Contract Review Checklist

There's a specific feeling you get when you scroll to the bottom of a contract someone sent you, it's around midnight, and the sender wants it signed by morning. You skim it, the prose is dense, the numbered clauses blur together, and there's a tiny voice whispering "this is probably fine." That tiny voice is almost always wrong.

A friend of mine signed a vendor agreement last year that quietly auto-renewed for 36 months at a 12% annual price escalator. He didn't catch the renewal clause buried on page 14. It cost him about $42,000 over two years before legal pried him out.

This guide is the contract review checklist I wish he'd had. It's what to actually read in a contract before you sign, organized in the order that matters, with the specific red flags that should make you walk away. Whether you're a business owner reviewing a vendor agreement, a freelancer staring at a client SOW, or in-house counsel triaging inbound paper, the categories below are the ones that cost real money when they go wrong.

TL;DR: A solid contract review takes 15-30 minutes and follows a consistent checklist: parties, scope, money, term and termination, liability, IP and confidentiality, data and privacy, dispute resolution, boilerplate, and signatures. The fastest way to do this on a stack of inbound contracts is the LegesGPT Document Review service, which identifies risks in seconds and lets you chat with the contract to ask follow-up questions in plain English.

What "reviewing a contract" actually means

A contract review isn't a proofread. You're not looking for typos. You're checking whether the document, if signed exactly as written, protects your interests, matches what you actually agreed to verbally, and doesn't quietly transfer risk to you that should sit with the other side.

There are really three questions you're answering on every page:

• What am I promising to do?
• What is the other side promising to do?
• What happens if either side breaks the deal?

Almost every clause in a contract is some variation of those three questions. Once you frame it that way, the dense prose starts to make sense. You stop reading defensively and start reading with a purpose.

Before you start: three quick questions to ask yourself

Before you read a single clause, get three things straight in your own head. The whole review goes faster when you do.

First, what's the dollar exposure? A $500 freelance gig and a $500,000 vendor contract don't get the same level of review. Match your effort to the stakes.

Second, who drafted this? A contract drafted by the other side is a contract written for the other side. Assume there are at least two clauses tilted in their favor that you'll need to push back on.

Third, what was actually agreed? Have your notes, emails, or proposal in front of you. Half the issues in contract review come from the written document quietly drifting from what was discussed verbally. If the contract says "Net 60" and your email says "Net 30," that's a red-line, not a typo.

The contract review checklist

What follows is the actual checklist, in the order I work through a contract. Read it as a starting point rather than gospel. Some categories matter more depending on the type of agreement (an NDA review is mostly about confidentiality and term, a SaaS agreement is mostly about data and uptime), but the structure holds up across most deals.

1. The parties

The first page sounds boring. It isn't. Confirm the legal names exactly, including entity type (LLC, Inc., GmbH, Ltd.), the state or country of incorporation, and the registered address. If you're contracting with "Acme Inc." but the legal name is actually "Acme Holdings LLC," you may end up suing an empty shell.

Watch for two specific traps:

• Wrong party named. Sales talks to one entity; the contract names a different one in the same corporate family. Often the entity on the contract has no assets.
• Authority to sign. The person signing should represent that they have authority to bind the entity. If it's not in the signature block, ask.

If a personal guarantor is involved, they sign in their individual capacity, separate from the corporate signature. Without that, you're chasing the company, not the person.

2. Scope and deliverables

Find the section that describes what's actually being done. It's usually called "Scope," "Services," "Deliverables," or "Statement of Work." Three checks:

• Is every deliverable specific enough that you'd know on signing day whether it was delivered or not?
• Are acceptance criteria defined? "The deliverable is accepted when X happens, or after Y days of silence, whichever is first."
• Are out-of-scope items called out? Otherwise expect scope creep to be billed as extras.

A line like "Consultant shall provide marketing strategy services as mutually agreed" is not a scope. It's a future argument.

3. Money and payment terms

The money section is the one place not to rush.

• Total amount (in numbers and words)
• Currency
• Whether taxes are inclusive or additional
• Payment schedule with specific dates, not "end of the month"
• Invoice cadence and payment terms ("Net 15," "Net 30," etc.)
• Payment method and who pays processing fees
• Late fees and the trigger for them
• Acceleration clause (if a payment is missed by X days, the full balance becomes due)
• Any escalators, price-increase clauses, or cost-of-living adjustments
• Volume discounts and how they're calculated

The escalator is where most people get burned. A "modest annual increase" clause with no cap is an open-ended check the other side can keep cashing.

4. Term, renewal, and termination

This is the auto-renewal trap I opened the article with. Read every word.

• When does the contract start?
• When does it end?
• Does it automatically renew? If so, for how long, on what notice?
• How much notice does either party need to give to terminate?
• Is there a termination-for-convenience clause? On what notice?
• Is there a termination-for-cause clause? What counts as cause?
• What happens to pre-paid amounts on termination?
• Does any obligation survive termination (e.g., confidentiality, indemnification)?

Notice provisions matter. "Either party may terminate on 30 days' written notice" sounds simple, but if "written notice" means certified mail to a specific address that no one checks, you're effectively locked in.

5. Liability, indemnification, and limitations

This section is where the financial risk lives.

• Is there a cap on liability? At what amount?
• Are there carve-outs from the cap (typically IP infringement, confidentiality breaches, gross negligence)?
• Who indemnifies whom, for what?
• Is consequential damage excluded? Lost profits? Lost data?
• Is there a mutual indemnification, or is it one-way?

A common pattern: the other side caps their liability at the fees you paid them, while leaving your liability uncapped. That's an asymmetric deal. Either both sides have a cap or both sides don't.

6. IP and confidentiality

For anything involving creative work, software, content, or shared information:

• Who owns the IP created during the engagement?
• Is there a license back to the creator for their own portfolio or reuse?
• Are pre-existing IP and tools carved out?
• Is the confidentiality obligation mutual?
• How long does confidentiality last after termination?
• Are there exceptions (publicly known info, independently developed info, compelled disclosure)?

If you're a freelancer, the default in most service contracts is that everything you create becomes the client's property. Sometimes that's appropriate. Sometimes it's a giveaway, especially if you're using your own pre-built frameworks or templates.

7. Data, privacy, and security

If the contract involves personal data (and most B2B SaaS does), this section is non-negotiable.

• Is there a data processing addendum (DPA)?
• Where is the data stored geographically?
• Who has access to it?
• Are there breach notification timelines? What are they?
• Is there a deletion or return obligation at termination?
• Does the vendor's security posture match what their sales team promised? Ask for the SOC 2 report.

For EU data, confirm GDPR compliance language and Standard Contractual Clauses if data crosses borders. For U.S. healthcare data, confirm a BAA. For California residents, confirm CCPA/CPRA language.

8. Warranties and disclaimers

• What is the other side warranting about their work or product?
• For how long?
• What's the remedy if the warranty is breached?
• Is everything else disclaimed as "AS IS"?

A six-month limited warranty on a multi-year SaaS deal is light. Push for the warranty to last at least as long as the support obligation.

9. Governing law and dispute resolution

The boring middle of the contract that decides where any future fight happens.

• Which state or country's law governs?
• Where do disputes get filed?
• Is mandatory arbitration required? Under which rules (AAA, JAMS, ICC)?
• Who pays for arbitration?
• Is there a jury trial waiver?
• Is there a class action waiver?

If the contract requires arbitration in a city you've never been to, under rules you don't know, with a jury trial waiver and a class action waiver, the other side is signaling that they want disputes to be expensive for you. That's worth pushing back on.

10. The boilerplate that actually matters

People skip the last three pages. Don't.

• Entire agreement clause — supersedes prior verbal promises
• Notice provisions — how official communications must be sent
• Severability — if one clause is void, the rest survives
• Assignment — can either party hand the contract off without consent?
• Force majeure — what events excuse performance? What's the notice obligation?
• Amendment — changes must be in writing and signed
• No waiver — tolerance of one breach doesn't waive future enforcement
• Counterparts — signing in separate copies counts as one document
• Survival — which clauses outlive the contract

The assignment clause is the silent gotcha. If the other side can assign the contract without consent, you can end up doing business with a buyer, a creditor, or a competitor you'd never have agreed to deal with.

11. The signature block (don't skip it)

Last check before signing:

• Are the legal entity names exactly right?
• Are the signers' titles correct?
• Are dates filled in?
• Are all exhibits and schedules attached and referenced?
• Are any handwritten changes initialed by both sides?

A contract executed with the wrong entity name on the signature block can be challenged. It's a five-second check.

Red flags that mean walk away

Most issues in a contract are negotiable. A few are not. If you see these and the other side refuses to budge, walk.

• Uncapped indemnification with no carve-outs, especially for IP claims you can't realistically control
• One-sided liability cap where their exposure is limited but yours is unlimited
• Hidden auto-renewal with a short termination window and a long lock-in
• Unilateral right to modify the contract on notice (one side can change terms at will)
• Personal guarantee asked of a small-business owner on a deal that doesn't justify it
• Choice of law in a hostile jurisdiction when the deal has no real connection to that jurisdiction
• Mandatory arbitration with a jury trial waiver and class action waiver packaged together, in a consumer-facing deal
• Vague scope plus aggressive change order pricing — they leave the deliverable undefined and bill you for clarifications

If two or more of these show up in the same contract, you're not negotiating. You're being tested.

The mistakes I keep seeing

A handful of patterns come up over and over when small businesses and freelancers review contracts themselves.

Reading start to finish. Contracts aren't novels. Skim to the table of contents (or the section headings), then jump to money, term, liability, and IP first. Read the boilerplate last. By the time you get there, you'll know whether the deal even survives the heavy clauses.

Trusting the sales person's verbal explanation. "Oh, that clause never gets enforced, don't worry about it." If it never gets enforced, ask to take it out. The answer will tell you a lot.

Negotiating the wrong things. People spend an hour negotiating the warranty term and then sign a five-year contract with a one-sided indemnification clause. Match negotiation energy to dollar exposure.

Forgetting about the people behind the contract. A great contract with a counterparty going out of business is worth nothing. Run a quick check on the company before you sign.

Treating standardized contracts as immutable. "It's our standard agreement" is not a legal argument. Standard contracts get redlined every day.

Doing this faster with AI document review

A thorough contract review on a 30-page agreement takes 30 to 60 minutes of focused reading. Multiply that across a pipeline of inbound vendor contracts, client SOWs, and renewals, and the math gets ugly fast.

That's the bottleneck the LegesGPT Document Review service is built to solve. You upload the contract, and within seconds it flags the high-risk clauses against the categories above: missing liability caps, asymmetric indemnification, auto-renewal traps, hidden assignment rights, unclear scope, escalators without ceilings, governing law in a jurisdiction you don't operate in. It scores the contract overall, then breaks the risks down clause by clause so you know exactly where to focus.

The piece that changes how I review now is the chat. You can ask the contract questions in plain English: "What happens if I miss a payment by 10 days?" "Can the other side sublicense my IP?" "Is the cap on liability mutual?" The platform answers from the actual text, citing the specific clause, and you can ask follow-up questions until you're satisfied. It's the difference between reading a contract and interrogating one.

For a freelancer or small business, the Plus plan ($49.99/month) gives you 50 document reviews a month, which is enough to cover the typical inbound flow. For an in-house team or law firm running through more, Premium ($99.99/month) removes the cap. Both come with the same risk identification engine and the same chat-the-contract interface.

Worth noting: AI document review is a force multiplier, not a replacement for judgment. For high-stakes contracts (M&A, financing, multi-year vendor lock-ins), a human lawyer should still sign off. But for the 80% of routine inbound contracts that mostly look like ten other contracts you've seen this year, AI review catches the same red flags in a tenth of the time.

One more thing: where the contract came from in the first place

The fastest contract review is the one you don't have to do, because the contract started clean.

If you're the one issuing the contract, drafting from a tailored, jurisdiction-aware first draft saves you from the back-and-forth of fixing your own mistakes during the counterparty's review. The LegesGPT AI Document Generator handles this side of the workflow: payment contracts, service agreements, NDAs, independent contractor agreements, and most of the other documents that come up regularly in a small business. You answer a handful of plain-English questions and get a draft that already includes the clauses this checklist would look for.

It's the same pattern as the review side. AI handles the first 80% in minutes; you spend your time on the last 20% that actually requires judgment. For business owners drafting and reviewing contracts every week, doing both sides of the workflow in one place is the difference between contracts being a bottleneck and contracts being a checkbox.

Wrapping up

Most bad contracts aren't bad because of one disastrous clause. They're bad because nobody spent 30 minutes reading them. The checklist above is the 30 minutes. Run it on every contract worth more than your hourly rate, push back on anything in the red-flag list, and you'll catch most of the trouble before it costs you.

The contracts that go sideways are almost always the ones somebody decided "looked fine" without actually reading. Don't be that person. Make the checklist a habit.

FAQ

What should a contract review checklist include? A solid contract review checklist covers parties and identity, scope and deliverables, money and payment terms, term and termination, liability and indemnification, IP and confidentiality, data and privacy, warranties, governing law and dispute resolution, boilerplate (entire agreement, notices, assignment, severability), and the signature block. Each category catches a different kind of risk, and skipping any one of them is how expensive surprises happen.

How long does a contract review take? A focused review using a consistent checklist takes 15-30 minutes for a typical 5-15 page contract, and 30-60 minutes for longer 20-50 page agreements. AI document review tools shorten that to seconds for the initial pass, then 5-10 minutes for human review of the flagged clauses. The time is well spent on any deal worth more than a few thousand dollars.

What are the biggest red flags in a contract? The most common red flags are uncapped indemnification, one-sided liability caps, hidden auto-renewal with short termination windows, unilateral right to modify, mandatory arbitration packaged with jury trial and class action waivers, vague scope paired with aggressive change-order pricing, and assignment without consent. Two or more of these in the same contract is a signal the other side is testing how carefully you read.

Do I need a lawyer to review every contract? No. For routine contracts under $10,000 with a counterparty you trust, a self-review using a checklist (or an AI document review tool) is usually fine. For high-stakes contracts (M&A, financing, multi-year vendor lock-ins, anything with personal guarantees), or for contracts you don't understand the type of, get a lawyer involved before you sign.

What's the difference between contract review and contract negotiation? Contract review is reading the document to identify risks. Contract negotiation is going back to the other side with redlines and asking for changes. Review feeds negotiation: you can't negotiate well without first knowing what's actually in the contract and which clauses are problematic. Most reviews lead to at least one or two negotiation points on anything above a small dollar amount.

Can AI review contracts for risks? Yes. Modern AI document review tools, including the LegesGPT Document Review service, analyze contracts against a checklist similar to this one and flag missing protections, asymmetric clauses, and other risks in seconds. The best tools also let you chat with the contract in plain English to ask follow-up questions about specific clauses, citing the exact text in their answers.

What's the most important clause to check in a contract? There isn't one most important clause. It depends on the contract. For a vendor SaaS deal, data and uptime usually matter most. For a freelance SOW, scope and IP matter most. For a payment contract, the schedule, late fees, and acceleration clause matter most. The checklist above forces you to look at each one in order so you don't accidentally focus on a clause that doesn't matter for your situation.

Should I review the contract myself or pay a lawyer? Match the spend to the stakes. For small contracts, self-review with a checklist (or AI review) is appropriate. For mid-size contracts, a self-review plus a paid legal review is a good balance. For high-stakes contracts, retain a lawyer end-to-end. A flat-fee contract review from a transactional lawyer typically runs $500-$1,500, which is cheap insurance on a deal worth $50,000 or more.

What happens if I sign a bad contract? You're generally bound by what you signed, even if you didn't read it. Courts rarely void contracts on the grounds that one side didn't bother reviewing them. The exceptions are fraud, duress, unconscionable terms in a consumer context, and clear mutual mistake about a material fact. The practical remedy after signing a bad contract is usually renegotiation rather than litigation, and your leverage in renegotiation is far worse than your leverage before signing.

What's the fastest way to review a contract with AI? Upload it to a legal-specific AI document review tool, let it flag the high-risk clauses, then chat with the contract to ask follow-up questions on anything ambiguous. The LegesGPT Document Review service does this in seconds, identifies the standard risk categories (liability caps, auto-renewal, indemnification, IP, data, governing law), and lets you ask plain-English questions about any clause without scrolling through the PDF. Pair it with a clean first draft from the AI Document Generator when you're the one issuing the contract, and the entire contract lifecycle gets a lot faster.