MSA vs Order Form: What Enterprise Legal Really Negotiates
An MSA and an order form do different jobs in an enterprise deal. Knowing what legal negotiates in each is how you close faster and expand without redlines.
An MSA and an order form are two different documents doing two different jobs, and founders who blur them lose weeks in legal. The master services agreement holds the terms that govern the whole relationship: liability, data, IP, termination, the durable stuff. The order form holds the commercial specifics of one purchase: which product, how many seats, what price, what dates. Enterprise legal negotiates the MSA hard once and treats the order form as a fill-in-the-blanks. Get this structure right and your second deal with the same buyer is a signature, not a renegotiation.
Here is what actually gets fought over in each.
what an MSA covers and why it takes time
The MSA is the constitution of the relationship. It is where the buyer's legal team spends its energy, because it governs everything that follows. The clauses that eat calendar are predictable.
Liability caps are the headline fight. The buyer wants uncapped or a high multiple, you want the cap at fees paid. Read the liability cap fight in AI vendor contracts before you walk in, because it is the single most negotiated term and the one where founders give away the most.
Data terms come next. Ownership, processing, security obligations, and breach notification. If you handle personal data, the DPA rides alongside the MSA, and negotiating the DPA with the buyer is its own project. Indemnification, IP ownership, termination rights, and the right-to-audit clause round out the list. On that last one, know your position before it comes up, because how you handle the right-to-audit clause signals how mature your operation is.
The MSA takes time because it is negotiated by people who are not in your sales thread and do not share your urgency. Send your own paper first so you are negotiating from your terms, not theirs.
what an order form covers and why it should be fast
The order form is the commercial layer. Product, quantity, term length, price, start date, and any deal-specific commercials. It references the MSA for all the governing terms, which means it should contain no legal language worth fighting over.
When an order form starts collecting redlines, something is wrong. Either terms that belong in the MSA leaked into the order form, or the MSA was too narrow and the order form is being used to renegotiate. Keep the boundary clean: durable terms in the MSA, commercial specifics in the order form, and the order form stays a one-page signature.
This separation is what makes expansion painless. A well-built MSA lets you expand the account without restarting procurement, because every new purchase is just another order form under terms already agreed.
the mistake that forces you to renegotiate everything
The expensive error is writing the first MSA to cover only the specific product you are selling today. It feels efficient. It is a trap. The next product, the next business unit, or the next data type falls outside the agreement, and now you are negotiating a whole new MSA for what should have been an order form.
Write the MSA broad. Have it cover your company and your platform generally, with specific products introduced by order form. That way the master terms are negotiated once and everything after is commercial. This is the contract-side version of building infrastructure that compounds: do the hard work once so every later deal inherits it.
how to run the legal stage without losing weeks
Send your MSA and order form templates early, ideally before the buyer's legal team asks. A vendor with clean, reasonable paper ready moves faster than one waiting to react to the buyer's draft.
Run legal in parallel with the security review, not after it. They are handled by different teams and there is no reason to serialize them. Compressing these two stretches is where a founder beats a slow process, as I cover in the first enterprise deal timeline.
Pick your battles. Concede the terms that do not matter to preserve energy for the two or three that do: liability cap, data ownership, and termination. A deal that dies over a clause you did not need to win is a self-inflicted loss.
The founders who close enterprise fast understand which document does which job and negotiate accordingly. My ventures run a broad MSA and a thin order form on purpose, which is why Girard AI closes its second and third deals with a buyer in days instead of months. Separate the durable from the commercial, and legal stops being the stage that kills your quarter.