Outsourcing

Commercial
Commercial

We negotiate business process and IT outsourcing deals for customers and providers, including master services agreements, statements of work, service levels and credits, data security terms, and transition and exit plans, and we handle disputes when the relationship fails.

Outsourcing moves work that matters, such as customer support, payroll, claims processing, software development, or infrastructure operations, to a provider you do not control. The contract is your control. It has to describe the services precisely, measure performance, protect your data, and give you a way out that does not leave your operations stranded. We represent customers and providers in business process and IT outsourcing transactions, from first-generation deals to renegotiations and moves to a new provider, and we handle the disputes that follow failed transitions, chronic service failures, and terminations.

How Outsourcing Deals Are Built

Most deals use a master services agreement that sets the legal terms, with statements of work that define each service, its scope, its pricing model, and its deliverables. Service level agreements set measurable targets for availability, response times, and accuracy, and service credits reduce fees when targets are missed, usually capped at an at-risk amount. The agreement should address governance, change control, benchmarking, subcontracting, offshore locations, key personnel, and audit rights. Data obligations come from the law that applies to your data: GLBA for financial data, HIPAA business associate agreements for health information, state privacy and breach notification laws, and GDPR transfer terms for EU personal data.

Negotiating The Agreement

For customers, we focus on service descriptions specific enough to enforce, service levels tied to the outcomes your business cares about, credits that are meaningful and not the sole remedy for serious failures, and a right to terminate for chronic underperformance. We negotiate security requirements, including SOC 2 reports, incident notification timelines, and liability for breaches above the general cap. For providers, we work to define scope clearly, limit open-ended commitments, and protect pricing assumptions with change control. Both sides benefit from clear terms on who owns work product, tools, and process documentation, and our engineering background helps us test whether technical schedules match what is actually being delivered.

Transition And Exit

Transition-in is where many deals go wrong. The contract should set a transition plan with milestones, acceptance criteria, knowledge transfer, and remedies if the provider misses them, and it should address any employees or assets moving to the provider. In cross-border deals, laws such as the UK's TUPE regulations can transfer employees automatically. Exit planning matters just as much. Termination assistance should require the provider to keep performing for a defined period, return or migrate your data in a usable format, transfer or license tools and documentation, and cooperate with a successor provider. Without those terms, a provider has substantial bargaining power at the moment you are least able to resist it.

When The Relationship Fails

Outsourcing disputes usually follow chronic service level failures, failed transitions or transformation projects, data breaches, invoicing disputes, or termination. We start with the governance and dispute resolution steps in the contract, since many agreements require escalation before litigation or arbitration. We assess whether service credits are the exclusive remedy, whether losses count as direct damages under the liability cap, and whether a breach is material enough to justify termination for cause. We pursue and defend claims for breach, fraudulent inducement based on sales representations, and recovery of transition costs, and we work to secure your data and services while the dispute proceeds. Disputes are handled with our Litigation practice.

Common Mistakes In Outsourcing

The biggest mistake is signing a statement of work that describes the provider's process instead of your required outcomes. Others include service credits so small they are cheaper to pay than to avoid, a liability cap that does not account for data breach costs, no right to audit subcontractors, and an exit clause that says only that the parties will cooperate. Define in the contract which of your losses count as direct damages, such as the cost of replacement services and data restoration. Keep a contract manager on your side who reviews service reports and credits each month, because unclaimed credits and unreported failures can later be argued as waived.

Frequently asked questions

The master services agreement contains the legal terms that apply to the whole relationship, such as liability, confidentiality, data security, and termination. Each statement of work describes a specific service or project: scope, deliverables, service levels, pricing, and timeline. The MSA should state which document controls in a conflict, which is usually the MSA unless the SOW expressly overrides a specific term.

Only if the contract says so. Providers often propose credits as the sole and exclusive remedy for service level failures. Customers should resist that, or at least preserve termination rights for chronic failures and damages claims for serious breaches. Some courts will also scrutinize credits that operate as a penalty rather than a reasonable estimate of loss.

Through specific contract terms: security standards, independent audit reports such as SOC 2 Type II, limits on subcontracting and offshore access, breach notification within a set number of hours or days, cooperation with investigations, and liability for breach costs that sits outside the general cap. Regulated data, such as health or financial information, carries its own required terms.

Termination assistance for a defined period at agreed rates, continued performance during the transition, return or migration of your data in a usable format, transfer or license of the tools and documentation needed to run the services, cooperation with a replacement provider, and certification that your data has been deleted. These terms should apply whether the contract expires or ends early.

Yes, if the failure is a material breach, if the contract gives you a right to terminate for chronic service level failures, or if you have a termination-for-convenience right, which usually carries a fee. Follow the notice and cure steps exactly and keep records of each failure. Terminating without a clear contractual basis can make you the breaching party.

Our team

People in this practice

Flat-fee services

Flat-fee services for Outsourcing

Defined work at a fixed price, with the scope, turnaround, and fee stated up front.

Browse all products
In the news

News on Outsourcing

Visit MC Law News

Bring our Outsourcing team to your next matter.

Get in touch