Aggregate Liability Cap of US$100

What it is

This clause caps Replicate's total monetary liability to any customer at the lower of fees paid to Replicate in the six months preceding the claim or US$100, regardless of the legal theory or nature of the loss. This cap applies even if other agreed remedies fail.

Why it matters (compliance & governance perspective)

This provision sets an exceptionally low monetary ceiling on recoverable damages from Replicate, including for claims involving data loss, security breach, service interruption, and breach of contract. The cap applies across all legal theories and explicitly survives failure of essential purpose of any remedy.

Consumer impact (what this means for users)

Under this clause, the maximum monetary recovery available from Replicate for any claim is limited to the lower of six months of fees paid or US$100, regardless of the scale of loss experienced. Section 11.3 acknowledges that certain jurisdictions may not permit these limitations, and notes that additional rights may apply in those jurisdictions.

Institutional analysis (regulatory & governance intelligence)

1. REGULATORY LANDSCAPE: EU consumer protection frameworks and certain state consumer protection statutes may limit the enforceability of liability caps of this magnitude, particularly for claims arising from gross negligence, data breaches, or fundamental service failures. GDPR Article 82 establishes independent data subject rights to compensation for data protection violations that may not be contractually waived. California consumer protection law may also constrain the enforceability of this cap in certain contexts. The FTC has authority to evaluate whether such caps in consumer contracts constitute unfair practices. 2. GOVERNANCE EXPOSURE: High. A US$100 liability cap creates material unquantified risk exposure for enterprise customers using the platform for production workloads, particularly where proprietary data is submitted as inputs or where service failures could cause operational disruption. The cap applies to data loss and security breach claims, categories where actual damages frequently exceed this ceiling by orders of magnitude. 3. JURISDICTION FLAGS: EU and EEA users retain GDPR-based data subject rights that operate independently of contractual liability caps. UK users retain equivalent rights under the UK GDPR. California residents may have additional rights under the CCPA and California Consumer Legal Remedies Act depending on the nature of the claim. The agreement acknowledges at Section 11.3 that certain jurisdiction laws do not permit these limitations. 4. CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams should treat this cap as a material vendor risk factor. Standard commercial agreements for SaaS platforms used in production environments typically include higher liability caps, commonly calculated as a multiple of annual contract value. Organizations with significant data processing or operational dependencies on the platform should evaluate whether contractual or insurance mitigation is available. 5. COMPLIANCE CONSIDERATIONS: Legal teams reviewing Replicate as a data processor or sub-processor under GDPR or CCPA should note that this liability cap does not extinguish the organization's own liability to data subjects for downstream processing failures. Data processing agreements and vendor risk assessments should document this cap and its implications for the organization's broader liability framework.

Applicable agencies

Provision details

Other risks in this policy

• Automatic Subscription Renewal Unless Cancelled high
• Class Action and Consolidated Arbitration Waiver high
• Customer Billed for Partial Runs and Failed Attempts high
• Customer Indemnification of Replicate for All Losses high
• Exclusion of Indirect and Consequential Damages high
• Liability Cap at Six Months Fees or USD 100 high