Brand the mage with a 2-way transmutation circle to seal the pact
While the transmutation circle created to summon the demon is one-way and in the total control of the mage, this transmutation circle can be opened by either the demon or the mage using either one of thier powers, and it is forever burned into the flesh of the mage so that it can not be easily removed. This way, the mage can open the link whenever he needs to access the demon's power, but the demon can open the link whenever he needs to check up on the mage to make sure the mage is honoring his part of the deal.
If the demon ever opens the link to see the mage is not honoring the deal, he can use the link as a conduit to project his power through to punish the mage.