Quick Answer
Risk transfer and indemnity agreements are contractual provisions that shift legal and financial responsibility for losses from one party to another. When properly structured and backed by verified insurance, they protect your business from paying for mistakes made by vendors, contractors, or suppliers. Without a formal program, your company absorbs losses that others caused.
An indemnity agreement is a contractual provision in which one party agrees to assume financial and legal responsibility for specific losses that may be suffered by another party during the course of a defined business relationship or activity. In practice, most business owners encounter these provisions inside vendor contracts, supplier agreements, and customer master service agreements, often without fully understanding the scope of what they have accepted.
We hear from business owners all the time: “I signed the contract, but I didn’t really know what I was agreeing to.” Or: “My supplier caused the problem, but the lawsuit came to me.” Or, the one that stings the most: “I was the only one in the chain with real insurance, so I ended up paying for everyone.” These are not edge cases. They are the predictable result of entering into business relationships without a formal risk transfer program built around properly structured indemnity agreements.
Gordon explains contractual risk transfer and how indemnity agreements protect your business
The Coyle Group specializes in the complex, high-value risks that other agencies don’t know how to structure. We work with business owners across manufacturing, distribution, professional services, and construction to build contractual risk transfer programs that actually hold up when a claim hits.
In the past we have written about the need for every business, regardless of size, to have a risk transfer plan in place and to be strategic about indemnity agreements. To understand this further, let’s define in basic terms what each of these elements of the conversation are, and then build out the full structure your business needs to be protected.
What Is an Indemnity Agreement?
An indemnity agreement is a contract provision where one party agrees to protect another from specific claims, losses, or damages arising from a defined activity or relationship. Most business owners encounter them inside vendor contracts, purchase agreements, or service engagement letters, often without fully registering the scope of liability they have just accepted. The key variable is not whether the agreement exists, but which form it takes.
According to the International Risk Management Institute (IRMI), indemnity agreements are commonly referred to as hold harmless agreements and come in three distinct forms, each with a different scope of liability transfer.
What Are the Three Types of Indemnity Agreements?
The three types of indemnity agreements are defined by how much liability is transferred relative to each party’s fault:
The form used in any specific agreement determines how much liability you absorb when a claim occurs. Most business owners who come to us have signed broad form agreements without recognizing it. That means they have accepted responsibility for losses that were entirely the other party’s fault. Whether broad form language holds up in court depends entirely on the state where the contract is executed and where the loss occurs, which creates its own layer of exposure that most business insurance programs are not designed to address.
The Legal Information Institute at Cornell Law defines indemnity as a commitment by one party to compensate another for any prospective loss or damage, frequently used in insurance contracts and business agreements. In plain terms, when you sign an indemnity agreement, you are promising to stand in front of someone else’s liability exposure.
Do Indemnity Agreements Hold Up in Every State?
Indemnity agreements are recognized in all 50 states, but the form and scope of what is enforceable varies significantly depending on where the contract is executed and where the work is performed. Broad form indemnity agreements in particular are subject to anti-indemnity statutes in many states that limit or void certain provisions entirely.
Anti-indemnity statutes exist to prevent one party from contractually shifting liability to another for losses caused entirely by the first party’s own negligence. These statutes are most commonly applied to construction contracts, but many states extend them to other commercial agreements. States with active anti-indemnity statutes affecting commercial contracts include California, New York, Texas, Florida, and approximately 40 others in varying forms.
What this means in practice: if your contracts use broad form indemnity language and a claim occurs in one of these states, the indemnity clause may be struck by a court, leaving you without the protection you assumed you had. This is exactly the kind of contractual exposure that requires both legal review and insurance program alignment, not just one or the other. Your attorney handles the language. Your broker confirms the insurance behind it can actually respond.
Contact us to review how your current contracts hold up under your state’s rules.
How Contractual Risk Transfer Works
Contractual risk transfer is the legally binding process of shifting certain risks from one party to another through a contract, and indemnity agreements are the primary mechanism for doing so. The indemnity language alone is not enough. We hear from business owners regularly who had solid-sounding contract language but no way to collect on it because the vendor on the other side carried no insurance and had no assets.
What we are really talking about is contractual risk transfer: the ability of one party to transfer certain risks to another party via a contract. This is commonly done via an indemnity agreement embedded within an operative contract, purchase agreement, or some other form of engagement letter. In its most basic sense, an indemnity agreement says that you will agree to hold the party you are engaging with harmless from any and all claims that may arise from the performance of the agreement you are signing, or from your ongoing business relationship.
Think of risk transfer as a process you engage in every time you enter into agreements with third parties such as suppliers, contractors, service providers, and other vendors. It is not a one-time document. It is a programmatic approach to how your business manages the liability exposure that comes with every third-party relationship you have.
Travelers Insurance describes contractual risk transfer as “a legally binding way to transfer risk to the party that may be in the best position to control the risks related to the service to be provided.” The goal is not to eliminate risk, but to make sure the party responsible for creating a risk is also responsible for paying when that risk becomes a claim.
A Real Example: Mr. Pickle and the Supermarket
Say you are a food processor. Your company, Mr. Pickle, makes pickles of all types and can be found in supermarkets and big box stores across the region. Your sales department lands a large supermarket chain as a customer after years of trying to sell them your line of pickles. Once the handshakes are done, the supermarket sends you a new vendor package containing all the insurance requirements, quality control requirements, and dozens of other documents to fill out and sign, including a contract with an indemnity agreement.
You send the insurance requirements to your insurance broker who reviews them carefully and informs you whether or not you have all the needed coverages and limits required for this customer. Once that is done, they send the required certificate of insurance to the supermarket’s risk management department. An important step in the risk transfer process is to have your general counsel or outside counsel review the documents before returning them to the supermarket, to make sure there is nothing out of the ordinary and that everything is in compliance with your risk tolerance and insurance structure.
You have now completed the engagement process with this new customer. Not so fast.
What you must recognize is that while you’ve gained a great customer, you’ve also accepted potentially stringent liabilities under that new agreement.
The answer is yes. All your suppliers and service providers should be treated as if they are a party to the contract you just signed.
As a pickle manufacturer, you rely on several key suppliers: vegetable wholesalers, vinegar and spice sellers, and jar manufacturers.
Because your company signed a strong indemnity agreement with the supermarket, all of those claims are going to be primarily your problem. To help mitigate these risks, you need a programmatic method of transferring risks back to your suppliers, vendors, and contractors, much the same way the supermarket did with Mr. Pickle, on top of having a comprehensive insurance program.
Two Claims Mr. Pickle Didn’t Cause But Had to Pay
Claim 1: The Allergen That Wasn’t Disclosed
A spice manufacturer failed to inform Mr. Pickle that a certain spice used in almost all of their jars was processed in a machine that also processed peanuts, a known allergen. Several consumers became very ill due to a peanut allergy and sued Mr. Pickle directly. Supermarkets that carried the product had to clear shelves and submitted product destruction costs to Mr. Pickle for reimbursement. While Mr. Pickle’s insurance may pay for most of these claims, if they had sufficient limits of coverage, there was still significant lost time, damaged reputation, and lost profits. With a solid risk transfer program in place, Mr. Pickle could have tendered those lawsuits back to the spice manufacturer.
Claim 2: The Trucking Company’s Parking Lot Accident
Mr. Pickle doesn’t own trucks, so he hires a trucking firm to deliver to customers including the supermarket. During delivery, the hired truck driver is distracted and strikes a pedestrian in the parking lot, causing serious injuries. The pedestrian sued the trucking company and the supermarket. The supermarket turned around and sued Mr. Pickle through the indemnity agreement. Mr. Pickle had no direct fault in the accident, but because of the contractual relationship, they were dragged into the suit. If Mr. Pickle had a contract with the trucking company that included an indemnity agreement, they could pass that suit back to the trucking firm, saving Mr. Pickle and their insurer from most of the expense and protecting rates at next renewal.
As you can see, engaging your supply chain and distribution chain in an effective risk transfer program minimizes risk across your entire organization. The objective is to shield your company from unwarranted losses and reduce the impact claims have on your loss ratio and resulting renewal premiums.
Who Needs a Risk Transfer Program?
Any business that contracts with outside parties needs a formal contractual risk transfer program. The industries where we see the most uninsured losses from missing or poorly structured indemnity agreements include manufacturing, distribution, construction, food production, real estate management, and professional services.
If your business relies on vendors, suppliers, subcontractors, or service providers of any kind, the question is not whether you need risk transfer, it is how well structured your current program is. Travelers Insurance specifically identifies manufacturing, professional services, real estate management, and construction as industries where contractual risk transfer is particularly critical, noting that “manufacturing and technology companies use risk transfer language in their contracts for distribution and supplies, as those contracts could affect products liability.”
Gordon on contractual risk transfer for businesses that rely on third-party vendors and suppliers
Here is a brief breakdown by industry of how risk transfer exposure tends to appear:
The Five Elements Every Risk Transfer Program Requires
A complete contractual risk transfer program requires five elements working in coordination. Most businesses we review have one or two of these in place. Missing even one can void the transfer entirely, leaving you paying a loss you contractually should not have had to cover.
1. Indemnity and Hold Harmless Language
The contract itself must include clearly written indemnity language that defines which party is responsible for which categories of loss. Vague or overly broad language invites disputes. The language should specify the form (limited, intermediate, or broad), the scope of activities covered, and the governing law. Your legal counsel should draft or review this language for every category of third-party relationship you maintain.
2. Insurance Procurement Requirements
Your contracts must require the other party to carry specific types and amounts of insurance. This is where the contract and the insurance program must speak the same language. If your contract requires $2 million per occurrence in general liability coverage but your vendor only carries $1 million, the gap is yours to absorb when a claim exceeds their limit.
3. Additional Insured Status
Requiring vendors and contractors to name you as an additional insured on their policies means their insurance can respond to a claim against you that arises from their work. A certificate of insurance alone does not create additional insured status. You need a formal endorsement from their carrier, and you need to verify it before work begins, not after a claim is filed.
4. Waiver of Subrogation
When you are added to a contractor’s insurance policy, a waiver of subrogation clause prevents their insurance carrier from coming after you to recover claim payments, even if you were partially responsible for the loss. Without this clause, even a claim that appears to be settled can resurface as a subrogation demand months later.
5. Primary and Non-Contributory Wording
This clause clarifies that the vendor’s insurance responds first to any claim, before yours contributes anything. Without it, your carrier and the vendor’s carrier can dispute which policy is primary, delaying the claim response and creating coverage gaps. This language matters most when you are the downstream party being dragged into a claim that originated with a third party.
Understanding how much liability protection your program actually provides is the starting point. Contact us to review your current contract language against these five elements.
What Insurance Must Back Your Risk Transfer Contracts
Contractual risk transfer only holds when the insurance program is structured to support it. The contract language and the policy wording must be aligned, or coverage disputes fill the gap. These are the core coverages that respond to indemnity claims.
General Liability Insurance
This is the foundational coverage for contractual liability. Most general liability policies include a contractual liability coverage grant, but it has exclusions. Knowing what your policy excludes from contractual liability is as important as knowing what it covers. Understanding how much general liability coverage is actually enough for your contract requirements is a question your broker should be able to answer specifically, not generally.
Commercial Umbrella and Excess Liability
When a single claim exceeds your primary policy limits, the umbrella policy responds. Most major customer contracts require umbrella limits as a condition of doing business. The question of how much excess liability protection is actually enough depends on your specific contractual obligations and the scale of your operations, not a default $1 million limit.
Errors and Omissions (E&O) or Professional Liability
For service businesses, consultants, and technology companies, professional liability insurance covers negligent acts, errors, or omissions in the delivery of professional services. Many client contracts require this coverage specifically because the indemnity language in the agreement creates professional liability exposure that general liability alone will not cover.
Workers’ Compensation
When a vendor or subcontractor’s employee is injured on your premises, the workers’ compensation implications can be complex. If that worker’s employer does not have workers’ comp, the exposure can default to you as the contracting party under certain state laws. The employee vs. independent contractor distinction is especially important here.
Indemnity Caps
Many commercial contracts also include an indemnity cap, a provision that limits the indemnitor’s financial obligation to a defined dollar amount regardless of the actual loss. The cap is typically set at the value of the contract, the limits of the indemnitor’s insurance policy, or a negotiated fixed amount. If you are the indemnified party, the cap should be set at or above the largest foreseeable claim from that vendor’s work. If you are the indemnitor, the cap should align with your umbrella coverage limits so that every obligation within it is fully insured.
Contracts and Insurance Programs Must Be Designed Together
As the Partners Group notes, “Many organizations rely heavily on indemnification provisions, but that alone is rarely sufficient.” Misalignment between contract language and policy wording is one of the most common causes of coverage disputes and denied claims. If you have not had a structured review of how your current insurance program supports your contractual obligations, the diagnostic insurance review is a good place to start.
What Risk Transfer Failure Actually Costs
When risk transfer fails, whether because the contract language is missing, the vendor’s insurance is not in place, or a vendor let their policy lapse, the financial exposure defaults to the party that holds contractual responsibility. Knowing the cost of failure is what makes the case for investing in a formal program.
Defense costs in commercial liability suits regularly reach six figures before a judgment is entered, regardless of whether the defendant is ultimately found liable. A business dragged into a slip-and-fall, a product contamination, or a professional liability claim through an indemnity agreement faces those costs immediately, before any fault is assigned. Without a risk transfer mechanism in place, there is no one to tender the claim to.
The compounding problem is what happens to your loss ratio and insurance premiums over time. Claims your company absorbed because a vendor had no insurance count against your loss history, which drives up your renewal costs for years after the claim closes. The strategic risk process treats risk transfer as a loss prevention tool, not just a legal formality, because the financial impact extends far beyond the single incident.
There is also the cost of managing an uninsured vendor’s claim yourself: legal time, management distraction, reputational exposure with your own customers, and the possibility that your largest customer relationship is put at risk because a supplier you brought into the relationship didn’t have their paperwork in order. Common problems with business insurance often trace back to exactly this gap: the insurance program looks right on paper, but it was never stress-tested against the actual contracts the business operates under.
Common Mistakes in Contractual Risk Transfer
Most risk transfer failures are preventable. These are the patterns we see repeatedly across manufacturing, distribution, construction, and professional services clients.
Why The Coyle Group Is the Right Partner for Risk Transfer
The Coyle Group works with businesses that have outgrown one-size-fits-all coverage and are dealing with complex contractual risk structures that most agencies don’t know how to address. We don’t write simple policies. We build insurance programs that are specifically designed to support the contractual obligations our clients operate under every day.
Our approach to risk transfer involves reviewing every major vendor and customer contract, confirming that the insurance program is structured to respond, and building a COI tracking process that keeps the program current. We have done this for manufacturers, distributors, construction firms, importers, and professional service firms across the region.
If a claim hits a client of ours and it involves a third party, we want to be in a position to tender that claim immediately, not spend weeks figuring out why the transfer didn’t hold. That requires the right language, the right insurance, and the right verification process, all in place before anyone picks up the phone to report a loss. To find out more about how you can create an effective risk transfer program in your organization, book a call with us or drop us a message and let’s talk.
What Every Indemnity Agreement Must Include
A well-structured indemnity agreement does more than identify the indemnitor and indemnitee. Each of the following clauses must be present for the agreement to be enforceable and actually useful when a claim occurs.
Indemnification and defense language
The agreement must include the phrase “indemnify, defend, and hold harmless.” The word “defend” is critical. Without it, the indemnitor may owe nothing until a court enters a final judgment, leaving you to carry all defense costs out of pocket even if you ultimately win.
Scope of coverage
The agreement must specify exactly which acts, activities, or relationships trigger the indemnity. Vague scope language is resolved by courts in favor of the indemnitor, not the party seeking protection. The more precisely the scope is defined, the more enforceable the agreement.
Governing law and jurisdiction
Because anti-indemnity statutes vary state by state, the contract must specify which state’s law governs and which courts have jurisdiction. This single clause can determine whether the entire indemnity is enforceable or void.
Notice and defense procedures
The agreement must spell out how and when the indemnitee notifies the indemnitor of a claim, and what response steps the indemnitor must take. A missing notice clause gives the indemnitor grounds to argue they were not properly informed and are therefore not obligated to respond.
Settlement and consent
This clause defines how settlement decisions are made and requires each party to obtain consent before settling a covered claim. Without it, the indemnitor could settle for terms that are unfavorable to the indemnitee, including terms that create additional exposure.
Duration
Indemnity obligations must specify how long they survive after the contract ends. Some claims, particularly those involving latent defects, product liability, or long-tail professional exposures, can arise years after the work is complete. A well-drafted duration clause prevents the indemnitor from arguing the obligation expired.
If any of these elements are missing from your current vendor or customer contracts, the agreements may not hold up when a claim is filed. The Diagnostic Insurance Review is designed to surface exactly these gaps across your full contract portfolio. Book a call to discuss how your current agreements are structured.
Author’s Expertise
This article was written by Gordon B. Coyle, CPCU, ARM, AMIM, PWCA, CEO of The Coyle Group, who has over 40 years of experience working with business owners of all sizes and industries across the US, solving their insurance challenges, including complex contractual risk transfer programs for manufacturers, distributors, construction firms, and professional service organizations.
