AI Software & Agents

What enterprise procurement asks for

The first time insurance blocks a deal is usually a security and vendor review. Procurement wants certificates of tech E&O, cyber and general liability at stated limits, commonly $1M to $5M per claim for E&O and cyber and $1M per occurrence for general liability, before the master services agreement is signed. Regulated customers in finance and health ask for more, and a few ask to be named as additional insured on the general liability policy.

Investors ask for directors and officers coverage at the priced round, and the term sheet often sets a deadline. Landlords ask for a general liability certificate before the lease. Model providers ask for nothing, because their terms already push the liability to you.

A security questionnaire asks for the certificate on page one. If the program is placed before the review starts, you attach it. If it is not, the signature waits on an underwriter.

What it costs

We don't publish our own numbers, because premiums are specific to your operation and come back from the carriers themselves. One dated survey from a startup-focused insurer is worth knowing as an anchor, with the caveat that it covers startups of every kind and the AI-specific placement can sit above or below it.

Medians across more than 3,000 startups of every kind, published 2026-05-21 by a startup insurer. The source states that pricing varies by industry, location, claims history, stage and limits. These are not our figures and not a quote.

What to watch for in the wording

Start with the exclusions. A generative AI exclusion removes claims arising out of a system that creates content or responses; an absolute AI exclusion removes claims arising out of any use, deployment or development of AI, including statements about what your AI can do. The second kind, on a D&O or E&O form, can swallow an AI company's core business. The tracker lists what has been filed, by whom, with sources and dates.

Then read the definitions. The insuring agreement responds to a claim arising from your technology services or technology products, and both terms are defined. If neither definition reaches a model's output or an agent's action, the exclusion never has to be invoked; the claim simply falls outside the grant. Ask for language that names AI, machine learning and autonomous decision-making inside the definition.

Cyber forms need a second reading for prompt injection, model manipulation and data leakage through the model. A breach is still a breach, and most cyber forms respond to unauthorised access however it happened, but the definitions of computer system and security failure vary, and a few carriers now sell an affirmative AI endorsement to remove the doubt.

How to buy it

Tell us what the product does, where it runs, whose data it touches and what your customers' contracts ask for. The application turns that into a submission written for AI companies, and a licensed broker takes it to the insurers who cover AI on purpose.

Quotes come back with the forms. We read every exclusion and every definition, show you side by side what each policy responds to, and issue certificates to your customer's requirements once it binds. If a renewal arrives with a new AI exclusion, we tell you before it takes effect and go back to the market for a buy-back or a narrower version.