Service Contracts explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
Commercial service contracts carry fifteen clauses from scope of services to notices. Internal audit agreements carry a parallel fifteen — but four are distinctive: audit standards, access to information, reporting, and an affirmation of the auditor's independence.
The fifteen clauses of commercial service contracts
Commercial service contracts in India include clauses to manage the expectations and obligations of the parties, ensure legal compliance, and outline procedures for handling disputes and changes:
- Scope of services — clearly described, often detailed in an attached schedule or appendix, specifying expected standards and timelines.
- Consideration and payment terms — how much, when and how, including retainers, instalments, conditions for final payments, and provisions for handling taxes.
- Duration and termination — start and end dates, early termination, notice periods and obligations upon termination.
- Confidentiality — preventing disclosure of confidential information to third parties.
- Intellectual property rights — who owns the IP resulting from the services: the provider, the client, or shared.
- Non-compete and non-solicit — preventing competition or solicitation of customers or employees, usually for a specified period and within a certain geographical area.
- Liability and indemnification — the liabilities of each party and the protective indemnities.
- Limitation of liability — a cap, which often excludes liability for gross negligence or wilful misconduct.
- Force majeure — natural disasters or other significant events making performance impracticable or impossible.
- Dispute resolution — negotiation, mediation, arbitration or litigation, and the jurisdiction or venue.
- Compliance with laws.
- Amendment and waiver.
- Severability.
- Assignment.
- Notices — how all communications should be written and delivered.
Comparing this list with the handbook's general commercial agreement list, fourteen of the fifteen are the same. The addition is notices — "details how all communications and notices sent under the contract should be written and delivered".
That is not an accident of drafting. Service contracts run over time and generate correspondence — acceptance or rejection of deliverables, change requests, escalation, notice to remedy, notice to terminate. A contract that does not say how a notice is validly given and when it takes effect generates arguments about whether a termination was effective.
The clause should fix the method (post, courier, email), the address for each party, who a notice must be addressed to, and when it is deemed received. Where the contract also carries a termination notice period, the two clauses have to be read together.
Why an internal audit agreement is drafted differently
The handbook is direct about why the chapter exists: CAs are appointed as internal auditors, and the agreement or terms and conditions of internal audit are reduced to writing in all cases. It is therefore necessary to understand the usual clauses in such appointments.
These agreements are designed to clearly establish the scope, duties and responsibilities of the internal auditor, ensuring the audit is conducted in an effective and legally compliant manner, with clauses tailored to address the unique nature of audit services.
The four clauses that have no counterpart in service contracts
| Clause | What it must do |
|---|---|
| Audit standards | Specifies the standards under which the audit will be conducted, often referring to national or international auditing standards |
| Access to information | Ensures access to all necessary documents, records, personnel and physical areas to conduct the audit effectively |
| Reporting | The format, frequency and deadlines for audit reports, to whom they are delivered, and follow-up procedures |
| Independence | Affirms the auditor's independence from the organisation, which is critical for maintaining the integrity of the audit |
An internal auditor who cannot obtain records cannot perform, and an internal auditor whose findings go to the person being audited has performed for nothing. Unlike ordinary service contracts, where the client controls its own inputs, an audit depends on compelled cooperation from people who may not want to give it.
The access clause therefore has to be drafted broadly — the handbook's formulation covers documents, records, personnel and physical areas, and each of those four is a category someone may resist. Personnel access, in particular, is what allows the auditor to interview rather than merely inspect.
The reporting clause has to name to whom the reports are delivered. Where the internal auditor reports to the management whose controls are under review, the independence clause immediately above it is undermined. The ICAI's own sustainability assurance provisions make the same point in a different context — an internal audit function should report to those charged with governance.
The eleven clauses shared with ordinary service contracts
- Scope of audit services — the areas of the business, types of transactions and periods covered, and any specific requests or focuses required by the organisation.
- Duration of assignment — start and end dates and any extension conditions.
- Confidentiality — binding the auditor to keep findings and documents confidential except as required by law. The handbook adds that under the Code of Ethics of the ICAI a CA is already under a professional commitment of confidentiality.
- Fee and payment — fee, schedule, expenses covered by the client, and provisions for handling unexpected additional work.
- Performance criteria — expectations for quality, efficiency and adherence to professional standards.
- Dispute resolution — which may include mediation or arbitration before any legal action.
- Termination — how and on what conditions, with notice periods and post-termination obligations.
- Liability and indemnification — the limits of the auditor's liability, with indemnification by the organisation protecting the auditor from claims arising from performance of duties, except in cases of negligence or wilful misconduct.
- Force majeure.
- Compliance with laws and regulations.
- Amendment — typically requiring written agreement by both parties.
This is the reverse of the position in most service contracts, where the provider indemnifies the client. Here the organisation indemnifies the auditor against legal claims arising from the performance of the auditor's duties.
The reason is structural: an internal auditor reports uncomfortable findings, and without that protection the incentive to soften them is obvious. The clause supports the independence clause.
Note the carve-out, though — the protection does not extend to "cases of negligence or wilful misconduct". That is a lower threshold than the gross negligence carve-out the same handbook records for an ordinary limitation of liability clause. An auditor accepting this wording is protected against claims arising from doing the job properly, and not at all against claims that the job was done carelessly.
Practical checklist for service contracts and audit engagements
- Attach the scope of services as a schedule, with standards and timelines.
- Include a notices clause fixing method, address, addressee and deemed receipt.
- Reconcile the notices clause with the termination notice period.
- Check whether the limitation of liability carves out gross negligence and wilful misconduct.
- In an audit engagement, draft access to cover documents, records, personnel and premises.
- Name in the reporting clause who receives the report — not the auditee.
- Affirm independence expressly.
- Read the audit indemnity carve-out before accepting it.
Common mistakes in service contracts and audit agreements
- Omitting the notices clause from a long-running engagement.
- Describing scope in the body instead of a schedule that can be varied.
- Drafting audit access as document access only.
- Reporting to the audited function.
- Accepting a negligence-level carve-out without pricing for it.
- Relying on the Code of Ethics instead of a confidentiality clause, or vice versa.