By the Editors · Published 23 April 2026 · Last updated 23 April 2026 · 22 minute read

Does my business insurance cover AI errors? The 2026 policy-by-policy guide.

The question sounds simple. The answer requires going through every major policy type your business holds and checking what the current wording actually says, because the market shifted materially in January 2026 when new ISO exclusion endorsements took effect. This is the definitive reference for SME operators, operations leads, and their brokers. It covers seven policy types, two new exclusion forms, a decision table, named carriers on both sides of the market, real case precedent, and an eight-step renewal checklist. It will be updated as the specialist market develops.

Section 1: The short answer

For most SMEs running AI agents in 2026: no, your existing business insurance is unlikely to cover AI errors cleanly, and the gap is growing. Your Commercial General Liability policy may have been updated with new ISO exclusion endorsements effective January 2026 that remove AI claims entirely. Your Errors and Omissions policy was almost certainly written before autonomous agents existed and its wording is ambiguous at best on AI-generated outputs. Your cyber policy is built around data breaches, not the consequences of an agent giving wrong advice. Your Directors and Officers policy may face new absolute AI exclusion language from carriers including W.R. Berkley. The only exception is if your broker has specifically reviewed your AI exposure and confirmed coverage, or if you have obtained specialist AI liability coverage from one of the new entrants. The rest of this article explains exactly how each policy type works, what the current exclusion language says, and what to do about it.

Section 2: Seven policies your business probably holds, and how each treats AI in 2026

Commercial General Liability (CGL)

CGL policies are the baseline commercial coverage most businesses hold. They are designed to cover bodily injury, property damage, and personal and advertising injury claims from third parties, the standard scenarios being a customer slipping in your premises or your marketing making a defamatory claim about a competitor.

Until January 2026, AI claims under CGL were handled through general policy wording without specific AI provisions. That changed when Verisk (which operates Insurance Services Office, the body that produces the standardised policy forms most carriers use) made three new AI exclusion endorsements available for optional carrier adoption.^[1]

The two main forms are CG 40 47 01 26, which removes both Coverage A and Coverage B for claims arising from generative AI, and CG 40 48 01 26, which removes only Coverage B. At least six major carriers filed to adopt these forms or equivalent proprietary language shortly after the forms were released.^[1] If your carrier has adopted CG 40 47, the gap is substantial: bodily injury, property damage, and personal and advertising injury claims from AI outputs are all excluded.

Even without the new endorsements, CGL has significant limitations for AI scenarios. CGL does not respond well to pure economic loss claims, which is the most common category of AI agent harm. If your booking agent overcharges a customer, that is economic loss. If your advisory agent gives wrong investment guidance, that is economic loss. CGL was not designed for these cases, and adding AI exclusions makes the gap more explicit rather than creating a new problem.

The gap in plain terms: If your CGL carrier adopted CG 40 47, virtually no AI-related claim will be covered. If it has not yet adopted the new forms, your CGL still has limited value for the most common AI harm scenarios because they typically do not involve bodily injury or property damage.

Professional Liability (Errors and Omissions)

E&O policies are designed for businesses that provide professional services and can be held liable when those services are performed incorrectly. They are the most relevant existing policy type for businesses running AI agents that advise, recommend, book, communicate, or otherwise act on behalf of clients.

The challenge in 2026 is not a blanket exclusion, at least not yet for most carriers, but rather deep ambiguity. E&O policies were written before AI agents existed in their current form. The question of whether an AI agent's output constitutes a covered professional service has not been settled by a court in a case involving a standalone AI agent. The Air Canada chatbot case (Moffatt v. Air Canada, BC Civil Resolution Tribunal, 2024) established liability at the operator level but did not directly address insurance coverage allocation.^[4]

W.R. Berkley introduced Form PC 51380, described as an absolute AI exclusion for professional lines including E&O. The form purports to exclude any claim arising from the use, deployment, or development of artificial intelligence, including AI-generated content, failure to identify AI-created materials, inadequate AI governance, and statements concerning the company's AI capabilities.^[2] As of early 2026, this form was in the process of gaining regulatory approval across US states.

On the other side, some carriers including Hiscox launched revised Technology Professional Liability policies in 2025 with explicit cover for AI-related claims, covering losses from model failures, flawed data inputs, or negligent AI advice.^[8] Counterpart expanded affirmative AI coverage in its Miscellaneous Professional Liability and Allied Health products in late 2025.^[9]

The gap in plain terms: If your E&O policy has been updated with W.R. Berkley-style absolute AI exclusion language, professional liability from AI agents is uninsured. If the wording is older and ambiguous, coverage at claim time depends on how your insurer interprets language written before your agent existed. Neither position is comfortable.

Technology E&O

Tech E&O is the professional liability product most often held by technology companies and software businesses. It extends E&O coverage to technology products and services, including claims arising from software failures, data processing errors, and system downtime.

Tech E&O is in some ways a better fit for AI agent claims than general E&O because it is already designed for technology-enabled service delivery. However, the same ambiguity problem applies. Tech E&O wordings typically cover technology services delivered by the insured, and whether a third-party AI model accessed via API constitutes the insured's own service has not been settled.

The vendor liability gap is particularly acute here. If you deploy a third-party AI model, any claim against you that exceeds the vendor's contractual liability cap falls to your Tech E&O. Carriers have reportedly been denying these claims when the insured lacks independent validation or supervision of the AI model it deployed.^[3] The practical implication is that governance documentation is not just regulatory good practice but a direct condition of coverage response in contested claims.

Corgi Insurance, a specialty carrier focused on technology companies that received full regulatory approval in July 2025 and reported over $40 million in annual recurring revenue by early 2026, includes AI liability as a named coverage category alongside D&O, E&O, cyber, and CGL.^[10]

The gap in plain terms: Tech E&O is the most likely of the traditional policy types to respond to AI agent claims, but the wording was not written for autonomous agents and the vendor liability gap is real. If you are deploying a third-party model without documentation of independent oversight, a claim could be denied on that basis.

Cyber Liability

Cyber policies were built to cover data breaches, network failures, ransomware, and related first-party and third-party losses. They were not built for AI agent errors. The distinction matters because AI-generated harm is categorically different from cyber harm: it typically does not involve a breach of security, an attack by a third party, or an unauthorized access event.

An AI agent that gives a customer incorrect medical information is not a cyber event. An AI agent that books the wrong flights is not a cyber event. An AI agent that generates content that defames a third party is not a cyber event. These are liability events of a different kind, and cyber policy triggers simply do not reach them.

That said, the cyber market is moving. Some carriers are adding AI-specific riders that cover first-party and third-party losses from AI-driven actions including prompt injection, model manipulation, and automated decision errors. These riders introduce definitions of terms like machine learning, data poisoning, and hallucinations, and extend coverage to AI-related incidents that fall outside traditional cyber scope.^[11] The specific coverage depends entirely on the wording of the rider, and sub-limits are typical.

Beazley and QBE, two major UK cyber insurers, moved to impose caps on payouts for cyber incidents linked to AI and LLMjacking in 2026, reflecting the escalating speed and sophistication of AI-driven attacks.^[8] This affects the first-party cyber response but reinforces the broader pattern: cyber carriers are managing AI exposure tightly, not expanding it.

The gap in plain terms: Standard cyber does not cover AI agent output errors. If your cyber carrier has added an AI rider, read the specific trigger carefully. It will not cover most of what an AI agent does when it makes a mistake.

Directors and Officers (D&O)

D&O policies protect directors and senior officers against personal liability arising from decisions made in that capacity. As AI deployment becomes a board-level strategic decision rather than a purely operational one, D&O exposure to AI-related claims is growing.

The exposure has two primary forms. First, shareholder or investor claims arising from inadequate board oversight of AI risk, including failure to disclose AI exposure in a prospectus or misrepresenting the company's AI governance posture. Second, regulatory claims arising from board-level failures to comply with AI-specific obligations, particularly as the EU AI Act assigns governance duties to deployers.

W.R. Berkley's Form PC 51380 is the most significant market development in the D&O space. It introduces an absolute AI exclusion that covers AI-generated content, failure to identify AI-created materials, inadequate AI governance policies and training, chatbot and virtual agent communications, and any regulatory investigation relating to AI use or oversight.^[2] If your D&O carrier has adopted this form or equivalent language, board-level AI liability is uninsured.

Chubb, one of the world's largest D&O carriers, has introduced AI coverage but explicitly excludes widespread incidents where a single model failure affects many clients simultaneously.^[3] This carve-out for systemic AI failures is notable: the scenarios most likely to generate significant D&O exposure are precisely those involving large-scale model failures, and these are now excluded by at least one major market participant.

The gap in plain terms: Traditional D&O may respond to isolated AI governance failures, but absolute AI exclusion language is entering the market. Systemic failures and regulatory investigations linked to AI are increasingly being carved out. Board-level AI liability without specialist D&O coverage is materially underinsured.

Media Liability

Media liability policies protect businesses that create and publish content against defamation, copyright infringement, misappropriation, and invasion of privacy claims. They are most commonly held by publishers, agencies, marketing firms, and media companies.

AI content generation creates a direct and acute media liability problem. An AI model can generate defamatory claims without the publisher knowing, reproduce copyrighted material without attribution, or create content that invades privacy by combining publicly available information in ways the subject has not consented to. The frequency of these outputs is far higher with AI than with human content production.

The new ISO CG 40 48 01 26 exclusion specifically removes Coverage B (personal and advertising injury) from the CGL policy for claims arising from generative AI. For businesses that held the view their CGL would respond to defamation from AI-generated marketing copy, CG 40 48 removes that assumption.^[1]

Media liability policies may still respond, depending on wording, because they are built specifically for content liability rather than as catch-all commercial policies. However, these policies are seeing increased scrutiny from carriers regarding AI-generated content, and the exclusion trajectory from the CGL market is likely to influence media liability renewals.

The gap in plain terms: CGL coverage for AI-generated defamation and advertising injury is being removed by the new ISO endorsements. If you produce content with AI tools, your media liability policy needs to explicitly address AI-generated content, and this is worth confirming with your broker at renewal.

Employment Practices Liability (EPL)

EPL policies cover claims of wrongful termination, discrimination, harassment, and related employment-related allegations. They are the policy type most directly implicated by AI use in HR processes: hiring screening, performance review, scheduling, and workforce reduction decisions.

EPL policies generally respond to employment wrongful act claims regardless of whether the act was performed by a person or an algorithm, because the claim is framed around the protected characteristic and the harm rather than the decision mechanism. This means EPLI remains one of the more reliable existing policies for AI-related exposure.^[12]

However, the exposure is growing in scale. The EEOC settled its first AI hiring discrimination case in 2023 for $365,000, against a company whose AI-powered hiring tool had automatically rejected candidates above a certain age, affecting more than 200 applicants.^[12] AI-driven decisions operate at a scale that human HR decisions rarely reach. A biased algorithm can discriminate against thousands of candidates before anyone notices. The class exposure created by a single biased AI model is orders of magnitude larger than the equivalent human error.

New York City's law requiring annual bias audits of automated employment decision-making tools, and similar legislation in California and Colorado, is creating a compliance obligation that will increasingly be tested against EPL coverage at claim time.^[12]

The gap in plain terms: EPLI is the most likely of the traditional lines to respond to AI-related employment claims, but the scale of exposure from AI-driven HR tools is significantly larger than legacy EPL was designed to handle. Class exposure from a biased algorithm is categorically different from individual human discrimination claims.

Section 3: The named AI exclusion endorsements

The most significant structural change to the traditional insurance market in 2026 is the introduction of ISO's standardised AI exclusion endorsements. These were released by Verisk's ISO Core Lines Services in January 2026 as part of a multistate CGL filing.^[1] They are optional, meaning carriers choose whether to adopt them, but the carrier interest was strong from the start.

CG 40 47 01 26: Exclusion for Generative Artificial Intelligence

This is the broad form. It applies to the entire ISO Commercial General Liability Coverage Part and excludes claims under both Coverage A (bodily injury and property damage) and Coverage B (personal and advertising injury) where the claim arises from generative artificial intelligence.

The definition of generative artificial intelligence in the form reads: "a machine-based learning system or model that is trained on data with the ability to create content or responses, including but not limited to text, images, audio, video or code."^[1]

The trigger language is "arising out of," which is significant. In insurance law, "arising out of" is interpreted broadly to require only a causal connection rather than direct causation. A claim does not need to be directly about an AI output; it only needs to have a causal link to one. For businesses that use generative AI in any customer-facing capacity, this is a wide exclusion.

A parallel form, CG 35 08, applies the same logic to the products and completed operations coverage extension, ensuring that AI-related claims arising from products the business sells are also excluded under the same terms.

CG 40 48 01 26: Exclusion for Generative Artificial Intelligence (Coverage B Only)

This is the narrower form. It removes only Coverage B, which covers personal and advertising injury including defamation, privacy invasion, and advertising-related claims. Coverage A (bodily injury and property damage) is preserved.

The Coverage B exclusion uses the same definition of generative AI and the same "arising out of" trigger language as CG 40 47. For businesses primarily concerned about defamation, misrepresentation, or copyright claims from AI-generated content, CG 40 48 removes their most likely coverage pathway. For businesses deploying AI in physical settings where bodily injury remains a realistic scenario, Coverage A survival under CG 40 48 may be meaningful.

The practical choice between the two forms reflects a carrier's overall risk appetite for AI exposure. Carriers adopting CG 40 47 are leaving the AI segment of CGL entirely to the specialist market. Carriers adopting CG 40 48 are managing their most contentious AI exposure while retaining some market relevance for AI-adjacent physical risk.

Carrier adoption

AIG, Great American, Hamilton Insurance Group, and Philadelphia Indemnity filed their own proprietary AI exclusion language with state regulators, in some cases before the ISO forms were finalised.^[3] Cincinnati Financial and Frederick Mutual also filed independent AI exclusion language.^[1] W.R. Berkley went furthest with Form PC 51380, an absolute AI exclusion that extends beyond CGL to D&O, E&O, and fiduciary liability.^[2]

These are not the only carriers moving in this direction. The trajectory from Verisk's filing and the rapid carrier adoption confirms that AI exclusions in traditional commercial lines are not an experiment. They are the default position of a significant portion of the market.

Section 4: A decision table

Section 5: How carriers are responding — the bifurcation

The insurance market's response to AI risk in 2026 has split into two distinct movements running in parallel. On one side, traditional carriers are tightening policy language and introducing exclusions. On the other, a set of specialist programmes has entered the market to fill the gaps those exclusions create.

Carriers tightening language

W.R. Berkley moved first and furthest with Form PC 51380, an absolute AI exclusion for D&O, E&O, and fiduciary liability. The form covers AI-generated content, failure to identify AI-created materials, inadequate AI governance, chatbot communications, and AI-related regulatory investigations. As of early 2026, it was in the regulatory approval process across US states.^[2]

AIG, Great American, Hamilton Insurance Group, and Philadelphia Indemnity filed proprietary AI exclusion language with state regulators for management liability policies.^[3] Cincinnati Financial and Frederick Mutual filed exclusion language in parallel with the ISO forms.^[1]

Chubb has introduced some AI coverage but carved out widespread incidents where a single model failure affects many clients simultaneously. This exclusion for systemic AI failures is significant because the scenarios most likely to generate large D&O or E&O exposure are precisely systemic ones.^[3]

Beazley and QBE moved in 2026 to cap payouts on cyber incidents linked to AI and LLMjacking, reflecting concern about the scale and speed of AI-enabled cyber incidents.^[8]

Specialist carriers building dedicated AI coverage

HSB (Hartford Steam Boiler), a Munich Re subsidiary and specialty insurer, launched AI Liability Insurance for small and medium businesses in March 2026.^[5] The product covers bodily injury, property damage, and advertising injury from AI-generated content including advertising, marketing, blogs, and social media. It is designed to fill the gap left by CGL exclusions. Distribution is through partner insurance carriers rather than direct to businesses, meaning access comes through existing broker relationships with HSB's carrier partners.

Armilla, the world's first Managing General Agent dedicated exclusively to AI liability, launched as a Lloyd's of London coverholder underwritten by Chaucer in April 2025.^[6] Its policy provides affirmative coverage for AI application failures including critical errors, hallucinations, and inaccuracies causing damages. In January 2026, following a $25 million funding round, Armilla expanded its standalone AI Liability Policy to offer limits up to $25 million per organisation. Coverage includes AI regulatory violations, non-breach privacy incidents, data leakage, AI model error liability, harmful outputs, AI agent failures, AI-driven property damage, and defence costs under new AI regulations including the EU AI Act and Colorado AI Act.

Testudo launched in January 2026 as a claims-made product targeting middle to large enterprises deploying generative AI.^[13] The company uses proprietary litigation data and risk signals to assess generative AI liability exposure. In March 2026, Testudo expanded capacity to $9.25 million per insured through additional underwriting support from Atrium and QBE, alongside existing underwriter Apollo. Testudo also has backing from Lloyd's Lab.

Munich Re aiSure is a parametric AI performance insurance product that has been available since 2018, making it the longest-running AI insurance product in the market.^[14] It settles on measurable performance data rather than through loss adjustment, making it better suited to AI vendors and corporate AI developers than to SMEs deploying third-party models. The February 2026 partnership with Mosaic extended initial coverage to EUR/USD/CAD 15 million for AI developers and vendors worldwide.

AIUC (Artificial Intelligence Underwriting Company) emerged from stealth in July 2025 with a $15 million seed round led by Nat Friedman, with participation from Emergence, Terrain, and angel investors including Anthropic cofounder Ben Mann.^[15] AIUC's model combines independent audits that test real-world performance with insurance coverage, pricing the policy to reflect how safe the audited system is. The AIUC-1 standard is the first certification standard designed specifically to underwrite AI agent deployments.

Counterpart expanded affirmative AI coverage in November 2025, adding a Technology E&O Insuring Agreement to its Miscellaneous Professional Liability products.^[9] This makes Counterpart one of the few carriers in the professional liability segment explicitly affirming AI coverage rather than introducing exclusions.

Corgi Insurance received full regulatory approval in July 2025 and by early 2026 had exceeded $40 million in annual recurring revenue. It offers AI liability as a named coverage category alongside D&O, E&O, cyber, and CGL, targeting venture-backed and high-growth technology companies.^[10]

Section 6: What to do at your next renewal

The eight steps below are written for an SME operator or operations lead managing an insurance renewal without specialist AI insurance knowledge. Complete them in order. Each one is contingent on the previous.

Step 1: Catalogue every AI agent or automated system in production. List each one by name, describe what it does, what outputs it generates, what systems it interacts with, and which customers or third parties it reaches. This list is the foundation of every conversation that follows and is also what a specialist underwriter will ask for at the start of an application.

Step 2: Request your full policy schedules and endorsement lists. Ask your broker for the complete wording of every endorsement attached to your CGL, E&O, cyber, and D&O policies. The declarations page alone is not enough. The exclusions that matter are in the endorsements, not in the base policy form.

Step 3: Check your CGL for ISO AI exclusion endorsements. Look for CG 40 47, CG 40 48, or CG 35 08 in the endorsement schedule. If any of these are attached, note whether the carrier is using the ISO form or proprietary equivalent language. Confirm the effective date. If your renewal was after January 2026, assume these forms may have been added and verify.

Step 4: Send a written AI coverage request to your broker on each policy. Frame each request as follows: "Given that our business operates [name of agent], which [describe what it does], please confirm in writing how our [policy type] responds to a claim arising from that agent's outputs. Reference any exclusions by endorsement number and section." Do not accept a verbal answer. Do not proceed until you have written confirmation on each policy.

Step 5: Map the coverage responses against your agent catalogue. For each agent, determine whether a claim arising from its actions would be covered, excluded, or ambiguous. This produces a gap map. Any agent in the excluded or ambiguous column is your priority for the next steps.

Step 6: Approach specialist AI liability carriers for indications. Ask your broker to obtain preliminary indications from HSB (for SME coverage), Armilla (Lloyd's-backed, up to $25 million), Testudo (enterprise focus, up to $9.25 million), and Counterpart (professional liability with AI affirmation). The suitability depends on your sector, agent type, and scale.

Step 7: Start the Agent Certified evidence file. Specialist AI underwriters require documented evidence of governance, oversight, and scope before they will quote. The Agent Certified self-assessment at agentcertified.eu is structured around the seven dimensions underwriters ask about. Starting this process before you approach carriers, rather than during the application, gives you a stronger submission and a faster path to a binding indication.

Step 8: Document the outcome and set a review cadence. Record the coverage position for each agent, note any gaps you have accepted and why, and schedule the next review before your next renewal date or whenever a new agent goes into production. The AI insurance market is changing quarterly. A review you completed in January 2026 may be materially out of date by July 2026.

Section 7: Real incidents and what they cost

Moffatt v. Air Canada (BC Civil Resolution Tribunal, 2024)

On 14 February 2024, the British Columbia Civil Resolution Tribunal issued its decision in Moffatt v. Air Canada, a case that has become the most cited precedent in discussions of AI agent operator liability.^[4]

The facts are straightforward. Jake Moffatt, travelling to Ontario following the death of a family member, consulted Air Canada's customer service chatbot to ask about bereavement fares. The chatbot stated that bereavement fare refunds could be claimed retroactively after travel was completed. That was incorrect. The airline's actual policy required the request before travel. When Moffatt claimed the refund and was refused, he brought a claim to the tribunal.

Air Canada argued it could not be held liable for information provided by the chatbot, positioning the chatbot as a separate legal entity from the airline itself. The tribunal rejected this argument directly. Member Christopher Rivers wrote that it was unclear why Air Canada would suggest that the chatbot is a separate legal entity that is responsible for its own actions. Air Canada cannot deny responsibility for information provided by one of its agents.

The award was modest by any corporate standard: the tribunal ordered Air Canada to pay CAD 812.02 in damages plus filing fees, representing the difference between the bereavement fare Moffatt should have paid and the price he actually paid, plus the additional amount he paid to request the reduced fare after the fact.

The amount is not the point. The principle established is. Any business operating a customer-facing AI agent is bound by the representations that agent makes. The disclaimers that many businesses attach to their chatbot interfaces (stating that the AI may produce incorrect information and that customers should verify) do not dissolve the liability. The operator is responsible.

For insurance purposes, the Moffatt decision is relevant because it confirms that AI agent output creates real legal obligations. The coverage question that follows is whether the policy that responds to a human employee's negligent misrepresentation also responds to an AI agent's negligent misrepresentation. Under traditional E&O wordings, the answer is genuinely uncertain.

Mata v. Avianca, Inc. (S.D.N.Y., 2023)

In May 2023, Judge P. Kevin Castel of the US District Court for the Southern District of New York sanctioned attorneys Peter LoDuca and Steven A. Schwartz of Levidow, Levidow and Oberman, imposing a $5,000 fine and ordering the professional misconduct entered on their records.^[16]

The case arose from a 2022 personal injury claim by Roberto Mata against Avianca. Counsel Schwartz used ChatGPT to research and draft a legal motion. The motion contained six judicial decisions that did not exist. They had been fabricated by the AI tool. When Avianca's attorneys reported that they could not locate the cited cases, the court ordered the plaintiffs' attorneys to provide copies. None could be produced, because none existed.

Schwartz testified at the sanctions hearing that he had operated under the belief that the AI tool could not possibly be fabricating cases on its own. Judge Castel described one of the AI-generated legal analyses as gibberish.

The professional responsibility principle the case establishes extends well beyond legal practice. Every profession that relies on AI-generated information for client deliverables carries equivalent exposure. A financial adviser whose AI tool fabricates market data, an accountant whose AI tool generates incorrect regulatory references, a medical practice whose AI tool describes incorrect dosages: the Mata principle is that the AI tool is not a defence. The professional's standard of care does not lower because AI was involved in producing the output.

For operators thinking about E&O coverage: the Mata case supports the argument that E&O should respond to AI-related professional failures on the same basis as human failures, because the professional standard of care is unchanged. However, if an E&O carrier has adopted AI exclusion language that removes coverage for claims arising from the use of AI tools, the Mata principle reinforces operator liability while the exclusion simultaneously removes the coverage intended to protect against it.

EEOC AI Hiring Discrimination Settlement (2023)

In 2023, the US Equal Employment Opportunity Commission settled its first enforcement action involving AI-powered hiring discrimination. The company's AI tool had automatically rejected job applicants above a certain age, affecting more than 200 candidates. The settlement was $365,000.^[12]

The case illustrates the scale multiplier that AI introduces to employment discrimination liability. A human recruiter with an age bias might affect dozens of applications over a career. An AI system with an equivalent bias can affect thousands of applications in a single recruitment cycle. The EPL exposure from AI-driven HR is not categorically different from traditional employment discrimination, but the scale of the exposure is.

Section 8: The move from generalist to specialist coverage

The structural shift described above, with traditional carriers narrowing their AI exposure and specialist carriers building new products to fill those gaps, is not a temporary market dislocation. It reflects a genuine underwriting logic. Traditional policy forms were built around risks that are relatively well-modelled: slips and falls, professional mistakes by named individuals, data breaches from external attackers. AI agents introduce a risk profile that does not map cleanly onto those models.

Specialist AI carriers approach the problem differently. Rather than retrofitting traditional wording, they are building underwriting criteria around AI-specific risk indicators: the governance structure around the agent, the oversight mechanisms in place, the quality of the training data, the documentation of scope and constraints, and the track record of the model in production.

The table below summarises the specialist carriers currently active in this space and the coverage profiles they offer.

The practical implication for operators is that the path to coverage now requires two conversations instead of one. The first is with your existing broker to understand what your current policies cover and exclude. The second is with the specialist market to understand what is available to fill the gaps. Both conversations need to happen before your next renewal, not during it.

Section 9: Frequently asked questions

Will my cyber policy cover an AI hallucination that causes financial loss?

In most cases, no. Standard cyber policies are designed around data breaches and network failures. An AI hallucination that causes a customer financial loss, for example by quoting the wrong price or giving incorrect advice, falls into professional liability territory, not cyber. Some carriers are adding AI-specific riders to cyber policies that extend cover to certain AI-driven outputs, but these carry sub-limits and vary significantly by wording. Check whether your cyber policy includes an AI or automated decision extension and what the specific trigger conditions are.

Does the ISO CG 40 47 exclusion apply to my E&O policy?

No. ISO CG 40 47 and CG 40 48 are Commercial General Liability endorsements. They apply to CGL policies, not to professional liability or Errors and Omissions policies. However, E&O carriers are introducing their own AI exclusion language independently. W.R. Berkley's form PC 51380, for example, is a standalone AI exclusion filed for D&O, E&O, and fiduciary liability policies. Check your E&O renewal for any AI exclusion language, which will typically appear as an endorsement or schedule item, not under the CGL endorsement numbering.

Is Munich Re aiSure available for SMEs?

Munich Re aiSure is a parametric AI performance insurance product designed primarily for AI vendors and corporate adopters deploying AI at scale. It is not a retail SME product. The related SME product is from Munich Re's subsidiary HSB, which launched an AI Liability Insurance product in March 2026 distributed through partner carriers rather than directly to businesses. If you are an SME, HSB's product is the more relevant Munich Re offering. aiSure is aimed at AI model developers who need to back the performance of a specific model with financial coverage.

What happens if my AI agent gives wrong advice to a customer?

You are likely liable for that advice. The British Columbia Civil Resolution Tribunal ruled in Moffatt v. Air Canada (February 2024) that a business cannot disclaim what its AI agent says to a customer. The tribunal rejected Air Canada's argument that the chatbot was a separate legal entity. Under this precedent, incorrect advice from a customer-facing AI agent binds the business in the same way as advice from a human employee. Whether your insurance responds depends on the specific wording of your E&O or professional liability policy and whether it has been endorsed to cover AI-generated outputs.

What is the difference between CG 40 47 and CG 40 48?

Both are ISO standard endorsements introduced effective January 2026 for Commercial General Liability policies. CG 40 47 is the broader exclusion: it removes coverage under both Coverage A (bodily injury and property damage) and Coverage B (personal and advertising injury) for claims arising from generative artificial intelligence. CG 40 48 is narrower: it removes only Coverage B, preserving some potential for bodily injury and property damage claims to be considered under Coverage A. Carriers adopting CG 40 47 are eliminating substantially all AI-related CGL coverage. Carriers adopting CG 40 48 are taking a more targeted approach.

Does my D&O policy cover claims from AI deployment decisions?

Traditional D&O policies may respond to shareholder or investor claims arising from board decisions about AI, such as failing to disclose AI risks or deploying AI without adequate governance. However, W.R. Berkley introduced form PC 51380, an absolute AI exclusion for D&O policies, which eliminates coverage for any claim arising from the use, deployment, or development of AI. Multiple carriers are filing similar language. If your D&O carrier has adopted this type of exclusion, AI-related board liability is uninsured under that policy. Request a copy of all endorsements at your next renewal.

Which carriers are currently writing standalone AI liability insurance?

As of April 2026, the main carriers writing standalone AI liability include Armilla (Lloyd's coverholder with Chaucer underwriting, launched April 2025, limits up to $25 million), Testudo (launched January 2026, backed by Apollo, Atrium, and QBE, limits up to $9.25 million per insured, targeting enterprises), and HSB (Munich Re subsidiary, launched March 2026, distributed through partner carriers, designed for SMEs). Counterpart has also expanded affirmative AI coverage in its professional liability and Tech E&O products. AIUC combines certification, auditing, and insurance in a single framework.

Can I rely on my existing E&O policy to cover claims from AI-generated professional advice?

Not reliably. Many E&O policies were written before AI agents existed and their wording is ambiguous on AI-generated outputs. The key questions to answer are whether your policy covers professional services delivered by automated systems, whether there is an AI exclusion in the current endorsement schedule, and how the policy defines a covered professional act. Some carriers are adding affirmative AI language that explicitly covers AI-assisted professional services. Others are adding exclusions. Without reviewing the current wording, you cannot know which side of that divide your policy sits on.

Does my employment practices liability policy cover AI hiring discrimination claims?

Employment practices liability policies generally cover discrimination claims regardless of whether the decision was made by a person or an automated system, because the claim is framed around the employment wrongful act rather than the technology used. The EEOC's first AI-related discrimination settlement in 2023, worth $365,000, involved an AI hiring tool that rejected candidates based on age. The risk for EPLI holders using AI in hiring is that AI can replicate bias at scale, creating larger class exposure than equivalent human decisions would. Check that your EPLI policy covers algorithmic and automated decision-making as well as direct human discrimination.

What should I do before my next renewal if I am running AI agents in my business?

Before your next renewal, take these steps. Request a written summary from your broker on how each of your current policies (CGL, E&O, cyber, D&O) responds to a claim arising from an AI agent. Ask specifically whether any AI exclusion endorsements have been added since your last renewal. Document what your AI agents do, what outputs they generate, and what human oversight exists. If you find uninsured gaps, ask your broker to approach specialist AI liability carriers including HSB, Armilla, and Testudo. Start the Agent Certified process at agentcertified.eu, which is the evidence framework underwriters are beginning to require.

Section 10: Related reading

On this site:

• AI policy exclusions: what SME operators must review before their next renewal — a focused guide to the four exclusion types that are most likely to affect your current coverage.
• Five questions to ask before deploying an AI agent in your business — the pre-deployment checklist that matches what insurers and certification bodies will ask for.
• The Air Canada chatbot case: what SME operators should learn — the full story of Moffatt v. Air Canada and its implications for operators running customer-facing agents.
• Mata v. Avianca: what AI hallucination in legal proceedings teaches every operator — the sanctions case and the professional responsibility principle it establishes.

Across the network:

• agentliability.eu — the regulatory desk for the EU AI Act, Product Liability Directive, and operator-level compliance obligations coming into force in August and December 2026.
• agentinsured.eu — the coverage platform where operators can join the waitlist for the first wave of European AI agent insurance.
• agentcertified.eu — the Agent Certified methodology: the seven-dimension framework underwriters are beginning to use to assess AI agent deployments before quoting coverage.

References

1. Verisk / Insurance Services Office. "Verisk to Roll Out New General Liability Exclusions for Generative AI Exposures." Released January 2026. Forms CG 40 47 01 26, CG 40 48 01 26, CG 35 08. Effective date January 1, 2026. Available via IndependentAgent.com and Verisk Core Insights.
2. W.R. Berkley Corporation. Form PC 51380: Absolute AI Exclusion for D&O, E&O, and Fiduciary Liability. Filed with state regulators, rollout in progress as of early 2026. Reported in National Law Review and Hunton Andrews Kurth, Law360.
3. Swept AI. "AI Insurance Liability: New CGL Exclusions, Silent AI Coverage, and What Every Enterprise Should Know." 2026. Reports AIG, Great American, Hamilton Insurance Group, and Philadelphia Indemnity filing proprietary AI exclusions. Available at swept.ai.
4. British Columbia Civil Resolution Tribunal. Moffatt v. Air Canada. Decision issued 14 February 2024. Tribunal member Christopher Rivers. Award: CAD 812.02 plus filing fees. Available via McCarthy Tetrault and ABA Business Law Today.
5. HSB (Hartford Steam Boiler, a Munich Re company). Press release: "HSB Introduces AI Liability Insurance for Small Businesses." 18 March 2026. Available at munichre.com/hsb and BusinessWire.
6. Armilla. "Armilla Launches Affirmative AI Liability Insurance with Lloyd's Underwriter, Chaucer." 30 April 2025. Limits expanded to $25 million following $25 million funding round, January 2026. Available at armilla.ai and Fintech Global.
7. Testudo. "AI Insurance Market Update 2025." Reports 978% growth in generative AI-related lawsuits in the US from 2021 to 2025. Available at testudo.co.
8. Insurance Business Magazine. "AI exclusions are creeping into insurance — but cyber policies aren't the issue yet." 2026. References Hiscox Technology Professional Liability revision and Beazley/QBE cyber caps on AI incidents. Available at insurancebusinessmag.com. Also FinScoop, "UK Insurers Cap Cyber Insurance Payouts Over AI and LLMjacking Threats," 2026.
9. Counterpart. "Leading Insurtech, Counterpart, Addresses Critical Coverage Gap With Affirmative AI Coverage." November 2025. Available via IIReporter and Yahoo Finance.
10. FinancexMagazine. "InsurTech's AI Takeover: $5 Billion in Funding, Embedded Insurance at Scale, and a Corgi That's Not a Dog." References Corgi Insurance regulatory approval July 2025 and $40 million ARR. Y Combinator company profile: ycombinator.com.
11. AI:Productivity. "Insurers Draw Battle Lines on AI: New Policies Cover Hallucinations While Others Exclude AI." 2026. Available at aiproductivity.ai.
12. CBIZ. "Navigating Employment Practices Liability Insurance 2025 Outlook." Reports EEOC AI hiring discrimination settlement 2023, $365,000 award, 200+ applicants affected. cbiz.com. Also Morrell Insurance, "Employer's EPLI for AI and Algo Bias Claims," 2025.
13. Testudo. "Testudo Expands AI Liability Capacity to $9.25m." March 2026. Additional underwriters Atrium and QBE. Available at Fintech Global. Also S&P Global Market Intelligence, "As insurers retreat from AI risk, one startup plans to fill the gap," February 2026.
14. Munich Re. "aiSure: More AI Opportunity, Less AI Risk." Product page at munichre.com. Mosaic partnership announced February 2026: initial coverage to EUR/USD/CAD 15 million. Computer Weekly, "Munich Re sees strong growth in AI insurance," 2026.
15. Fortune. "AIUC, a startup creating insurance for AI agents, emerges from stealth with $15 million seed." 23 July 2025. Investors: Nat Friedman, Emergence, Terrain, Ben Mann. Available at fortune.com. Also Reinsurance News, "Artificial Intelligence Underwriting Company launches with $15m seed round."
16. US District Court, Southern District of New York. Mata v. Avianca, Inc., No. 1:2022cv01461. Decision by Judge P. Kevin Castel, June 2023. $5,000 sanction against attorneys Schwartz and LoDuca of Levidow, Levidow and Oberman. Available at Justia and summarised at Wikipedia.