The MSA + SOW structure
The standard structure is a two-layer document set: a master that runs for the duration of the relationship, and individual SOWs (or order forms, or work orders, depending on terminology) that drop in under the master for each piece of work.
Master Service Agreement (top layer)
Standing commercial terms. Signed once at the start of the relationship. Covers everything that should be consistent across every piece of work — IP, liability, confidentiality, warranties, data processing, dispute resolution, termination.
Statement of Work (bottom layer)
Project-specific terms. Signed for each engagement under the MSA. Covers scope, deliverables, timeline, fees, project-specific acceptance criteria and any project-specific deviations from the MSA (clearly flagged).
The ten MSA clauses that do most of the work
Term + structure
How long the MSA runs (typically 2–5 years), how SOWs are issued, how the MSA interacts with later schedules, and what happens to ongoing SOWs if the MSA terminates.
Fees + billing
Master fee framework (rates, escalations, payment terms) with the specific commercials in each SOW. CPI-linked escalation clauses; net-30 or net-45 payment defaults.
IP ownership
Background-IP (pre-existing) protected; foreground-IP allocated per SOW or per default rule. Section 22(3) of the Copyright Act requires written, signed assignment of any developed IP.
Confidentiality
Two-way obligations covering all information disclosed under the MSA and any SOW. Standard 2–5 year duration post-termination, with trade-secret-grade information surviving indefinitely.
Warranties + indemnities
Performance warranties, non-infringement warranties (including OSS), authority warranties. Mutual indemnification for third-party IP claims and data breaches.
Limitation of liability
Master cap (typically 1x or 2x annual fees) with carve-outs for IP infringement, confidentiality breach, gross negligence, and POPIA penalties. The carve-out structure is the most-negotiated part.
Data processing
POPIA s 21 operator-agreement terms — either embedded in the MSA or referenced as a separate DPA. Mandatory for any engagement touching personal information.
Change control
How SOW scope changes are documented, priced and approved. Without it, scope creep produces unbudgeted hours and unbilled overruns.
Termination
For-convenience (with notice and wind-down), for-cause (with cure period), insolvency, change-of-control. Termination assistance and data-return obligations on exit.
Dispute resolution
Escalation to senior executives before formal proceedings; arbitration (AFSA) or court (High Court of SA); governing law (SA).
Frequently asked
When do I need a Master Service Agreement instead of just signing each SOW separately?
When you have (or will have) a recurring relationship with the same supplier or customer involving multiple discrete projects, an MSA is more efficient. The MSA captures the standing terms (IP, liability, confidentiality, dispute resolution) once; each SOW then specifies only the project-specific scope, deliverables, timeline and fees. Without an MSA, you end up renegotiating the same 12 pages of boilerplate every time — and the variations across SOWs create accidental inconsistency.
What is the difference between an MSA and a master subscription agreement?
An MSA is a master commercial framework for services (often development, consulting, agency or professional services). A master subscription agreement (MSA in some SaaS contexts — same acronym, different concept) is the master commercial framework for SaaS access — what most SaaS companies sign with enterprise customers. Both have order-form / SOW layered underneath, but the underlying commercial concept (services vs subscription access to software) is different and the contracts read differently.
Should the MSA or the SOW prevail if they conflict?
The MSA should prevail by default, with limited carve-outs allowing specific SOWs to deviate where explicitly noted. This protects the underlying risk allocation across the entire relationship. Permitting any SOW to override the MSA wholesale is dangerous — it lets ad-hoc negotiations gradually erode the original protections. The "deviate only where expressly stated" pattern is the industry-standard compromise.
How long should an MSA run?
For commercial-services MSAs: 2 to 5 years is typical, with annual renewal options. Anything beyond 5 years risks the underlying commercial assumptions drifting (rates, technology platforms, regulatory framework). The Consumer Protection Act caps consumer fixed-term agreements at 24 months but does not directly bind B2B MSAs — though the spirit of those provisions informs good drafting.
Does an MSA need a separate DPA?
If the engagement touches personal information at any point, yes — POPIA section 21 requires a written operator agreement. The DPA can either be embedded as a schedule to the MSA or stand as a separate document referenced by the MSA. Embedding is simpler for single-supplier relationships; standalone DPAs are cleaner where the supplier acts as operator for multiple distinct responsible parties.
What is the typical cost of bespoke MSA drafting in South Africa?
Standalone MSA drafting from R12,000 for a mid-complexity bilateral agreement; R18,000–R25,000 for higher-complexity arrangements involving multi-party structures, regulated industries, or significant cross-border elements. Add R5,000–R8,000 for a separately-drafted DPA, and R6,000–R10,000 for a parallel SaaS subscription agreement if both are needed.