What AI insurance actually costs for small businesses in 2026. A plain-English pricing guide with real numbers.
One of the most common questions from small business operators who have deployed an AI agent is: how much does it cost to insure? The answer depends on several factors that are not obvious from the outside, and the market is changing faster than most insurance broker guides have caught up. This guide gives you real pricing ranges based on current market activity, explains the five factors that drive your premium up or down, and tells you what you can do right now to make coverage cheaper and better before your next renewal.
Key takeaways
- A cyber policy with an AI endorsement costs roughly 2,000 to 8,000 euros per year for a small business with under 5 million euros in annual revenue and 1 million euros in coverage. This is the lowest-cost entry point for AI coverage.
- Technology errors and omissions insurance with AI coverage costs 5,000 to 20,000 euros per year for a software or services business deploying AI in its products. The premium depends heavily on sector and on whether the AI outputs directly affect clients.
- Standalone AI liability policies from specialist carriers start at approximately 15,000 to 25,000 euros per year for 5 million euros in coverage. They are appropriate for businesses where AI is a core product rather than a workflow tool.
- The five biggest premium drivers are volume of AI decisions, sector, quality of human oversight, governance documentation, and coverage limits. You can reduce your premium meaningfully by improving on the oversight and governance dimensions.
- Your existing general liability or business insurance almost certainly does not cover AI mistakes. Check your policy for AI exclusion language before assuming you are covered.
Why AI insurance pricing is harder to look up than other business insurance
Standard business insurance has published rate guides, broker comparison tools, and a 30-year history of claims data that makes pricing relatively predictable. AI insurance has none of these. The market has existed in recognisable form for fewer than three years. Claims experience is thin. The products themselves are still evolving: what an AI liability policy covers in May 2026 is materially different from what a policy with the same name covered in 2023.
This means that pricing figures for AI insurance are harder to verify than pricing for other business insurance, and that the ranges published in guides like this one are wider than they would be for, say, employers' liability or commercial property insurance. The numbers in this guide represent the market as it currently operates for small businesses, based on current underwriting activity, publicly available product information, and broker reporting on placements. They are starting points for your own conversations with brokers and carriers, not guaranteed quotes.
The good news is that the pricing exercise is still worth doing. Many small business operators who have deployed AI agents have never asked the question at all, and some discover they have no relevant coverage only when a customer complaint arrives. Starting with realistic price expectations is a better position than starting from nothing.
The three types of AI coverage and what they cost
There are three main coverage structures available to small businesses with AI exposure in 2026. They address different risk profiles, cost differently, and are not interchangeable. The right structure for your business depends on how central AI is to your operations and what type of loss you are most concerned about.
Type 1: Cyber policy with AI endorsement. This is the lowest-cost and most accessible entry point for small businesses with AI exposure. A standard cyber liability policy covers data breaches, ransomware, and technology outages. The AI endorsement adds explicit coverage for AI-related losses, either as a sublimit within the main policy or as a confirmed extension of coverage to AI-generated outputs and AI-initiated actions.
Annual pricing range for a small business with under 5 million euros in annual revenue and 1 million euros in coverage: approximately 2,000 to 8,000 euros. The wide range reflects variation in sector (healthcare and legal are at the top, retail and logistics at the bottom), in the scope of the endorsement (broader coverage costs more), and in the governance documentation the insured provides (better documentation means lower premiums).
What it covers, typically: data breaches involving AI systems, ransomware or system outages affecting AI infrastructure, and where the endorsement is well-drafted, losses arising from AI output errors or AI-initiated actions up to the endorsement sublimit. What it usually does not cover: regulatory fines for EU AI Act non-compliance (unless explicitly included), intellectual property infringement in AI outputs, and losses above the endorsement sublimit.
What to watch for: many policies marketed as having AI coverage have endorsements that add minimal actual protection. Read the endorsement carefully. Does it explicitly confirm coverage for AI output errors? Does it specify coverage for AI-initiated actions? Does it set a sublimit that is meaningful relative to your actual AI exposure? An endorsement that says "AI losses are covered" without specifying what types of AI losses or at what limit provides weaker protection than one that lists covered categories explicitly.
Type 2: Technology errors and omissions insurance with AI coverage. Technology E&O insurance covers losses arising from errors or omissions in the provision of technology products or services. For a software business, a technology consultancy, or any business whose product includes AI-generated outputs provided to clients, technology E&O is the appropriate policy type. It is more expensive than a cyber policy because it covers a broader range of losses, including the professional service errors that the cyber policy does not address.
Annual pricing range for a technology or services business deploying AI in its products: approximately 5,000 to 20,000 euros for 1 to 2 million euros in coverage. Healthcare, legal, and financial sector operators are at the top of this range. General software and services businesses are in the middle. The premium also depends on whether the AI outputs are directly client-facing (higher risk) or internal workflow tools (lower risk).
What it covers, typically: losses arising from errors in AI-generated outputs that cause client losses, failure of AI systems to perform as specified in contracts, and in some cases intellectual property claims arising from AI-generated content. What it typically does not cover: regulatory penalties for AI Act non-compliance, losses arising from AI systems that were accurately described but produced results the client did not want.
What to watch for: the professional services definition is critical. Some technology E&O policies define professional services narrowly in ways that exclude AI-generated outputs that were not reviewed by a named professional before delivery. If your AI agent delivers outputs directly to clients without human review, confirm with the carrier that this workflow falls within the professional services definition. For more detail on how E&O policies interact with AI agent actions, see the analysis of who is liable when an AI agent makes a mistake.
Type 3: Standalone AI liability insurance from specialist carriers. The specialist AI insurance market is still small and largely limited to enterprise-scale deployments in Europe, but it is growing. The leading products for European operators are Armilla (Lloyd's of London coverholder, coverage up to USD 25 million, explicit EU AI Act regulatory violation coverage) and AIUC-1-backed policies (following the ElevenLabs February 2026 precedent, covering hallucination-driven losses, IP issues, harmful outputs, and faulty tool actions).
Annual pricing range for a small business accessing specialist AI coverage: approximately 15,000 to 30,000 euros per year for 5 million euros in coverage. This is not the right product for every small business. If AI is a workflow tool rather than a core product, a cyber endorsement or technology E&O policy is likely more appropriate and significantly cheaper. If AI is central to your service delivery, if you are in a high-risk sector, or if you have had an AI-related incident that has made standard carriers reluctant to extend coverage, specialist AI insurance is the relevant market.
What it covers: Armilla's structure explicitly covers AI regulatory violation risk including EU AI Act, plus performance failure losses. AIUC-1-backed coverage addresses hallucination-driven losses, IP claims, harmful outputs, and faulty agent tool actions. What it does not cover: general business losses unrelated to AI, losses arising from gross negligence or intentional acts, and typically losses arising from AI systems operating outside their specified parameters without disclosure to the carrier.
The five factors that drive your premium up or down
Regardless of which coverage type you are seeking, five factors account for most of the variation in premium between businesses with similar revenue. Understanding them helps you both estimate your cost before approaching a broker and identify the governance investments that will reduce your premium most efficiently.
Factor 1: Volume of AI decisions or interactions. An AI agent that handles 50 customer queries per day creates less insurance exposure than one that handles 50,000. Higher volumes produce more opportunities for error, more potential claimants, and higher aggregate loss if a systematic error occurs across all interactions before it is caught. Underwriters estimate volume exposure from the number of deployed agents, the throughput per agent, and the average consequence of each AI interaction. A high-volume deployment with low-consequence interactions (a scheduling assistant) sits differently in the risk model than a high-volume deployment with high-consequence interactions (a financial advisory agent).
Factor 2: Sector. The sector in which you deploy AI is the single biggest determinant of how expensive coverage will be, because it determines the likely severity of AI mistakes. Healthcare AI errors can result in patient harm claims worth hundreds of thousands of euros. Legal AI errors can result in professional negligence claims that include the client's entire financial loss. Financial services AI errors can trigger regulatory investigation costs on top of client loss. Retail AI errors typically produce modest individual losses with lower severity claims profiles. The same AI governance investment reduces premiums by a larger absolute amount in high-severity sectors than in low-severity ones.
Factor 3: Quality of human oversight. An AI deployment with documented human oversight procedures, defined approval thresholds for consequential actions, and evidence that those procedures are actually followed is a significantly lower risk than one where the AI agent acts autonomously without constraint. This factor is within your direct control, and it is the governance investment with the most consistent premium impact across carriers and policy types. The specific evidence that underwriters find most useful: a document specifying what autonomous actions the agent is authorised to take, the financial thresholds above which human sign-off is required before the agent acts, and any audit records showing the human approval procedure being used in practice.
Factor 4: Governance documentation quality. Beyond the oversight procedures specifically, the overall quality of AI governance documentation signals to underwriters whether the operator takes AI risk management seriously. A business that can produce an AI risk management framework (even a simple one), performance monitoring records showing what the AI's accuracy metrics are, and an incident response procedure for AI failures is in a better underwriting position than one that cannot produce any governance documentation. The investment required to produce basic governance documentation is modest compared to the premium reduction it typically generates.
Factor 5: Coverage limits requested. Higher limits cost more. The relationship is not linear: the premium does not simply double if you double the limit, because the probability of a claim reaching the higher limit is lower. But in the AI insurance market, where reinsurance capacity for very high limits is constrained, limits above 5 million euros become significantly more expensive per million of coverage than limits below 5 million. For most small businesses, starting with a 1 to 2 million euro limit and reviewing it after 12 months of claims experience (or the absence of it) is a more efficient use of premium budget than immediately seeking the highest available limit.
The AI coverage gap in your existing policies: what to check now
Before you spend any time thinking about new AI coverage, it is worth understanding whether your existing policies actually cover AI mistakes. Most small business operators assume they have some coverage. Many do not, or have much less than they think.
The general liability policy that most businesses carry covers bodily injury and property damage caused by the business's operations. AI mistakes almost never cause bodily injury or property damage. They cause economic loss: a customer relies on incorrect AI-generated information and loses money, or an AI agent books the wrong resource and the customer incurs cancellation costs. Economic losses caused by AI are not covered under a standard general liability policy.
The professional indemnity or errors and omissions policy covers errors made in the provision of professional services. The question is whether your AI agent's outputs qualify as professional services under your specific policy's definition. Policies written before AI agents were common in business operations typically define professional services by reference to the named professional who provided them. An output produced by an AI agent without human review before delivery may not satisfy the professional service definition, depending on the carrier's interpretation. This is worth confirming with your broker before you assume you are covered.
The cyber liability policy covers data breaches, ransomware, and technology outages. Since mid-2024, many cyber policies have added AI exclusions that explicitly exclude losses arising from AI model outputs or AI-initiated decisions. If your cyber policy was renewed after mid-2024, check the current exclusion language. The AI exclusion, if present, may have removed coverage that you previously had under the prior policy. For more on this, read the AI policy exclusions guide for operators.
How to reduce your AI insurance premium: three investments worth making
If you have read this far and the pricing ranges are higher than you expected, there is practical good news. Three governance investments consistently reduce AI insurance premiums, and none of them requires specialist legal or technical expertise to implement. They do require some time and organizational discipline.
Investment 1: Write down your human oversight procedure. Create a document that specifies what your AI agent is authorised to do without human review, and what requires human approval before the agent acts. The document does not need to be long. It needs to answer four questions: what autonomous actions is the agent allowed to take, what financial or legal magnitude is associated with each type of action, at what threshold does a human need to approve before the agent executes, and who is responsible for providing that approval? An operator who can hand this document to an underwriter has materially improved their underwriting position. One who cannot is signalling that the risk is uncontrolled.
Investment 2: Document what your AI actually does and how well it performs. Underwriters cannot price a risk they cannot characterize. A one-page document describing your AI system (what it does, what inputs it takes, what outputs it produces, what decisions it informs or takes), its performance characteristics (what accuracy metrics you monitor, what they show), and your monitoring approach (how you would detect if the system started producing wrong outputs) transforms an opaque risk into an assessable one. Opaque risks are priced conservatively. Assessable risks are priced precisely, which in most cases means more cheaply.
Investment 3: Complete EU AI Act classification for your AI systems. Under Regulation (EU) 2024/1689, operators of AI systems deployed in the European market should conduct a classification assessment to determine whether their systems are high-risk under Annex III. This sounds complex but is straightforward for most small business AI deployments: the assessment determines whether the AI falls into one of the eight Annex III categories (biometric identification, critical infrastructure, education, employment decisions, essential services, law enforcement, migration, or justice administration). Most customer service, scheduling, and content generation AI does not fall into any of these categories, and a one-page classification record documenting that conclusion takes less than an hour to produce. Underwriters are increasingly treating this document as evidence of regulatory compliance awareness, which reduces the regulatory penalty risk that some carriers price into premiums for European operators. For help understanding the EU AI Act obligations that apply to your business, see the EU AI Act SME guide. For the full classification framework, see the Article 6 classification guide at Agent Liability EU.
Finding a broker who understands AI insurance
Not every insurance broker has kept pace with the AI insurance market. A broker who placed your professional liability policy five years ago and has not been working in the technology sector may not be aware of the AI exclusion language that has changed your cyber coverage, may not know which specialist AI carriers operate in your market, and may not ask the right questions when preparing your renewal submission.
When evaluating whether your broker understands AI insurance, ask them three questions. First: has our cyber policy been updated with AI exclusion language since 2024, and if so what does the current exclusion say? A broker who cannot answer this is not tracking a material change in your existing coverage. Second: are there any AI-specific coverage products from carriers like Armilla or AIUC-backed structures that we should consider for our AI deployments? A broker who does not know these products exist is not covering your options. Third: what governance documentation would improve our position at the next renewal? A broker who cannot answer this is not thinking about AI insurance proactively.
If the answers are unsatisfactory, finding a broker with technology sector experience and familiarity with the specialist AI insurance market is a worthwhile investment. The premium savings from better placement and the coverage improvements from a more complete programme can substantially exceed the effort of switching. For a structured starting point for thinking about your coverage needs before approaching a broker, the diagnostic questions on this site provide a framework you can work through independently.
Frequently asked questions
How much does AI insurance cost for a small business in 2026?
A cyber policy with an AI endorsement for a small business with under 5 million euros in annual revenue typically costs between 2,000 and 8,000 euros per year for 1 million euros in coverage. A technology E&O policy with AI coverage costs 5,000 to 20,000 euros per year. A standalone AI liability policy from a specialist carrier such as Armilla starts at approximately 15,000 euros per year for 5 million euros in coverage. These are indicative ranges. Actual premiums require a formal underwriting submission and vary significantly with sector, governance quality, and coverage limits.
What five factors drive AI insurance premiums up or down?
The five main premium drivers are: (1) volume of AI decisions or interactions; (2) sector, with healthcare, legal, and financial services commanding significantly higher premiums than retail or logistics; (3) quality of human oversight, where documented oversight with defined approval thresholds receives lower premiums than fully autonomous deployments; (4) existence and quality of AI governance documentation including risk management frameworks and monitoring records; and (5) coverage limits requested, with higher limits more expensive per million of coverage as limits rise above 5 million euros.
Does my existing business insurance cover AI mistakes?
Probably not fully. General commercial liability covers bodily injury and property damage, not economic losses from AI mistakes. Cyber policies renewed since mid-2024 often include AI exclusions added by carriers including Coalition that specifically exclude losses from AI model outputs or AI-initiated decisions. Professional liability may cover AI errors as professional service errors, but this depends on whether your policy's professional services definition extends to AI-generated outputs without human review. Review your current policy language for AI exclusion clauses before assuming you are covered.
What is the cheapest way for a small business to get some AI coverage?
The lowest-cost entry point is a cyber policy with an AI endorsement that explicitly confirms coverage for AI output errors and AI-initiated actions, with a meaningful sublimit. This typically costs 2,000 to 6,000 euros per year for a small business. The endorsement must explicitly confirm coverage, not merely imply it: an endorsement that does not list covered AI loss categories specifically provides weaker protection than one that does.
Can I reduce my AI insurance premium by improving my AI governance?
Yes, meaningfully. The three governance investments that produce the most consistent premium reduction are: (1) writing down your human oversight procedure with defined approval thresholds for consequential AI actions; (2) documenting your AI system's performance metrics and monitoring approach; and (3) completing EU AI Act classification for your AI systems. In aggregate, small businesses with documented governance in these three areas can expect premiums 15 to 30 percent lower than comparable businesses without documentation.
References
- Coalition. Cyber insurance AI exclusion language updates, 2024-2025.
- Armilla AI. Coverage overview 2026. Lloyd's of London coverholder. Limits up to USD 25 million. EU AI Act regulatory violation coverage. Available at armilla.ai.
- AIUC. AIUC-1 AI Agent Certification Standard, 2025. ElevenLabs AI agent insurance, February 2026.
- Regulation (EU) 2024/1689 (EU AI Act). Annex III, Article 6, Article 43. OJ L, 12 July 2024.
- Moffatt v. Air Canada, Civil Resolution Tribunal, British Columbia, February 2024 (operator responsibility for AI chatbot outputs).
- Mata v. Avianca, Inc., SDNY, Case No. 22-cv-1461, June 2023 (operator responsibility for AI-generated content).
- European Insurance and Occupational Pensions Authority. Survey on GenAI use in the European insurance sector, February 2026.
- NIST AI Risk Management Framework 1.0. NIST AI 100-1. January 2023. GOVERN function, documentation requirements.