Telehealth & digital health practices insurance checklist: what a telehealth practice should carry

The telehealth practice insurance checklist

QUICK ANSWER

Telehealth & digital health practices usually carry medical professional liability, general liability and cyber liability. Telehealth practices treat patients by video across state lines under licences that must match the patient's location, run on platforms that are both the clinic and the record, and prescribe under rules that change by state and drug. The client's vendor desk and the funder ask for proof of each. The checklist below covers who asks and how to check what you have.

Reviewed by Michael LaBarbera, Licensed property & casualty agent, Provident Financial Group · Reviewed Oct 12, 2026 Updated Oct 14, 2026

Who asks a telehealth practice for what

Who	What they usually want to see
Enterprise clients & vendor onboarding	General liability, professional or cyber liability, workers' compensation and often an umbrella
Grant funders & government contracts	General liability, professional and abuse coverage at stated limits, directors and officers, and a crime bond over any funds held
Banks, lenders & SBA loans	Property or auto physical damage with the lender as loss payee, and liability proof at closing and every renewal

Each of them wants a certificate, and most want it again at every renewal. A live certificate link from the wallet shows today's coverage to every holder and tells them when it changes.

How to check what you already have

Medical professional liability declarations. Each provider's retroactive date and limits, whether the entity is covered, consent-to-settle wording, and the cost of tail coverage when a provider leaves.
General liability declarations page. Three liability numbers matter: each occurrence, general aggregate and the products–completed operations aggregate. Then the forms list: blanket additional insured, waiver of subrogation and primary and non-contributory wording satisfy every contract; scheduled forms satisfy one.
Cyber declarations. The headline limit matters less than the sublimits: social engineering, funds-transfer fraud, ransomware and business interruption, plus the regulatory coverage and the panel of breach vendors.
Workers' compensation information page. Item 3.A must list every state you work in, item 4 must carry the right class codes, and the employers' liability limits should meet what contracts ask. Check that the estimated payroll is close to this year's.
Property section. Limits for building, business personal property and tenant improvements against replacement cost, the coinsurance percentage, the deductible, and whether flood and earthquake are excluded (they usually are).
Employment practices declarations. Limit and retention, third-party coverage for claims by customers, and whether wage-and-hour claims carry any defence sublimit.
Technology E&O declarations. The retroactive date, whether cyber coverages are included in the same form, contractual liability wording and the exclusions for guarantees of uptime.
Business owner's policy declarations. Liability limits on the first page, then the property section: building (if you own), business personal property, business income and the named extras such as spoilage, equipment breakdown or employee dishonesty. Confirm the property values are current.
Business income. The limit or actual-loss-sustained wording, the waiting period, the period of restoration and whether extra expense is included.

What usually goes wrong for telehealth and digital health practices

Patients in states where no provider on staff is licensed.
The platform's outage or breach, which is a technology claim as well as a privacy one.
A retroactive date reset when the practice changed carriers, leaving earlier treatment uninsured.
Tail coverage never bought for a provider who left.
Tenant improvements insured by nobody, because the lease says one thing and the policy another.
Property values set when the doors opened and never raised.

What underwriters will ask a telehealth practice

States served and licences held, platform and vendors, prescribing practices, and patient volume
Specialties, procedures performed and whether any are done under anaesthesia
Claims-made retroactive dates and prior-acts coverage for each provider
Square footage, whether you own or lease, the building's age and sprinklers
Replacement cost of the equipment, fixtures and stock on site
Multi-factor authentication, backups and endpoint protection

Have the answers in the wallet before the renewal and the quote request fills itself in; CoverMatch sends one application to every eligible carrier and lines the quotes up against what you have.

Renewal timing

Workers' compensation is audited on actual payroll and liability on sales, so a busy year ends with a bill unless the estimates were kept honest; pay-as-you-go billing through your payroll company removes most of that. Renewal autopilot starts the comparison sixty days out, prefilled from the wallet.

Questions people actually ask

Which state's malpractice rules apply to a video visit?

Usually the patient's, and the provider must be licensed there. Carriers rate telehealth on the states served; the practice's roster of licences by state is the first thing they ask for and the wallet's roster keeps it current.

Why does a telehealth practice need technology E&O?

Because the platform is the practice. An outage during a visit, a misrouted prescription or a failed integration is a technology failure that malpractice may not cover and cyber does not. Carriers package tech E&O with cyber for digital health.

What is tail coverage and when does a telehealth practice need it?

Malpractice is usually claims-made: it covers claims reported while the policy is in force. When a provider leaves or the policy is cancelled, a tail (extended reporting) endorsement keeps covering claims from the old treatment. Without it, a claim filed a year later has no policy to answer it.

Doesn't my landlord's insurance cover my telehealth practice?

It covers the building. The lease almost always makes you responsible for your own improvements, equipment and stock, for injuries inside your space, and for naming the landlord as additional insured on your liability policy. Read the insurance clause; the contract checker in the wallet will pull it out for you.

Does cyber insurance cover a fraudulent wire transfer?

Only under a social-engineering or funds-transfer-fraud insuring agreement, and often at a sublimit well below the policy limit. Ask for the sublimit before you buy; it is the claim small businesses actually have.