Quick answer
Flag risks that could change who is bound, what must be delivered, how much will be paid, who owns or may use the outputs, who carries a loss, and how either party can exit or enforce the agreement. Start with seven headings: entity and authority; scope, acceptance and changes; fees and remedies; intellectual property, confidentiality and personal information; liability, indemnities and insurance; term and termination; and dispute forum.
How to use this guide
An early flag is not a conclusion that a clause is unlawful or unenforceable. It is a reason to obtain evidence, negotiate clearer wording or seek advice before signing. South African company, consumer, credit, data and competition rules do not apply identically to every service agreement. Record the factual trigger rather than attaching a statute to the contract merely because the clause sounds familiar.
Flag the wrong entity or uncertain authority first
Compare the legal name and registration number in the draft with the quotation, invoice details, CIPC record and party that will actually perform. Flag trading names used without the registered entity, a group company that receives the benefit without taking obligations, an affiliate that owns the key assets, or a signatory whose authority is unexplained.
The Companies Act places management of a company's business and affairs under its board, subject to the Act and memorandum of incorporation, but outsiders may have statutory or common-law protections. Makate v Vodacom shows why apparent authority depends on representations and the surrounding facts. A CIPC director listing does not by itself prove authority for a particular transaction, while an undisclosed internal delegation limit does not automatically free a company from an agreement.
Ask for proportionate evidence: a delegation, resolution, power of attorney or procurement approval where the value or risk justifies it. Flag any requirement that your own employee can approve unlimited work, waive rights or settle claims by ordinary email without a clear mandate.
Flag scope that cannot be measured or accepted
Underline phrases such as “as required,” “reasonable support,” “industry standard,” “best efforts” and “complete solution” where no measurable content follows. For each important service, identify the output, volume, location, timing, customer dependency, service level, exclusion and evidence of completion. A definition in one schedule can alter a promise in another, so check the priority between the main agreement, statement of work, service level, proposal, purchase order and online terms.
Flag acceptance that occurs immediately, by silence, by any use or before the customer can test the correct version. For continuous services, distinguish acceptance of implementation deliverables from monthly service-level measurement. Record who may reject, what counts as a defect, the cure and retest process, and whether repeated failure produces a service credit, termination right or another remedy.
Change control is a separate risk. Identify who may request and approve a change, what price and schedule information must be supplied, and when approval binds each party. South African courts read contractual text with context and purpose. Do not assume informal conduct will repair a vague scope later, especially where the agreement requires written amendments.
Flag fees that cannot be reproduced
Recalculate a normal month, a peak month, a delayed customer dependency, an urgent change and an early exit. Flag prices based on undefined users, transactions, hours, environments or “then-current” rates. Confirm whether VAT, travel, third-party licences, cloud use, data export, transition help and after-hours work are included. Test minimum commitments, automatic increases, deposits, expense approval and foreign-currency conversion.
Link every invoice trigger to delivery, acceptance, usage evidence or a calendar event. Flag a short invoice-objection period that purports to waive every later defence, and a suspension right that could block access to paid services or customer data during a genuine dispute.
Interest, penalties, accelerated minimum fees and forfeited deposits require classification. Do not hard-code a prescribed interest rate without checking the current legal position, and do not assume every late fee or exit charge will be recovered merely because the draft calls it agreed damages. Deferred payment with a fee, charge or interest can also require National Credit Act analysis, including possible incidental-credit treatment, depending on the parties and arrangement.
Flag ownership, confidentiality and data gaps
Separate background intellectual property from new outputs. Identify what each party brings, what will be created, who may reuse methods and templates, whether subcontractors have supplied rights, and what licence survives termination. Payment does not automatically transfer every copyright. The Copyright Act contains work-specific ownership rules, and an assignment must satisfy its written-signature requirement.
Flag a clause that treats confidential information, personal information, customer data and intellectual property as interchangeable. They require different rights and controls. Confidentiality should cover permitted recipients, purpose, security, compelled disclosure, duration and return or destruction without pretending that an NDA transfers ownership.
If the provider will process personal information, map the actual systems, data subjects, locations, subprocessors, retention and deletion. POPIA may require responsible-party and operator duties, security safeguards, incident cooperation and cross-border conditions. A promise to “comply with POPIA” or obtain consent does not allocate the operational work or prove that consent is the correct justification.
Flag liability, indemnity and insurance mismatches
Read the limitation, exclusions, indemnities, warranties and insurance together. Flag unlimited liability, a cap based on a very small fee period, exclusions from the cap that swallow it, or a cap that applies only to one party. Identify whether indirect or consequential loss is defined and whether the excluded category includes the deal's most foreseeable loss, such as restoration costs, data loss, third-party claims or replacement services.
For each indemnity, record the triggering event, claimant, covered loss, causation standard, defence control, settlement consent and survival period. A customer indemnity for every third-party claim “arising from use” may cover risks the customer cannot control. A supplier indemnity may be of little practical value if it excludes the principal IP, data or subcontractor exposure.
Exemption clauses are interpreted carefully and must be incorporated and brought to attention where required. The CPA may impose additional notice, fair-term, service-quality and prohibited-clause controls where it applies. Do not state that all liability caps are valid or invalid without the clause, transaction and statutory facts.
Insurance is evidence, not a cure. Ask for the policy type, insurer, limit, deductible, territory, retroactive date, important exclusions and current certificate. Confirm that the insured activity and likely claim match the obligation. An indemnity does not create cover, and a certificate does not guarantee that an insurer will accept a future claim.
Flag term, termination and exit traps
Write down the start date, initial term, renewal mechanism, objection deadline and every termination route. Flag automatic renewal at an unspecified price, a notice window that is easy to miss, termination for convenience available only to one party, or a breach process with an unrealistic cure period or unusable notice address.
Separate remediable breach, material breach, insolvency, repeated service failure, repudiation and convenience termination. Do not assume any breach permits immediate cancellation. Check accrued fees, prepaid amounts, deposits, transition assistance, data export, licence survival, confidentiality and deletion for each exit scenario.
Flag an impractical dispute forum
Check governing law, court jurisdiction, negotiation steps, mediation, expert determination, arbitration, urgent relief and service addresses. Flag inconsistent clauses, a foreign forum unrelated to the deal, an arbitration seat and rules that are not identified, or escalation steps that can indefinitely delay urgent protection.
Domestic and international arbitration have different statutory frameworks. A dispute clause should also be tested for cost, confidentiality, technical expertise, appeal limits, interim relief and enforcement. A governing-law sentence alone does not settle which court has jurisdiction.
Apply conditional statutes only after identifying the trigger
The CPA requires a scope analysis. For many juristic-person consumers, the published threshold is R2 million in asset value or annual turnover at the time of the transaction, but exclusions and transaction-specific rules still matter. Section 14's fixed-term provisions exclude transactions between juristic persons even where another CPA provision may apply. Do not present ordinary business-to-business services as automatically covered.
The NCA becomes relevant only if the arrangement fits its definitions and coverage rules. The Competition Act requires relationship, conduct and market context; exclusivity, most-favoured pricing, information exchange, customer allocation and restraints are not automatically prohibited merely because they restrict conduct.
Convert the flags into a risk register with the clause, factual concern, financial or operational consequence, evidence needed, proposed change, owner and deadline. Escalate any single risk the business cannot price, control or exit. The purpose is not to predict litigation. It is to stop an unresolved legal or operational assumption from becoming a signed obligation.
Important limitation
This is general South African contract-risk information. It does not decide authority, statutory coverage, insurance cover, enforceability, liability or the correct forum for a particular agreement.
FAQs
Why is an unlimited-liability clause an early service-agreement warning?
It can expose the business to losses far beyond the contract value and may interact with indemnities, data incidents, IP claims and uncapped exclusions. Model the likely claims and test whether the risk is controllable and insurable.
Does a provider's insurance certificate make a broad indemnity safe?
No. A certificate gives limited information at a point in time. The insured activity, limit, deductible, territory, exclusions and claim conditions must be compared with the indemnity; cover is never guaranteed by the certificate alone.
When can a service agreement raise POPIA issues before any data is shared?
When the planned service will process personal information. The parties should map roles, systems, recipients, locations, security, incidents, retention and deletion before access begins rather than relying on a generic compliance promise.
Is an exclusivity clause automatically prohibited by South African competition law?
No. Competition analysis depends on the parties' relationship, the restriction, market context and possible statutory treatment. Flag significant exclusivity, customer allocation or competitor information exchange for fact-specific assessment.
Related Lexuno paths
Related articles
Source notes
- Companies Act 71 of 2008
- Makate v Vodacom (Pty) Ltd [2016] ZACC 13
- University of Johannesburg v Auckland Park Theological Seminary [2021] ZACC 13
- Copyright Act 98 of 1978
- Protection of Personal Information Act 4 of 2013
- Consumer Protection Act 68 of 2008
- Consumer Protection Act juristic-person threshold notice
- National Credit Act 34 of 2005
- Competition Act 89 of 1998
- Durban's Water Wonderland (Pty) Ltd v Botha [1998] ZASCA 115
- Arbitration Act 42 of 1965
- International Arbitration Act 15 of 2017
Legal note
This article is general legal information for South African readers. It is not legal advice. Speak to a qualified legal professional about your specific facts before taking action.