Contract Review Checklist: 25+ Critical Terms to Review

A contract review checklist is a repeatable list of the terms a reviewer confirms, questions or escalates before a commercial agreement is signed. This contract review checklist covers 25+ critical terms in eight steps: parties and basic information, scope and performance obligations, financial terms, intellectual property, liability and risk allocation, compliance and regulatory requirements, termination and exit, and dispute resolution and governance. After the eight steps come the clauses that justify escalation and a worked example on a vendor master services agreement. Contract-type checklists close the article for NDAs, vendor agreements, employment contracts, SaaS subscriptions, procurement paper, and construction and manufacturing supply agreements.

Most of the items below are pattern checks that repeat on every agreement, which is the part that AI-assisted review inside Word now absorbs, and the rest are the judgment calls that stay with the lawyer.

Key takeaways

1. A contract review checklist fixes the order of review, so the same 25+ critical terms get checked on every commercial agreement instead of whichever clauses the reviewer happens to read closely.
2. The eight steps of this contract review checklist run from parties and basic information through to dispute resolution and governance, and a defect found in an early step changes how every later clause reads.
3. Seven clauses on this checklist routinely justify escalation beyond the reviewer, led by uncapped liability, one-sided indemnification and auto-renewal with no exit right.

[cta-1]

How to review a contract: step-by-step contract review checklist

To review a contract step by step, work these eight stages in order: confirm the parties and basic information, test the scope and performance obligations, check the financial terms, settle intellectual property ownership, read the liability and risk allocation, confirm the compliance obligations, map termination and exit, then close on dispute resolution and governance. The order carries weight, because a defect in the parties or the scope changes how every later clause reads, and a review that opens at the liability cap usually has to be repeated once the scope is understood.

Average contract value erosion was nearly 9 percent in World Commerce & Contracting’s 2023 benchmark report, which surveyed more than 750 organizations with Icertis. Value erosion of that kind is the defect a reviewer catches by reading the same terms in the same order on every agreement, which is the whole argument for working from a fixed list instead of reading for whatever looks unusual.

The full checklist is also available as a print-ready PDF download for reviews that happen away from a screen.

1. Parties and basic information

Incorrect party identification can create enforceability problems and complicate dispute resolution. Confirm the basic information at the outset, because a defect here travels into every obligation and every signature block downstream.

1. Verify the correct legal names of all parties to the contract, including the jurisdiction of incorporation
2. Confirm that addresses and notice contact information are current
3. Check the effective date and the contract duration
4. Review the automatic renewal provisions and the notice window each one requires
5. Validate signature authority for every signatory

2. Scope and performance obligations

When performance obligations are not defined properly, the parties leave the table with different expectations of the same clause, so define each obligation in detail before signature rather than after the first missed milestone.

1. Identify all deliverables with specific, measurable criteria
2. Examine the performance obligations against realistic timelines
3. Check for an exclusivity provision and what it forecloses
4. Look for a change order process and confirm who approves a change
5. Verify that the service level agreements (SLAs) include quality standards and remedies
6. Confirm that acceptance criteria and testing procedures are documented

3. Financial terms and payment provisions

Unclear payment terms can end in collection efforts and, at times, litigation. Confirm how payments, penalties and invoicing are handled while the commercial team is still in the room.

1. Confirm the payment terms, including amounts, schedule, method and currency
2. Clarify the financial obligations, including fees, expenses and taxes
3. Review the late payment penalties and interest rates
4. Check the invoicing requirements and approval workflow
5. Verify budget alignment with the finance team

4. Intellectual property rights

Intellectual property (IP) provisions carry long-term risk, and IP disputes are expensive to unwind years after the deal closed. Read the ownership, license and confidentiality terms as one block, because an intellectual property assignment can quietly contradict a license grant three pages later.

1. Identify IP ownership, separating background IP from foreground IP
2. Review the license grants, their scope and their restrictions
3. Check the work-made-for-hire provisions
4. Confirm that IP rights are adequately protected for the represented party’s business interests
5. Check whether the agreement addresses ownership of AI-generated work product or outputs
6. Look for moral rights waivers
7. Review the confidentiality obligations and their duration
8. Confirm that the definition of confidential information is not too narrow

5. Liability and risk allocation

Unbalanced liability provisions can expose an organization to financial risk the commercial terms never priced. Read the cap, the indemnity and the warranty provisions together, because a carve-out in one can undo the protection in another, and confirm that the force majeure clause names the specific triggering events it covers rather than leaving them to argument at the worst possible moment.

1. Check the liability provisions, including caps and exclusions
2. Confirm that the limitation of liability cap exists
3. Review the indemnification clauses, including scope, defense obligations and carve-outs
4. Check whether the indemnity is mutual or unilateral
5. Verify the warranty provisions, both express and implied
6. Assess whether the risk allocation is balanced across both parties
7. Review the insurance requirements and coverage amounts
8. Confirm whether force majeure covers pandemics, supply chain disruption and AI system failures

Warranty disclaimers are a common defect on a sale of goods. A disclaimer of the implied warranty of merchantability has to be conspicuous and has to mention merchantability by name under UCC section 2-316, so a disclaimer buried mid-document is worth flagging even when the commercial terms are otherwise acceptable.

6. Compliance and regulatory requirements

Regulatory penalties can exceed the value of the agreement that triggered them. Confirm that the contract terms align with the compliance standards in every relevant jurisdiction, and where the agreement involves AI-powered services, check it against the risk-based obligations the EU AI Act places on providers and deployers of AI systems.

1. Confirm compliance with industry-specific regulatory requirements
2. Validate alignment with company policies on procurement, data security and vendor management
3. Check the data protection and privacy clauses, including General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) obligations
4. Review export control and sanctions compliance
5. Verify the audit rights and record retention requirements
6. Check whether the agreement addresses obligations under the EU AI Act or another applicable AI governance framework

Data protection clauses are the ones most often copied forward from an old template, and the required terms differ by regime: the CCPA and the GDPR impose different obligations on a business that shares personal information with a vendor, and the two sets of terms are not interchangeable. A clause drafted to satisfy one regime can leave a gap under the other, so confirm which regimes apply before accepting the counterparty’s standard addendum.

7. Termination and exit provisions

Termination clauses define what each party owes when the relationship ends. Confirm that the termination provisions specify notice periods, wind-down procedures and data handling, because wind-down cost, transition assistance and data return are rarely priced during the commercial negotiation.

1. Review the termination clauses, including grounds, notice periods and procedures
2. Check termination for convenience against termination for cause
3. Verify the wind-down obligations and transition assistance
4. Review the data return and deletion requirements
5. Check the survival provisions, meaning what continues after termination

8. Dispute resolution and governance

How a dispute gets resolved changes both the cost and the timeline of resolving it, and an ambiguous jurisdiction clause adds a preliminary dispute over forum before the underlying dispute is heard. Teams working from a standardized review process tend to settle the forum question at policy level rather than argue it deal by deal.

1. Review the dispute resolution mechanism, whether negotiation, mediation, arbitration or litigation
2. Check the governing law and jurisdiction
3. Check for a merger or integration clause
4. Check for an attorneys’ fees provision
5. Verify the notice provisions and methods
6. Review the amendment procedures
7. Check the assignment and change of control provisions

Comparing the clause in front of you against the position your team last accepted is faster with a contract terms precedent tool than from memory, particularly on notice mechanics and governing law, where the acceptable answer varies by counterparty rather than by principle.

Contract review red flags that require escalation

Seven contract review red flags on this checklist routinely justify escalation beyond the reviewer: uncapped or unlimited liability, one-sided indemnification, overly broad intellectual property assignment or non-compete terms, auto-renewal with no exit right, terms that conflict with applicable regulation, unilateral amendment rights, and an assignment clause that sweeps in pre-existing work. Each one is a red flag because the cost of accepting it does not surface during review. It surfaces at the first dispute, the first renewal date, or the first regulator question.

1. Unlimited or uncapped liability exposure: the agreement contains no limitation-of-liability clause, or it carves broad categories of damages out of an otherwise existing cap. A single breach could then expose the organization to losses far exceeding the total value of the contract. Escalate it and negotiate a mutual cap tied to fees paid or to a defined ceiling.
2. One-sided indemnification or hold-harmless clauses: only one party indemnifies the other, with broad triggers and no reciprocal protection or carve-outs. The indemnifying party ends up covering the counterparty’s losses, legal fees and third-party claims with no equivalent coverage in return. Push for mutual indemnification and narrow the triggering events to fault-based claims.
3. Overly restrictive IP assignment or non-compete terms: the assignment language sweeps in broad categories of IP, or the non-compete carries unreasonable scope, duration or geographic reach. These terms can restrict future business activity and may be unenforceable in some jurisdictions, which creates uncertainty either way. Narrow the scope to what the deal requires and confirm enforceability in the governing jurisdiction.
4. Auto-renewal without exit rights: the contract renews automatically with a long notice window, no termination for convenience, or punitive early-exit terms. A missed cancellation window locks the organization into unwanted obligations and recurring costs. Negotiate a clear termination-for-convenience right and a workable notice period before signature.
5. Non-compliance with regulatory requirements: terms conflict with applicable law or omit required provisions, such as the data protection clauses GDPR or CCPA expect. Regulatory violations can trigger substantial penalties and invalidate parts of the agreement. Escalate to compliance and align the terms with every relevant jurisdictional requirement before execution.
6. Unilateral amendment rights: one party reserves the right to change the terms, pricing or scope without notice to or consent from the other. Terms agreed today can shift unfavorably at any point, which undermines the certainty the contract exists to provide. Require mutual written consent for amendments, or at a minimum advance notice with a right to terminate.
7. Broad IP assignment covering pre-existing work: an assignment clause is drafted widely enough to capture background IP or work created before the contract was signed. Valuable pre-existing assets that were never meant to be part of the deal can transfer unintentionally. Carve out background IP explicitly and limit the assignment to work product created under the agreement.

Where the cap is the issue, the negotiation is usually about the carve-outs rather than the number: a limitation of liability that caps direct damages at fees paid while leaving indemnity, confidentiality and IP infringement outside the cap is a materially different risk profile from a flat cap on everything, even though the two read almost identically on the page.

[cta-2]

Contract review escalation: thresholds and sign-off

Contract review escalation runs on two thresholds: a clause that falls outside the position your team has already agreed, and a commercial exposure the reviewer is not authorized to accept alone. Naming the owner for each threshold before review starts is what keeps a flagged clause from sitting in an inbox for a week:

1. Outside the agreed position, inside the authority limit: the reviewing lawyer negotiates it and records the deviation.
2. Liability, indemnity or IP terms above the authority limit: the general counsel or legal lead signs off, with the commercial owner on the thread.
3. A regulatory or data protection conflict: compliance or the privacy owner clears it before the commercial negotiation continues.
4. A term enforceable only in some jurisdictions: local or external counsel confirms the position, non-competes being the standard case.
5. A deviation accepted under time pressure: it is recorded as an accepted deviation with a named owner and a review date, rather than left implicit in a redline nobody revisits.

The thresholds only work when someone has written them down, and the authority limit is the one your team has set rather than a figure any article can supply. Deal Desk, not sales, owns the playbook positions at most mature teams, and a contract playbook that states the fallback as well as the preferred position is what lets a reviewer tell a deviation apart from an ordinary negotiation. Without it, every clause outside the template looks equally urgent, and the escalation list stops working as a filter.

Escalation during review is a different question from the contract approval workflow that follows it. Review escalation decides who has to look at a clause before the negotiation continues, while approval decides who signs once the terms are settled. Teams that collapse the two end up pushing every redline through the signature chain before it is settled, which slows the work to the speed of that chain.

Contract review example: a vendor MSA

A contract review example shows what the checklist produces on third-party paper. The example below runs the eight steps over a vendor master services agreement (MSA) sent on the vendor’s own template, naming the checklist step, the finding in the document, and the redline the reviewer asks for. Findings cluster in liability and risk allocation, because a vendor’s own template is drafted to defend the vendor. The reviewer’s output is a redline and a short escalation list, not a verdict on whether to do the deal.

Two of those five findings go to the escalation list rather than straight into the redline, because the cap exclusion and the unilateral indemnity both sit above what a reviewer is usually authorized to accept alone. The cap exclusion is the finding with the largest exposure: a limitation that leaves the indemnity outside the cap is not really a cap, and a limited remedy that fails of its essential purpose can be set aside in favor of the remedies the code otherwise provides. The notice window and the missing statement of work are usually conceded or fixed without escalation.

Contract drafting checklist vs contract review checklist

A contract drafting checklist and a contract review checklist cover the same terms from opposite sides of the paper. The drafting checklist asks what each clause should say before the document exists, so it runs in the order you build the agreement and its output is language. A review checklist asks what the clause in front of you says, what it costs to accept, and what to ask for instead, so its output is a redline and an escalation list.

When you draft the contract yourself you control the default, so the checklist becomes a completeness check: did every term this deal needs reach the document, and does the language say what the commercial team agreed. On the counterparty’s template the same items become a risk check, because every default has already been set by someone whose interests run the other way, so more items land outside the position your team has agreed, and more of them need a named owner before the negotiation continues. Indemnity is the clearest case: the mutual indemnification clause you would have drafted arrives as a unilateral one running in the counterparty’s favor.

The two lists also sit at different points in how a deal moves from paper to signature, and treating them as one step is a common source of confusion on a first pass. A reviewer who starts writing replacement clause language has moved into negotiation, and that is a different conversation with a different approval path. The handoff between the two is itself part of the contract review process, which is why the same person rarely runs both on the same agreement.

Contract review checklist by contract type

A contract review checklist by contract type adds the provisions one agreement type carries that the general framework does not: nondisclosure agreements, vendor and supplier agreements, employment contracts, SaaS subscriptions, procurement and services paper, and construction and manufacturing supply agreements. Run the eight steps first, then layer on the items below for the agreement in front of you.

Nondisclosure agreement (NDA) and confidentiality checklist

1. Confirm that the definition of confidential information is appropriately scoped
2. Review the exclusions, covering publicly available, independently developed and already known information
3. Check the permitted disclosures to employees, advisors and compelled legal disclosure
4. Verify the confidentiality duration and whether the obligations survive termination
5. Confirm the return or destruction of materials requirements
6. Review the remedies for breach, including injunctive relief and damages
7. Determine whether the structure is unilateral or mutual and whether that fits the relationship

Most of these items repeat unchanged across an NDA portfolio, which is why drafting customized NDAs with AI tends to be the first workflow a high-volume team automates: the remaining variables are the definition, the duration and the carve-outs.

Vendor and supplier agreement checklist

1. Verify the SLA definitions, performance metrics and remedies for missed service levels
2. Review the pricing terms and any adjustment or escalation mechanism
3. Confirm IP ownership of deliverables and work product
4. Check the data processing and data protection obligations
5. Review the termination for convenience rights and notice periods
6. Examine the indemnification scope and carve-outs
7. Verify the audit rights and reporting obligations

Vendor agreements arrive on the vendor’s template more often than not, so vendor contract review starts from the counterparty’s defaults rather than your own, and the first pass is as much about what the template omits as about what it says.

Employment contract checklist

1. Review the compensation, bonus structure and equity terms
2. Check the non-compete and non-solicitation scope, duration and geographic limits
3. Verify the IP assignment provisions, including inventions made outside work hours
4. Confirm whether the employment is at-will or for a defined term
5. Review the severance terms and the conditions that trigger them
6. Check for a mandatory arbitration clause and its scope

Enforceability of the restrictive covenants varies by state, so an employment contract review usually closes on a jurisdiction question rather than a drafting one, and the answer can change the value of the whole package.

SaaS and software subscription agreement checklist

1. Confirm the data ownership and portability rights
2. Verify the uptime SLA and the remedies for downtime, including credits and termination rights
3. Review the auto-renewal terms and cancellation notice windows
4. Check the data deletion and return obligations on termination
5. Confirm that the liability cap is reasonable relative to the subscription fees
6. Verify the compliance certifications, such as SOC 2, GDPR and HIPAA where applicable

Judging whether a cap or a renewal window is normal needs comparison data, which is why teams reviewing subscription paper at volume spend time on choosing contract analysis software rather than redlining from memory.

Procurement and services agreement checklist

Procurement paper arrives with its own order of precedence, and the purchase order often controls over the master terms unless the master terms say otherwise. Where the services touch regulated data or a regulated process, the items below run alongside a contract compliance checklist rather than replacing it.

1. Confirm which document controls when the purchase order and the master terms conflict
2. Check the acceptance and rejection rights on delivered services, including any cure period
3. Verify that subcontracting and pass-through require written consent
4. Review the price adjustment mechanics, including any index the adjustment tracks
5. Confirm the background check and site access obligations for vendor personnel
6. Verify the insurance certificates and additional insured status before work starts
7. Check the audit rights on invoiced time and materials

Construction and manufacturing supply checklist

Construction and manufacturing paper moves money against milestones and moves goods across a delivery point, so the payment and delivery mechanics carry most of the risk: when payment is earned, and when risk of loss passes. Absent agreed terms, UCC section 2-509 supplies the default for risk of loss on a sale of goods, so read the delivery and title terms before the price terms.

1. Confirm the retainage percentage and the milestone payment triggers
2. Check the change order pricing method, whether unit rates, cost plus or a lump sum
3. Review the delay and liquidated damages mechanics, including the excusable delay list
4. Verify the defects and warranty period and the remedy available within it
5. Confirm the lien waiver and payment bond requirements
6. Check the inspection and acceptance testing procedure and who bears retest cost
7. Confirm when title and risk of loss transfer
8. Check whether force majeure extends to supply chain failure and single-source components

Automate contract review with Spellbook

Spellbook helps legal teams automate contract review inside Microsoft Word, which is where most of the time in a manual pass over this checklist goes. The Review feature redlines the agreement and flags missing, ambiguous or non-standard terms across the liability, indemnification, termination and compliance steps above; the Playbooks feature measures each clause against the positions your team has already agreed; and the Compare to Market feature places a cap, indemnity or renewal term against 20M+ real contracts. The judgment calls stay with the lawyer.

The split between what Spellbook automates and what the reviewer decides runs step by step through the checklist above:

Run your next agreement through this checklist without leaving your document. Try Spellbook free and review your first contract directly in Word.

[cta-3]

Frequently asked questions

How do you prepare for a contract review?

Assemble the review tooling, the template library and the clause bank before the first agreement lands, and identify who signs off on each category of deviation. Change-tracking and record-retention systems matter as much as the tooling, because a review nobody can reconstruct six months later is difficult to defend. Keep a written checklist for the manual path, since the tooling is not always available at the moment the document arrives, and maintain a clause index that records the standard language for each term, because a reviewer working from memory produces inconsistent redlines.

What are the steps of a contract review?

A contract review runs through document intake, flagging of non-standard clauses, compliance validation, negotiation of the flagged terms, approval and execution. The first three steps are the review proper, and the last three belong to the negotiation and approval path that follows it, which is why a reviewer who starts negotiating has usually skipped a validation step.

What are the 5 C’s of a contract?

The 5 C’s is not a formal legal framework but a mnemonic some practitioners use for good drafting: clear, complete, concise, compliant and consistent. Courts do not apply it. For enforceability they look to the elements of contract formation, which are offer, acceptance, consideration, capacity and legality.

How long should a contract review take?

It depends on complexity and volume. A standard NDA is a short review; a complex MSA or a mergers and acquisitions (M&A) agreement is a long one, and the gap is what makes a fixed order worth having. AI contract review software shortens the first pass, which moves the reviewer’s time onto the high-risk items rather than the first-pass scan.

What is the difference between a contract review checklist and a contract playbook?

A checklist guides the review process and fixes the order in which terms get checked. A playbook governs the negotiation outcome, so a well-structured negotiation playbook states the preferred position and the fallback on each clause, such as a standard liability cap set at one times annual fees. The two are complementary, and neither one substitutes for the other.

Can I use AI to complete a contract review checklist automatically?

Partly. AI contract review software automates the systematic parts, including clause extraction, gap detection and risk flagging across each checklist step, and it completes the first-pass scan quickly. Lawyer judgment is still required for the strategic calls: the acceptable risk level, the negotiation priorities and jurisdiction-specific interpretation.