8 Contract Clauses That Protect Your Business When Working With an Agency

Why the agency contract matters more than you think

When you choose a marketing, communications or digital agency, all the attention goes to the creative proposal, the case studies and the chemistry with the team. The contract? A bureaucratic document that "the lawyer will handle." A PDF signed without reading because "we trust them."

Until something goes wrong.

And then you discover that the website you paid €30,000 for technically belongs to the agency. That your Google Ads account data is inaccessible because the account is registered under their name. That to exit the contract you need to give 6 months' notice and pay a penalty.

Alarming fact: according to a study by the ANA (Association of National Advertisers), 43% of companies that switched agencies experienced contractual problems during the transition — from ownership of materials to data access, to intellectual property disputes.

This guide analyzes the 8 clauses every agency contract must contain to protect your business. It is not legal advice (you need a lawyer for that), but it gives you the map to know what to look for, what to ask for and what to never accept.

Clause 1: Intellectual property — who owns the creative work

The problem

In the absence of an explicit clause, Italian copyright law (L. 633/1941) assigns authorship rights to the creator of the work — i.e., the agency or its collaborators, not you who commissioned and paid for it. This means that without an explicit transfer of rights, the agency could theoretically prevent you from using the logo you paid for, the website it developed or the content it wrote.

What the contract should say

The contract must provide for the full and definitive transfer of all intellectual property rights over deliverables produced under the engagement, from the moment of payment. It must specify that the transfer includes the right to use, modify, reproduce and distribute the materials without territorial or time limitations.

It must also clarify ownership of source files: not just the finished website, but the Figma/Sketch design files; not just the logo in PNG, but the vector file; not just the edited video, but the raw files.

Red flags

• "The agency grants a non-exclusive license of use" — that is not ownership, it is a rental
• "Rights remain with the agency until the last invoice is paid" — it holds you hostage
• "The agency reserves the right to use the materials in its portfolio" — acceptable only if it excludes confidential or strategic materials
• No mention of source files — they probably will not hand them over

Clause 2: Data access and portability

The problem

The agency manages your ad accounts, your Google Analytics, your CRM, your social media. If the relationship ends — for any reason — you must be able to access all this data immediately and completely. Without historical data, the new agency (or your internal team) starts from scratch.

What the contract should say

All advertising accounts, analytics and platforms must be owned by the client. The agency works as a collaborator with delegated access, not as an owner. The contract must explicitly list all accounts and platforms involved and establish that the client has administrator access at all times.

It should also include a "transition period" at the end of the relationship (typically 30 days) during which the agency guarantees a complete handover, including documentation of active campaigns, custom audiences and ongoing strategies.

Red flags

• The agency creates Google Ads or Meta accounts in its own name — you lose everything if you switch agencies
• "Data access will be provided upon request" — you must have autonomous and permanent access
• No mention of handover at the end of the relationship
• The agency uses its own Google Analytics and doesn't give you access to the property

Clause 3: Termination terms

The problem

A contract with a 12-month lock-in and 6 months' notice ties you to an agency for 18 months, even if you realize it isn't working after the first month. On the other hand, a contract without notice doesn't give the agency the minimum stability to invest in your project.

What the contract should say

The ideal balance includes: an initial period of 3–6 months (the time needed to see early results), after which the contract renews monthly or quarterly with 30–60 days' notice. It should be clear what happens upon termination: payment for work in progress, pro-rata fee for the current month, no additional penalties.

The contract should also include a termination for cause clause — without notice and without penalties — in case of serious breach: failure to meet agreed minimum objectives, confidentiality breach, conflict of interest.

Red flags

• Lock-in periods exceeding 12 months without an early exit clause
• Exit penalties exceeding 1–2 months of the fee
• Notice periods exceeding 90 days
• No distinction between ordinary termination and termination for cause

Clause 4: Scope of work — what's included and what isn't

The problem

The most common disputes between client and agency arise from the scope of work: "But this was included!" "No, this is extra." Without a precise definition of what the agency must deliver, every activity becomes potential grounds for conflict.

What the contract should say

The scope of work must be a detailed appendix listing: activities included in the fee (with quantities where applicable: "4 posts/week," "1 monthly report," "2 revisions per deliverable"), excluded activities (with indication of additional costs), a process for handling extra requests (how they are quoted, who approves them).

It must also define the client's responsibilities: response times for approvals, materials to be provided, designated contacts. Because if the project delays are caused by the client not responding for 3 weeks, the fault is not the agency's.

Red flags

• Generic scope of work: "management of digital communication"
• No limit on the number of revisions — the agency will do endless revisions reluctantly and poorly
• No process for extras — you'll end up paying without having approved
• No client responsibilities — the agency protects itself by placing all blame on you for delays

Clause 5: KPIs and performance metrics

The problem

Without contractual KPIs, the only way to evaluate the agency is subjective feeling. "It seems to be going well" or "I have the impression it's not working" are not bases for a constructive conversation — or for a potential termination for cause.

What the contract should say

The contract must include a KPI appendix with: specific metrics (ROAS, CPA, traffic, conversion rate), numerical targets (preferably progressive: months 1–3, months 4–6, months 7–12), measurement and reporting frequency, consequences of failing to meet targets (recovery plan, fee reduction, right to early termination).

The KPIs must be realistic and mutually agreed: not imposed unilaterally by the client, but discussed with the agency during negotiations. If the agency accepts unrealistic KPIs just to win the contract, it is a problem for both parties.

Red flags

• No KPIs in the contract — the agency reserves the right to define "how to measure success"
• Vague KPIs: "improve online visibility"
• No consequences for failing to meet targets
• KPIs the agency cannot influence (e.g., total revenue — too many external factors)

Clause 6: Confidentiality and data protection

The problem

The agency will have access to sensitive information: business strategies, sales data, launch plans, customer information. Without a robust NDA, this information could theoretically end up in a competitor's hands — perhaps because the agency also works for them.

What the contract should say

An NDA (Non-Disclosure Agreement) must cover: definition of confidential information (broad and inclusive), duration of the confidentiality obligation (which must survive the end of the contract — typically 2–5 years), consequences of breach (damages, penalty clause), processing of personal data under GDPR (the agency as data processor).

The contract must also clarify how the agency handles end customers' personal data (website users, campaign leads, newsletter subscribers) in compliance with GDPR, with an attached DPA (Data Processing Agreement).

Red flags

• No NDA or a generic NDA "downloaded from the internet"
• Confidentiality expires with the contract — the information remains sensitive afterward
• No DPA for personal data processing — GDPR penalty risk for you
• The agency reserves the right to use your data for internal benchmarks without anonymization

Clause 7: Conflict of interest

The problem

Does your agency also work for your main competitor? Does it use insights about your business to help a competitor? In most cases there is no malice, but the potential conflict exists and must be managed contractually.

What the contract should say

The contract must include a disclosure obligation: the agency must disclose if it works or begins working with direct competitors. The definition of "direct competitor" must be agreed upon and specific — not so generic as to prevent the agency from working with any company in your industry.

Options range from industry exclusivity (the agency does not work with any competitor — usually requires a premium on the fee) to simple disclosure with the option to terminate if you do not accept the situation.

Red flags

• No mention of conflict of interest
• The agency categorically refuses to discuss it — it may already work for a competitor of yours
• Exclusivity obligation without additional compensation — the agency gives up revenue for you, it is fair to acknowledge it

Clause 8: Liability and indemnification

The problem

The agency publishes a social post that infringes copyright. A Google Ads campaign uses a competitor's registered trademark. An email marketing campaign is sent without GDPR consent. Who pays? In the absence of a clear liability clause, the answer is almost always: "see you in court."

What the contract should say

The contract must provide for: agency liability for errors, negligence and legal violations committed in executing the engagement; mutual indemnification — the agency holds the client harmless for damages caused by its activities, the client holds the agency harmless for damages arising from false or incomplete information provided by the client.

It must also establish a liability cap — a maximum limit on damages (typically equal to the annual contract value). Without a cap, the agency risks unlimited liability for an error on a €2,000/month contract, which is neither fair nor realistic.

Finally, the contract should require the agency to carry adequate professional indemnity insurance. This protects both parties: if the agency causes damage, there is a policy to cover compensation.

Red flags

• No liability clause — everything is left to good faith
• Liability falls only on the client, never the agency
• No liability cap — can be used as a weapon in litigation
• The agency has no professional indemnity insurance

Summary: what each clause should say vs. warning signs

How to negotiate these clauses

Not all agencies will accept every clause on the first attempt. Here is how to approach the negotiation.

Don't present the contract as an ultimatum

Explain the reasoning behind each request. "I want account ownership because my company needs data continuity, regardless of the provider" is more effective than "I won't sign if the accounts aren't mine."

Distinguish between negotiable and non-negotiable items

Some clauses are non-negotiable: account ownership, data access, NDA. Others can be modulated: notice period length, liability cap, level of exclusivity. Knowing what is essential and what is preferential makes you a more effective negotiator.

Have the contract reviewed by a lawyer

Investing €500–1,500 to have the contract reviewed by a lawyer specializing in commercial or IP law is one of the highest-ROI investments you can make. A lawyer sees things you don't and knows how to formulate them in a legally sound manner.

A good contract protects both parties

If the agency resists reasonable clauses, ask yourself why. A serious agency has no problem putting in writing commitments it intends to honor. If it refuses transparency on costs, account ownership or an NDA, that is a warning sign that goes beyond the contract.

Remember: the contract is not for when everything is going well — it is for when something goes wrong. And that moment, sooner or later, arrives. Better to be prepared.

Frequently asked questions

Is it a problem if the agency doesn't have a standard contract?

Not necessarily: many small agencies work with informal contracts. But it is a good reason for you to propose one. It can be simple — even 3–4 pages — as long as it covers the 8 fundamental clauses. Many templates are available online as starting points.

Can I use a contract found online?

As a starting point, yes, but have it reviewed by a lawyer. Online templates are generic and often do not cover specificities of the Italian market (copyright law, GDPR, service contract regulations). An unadapted template can be worse than no contract, because it creates a false sense of security.

The agency wants to include a non-compete clause: should I be concerned?

It depends on the scope. If it prevents you from working with any other agency for similar services during the contract, it is excessive. If it prevents you from directly hiring the agency's employees for a period after the relationship ends (no-poaching), it is reasonable and common.

What happens if the contract doesn't mention one of these clauses?

Italian default law applies, which may not be in your favor. For example, without explicit IP transfer, the rights remain with the creator. Without a termination clause, the legal default terms for service contracts apply, which may not be what you want.

Is the contract valid without a handwritten signature?

In Italy, service contracts do not require written form to be valid (with exceptions). However, written form is essential for evidence in the event of litigation. A qualified digital signature (PEC, SPID, certified graphometric signature) has the same legal value as a handwritten signature.

Do I need a different contract for each service the agency provides?

Not necessarily. You can have a master service agreement that covers general terms and specific appendices (statements of work) for each project or service. This approach is more flexible and avoids renegotiating everything each time you add a service.

The agency proposes a contract with automatic renewal: is that a problem?

Automatic renewal itself is not negative — it avoids service interruptions. The problem is when it is combined with a long notice period for cancellation. A monthly automatic renewal with 30 days' notice is reasonable. An annual automatic renewal with 90 days' notice is restrictive. Always check the renewal cancellation terms.

Sources and further reading

• Forbes — "How To Protect Your Business When Hiring A Marketing Agency", 2024
• ANA (Association of National Advertisers) — Agency Contract Best Practices
• IPA (Institute of Practitioners in Advertising) — Client-Agency Contract Guidelines
• Law 22 April 1941 No. 633 — Protection of Copyright and Related Rights
• EU Regulation 2016/679 (GDPR) — Data Processor Obligations
• Italian Civil Code — Articles 2222–2238: Contract for Works