How to Allocate Risk in Customer Contracts for UK Medical Device Distributors

If you distribute medical devices in the UK, your customer contract does far more than set the price and delivery date. It decides who carries the cost when stock is delayed, when a device is used outside its intended purpose, when a customer asks for an indemnity you did not price for, or when a recall disrupts your supply chain.

Many distributors make the same mistakes: they accept the customer's standard terms without checking liability caps, they promise broad product performance that they cannot control, or they pass on manufacturer wording that does not fit the UK market.

The problem is simple. A distributor sits in the middle, between the manufacturer and the customer, but often ends up carrying risks created by both. This guide explains how risk allocation works in customer contracts for UK medical device distributors, which clauses need the closest attention before you sign, and where founders and commercial teams most often get caught out.

Overview

Risk allocation in a customer contract is about deciding, in clear legal wording, which party is responsible if something goes wrong. For a UK medical device distributor, that usually means matching your customer promises to your supply chain reality, limiting liability where the law allows, and making sure regulated product risks are not casually shifted onto your business by broad boilerplate terms.

• Define exactly what you are supplying, including model, specification, intended use and any services.
• Separate distributor obligations from manufacturer obligations, especially for performance, warranties and product changes.
• Set sensible limits on liability, with clear carve-outs for areas that cannot be excluded by law.
• Use tailored indemnities rather than accepting broad one-way indemnities in standard customer terms.
• Deal expressly with recalls, safety notices, field corrective action, shortages and discontinuations.
• Allocate responsibility for storage, installation, training, maintenance, user error and misuse.
• Check payment, delivery, acceptance and return terms so commercial risk does not creep in through operational clauses.
• Make sure your contract language fits UK medical device rules, procurement realities and your insurance cover.

What Risk Allocation Customer Contract Medical Device Distributor Means For UK Businesses

For UK businesses, risk allocation means turning commercial assumptions into written contract terms before a problem arises. If the contract is silent or vague, the distributor often discovers too late that it has taken on more responsibility than its margin supports.

Medical device distribution carries a different risk profile from ordinary wholesale. Your customer may be an NHS body, a private clinic, a care provider, a dental practice, a pharmacy, or another reseller. Each customer type asks different questions, but the core issue stays the same: what are you promising, what are you not promising, and who pays if the supply arrangement fails?

Why distributors face a particular squeeze

A distributor usually does not design the device, manufacture it, or control every technical issue that could arise in use. Yet the customer's procurement team may still ask the distributor to accept responsibility for defects, regulatory failures, patient loss, cyber incidents in connected devices, and all recall costs.

This is where founders often get caught. They assume the manufacturer's terms will protect them, but the customer contract may be broader than the manufacturer contract. That leaves a gap, and the distributor sits in it.

What risk allocation usually covers

A well-drafted customer contract should allocate both legal and practical risk. In plain English, it should say who is responsible for what, when risk transfers, what happens if something goes wrong, and how far each party's financial exposure goes.

Key areas usually include:

• product description and specification
• regulatory status and intended purpose
• delivery, title and risk in the goods
• installation, implementation and training
• warranties and exclusions
• indemnities
• recalls, corrective action and adverse incident cooperation
• liability caps and excluded losses
• customer misuse or unauthorised modification
• data protection where the device or service handles personal data
• termination rights and post-termination obligations

Why the wording matters in medical device deals

Small wording choices can move significant financial exposure. A promise that products are "fit for all clinical purposes" is much broader than a promise that products materially conform to the manufacturer's specification. An obligation to comply with "all applicable laws" may sound harmless, but it can be read widely if the customer later argues that every compliance failure is your contractual breach.

Another common issue is blending goods with services. If your business also offers set-up support, calibration, software access, maintenance coordination, or user training, your contract should separate those duties clearly. Otherwise, a complaint about clinical outcomes or device operation can become a wider claim that your services caused loss.

Matching your customer contract to the supply chain

Your customer contract should not promise more than you can recover from your supplier or manufacturer. Before you sign, compare the upstream and downstream positions on:

• product warranty periods
• remedies for defects
• recall cost allocation
• delivery lead times and stock availability
• change control and product discontinuation
• intellectual property infringement support
• insurance arrangements

If the customer demands next-day replacement, unlimited recall cooperation, or wide indemnities, but your supplier gives you only limited replacement rights, you are self-insuring that gap. Sometimes that is a conscious commercial choice. Often, it is accidental.

Legal Issues To Check Before You Sign

Before you sign a customer contract, the main legal task is to pin down what your business can realistically stand behind and what needs to stay with the manufacturer, the customer, or both. That means reading beyond the headline clauses and checking how the liability logic runs through the whole document.

1. Product scope and intended use

The contract should identify the device accurately and avoid vague performance promises. If the product is suitable only for specified uses, environments, operators or compatible systems, say so clearly.

Where relevant, include wording around:

• the exact model or SKU
• approved or intended use
• required storage, handling and maintenance conditions
• compatibility limitations
• whether consumables, accessories or software updates are included

This matters because many disputes are not really about defective goods. They are about a mismatch between what the customer thought it was buying and what the contract actually described.

2. Warranties and disclaimers

Your warranty should be precise, not generous by habit. A distributor often gives a conformity or pass-through warranty tied to the manufacturer's documentation, rather than an open-ended promise about outcomes.

Good contract drafting usually deals with:

• how long the warranty lasts
• what remedy is offered, such as repair, replacement or refund
• what evidence the customer must provide
• what invalidates the warranty, such as misuse, improper storage, unauthorised repair or failure to follow instructions
• whether the warranty is the customer's exclusive contractual remedy for the defect

Be careful with sales emails, proposals and technical statements before you sign. If they over-promise, the contract may not fully undo the damage.

3. Liability caps and excluded losses

A liability cap is often the most negotiated risk term in the whole contract. For distributors, the sensible position is usually a financial cap linked to fees paid or payable under the contract, with specific treatment for higher-risk categories.

The contract should state:

• the overall cap on liability
• whether some liabilities have a separate cap
• which losses are excluded, such as indirect or consequential loss, loss of profit, loss of revenue or loss of goodwill, so far as legally effective
• which liabilities cannot be limited or excluded under UK law, such as certain liabilities for death or personal injury caused by negligence, fraud, or other non-excludable matters

Do not just focus on the cap amount. A low cap can become meaningless if broad indemnities or uncapped obligations sit elsewhere in the contract.

4. Indemnities

Indemnities can shift risk more aggressively than ordinary breach clauses. If a customer asks for an indemnity, check exactly what events trigger it, whose conduct is covered, and whether there is any financial limit.

Areas where indemnities may appear include:

• third-party intellectual property claims
• personal injury or property damage claims
• breach of law
• data protection breaches linked to software or connected devices
• product defects and recalls

A blanket indemnity for all losses arising from the product is rarely sensible for a distributor. The wording should be narrowed to matters you actually control.

5. Recall, safety action and vigilance cooperation

Recall clauses should say what happens if a product safety issue emerges, not leave everyone to argue under pressure. In medical device contracts, this is especially important.

The contract should address:

• who can initiate a recall or field safety corrective action
• who informs customers, end users and regulators where relevant
• who pays for shipping, replacement, disposal and communications
• what records and traceability information each party must keep and share
• how the parties cooperate on incident investigation

If you are a distributor, avoid agreeing to absorb all recall costs automatically. The cause of the issue matters.

6. Delivery, acceptance and stock risk

Operational clauses can quietly carry major legal risk. If delivery dates are expressed as absolute commitments, late supply may trigger termination rights or claims that exceed the value of the order.

Check the position on:

• estimated versus fixed delivery dates
• partial deliveries
• customer acceptance testing
• when title and risk pass
• back orders and shortages
• customer rights to reject goods

For imported devices or specialist equipment, make sure lead-time language reflects reality rather than ideal-case assumptions.

7. Customer responsibilities

Your contract should not read as if the distributor carries the whole operational burden. If the customer must store products correctly, keep devices secure, train users internally, follow instructions, or stop using a product after a safety notice, say so expressly.

This is particularly important where poor handling, local configuration, environmental conditions, or use outside the intended purpose could affect performance.

8. Data protection and connected devices

If the device or associated platform processes personal data, data terms may need separate treatment. A supply contract may not be enough on its own.

Before you accept the provider's standard terms or issue your own, check:

• whether personal data is processed at all
• who decides the purpose and means of processing
• whether a separate data processing arrangement is required
• who handles security incidents and customer notifications
• what cyber and software update commitments are actually supportable

Do not casually promise that a connected product is secure in all circumstances. Security commitments should reflect the actual product and support model.

9. Insurance and consistency checks

Your contract wording should fit your insurance, not assume insurance will fix drafting problems. If you accept uncapped liability or a wide contractual indemnity, your policy may not respond in the way you expect.

Before you sign, compare the contract against:

• product liability cover
• public liability cover
• professional indemnity cover, if any services are included
• cyber cover, if relevant
• policy exclusions for contractual assumptions of liability

Common Mistakes With Risk Allocation Customer Contract Medical Device Distributor

The most common mistakes happen when commercial pressure overtakes contract discipline. A signed deal can look fine at the order stage and still leave the distributor exposed when the first complaint, delay or safety issue appears.

Accepting customer paper without marking up the risk clauses

Many SMEs accept hospital group, clinic chain or reseller terms to keep the sale moving. The hidden problem is that standard procurement terms often assume the supplier controls manufacturing, design and broad compliance risk.

If you are the distributor, those assumptions may be wrong. You may end up taking liability for matters that sit with the manufacturer.

Offering broad warranties in the sales process

A sales team may reassure the customer with phrases like "fully suitable", "fully compliant", or "will meet all your needs". Those statements can create trouble later, especially if the final contract does not tightly define the warranty position.

Before you rely on a verbal promise or a proposal statement, make sure the legal terms line up with what can actually be delivered.

Using one contract template for every product

Not every device creates the same exposure. A low-risk consumable, a capital equipment item, and a connected monitoring device should not always sit under identical risk wording.

Different product categories may require different treatment for:

• installation and commissioning
• software and cybersecurity
• maintenance and calibration
• traceability and batch control
• training responsibilities

Failing to separate direct losses from remote business losses

Customers sometimes ask for all losses resulting from a supply failure. Without careful wording, a modest product issue can turn into a claim for lost theatre time, cancelled appointments, reputational harm or downstream contractual penalties.

You may not be able to exclude every category in every situation, but you should not leave the issue untouched.

Ignoring the recall clause because it feels unlikely

Recall and safety action wording often receives less attention than pricing and delivery. That is a mistake. When a problem arises, the business impact can be immediate and expensive.

A poor clause may leave the distributor responsible for communications, logistics and replacement costs before fault has even been determined.

Creating a mismatch with upstream rights

If your supplier can change the product specification on short notice, shorten warranty support, or cap its own liability at a low level, but you promise the customer stronger protection, the gap comes straight back to your balance sheet.

This is where a contract review should be commercial, not just legal. The question is not whether the customer asks for a term. It is whether your business can carry it.

Forgetting operational proof points

Even a well-written contract is harder to use if the facts are messy. Distributors often struggle because they cannot quickly prove storage compliance, delivery dates, serial numbers, training scope or notice history.

Keep records for:

• batch or serial tracking
• delivery and acceptance
• installation and commissioning
• customer training provided
• safety notices sent
• complaints and corrective action

Good record keeping supports the contract's risk allocation when facts are disputed.

FAQs

Can a UK medical device distributor exclude all liability in a customer contract?

No. Some liabilities cannot be excluded or limited under UK law, and blanket exclusions are unlikely to work as intended. The better approach is a clear, reasonable allocation of liability with tailored caps and carve-outs.

Should a distributor give the same warranty as the manufacturer?

Not automatically. A distributor often gives a more limited, pass-through or conformity-based warranty. The wording should reflect what the distributor controls and what the manufacturer supports.

Who should pay for a medical device recall?

That depends on the cause and the contract wording. A good contract sets out who manages the process, who pays which costs, and how the parties cooperate while the issue is investigated.

Do standard customer purchase terms usually favour the customer?

Yes, often they do. They may contain broad indemnities, high liability exposure and strict service commitments. Before you sign, check whether those terms match your actual role as a distributor.

Does insurance solve bad risk allocation in the contract?

No. Insurance can help with some losses, but it does not replace careful drafting. Policy limits, exclusions and rules on assumed contractual liability can leave important gaps.

Key Takeaways

• Risk allocation in customer contracts decides who bears the cost when product, delivery, safety or compliance issues arise.
• UK medical device distributors should avoid promising more to customers than they can recover from manufacturers or suppliers.
• The clauses that usually matter most are product scope, warranties, indemnities, liability caps, recalls, delivery terms and customer responsibilities.
• Broad customer standard terms can push manufacturer-level risk onto a distributor unless they are negotiated carefully.
• Connected devices and support services can create extra exposure around data protection, cybersecurity and service performance.
• Insurance is useful, but it should support the contract position rather than patch over poor drafting.
• Clear records on delivery, traceability, training and safety notices make the contract easier to rely on when problems arise.

If you want help with liability caps, indemnities, recall clauses, supplier and customer contract alignment, or a customer contract review, you can reach us on 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.