What is the difference between an MSA and a statement of work?

The MSA sets the standing legal terms that govern the relationship, such as liability, termination, and data handling. A statement of work sits underneath it and describes a specific engagement's deliverables, milestones, and acceptance criteria. One MSA typically covers many statements of work.

Does an MSA commit a customer to buy anything?

Generally no. An MSA establishes terms; the purchase commitment comes from an order form or statement of work executed under it. Some agreements include minimum commitments, but that is a negotiated term rather than an inherent feature.

Why does MSA negotiation take so long?

Redlines pass between two legal teams, each with internal review queues and standing positions on liability, indemnity, and termination. The elapsed time is usually driven by queue waits and approval chains rather than by disagreement on the substance.

What is an MSA? A practical definition for software sellers

Glossary · enterprise · 4 min read · last verified 2026-07-21

Reviewed before publication Editorial board Independent commercial review

In shortA master service agreement is the umbrella contract setting the standing legal terms between two companies, so individual orders and statements of work can be signed without renegotiating them.

A master service agreement (MSA) is the umbrella contract that establishes the standing legal terms between two companies, allowing individual purchases to be executed through short order forms or statements of work rather than a full negotiation each time. It defines liability, termination, renewal, and data handling once, and everything bought afterward inherits those terms.

What a master service agreement is

The MSA sits at the top of a document stack. Underneath it are the documents that describe what is actually being bought:

Order form — the commercial specifics: products, quantities, price, term dates
Statement of work (SOW) — for services engagements, the deliverables, milestones, and acceptance criteria
Data processing addendum (DPA) — how personal data is handled, and on what legal basis it may be transferred
Security addendum or exhibit — the security controls the vendor commits to maintaining
Service level agreement (SLA) — uptime or response commitments and the remedy when they are missed

A well-drafted MSA includes an order-of-precedence clause stating which document controls when they conflict. That clause is worth reading closely, because it determines whether a favorable term negotiated in an order form actually survives contact with the master terms.

The structural purpose is repeatability. Once an MSA exists, a second purchase can be a one-page order form. That is why an MSA is often the single most valuable artifact in a land-and-expand motion — the second sale skips the process that made the first one slow.

Why the MSA matters

Most of the terms in an MSA are never invoked. The handful that are invoked determine what happens in the two situations that actually cost money: something goes wrong, or the relationship ends.

Liability allocation decides who absorbs a loss when a failure causes damage.
Termination rights decide whether a dissatisfied customer can leave, when, and at what cost.
Renewal mechanics decide whether the contract continues by default or requires an affirmative decision.
Data terms decide what happens to customer data on exit, and how quickly.

Those provisions also shape competitive dynamics. An agreement with automatic renewal, a long notice window, and no termination for convenience raises the cost of leaving well beyond the price of the replacement product, which is one mechanism through which switching costs shape market share.

How MSA negotiation works

Most negotiations concentrate on a short list, regardless of industry:

Limitation of liability. The cap is commonly expressed as a multiple of fees paid over a preceding period, and the argument is about both the multiple and what falls outside it. Common carve-outs include confidentiality breaches, indemnity obligations, and gross negligence or willful misconduct.
Indemnification. Intellectual property indemnity is the usual centerpiece — the vendor defends the customer against claims that the product infringes someone's rights. Data breach indemnity is increasingly contested separately.
Termination. Termination for cause with a cure period is near-universal. Termination for convenience is not, and whether the customer gets it is often the most consequential item on the list.
Auto-renewal and notice. Whether the term renews automatically, and how much advance notice is required to stop it, sets the default outcome of every future renewal conversation.
Price protection. Caps on increases at renewal, and whether pricing extends to affiliates or additional business units.
Security and data. Breach notification timelines, subprocessor change notice, audit rights, and deletion or return of data at termination.
Assignment and change of control. Whether the agreement survives an acquisition on either side, and on what terms.
Governing law and venue. Rarely substantive to the business, frequently the item that consumes the most calendar time.

Redlines pass between counsel on both sides. The commercial teams' role is to decide which positions are worth the delay, which is a judgment neither legal team can make alone.

Common misconceptions

"The MSA is legal's problem." Legal drafts the language; the business owns the trade-offs. A liability cap accepted without commercial input can make a deal unprofitable at the first incident.
"Standard paper means fast." Enterprise buyers frequently insist on their own paper, and starting from a customer template can take longer than negotiating from the vendor's.
"Once signed, it is done." MSAs get amended, superseded, and inherited through acquisitions. Which version governs an active relationship is a genuinely common question.
"An SOW can fix an unfavorable MSA term." Only if the order-of-precedence clause permits it. Often it does not.
"The MSA and the SLA are the same document." The SLA is typically an exhibit with its own remedies, usually service credits, and those credits are frequently the sole remedy for downtime.

MSAs in practice

Start redlines before commercial terms are final. Legal review is the most reliably underestimated step in an enterprise timeline, and it runs in parallel with almost everything else.
Put contract milestones on the mutual action plan. First redline returned, second round, signature authority confirmed. Named dates against named owners are the only reason this stage stays predictable.
Know who has signature authority. It is often not the sponsor, and sometimes not anyone in the sponsor's chain.
Track your own fallback positions. A written list of what may be conceded and by whom prevents each negotiation from becoming a fresh internal debate.
Read the renewal clause as a business term. Notice windows and uplift caps determine the shape of every subsequent conversation with that customer.

An MSA is neither a formality nor a hurdle. It is the document that decides what a hard situation costs, and the terms that matter most are the ones nobody expects to use.

This is a general description of common commercial practice, not legal advice; specific terms should be reviewed by qualified counsel.