contracts
How to Review a Scope of Work: A Clause-by-Clause Checklist
Adira EditorialLegal AI desk5 min read
How do you review a scope of work? Review a scope of work by reading it section by section and asking one question of each: is this specific enough that both sides would agree, months from now, whether the work was done? A scope of work is where projects succeed or fail, so the sections that matter most are the deliverables, the acceptance criteria, the exclusions, and the client dependencies. This checklist walks through a scope of work in the order its sections usually appear, with the red flags to catch. It is written for both sides: the client buying the work and the provider delivering it. This is general information, not legal advice. For a large or high-value engagement, have the contract the scope sits in reviewed by a professional. ## 1. Objectives - Does the scope state a measurable objective, not just a list of activities?
- Would both sides agree on what success looks like? Red flag: activities with no outcome. Effort gets spent without anyone able to say whether the goal was met. ## 2. Deliverables - Is each deliverable concrete, with a specification and a due date?
- Could a stranger tell, by looking, whether each deliverable was delivered? Red flag: deliverables named in one or two words, such as "website" or "report", with no specification. This is the single biggest cause of project disputes, because each side pictures something different. ## 3. Out of scope and exclusions - Is there an explicit out-of-scope list?
- Are the obvious adjacent items, maintenance, content, migration, support, addressed one way or the other? Red flag (provider): no exclusions, so every "while you're at it" request is arguably included. Red flag (client): core things you assumed were included are quietly listed as out of scope. ## 4. Timeline and milestones - Are milestones dated, and is payment tied to accepted milestones rather than elapsed time? Red flag (client): payment tied to the calendar rather than to delivery, so you pay on schedule even if the work slips. Red flag (provider): all payment at the end, so you fund the whole project. ## 5. Acceptance criteria - Is it clear how a deliverable is accepted, and against what test?
- Is there a deemed-acceptance rule and a realistic review window?
- What happens when a deliverable is rejected? Red flag (provider): acceptance entirely at the client's subjective satisfaction, with no objective test and no deemed acceptance, so payment can be withheld indefinitely. Red flag (client): a deemed-acceptance window so short you cannot realistically review. ## 6. Roles, responsibilities and dependencies - Are the client's responsibilities listed, with dates: access, data, content, approvals, a named contact?
- Does the scope say what happens if a client dependency is late? Red flag (provider): no client obligations listed, so when the client causes a delay you still carry the blame and the cost. Most project delays trace back to the client, so this section protects the provider. ## 7. Fees and caps - Is the pricing basis clear, and for time and materials is there an estimate and a not-to-exceed cap? Red flag (client): open-ended time-and-materials pricing with no cap. Red flag (provider): a fixed fee for a scope that is too vague to price safely. ## 8. Change control - Does the scope require a written change order before any changed work begins? Red flag: no change-control link, so changes happen informally and the scope stops being the source of truth. Without it, both sides lose track of what was actually agreed. ## 9. Fit with the master agreement - Does the scope sit correctly under a master services agreement that carries the legal terms, liability, IP, confidentiality?
- Do any legal terms in the scope contradict the master agreement? Red flag: important legal terms buried in the scope that conflict with the master agreement, creating uncertainty about which governs. ## Common scope-of-work mistakes The most common mistake is writing the scope as a list of activities instead of a set of outcomes. "We will design, build and test" describes effort, not results, and leaves no clear point at which the work is done. Anchor the scope to deliverables you can point at and tests you can run. The second mistake is an empty or missing exclusions section: when nothing is ruled out, every later request is arguably included, and the provider absorbs it or the relationship sours. Spend as long on what is out of scope as on what is in. A third mistake is ignoring the client's own obligations. A scope that lists only the provider's tasks hides the fact that the project depends on the client delivering content, data, access and approvals on time. When those slip, the scope should make clear that dates and cost move through a change order, rather than the provider silently carrying the delay. A fourth is leaving acceptance subjective: "to the client's satisfaction" with no test and no deadline turns sign-off into a negotiation that can stall payment indefinitely. Read the scope asking whether, six months from now, a neutral reader could decide from the document alone whether the work was done. If not, it needs tightening before anyone signs. ## A fast triage If you only have ten minutes, read four sections: the deliverables (clause 2), the acceptance criteria (clause 5), the exclusions (clause 3), and the client dependencies (clause 6). Those decide what is being built, how you prove it is done, what is not included, and who is blamed when things slip. ## Where a contract workspace helps One scope of work is easy enough to review by hand. The strain shows across many engagements, when each scope has to stay in step with its master agreement and change orders, every milestone and acceptance date has to be tracked, and a vague deliverable or missing exclusion must not slip through into a dispute. Drafting a scope, reviewing it against the master agreement, tracking those dates, and governing every engagement you take on can live in one AI workspace shaped around how your company sells and delivers work. A workspace like Adira is built on exactly that one-place approach.
Frequently asked questions
- What is the biggest red flag in a scope of work?
- A vague deliverable. If a deliverable is named in one or two words with no specification, such as 'website' or 'report', each side pictures something different and the project ends in a dispute about whether the work was done. Close behind is subjective acceptance, where a deliverable is accepted only at the client's satisfaction with no objective test, which lets payment be withheld indefinitely.
- As a provider, how do I protect myself in a scope of work?
- List the client's responsibilities and dates, because most delays trace back to late client content, approvals or access, and without those obligations you carry the blame. Insist on acceptance criteria with an objective test and a deemed-acceptance window, tie payment to accepted milestones, and for time-and-materials work include an estimate and cap. Finally, require a change order before any changed work begins so scope creep becomes a priced change.
- Should legal terms like liability and IP go in the scope of work?
- Usually not. The scope of work should describe the work itself: objectives, deliverables, timeline and acceptance. The legal terms, liability, IP ownership, confidentiality and governing law, belong in the master services agreement the scope sits under. Keeping them separate avoids conflicts, but check that nothing in the scope contradicts the master agreement, because that creates uncertainty about which governs. This is not legal advice.
Sources
Was this useful?
See how Adira drafts in your voice and reads contracts from your side.
Explore the showroomWorking through a contract like this? Weave is Adira’s free tool to read, mark up, and connect any contract in your browser — no account needed.
Try Weave — free