termination.

Confidentiality & Trade Secrets:: Survival period (typically 3-5 years post-termination, indefinite for trade secrets); permitted recipients; injunctive relief carve-out under Specific Relief 2018.

Indemnity, Liability Cap & Insurance:: Indemnity (IP infringement, data breach, third-party claims); liability cap (typically 1x-2x annual fees, uncapped for IP / data / wilful breach); professional indemnity + cyber insurance with customer named as additional insured.

Change Control & Service Levels:: Change request process, pricing impact, timeline impact, written approval; SLA targets, measurement, credits, chronic failure termination.

Termination, Exit & Portability:: Termination for cause, convenience, change of control; exit assistance period (typically 90-180 days); data return / migration; knowledge transfer; reverse-transition fee discipline.