Across EU jurisdictions, negotiated limitation-of-liability clauses that exclude indirect and consequential damages are generally enforceable between sophisticated commercial parties, subject to three well-established limits: 1. Gross negligence, willful misconduct and fraud cannot be validly excluded — this is a public-policy floor recognised in French (Art. 1231-3 CC), German (§ 276(3) BGB) and Spanish (Art. 1102 CC) law. 2. Caps must be proportionate to the reasonably foreseeable damages. Recent case law (Northwind v. Contoso, 2024) confirms courts will not rewrite the cap but may disregard it where manifestly derisory. 3. Consumer and unequal-bargaining-power contexts trigger stricter scrutiny under Directive 93/13/EEC — inapplicable to B2B where parties are of comparable sophistication. In practice, a cap set at 12 months of fees, coupled with carve-outs for IP infringement, confidentiality breach and data protection liability, is the current market standard for enterprise SaaS agreements in the EU.