Checklist · Business & Contracts · Contract Intake

Contract-Intake Triage Sheet: What to Escalate Before You Sign

Contract review becomes faster when the business identifies risk before Legal starts reading. Use a short intake sheet to surface authority, money, duration, data, liability, exclusivity, operational dependencies, and nonstandard remedies.

By Lincoln Square Law · 8-minute read

🖨 Print this checklist

Triage the deal before the document

The first question is not “what does paragraph 12 say?” It is “what are we actually agreeing to do?” The business owner should state the product or service, total expected spend or revenue, term, renewal, implementation date, critical dependencies, and whether the counterparty will access company systems, confidential information, personal data, or regulated data. A reviewer who understands the operating deal can identify provisions that materially change it. Without that context, legal review becomes a line-by-line exercise that may miss the business risk entirely.

Identify the contracting entity and authorized signer at intake. The wrong affiliate on the signature page can create tax, insurance, licensing, and enforcement problems. Confirm that the signer has authority under the company’s governance and approval matrix. If the contract requires a parent guaranty, affiliate performance, or individual guaranty, treat that as a separate escalation rather than an administrative signature detail.

Escalate term, renewal, and exit mechanics

A low monthly price can conceal a long commitment. Capture initial term, auto-renewal period, cancellation window, minimum purchases, implementation fees, early-termination charges, and post-termination obligations. If the business cannot practically switch vendors within the notice window, the economic commitment is longer than the contract headline suggests. Intake should flag any agreement that renews automatically, requires notice more than 60 or 90 days in advance, or makes termination dependent on proving cause.

For sales of goods, Illinois UCC Section 2-201 can require a signed record for contracts at or above the statutory threshold, subject to stated exceptions. The larger lesson for intake is evidentiary: do not rely on a sales quote, click-through, email chain, and purchase order that say different things. Identify the controlling agreement and order of precedence. If multiple documents form the deal, list them all before review begins.

Treat data and security access as a separate risk track

Ask whether the counterparty receives personal information, PHI, employee data, payment information, credentials, source code, or access to production systems. If yes, route the agreement through the applicable privacy and security review and determine whether a DPA, BAA, security exhibit, incident-notice term, or subprocessor restriction is required. A procurement form that looks routine may create material breach-notification and regulatory obligations once the vendor touches regulated data.

Do not accept a vendor’s statement that it is “HIPAA compliant,” “SOC 2 certified,” or “uses industry-standard security” as a substitute for the factual intake. Identify what data moves, where it is hosted, who can access it, whether subprocessors are used, and what happens at termination. Legal language should follow the data flow. If the business cannot explain the data flow, the deal is not ready for signature.

Escalate liability architecture, not just the liability cap

Capture indemnity, defense obligations, limitation-of-liability cap, exclusions from the cap, consequential-damage waiver, insurance, warranties, service credits, and any exclusive remedy. These provisions interact. A one-year-fees cap can be largely illusory if confidentiality, data security, intellectual property, payment duties, and indemnification are all carved out. Conversely, an uncapped vendor obligation may be commercially unrealistic if no insurance or balance sheet stands behind it.

For transactions within Article 2 of the UCC, Section 2-719 permits parties to alter or limit remedies, but a limited remedy may fail if circumstances cause it to fail of its essential purpose, and consequential-damage limitations remain subject to unconscionability rules. A services contract is not automatically governed by Article 2, so the reviewer should identify governing law and contract type rather than importing UCC rules indiscriminately. Intake should flag unusual remedy architecture for counsel.

Identify operational promises the business must be able to perform

Contracts often create obligations outside Legal’s control: response times, staffing levels, uptime, delivery dates, data-retention periods, background checks, audit support, reporting, insurance, subcontractor restrictions, or regulatory certifications. The intake owner should identify the internal team that will perform each material obligation. If nobody owns it, the promise should not be signed. Escalate commitments that require new systems, headcount, vendor changes, or policies that do not yet exist.

The same applies to customer-specific compliance terms. A clause may require adherence to policies posted on a website, future security standards, or a customer code of conduct that can change without amendment. Intake should attach every incorporated document and identify whether unilateral changes are permitted. Hidden obligations are still obligations. Make the review record complete before execution.

Flag negotiation leverage and deadline pressure

Intake should say whether the form is the company’s paper, the counterparty’s paper, or a click-through that may not be negotiable. It should also state the real deadline and why it exists. “Need today” is not useful. “Implementation begins Friday because a legacy system terminates Monday” is. Legal can then focus on provisions that materially affect the decision and identify whether an interim order, limited pilot, or short extension would reduce pressure.

Capture leverage honestly. A strategic customer, sole-source vendor, commodity supplier, and replaceable consultant call for different negotiation strategies. The intake owner should identify alternatives, switching cost, and whether the business is willing to walk away. That information helps counsel prioritize changes instead of producing a redline that is technically perfect but commercially unusable.

Create a stop-sign list for nonstandard clauses

Certain terms should trigger automatic escalation: personal or parent guarantees, exclusivity, most-favored-customer pricing, assignment restrictions that block a sale, broad audit rights, rights to use company data for the vendor’s own purposes, unilateral policy changes, publicity rights, uncapped indemnity, confession-of-judgment language, broad security interests, and governing-law provisions that materially increase enforcement cost. The list should be tailored to the company rather than copied from a generic playbook.

A stop-sign clause is not automatically unacceptable. It means the business owner and appropriate decision-maker must understand the consequence before signing. Record the approval and, where practical, the business rationale. That turns contract review into a risk decision rather than an unexplained legal edit.

Close the loop after signature

Contract intake should end with an execution record and an owner for the obligations that survive signature. Save the fully executed agreement, exhibits, order forms, redlines or approval record as appropriate, and key dates in the contract system. Tell operations which provisions require action: notice deadlines, reporting, security assessments, insurance certificates, renewal windows, pricing changes, audit rights, or implementation milestones. A good review process does not end when the PDF is signed. It converts negotiated terms into assigned obligations.

At renewal, use the original intake record as the baseline. Confirm whether spend, data flows, services, users, locations, or risk changed. A contract that was low-risk at signing can become material after expansion. Re-review amendments and renewals based on current facts rather than assuming the original approval remains sufficient.

Use intake data to improve templates

Track which clauses repeatedly cause escalation and negotiation delay. If the same indemnity, renewal, data-use, audit, or insurance issue appears in most deals, improve the company template, playbook, or fallback language instead of solving it from scratch each time. A short quarterly review of intake data can reduce cycle time while preserving the controls that matter. It also shows management where vendors or customers are consistently asking the company to accept risk outside its normal position.

Contract-intake triage checklist

• Business purpose, total economic value, implementation date, and internal owner identified.
• Correct legal entity, signer authority, and required internal approvals confirmed.
• Term, auto-renewal, notice window, termination charges, and transition obligations captured.
• Data types, system access, DPA/BAA/security requirements, and subprocessors identified.
• Indemnity, cap, carve-outs, insurance, warranties, service credits, and exclusive remedies escalated.
• Every incorporated policy, exhibit, order form, and statement of work attached to the review file.