Skip to content
CoverMatch
INDUSTRY CHECKLIST · IT & SOFTWARE SERVICES

The IT & software insurance checklist

QUICK ANSWER

An IT services or software business needs technology errors and omissions combined with cyber liability, general liability for the office and client sites, and workers' compensation once it has employees. Clients onboarding a vendor check the tech E&O and cyber limits first, then additional insured status on general liability, and often ask for an umbrella.

Reviewed by Michael LaBarbera, Licensed property & casualty agent, Provident Financial Group · Reviewed Oct 11, 2026 Updated
Coverage scoreA IT firm with the right wallet
Professional Liability (E&O)Renews in 47d
Cyber LiabilityLive cert ✓
General LiabilityCan switch
CoverMatch The enterprise vendor form wants tech E&O and cyber on one policy with a shared limit. Yours are separate — the certificate can show both.
YOUR CHECKLIST

Tick what you already have

The score updates as you go. Save it and the wallet remembers.

Checklist score7 lines still open

Who asks for what

Who What they usually want to see
Enterprise client Tech E&O and cyber at stated limits, GL with additional insured, workers' compensation, umbrella, sometimes crime with social engineering
Channel partner or distributor Tech E&O and product liability at minimums
Landlord or coworking operator GL with additional insured, property on equipment
Investors and acquirers D&O, EPLI, cyber, tech E&O during diligence

How to check what you already have

  1. Tech E&O / cyber dec page. Per-claim and aggregate limits, retroactive date, whether cyber and E&O share one aggregate, and sublimits for extortion, funds transfer fraud and dependent business interruption.
  2. Exclusions. Intellectual property, contractual liability, and unencrypted device exclusions decide whether a given claim pays.
  3. General liability. Blanket additional insured for clients.
  4. Workers' compensation. Every state with a remote employee listed.
  5. Contracts. Upload the master services agreement; the wallet compares its insurance exhibit to the policies.

What usually goes wrong

  • A shared aggregate that one incident exhausts across both E&O and cyber.
  • Funds transfer fraud sublimits far below a typical wire.
  • Retroactive dates later than long-running client relationships.
  • Remote staff in unlisted states.

Renewal timing

Cyber underwriting changes every year and asks for security questionnaires. Start sixty days out, have the controls evidence ready, and never let a claims-made policy lapse between carriers.

Questions people actually ask

Is cyber insurance the same as technology E&O?

No. Tech E&O covers claims that your work or product failed and caused a client a financial loss. Cyber covers breaches, ransomware and privacy events. Many carriers combine them on one policy, which is what vendor forms usually mean by a 'tech E&O / cyber' requirement.

My clients' insurers ask about my security controls. Why?

An MSP is a route into every client it manages. Carriers price your cyber policy on controls such as multi-factor authentication, backups and endpoint protection, and some clients require evidence of them alongside the certificate.

Do I need coverage for open-source or third-party code in my product?

Tech E&O responds to failures in what you deliver, including components you integrated. Intellectual property claims are often excluded or sublimited, so check the forms if you ship software.

We are a SaaS company with no office. Do we still need general liability?

Nearly every enterprise contract and most landlord-free coworking agreements still require it, and it is inexpensive relative to the rest. It also carries the additional insured status clients ask for.

MANAGE IT IN THE APP

Every policy, renewal and live certificate in one wallet.

Scan a dec page and the card appears. Share a live certificate link that updates itself. Get matched when a renewal comes around.

Keep reading