How to Review an Outsourcing Agreement: A Clause-by-Clause Checklist

How to review an outsourcing agreement without missing what matters Reviewing an outsourcing agreement is about five things: whether the scope and transition are realistic, how the provider's performance is measured and enforced, how your data and people are protected, what you pay and how it changes, and how you can get the function back if the relationship ends. Because outsourcing hands over a whole function for a long term, the stakes are higher than in a simple services contract, and the transition and exit clauses matter as much as the day-to-day terms. This checklist works whether you are the customer buying the service or the supplier setting your own terms. This is general guidance, not legal advice. Outsourcing engages contract, employment, data-protection, tax and sometimes regulatory rules that vary by jurisdiction, so have a qualified professional review anything high-value or unusual. ## A fast first pass before you read clause by clause Spend two minutes on these. They set how carefully you read the rest. - What function is being outsourced, and is the scope clear? What is in, what is out, and the volumes.

• Is the transition plan realistic? How the provider takes over and by when.
• What are the service levels and consequences? Measurement and service credits.
• How do you exit? Term, termination, and the exit-management plan for your data and the function. ## The clause-by-clause checklist 1. Services and scope. Whether Schedule 1 defines the function precisely, with volumes, exclusions and assumptions. Red flag: a vague scope, which becomes a billing and performance dispute once the provider is running the function. 2. Transition. Whether there is a realistic plan and date for the provider to take over. Red flag: no transition plan, or one so compressed that the function is likely to break during handover. 3. Service levels and credits. Whether standards are defined, measured and backed by service credits, with persistent failure a termination trigger. Red flag for a customer: service levels with no teeth; red flag for a supplier: targets with no carve-out for customer-caused delay. 4. Personnel and staff transfer. How the provider's people are managed and whether any of your staff transfer. Red flag: silence on employee-transfer law where staff move, or no protection for key personnel you rely on. 5. Data protection and security. Whether data-protection duties, security measures, sub-processing limits and breach notification are set. Red flag: no restriction on where your data is processed or who it is passed to, or no breach-notification duty. 6. Charges and fee review. The charging model, extra-work rates and how charges can change. Red flag for a customer: fee reviews the supplier controls, or an open-ended rate card; red flag for a supplier: fixed charges across years with no review. 7. Governance and change control. Whether there are regular service reviews and a written change procedure. Red flag: no governance mechanism, so problems have nowhere to go until they become disputes. 8. Term and termination. The length, renewal, and grounds to end the agreement. Red flag for a customer: no right to terminate for persistent failure, or a heavy early-exit charge; red flag for a supplier: termination for convenience with no notice or cost recovery. 9. Exit management. What the supplier must do to hand the function back or to a new provider. Red flag: no exit plan, no data return, or assistance too short to avoid disruption. 10. Liability. The cap and the exclusion of indirect loss. Red flag: an uncapped liability on you, or a cap far below the value of the function being outsourced. ## Red flags to negotiate or walk away from - A vague scope or an unrealistic transition plan.
• Service levels with no measurement or no meaningful credits.
• Silence on employee-transfer law where your staff move to the supplier.
• Your data processed or sub-contracted anywhere the supplier likes, with no breach-notification duty.
• No exit-management plan, or data returned only after final payment.
• An uncapped liability, or a cap far below the value of the outsourced function. Raise these in writing before signing. On a multi-year outsourcing, the transition and exit terms are worth as much negotiating effort as the price. ## How to run this review in ten minutes Read an outsourcing agreement in the order that affects your risk, not top to bottom. 1. Start with scope and transition. These decide what is being handed over and whether the handover will work. A weak scope or transition undermines the whole deal.

2. Then read service levels, governance and charges together. Confirm how performance is measured and enforced, how problems are escalated, and how charges can change.
3. Then read data protection and personnel. Confirm your data is protected and that any staff transfer is handled lawfully.
4. Finally, read termination, exit management and liability. Confirm you can leave for persistent failure, get the function and your data back cleanly, and that liability is proportionate. Note every clause you would want changed and raise them together. If you are the supplier, getting your own standard terms right once means every customer signs the same fair agreement. ## A note on jurisdiction Outsourcing rules vary by jurisdiction. In India, the agreement is a contract under the Indian Contract Act, 1872, charges usually attract GST, data handling engages the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, and staff transfers engage labour law. In the UK and EU, employee-transfer rules can apply automatically, and regulated sectors add outsourcing-specific duties. Ireland, Singapore, Australia and the US differ again on data, employment and sector rules. Because outsourcing often crosses borders, treat "varies by jurisdiction" as the honest default rather than assume one rule covers all. ## Where a contract workspace helps One outsourcing agreement is manageable to read by eye. It grows harder across several, each with its own service levels, charges and exit terms, governance meetings and renewal dates to track, and obligations that run for years. The useful idea is to bring drafting, reviewing, tracking and governing outsourcing agreements into a single AI workspace tuned to your company, so transition, exit and data terms and the key dates sit together rather than apart. Adira brings those steps into one place.