What corporate clients require of consultants and professional firms: master services agreement insurance clauses and how to prove you meet them

What a corporate client requires of a professional services firm

QUICK ANSWER

A corporate master services agreement typically requires professional liability of $1M to $5M per claim, standalone cyber and privacy liability of $1M to $5M where the firm touches client data, general liability of $1M per occurrence and $2M aggregate with the client as additional insured, statutory workers' compensation with $1M employers' liability, hired and non-owned auto of $1M where staff travel, an umbrella of $1M to $5M, and certificates maintained for the contract term and a tail period.

Reviewed by Michael LaBarbera, Licensed property & casualty agent, Provident Financial Group · Reviewed Oct 11, 2026 Updated Oct 14, 2026

Typical requirements and how to check them
Requirement	What they usually ask for	How to check what you have
Professional liability (errors and omissions)	$1M to $5M per claim and aggregate, scaled to the contract value and the client's industry; claims-made with retroactive date before the engagement and an extended reporting period of one to three years after termination	Professional liability dec page: limits, retroactive date, claims-made basis and the extended reporting option; confirm the policy covers the services described in the statement of work.
Cyber and privacy liability	$1M to $5M per claim including third-party liability, breach response, regulatory defence and media liability, required whenever the firm receives, stores or processes client data	Cyber dec page with the third-party liability insuring agreement; many professional liability policies include limited cyber coverage that does not satisfy an MSA.
Commercial general liability	$1M each occurrence / $2M aggregate with the client and affiliates as additional insureds, primary and non-contributory, for the firm's presence on client premises	Dec page limits and the additional insured form.
Workers' compensation and employers' liability	Statutory in each state where staff work plus employers' liability of $1M / $1M / $1M, with a waiver	Information page with each state, Part Two limits and the waiver endorsement.
Hired and non-owned auto	$1M combined single limit for staff who drive rental or personal cars on client business	The hired and non-owned endorsement on the general liability or an auto policy.
Umbrella or excess liability	$1M to $5M following form over general liability, auto and employers' liability; excess professional liability is purchased separately where the MSA requires more than the primary limit	Umbrella dec page and underlying schedule; a separate excess E&O policy where needed.
Fidelity or crime where the firm handles funds	Employee dishonesty and third-party crime coverage for firms that handle client funds, payroll or payments	Crime policy dec page with the client property extension.
Certificates and tail	Certificate at signing and each renewal, notice of cancellation, and professional and cyber coverage maintained for a stated period after the engagement ends	A live certificate for the term; the extended reporting or continuous renewal plan for the tail period.

Requirement

What they usually ask for

How to check what you have

Professional liability (errors and omissions)

$1M to $5M per claim and aggregate, scaled to the contract value and the client's industry; claims-made with retroactive date before the engagement and an extended reporting period of one to three years after termination

Professional liability dec page: limits, retroactive date, claims-made basis and the extended reporting option; confirm the policy covers the services described in the statement of work.

Cyber and privacy liability

$1M to $5M per claim including third-party liability, breach response, regulatory defence and media liability, required whenever the firm receives, stores or processes client data

Cyber dec page with the third-party liability insuring agreement; many professional liability policies include limited cyber coverage that does not satisfy an MSA.

Commercial general liability

$1M each occurrence / $2M aggregate with the client and affiliates as additional insureds, primary and non-contributory, for the firm's presence on client premises

Dec page limits and the additional insured form.

Workers' compensation and employers' liability

Statutory in each state where staff work plus employers' liability of $1M / $1M / $1M, with a waiver

Information page with each state, Part Two limits and the waiver endorsement.

Hired and non-owned auto

$1M combined single limit for staff who drive rental or personal cars on client business

The hired and non-owned endorsement on the general liability or an auto policy.

Umbrella or excess liability

$1M to $5M following form over general liability, auto and employers' liability; excess professional liability is purchased separately where the MSA requires more than the primary limit

Umbrella dec page and underlying schedule; a separate excess E&O policy where needed.

Fidelity or crime where the firm handles funds

Employee dishonesty and third-party crime coverage for firms that handle client funds, payroll or payments

Crime policy dec page with the client property extension.

Certificates and tail

Certificate at signing and each renewal, notice of cancellation, and professional and cyber coverage maintained for a stated period after the engagement ends

A live certificate for the term; the extended reporting or continuous renewal plan for the tail period.

What the client is protecting

A corporate client buys advice, deliverables and access to its data. The MSA protects it from the consequences of a professional mistake, a data incident, an injury on its premises and a vendor employee's claim, for the life of the engagement and for a tail afterwards. Procurement enforces the exhibit through a supplier portal and holds payment when certificates lapse.

The lines an MSA names

Professional liability sized to the client's exposure, claims-made with a retroactive date before the work and a tail after it. Cyber liability with third-party coverage wherever client data is touched. General liability with the client added for time on premises. Workers' compensation with a waiver. Hired and non-owned auto for travel. An umbrella, and excess professional liability where the MSA exceeds the primary limit. Crime coverage where the firm handles funds.

How to check your policies against the MSA

Match the professional liability limit, basis, retroactive date and extended reporting option to the exhibit, and read the policy's definition of professional services against the statement of work. Confirm cyber coverage is standalone with third-party liability at the limit. Check general liability's additional insured form, the waiver on workers' compensation, hired and non-owned auto and the umbrella. Negotiate limits before signing when the exhibit exceeds the engagement.

Keep the certificate current

Supplier portals expire certificates at each renewal and hold invoices until replaced; the tail period extends the obligation past the last invoice. A live certificate link stays current as policies renew and notifies the client when a line changes, with the official PDF attached.

Questions people actually ask

Why does the MSA require professional liability far above our fees?

Because the client sizes the limit to its own exposure from a mistake, not to your invoice. A reporting error, missed deadline or bad recommendation can cost the client far more than the engagement; clients often accept a lower limit for small engagements if asked before signing.

Our professional liability policy includes cyber coverage. Is that enough?

Usually not. Bundled cyber coverage within an E&O policy is often first-party only or carries a low sub-limit. MSAs that name cyber liability want a standalone policy with third-party liability at the stated limit.

What is a retroactive date and why does the client care?

Claims-made policies cover claims made during the policy period for work done after the retroactive date. The client wants your retroactive date to precede the engagement so work done early in the contract is covered when a claim arrives years later.

What happens to coverage after the contract ends?

Claims-made coverage ends when the policy does unless you keep renewing or buy an extended reporting period. MSAs ask for a tail of one to three years so a claim that surfaces after the engagement still has a policy to answer it.