47 contract red flags
that actually cost you money.

01Why contract red flags exist in the first place

Contracts are written by lawyers working for the party that drafted them. That's the entire mechanism. The drafter chooses defaults — which way the indemnity flows, whose IP gets assigned, what counts as a material breach, when notice is required, who pays attorney fees. Every default tilts toward the drafter. The longer the contract, the more defaults are buried.

This isn't a conspiracy; it's selection bias. The drafter is solving the drafter's problem. If you're the counterparty, you're not their problem until you make yourself one. The first move in any contract review is recognizing that the absence of a protection is itself a red flag. Most freelance contracts don't have a kill fee not because kill fees are unfair, but because the client's lawyer didn't add one — they had no reason to.

The second move is recognizing that red flags are category-specific. Auto-renewal traps matter in SaaS but are irrelevant in a one-time freelance contract. Equity vesting cliffs matter in employment but don't exist in NDAs. Spending time on the wrong red flag is how non-lawyers get the worst of both worlds — they review the contract, feel productive, and miss the actual problem. The right approach is to know which clauses are the load-bearing ones for your specific contract type, then read those carefully and skim the rest.

What follows is the load-bearing list for each of the seven most common contract types you'll encounter as a founder, employee, freelancer, or renter. The ones that, when they go wrong, cost real money or legal exposure — not the boilerplate that shows up in every legal-pad template.

02SaaS & vendor agreement red flags

SaaS contracts are negotiated less often than they should be because procurement teams treat them as click-through. They're not. A typical mid-market SaaS contract has 30+ negotiable points, and the defaults are uniformly vendor-favorable. The ones that actually matter for buyers:

• Auto-renewal with 90-day notice window. The contract auto-renews for another full term unless you give written notice 90 days before the renewal date. Almost no one tracks this, and vendors know it.Ask for: 30-day written notice OR no auto-renewal at all.
• Annual price increases not capped. "Pricing may increase upon renewal" with no cap means the vendor can raise prices 40% on renewal and your only out is to cancel and migrate.Ask for: cap at CPI or 5% per year, whichever is lower.
• "Customer data" definition excludes derived data. The vendor owns aggregated insights derived from your data. After you leave, they keep training on it.Ask for: customer data definition includes derived/aggregated data; deletion on termination certified in writing.
• Uptime SLA without remedy. A 99.9% uptime promise that has no service credit attached when missed — purely cosmetic.Ask for: pro-rated service credits for any month below 99.9%, with cumulative right to terminate after three breaches.
• Liability cap at 12 months of fees. Standard. The catch is when "liability" excludes IP infringement and data breach — exactly the events where the vendor is most likely to be liable.Ask for: super-cap of 3× fees for IP infringement and data breach; uncapped for gross negligence.
• AI training opt-in by default. Newer SaaS contracts assume your data trains the vendor's models. This is how 2024-era LLM training got contaminated with proprietary customer data.Ask for: explicit opt-out language; "Customer data will not be used to train any AI/ML model without separate written consent."
• Indemnification one-way. Vendor indemnifies for IP claims; customer indemnifies for everything else, including the vendor's misuse of customer data. Lopsided.Ask for: mutual indemnification, or at minimum customer's indemnity carve-out for vendor's negligence.

The SaaS-specific tell: if the contract uses phrases like "vendor's standard terms" or "as set forth in the Order Form" without the Order Form attached, the contract is incomplete. Refuse to sign until everything referenced is in front of you.

03Master service agreement red flags

An MSA covers the relationship; SOWs cover individual projects. The MSA is where the worst clauses hide because they apply to every future SOW. Founders sign MSAs early in a vendor relationship without realizing they've bound the company for years.

• "Work product" assigned to vendor by default. Reverse of what you want. The work you paid for is owned by the agency.Ask for: "All deliverables and work product are works made for hire and assigned to Customer upon payment."
• Non-solicit covers all employees, not just the project team. You can't hire any of the vendor's people for two years, including ones who never touched your account.Ask for: non-solicit limited to people who worked on the project, with general-recruiting carve-out.
• Net-60 or Net-90 payment terms in the MSA. Cash-flow killer for the vendor; sometimes mirrored back to the buyer in invoice timing tricks.Ask for: Net-30 standard, Net-15 with 1.5%/month late penalty.
• Right to use customer's logo in marketing without consent. Standard "logo wall" clause. If you don't want to be a public reference, this needs a carve-out.Ask for: "Vendor may not use Customer's name, logo, or trademarks without prior written consent for each instance."
• Choice of forum locks you into vendor's home state. All disputes resolved in Vendor's local court — which is usually expensive for the buyer.Ask for: mutual jurisdiction clause OR delegation to AAA arbitration.
• "Time and materials" with no cap. Buried in MSA, then every SOW invokes it. You agreed to pay whatever they bill.Ask for: hard cap per SOW, with overage requiring written approval.

04SAFE & financing red flags

SAFEs (Simple Agreements for Future Equity) look standardized, but founders give away significant economics in side-letters and amendments without realizing it. The pre-money vs post-money distinction alone can shift dilution by 5-15%.

• Post-money SAFE without cap clarity. Y Combinator's post-money SAFE is the new standard, but if your cap doesn't account for the SAFE pool, you'll over-dilute on conversion.Ask for: cap explicitly defined as fully-diluted post-money including all outstanding SAFEs and notes.
• MFN (Most Favored Nation) without time limit. If a later investor gets a better term, this investor automatically gets that term too — forever.Ask for: MFN tied to a specific dollar threshold or capped at next priced round.
• Pro-rata rights on every future round. Standard for $250K+ checks; problematic for $25K checks because it dilutes the next lead's anchor share.Ask for: pro-rata rights only above a minimum check size, OR limited to the next round only.
• Information rights with audit rights. Investor gets monthly P&L plus right to inspect books on demand. Significant ongoing burden for the founder.Ask for: information rights for $500K+ investors only; quarterly cadence; no audit unless material concern.
• Anti-dilution full ratchet (vs broad-based weighted). Investor's price gets adjusted to the lowest subsequent price. Full ratchet is punitive.Ask for: broad-based weighted-average anti-dilution as the maximum.

The financing-specific tell: if the term sheet has terms that aren't in the SAFE/note documents, the documents win. Founders sign clean term sheets and assume the legal docs match — they often don't.

05Freelance contract red flags

Freelance disputes are entirely predictable. The same five problems repeat across designers, developers, writers, consultants. This is what to fix before you sign a client's contract:

• No kill fee. The single most expensive missing clause. Without it, the client cancels mid-project and owes you nothing for completed work.Ask for: minimum 25% kill fee on remaining contract value if terminated for convenience.
• IP "work for hire" with no carve-out for prior work. Your tools, frameworks, and pre-existing libraries get assigned to the client because the contract is written broadly.Ask for: explicit Schedule A listing your prior inventions; deliverables-only assignment, not pre-existing IP.
• Net-60 or longer payment terms. Above industry standard for freelancers; cash-flow death for small operators.Ask for: Net-14 or Net-30 maximum, with 1.5%/month late fee.
• Vague scope of work. "Website redesign" or "marketing support" with no defined deliverables means the client can demand more without paying more.Ask for: specific deliverables, revision rounds (3 max), and explicit "out of scope" language for new requests.
• Non-compete preventing future client work. 12-month non-compete covering "any company in the same industry" is unreasonable and often unenforceable, but the chilling effect is real.Ask for: limit to direct named competitors (3 max), 6 months, geographic limit.
• Indemnification of client for any third-party claims. You promise to defend the client against any IP or contract claim, even ones outside your control.Ask for: indemnification limited to your own work product and gross negligence, capped at fees paid.

06Employment offer letter red flags

Most candidates negotiate salary, then sign the offer letter without scrutinizing the rest. The economic value sitting in the unread sections often dwarfs the salary delta you negotiated.

• Equity 4-year vesting with 1-year cliff and no acceleration. If you're terminated 11 months in, you get zero equity. If acquired 3 years in, you walk away from 25% of your grant.Ask for: double-trigger acceleration on change of control; partial cliff acceleration if terminated without cause before month 12.
• Non-compete that survives termination. 12-month non-compete starting on your last day. Effectively unpaid time off.Ask for: non-compete waived if terminated without cause; reduced to 3 months max; geographic carve-outs.
• IP assignment that captures personal projects. "Inventions made during employment" includes weekend projects unrelated to your job.Ask for: explicit Schedule of Prior Inventions; IP assignment limited to work using company resources or related to company business.
• Mandatory arbitration with class-action waiver. You can't sue the company in court; you can't join class actions; arbitration is private and the company picks the venue.Ask for: carve-out for harassment/discrimination claims; mutual selection of arbitrator; consider walking if non-negotiable.
• "At-will employment" language even when you're being recruited. Standard but not always required. If they want you badly, ask for severance.Ask for: 3-6 months severance on termination without cause; COBRA payment for the same period.
• Equity strike price set at "current 409A valuation" without disclosure. You don't know what you're agreeing to until exercise.Ask for: strike price disclosed in offer letter; refresh grants at current 409A.

07NDA red flags (and when to refuse to sign)

Most NDAs are signed reflexively because they "feel low-stakes." They're not. NDAs control what you can build for the next 5-10 years.

• Indefinite term with no expiration. Confidentiality obligations that never end mean a 2025 conversation about "potential AI features" can be invoked against you in 2035.Ask for: 2-3 year term for general info; 5 years for trade secrets.
• "Confidential information" defined as everything you learn. Includes general industry knowledge and stuff you knew before the meeting.Ask for: definition limited to written and marked information, OR oral information confirmed in writing within 30 days.
• Residuals clause missing. Without it, you can't use general knowledge gained from the engagement on future projects.Ask for: residuals clause permitting use of general non-tangible information retained in unaided memory.
• One-way NDA when both parties share info. Unilateral protection only flows to the disclosing party. If you'll share anything in the conversation, it should be mutual.Ask for: convert to mutual NDA; same obligations both directions.
• Non-compete or non-solicit hidden inside the NDA. "Receiving party agrees not to solicit Disclosing Party's customers for 24 months" is a non-solicit, not an NDA term.Ask for: strike non-compete/non-solicit language; if needed, negotiate as separate document.
• Liquidated damages clause. "$50,000 per breach" looks scary but is often unenforceable; the real risk is the chilling effect.Ask for: actual damages with reasonable cap, OR strike entirely.

Signing an NDA before a job interview is a particularly common trap — done right, it's reasonable; done wrong, it captures your future career trajectory.

08Lease agreement red flags

Residential and commercial leases share most of the same red flags. The economic exposure is your security deposit plus your ability to move out without penalty.

• Security deposit return conditions vague or punitive. "Reasonable wear and tear" undefined; landlord deducts for normal aging.Ask for: explicit list of what counts as wear-and-tear; itemized deduction within 21 days (or your state's statutory minimum).
• Lease-break penalty exceeds 2 months rent. Some leases require remaining months in full; some 3-month penalties are standard, but anything more is excessive.Ask for: 2 months rent maximum, with reduction for replacement tenant time on market.
• Landlord entry without notice in non-emergencies. Right to enter "for inspection" with no notice is privacy-invasive and often unenforceable.Ask for: 24-hour written notice for non-emergency entry; defined emergency exceptions only.
• Tenant pays all repair costs. Burden flipped to the renter for issues outside their control (HVAC, plumbing, structural).Ask for: structural and major-system repairs are landlord's responsibility; tenant only liable for damage they caused.
• Personal-injury waiver. "Tenant waives all claims for injury occurring on premises." Often unenforceable but makes accident recovery harder.Ask for: strike entirely; or limit to tenant's own negligence.
• Auto-renewal at month-to-month at higher rate. Lease ends, you stay, the landlord can charge you 20% more without negotiation.Ask for: month-to-month at the same rent; 60-day notice for any rent change.
• Pet fee non-refundable AND pet deposit AND pet rent. Triple-charging for the same pet. Some states ban this.Ask for: pet fee OR deposit OR rent — pick one.

09How to negotiate any clause

The biggest mistake in contract negotiation is treating it as combat. The counterparty's lawyer doesn't care about most of these clauses; they wrote them because their template said to. Negotiating well is less about winning and more about being specific.

The three-line negotiation email

Almost every successful contract pushback fits in three sentences. (1) Acknowledge the clause. (2) Name your concern in plain English. (3) Propose specific replacement language. Vague pushback gets vague responses; specific pushback gets either acceptance or a counter you can work with.

"On Section 6.2, the indefinite confidentiality term — I can't sign an obligation that lasts forever for general business discussions. Can we set this to 3 years for general info and 5 years for clearly-marked trade secrets?"

That email gets a yes 70% of the time. Compare it to "I don't like Section 6.2," which gets nothing.

What to negotiate first

Lead with liability and termination. These are the clauses where the other side either has flexibility or doesn't, and it tells you whether the rest of the negotiation is worth your time. If they won't budge on a 5-year non-compete, they probably won't budge on anything else either.

What's actually negotiable

In a typical SaaS contract: price (yes), payment terms (yes), liability cap (often), data clauses (often), auto-renewal terms (almost always), name/logo usage (yes), governing law (sometimes), warranty disclaimers (rarely). Knowing the realistic surface saves you from wasting political capital on the wrong battles.

The negotiation email template (copy-paste)

The format below works for most contract pushbacks:

"Hi [Name] — quick comments on the agreement before I sign:

1. Section X — [specific concern in 8 words]. Can we change to [specific replacement language]?
2. Section Y — [concern]. Suggest [replacement].
3. Section Z — [concern]. Suggest [replacement].

Happy to discuss any of these. Otherwise, ready to countersign."

10When AI is enough vs. when to hire a lawyer

The honest model: AI handles the screening layer; lawyers handle the bespoke layer. The line between them isn't about contract type — it's about dollar value at risk, jurisdiction-specific issues, and complexity of the relationship.

AI is enough when

The contract is under $50K total value, you're in a standard jurisdiction (US/UK/EU/Canada), the relationship is arm's-length and time-bound, and you're not negotiating against a sophisticated counterparty with custom legal staff. NDAs, freelance contracts, standard SaaS subscriptions, residential leases, and most offer letters fit here. AI catches missing clauses and overbroad scope; you can negotiate the actual terms with the counterparty directly.

Hire a lawyer when

The contract involves fundraising (any priced round, even a SAFE if the cap is over $5M), M&A, IP licensing with ongoing royalties, employment of executives with significant equity, real estate purchases, international cross-border deals, or regulatory compliance (HIPAA, financial services, government contracts). The cost of being wrong is many multiples of legal fees.

Use AI as the front-end to your lawyer

Even when you're hiring a lawyer, run the contract through AI first. You'll save 30-60 minutes of your lawyer's time (and your bill) by knowing which 3-5 clauses to focus the conversation on. Most lawyers appreciate clients who come prepared with specific questions instead of asking "what do you think?"

The next step

You can't memorize 47 red flags across 7 contract types. Nobody does. The practical use of this guide is as a checklist when a contract lands in your inbox — find the section that matches the contract type, scan the red flags, decide which ones apply to your situation, and either negotiate or walk.

Or, paste the contract into Scrutr and get the same analysis in 60 seconds, with the specific clause locations highlighted and the negotiation email pre-drafted. Free, no credit card. The free tier covers one contract per month — enough to handle the next deal that hits your inbox.