Pension third-party administrators (TPAs) insurance checklist: what a pension TPA should carry

The pension TPA insurance checklist

QUICK ANSWER

Pension third-party administrators (TPAs) usually carry professional liability (e&o), fiduciary liability and cyber liability. Pension and benefit TPAs administer plans under federal rules whose penalties are personal, hold participant data and sometimes plan assets, and are sued alongside the plan sponsor when a filing, a test or a distribution goes wrong. The client's vendor desk and the funder ask for proof of each. The checklist below covers who asks and how to check what you have.

Reviewed by Michael LaBarbera, Licensed property & casualty agent, Provident Financial Group · Reviewed Oct 12, 2026 Updated Oct 14, 2026

Who asks a pension TPA for what

Who	What they usually want to see
Enterprise clients & vendor onboarding	General liability, professional or cyber liability, workers' compensation and often an umbrella
Grant funders & government contracts	General liability, professional and abuse coverage at stated limits, directors and officers, and a crime bond over any funds held
Landlords & commercial leases	General liability with the landlord as additional insured, property coverage on tenant improvements and workers' compensation

Each of them wants a certificate, and most want it again at every renewal. A live certificate link from the wallet shows today's coverage to every holder and tells them when it changes.

How to check what you already have

Professional liability declarations. Claims-made or occurrence, the retroactive date (it should not have moved), the limit per claim and aggregate, the deductible, and whether defence costs sit inside or outside the limit.
Fiduciary liability. The plans covered, the limit and whether penalties under the plan rules are included.
Cyber declarations. The headline limit matters less than the sublimits: social engineering, funds-transfer fraud, ransomware and business interruption, plus the regulatory coverage and the panel of breach vendors.
Crime declarations. Employee theft, forgery, funds-transfer fraud and social engineering each have their own limit; third-party coverage if you work in clients' premises.
General liability declarations page. Three liability numbers matter: each occurrence, general aggregate and the products–completed operations aggregate. Then the forms list: blanket additional insured, waiver of subrogation and primary and non-contributory wording satisfy every contract; scheduled forms satisfy one.
Employment practices declarations. Limit and retention, third-party coverage for claims by customers, and whether wage-and-hour claims carry any defence sublimit.
Workers' compensation information page. Item 3.A must list every state you work in, item 4 must carry the right class codes, and the employers' liability limits should meet what contracts ask. Check that the estimated payroll is close to this year's.

What usually goes wrong for pension third-party administrators

Nondiscrimination testing or filing errors that cost the plan its status.
Plan assets or distributions handled with no crime or fiduciary coverage.
A retroactive date that moved when you switched carriers, cutting off earlier work.
Contracts with indemnity clauses wider than the policy will support.
Funds-transfer fraud sublimits far below the size of a single wire.
Social engineering (wire fraud) sublimited to a small amount on a cyber policy with a large headline limit.

What underwriters will ask a pension TPA

Plans and participants administered, services including any asset handling, filing responsibilities, and data security
Services, largest engagement size and the contracts you sign
Claims-made retroactive date and any prior claims or circumstances
Funds handled per month, dual controls and trust-account practice
Multi-factor authentication, backups and endpoint protection
Records held, payment card handling and any client network access

Have the answers in the wallet before the renewal and the quote request fills itself in; CoverMatch sends one application to every eligible carrier and lines the quotes up against what you have.

Renewal timing

Workers' compensation is audited on actual payroll and liability on sales, so a busy year ends with a bill unless the estimates were kept honest; pay-as-you-go billing through your payroll company removes most of that. Renewal autopilot starts the comparison sixty days out, prefilled from the wallet.

Questions people actually ask

What is the difference between TPA E&O and fiduciary liability?

E&O covers administrative errors in testing, filings and recordkeeping; fiduciary liability covers claims that the firm breached duties to the plan where it acts as a fiduciary. Most TPAs carry both, because sponsors' agreements name both.

Do we need a fidelity bond?

Federal rules require anyone handling plan assets to be bonded, and sponsors ask for proof. A crime policy with the required bond wording or a separate bond satisfies it; keep it with the service agreements in the wallet.

What is a retroactive date on an E&O policy?

The date before which no work is covered. On a claims-made policy you want it to stay at the day you first bought coverage, not reset at each renewal or carrier change. CoverMatch checks it on every quote comparison because it is the difference between covering ten years of work and one.

A spoofed email redirected a client payment. Which policy responds?

Crime under funds-transfer fraud or social engineering, or cyber if the policy includes it, and in both cases only up to the sublimit. Those sublimits are the number to check before buying either policy.

Does cyber insurance cover a fraudulent wire transfer?

Only under a social-engineering or funds-transfer-fraud insuring agreement, and often at a sublimit well below the policy limit. Ask for the sublimit before you buy; it is the claim small businesses actually have.