When does cyber liability stop being optional?

The triggers.

Check what applies, we'll tell you which side of the line you're on.

• You collect or store customer data of any kindNames + emails alone trigger notification statutes in 50 states. The data doesn't have to be sensitive.
• You accept credit cards directly (not just through Stripe/Square)PCI exposure is a contractual obligation. Most GL policies exclude it explicitly.
• You initiate or receive wire transfers above $10kSocial engineering / business email compromise is the #1 cyber claim cause for small business.
• You hold vendor or partner data under an NDA or contractContract liability for a breach often runs into seven figures even for small firms.
• You depend on cloud software for daily operationsBusiness interruption from a SaaS outage or ransomware lockout is a covered cyber peril.
• Staff work remotely on personal devicesBYOD multiplies attack surface. Most cyber underwriters now ask about endpoint controls.
• You touch healthcare data, financial records, or legal filesHIPAA, GLBA, and state privacy laws have notification + penalty regimes that cyber policies are built for.
• A customer or contract requires you to carry cyberIncreasingly common in vendor agreements. Limits and waiting periods are negotiable, the requirement isn't.

If you cross.

• 01

  Notification + forensics costs are covered

  First-party costs — IT forensics, customer notification, credit monitoring, regulatory filings — are typically the largest line on a cyber claim. Cyber policies pay these directly.

• 02

  Ransomware payments and negotiation are covered

  Most modern forms cover the ransom, the negotiator, the bitcoin broker, and the OFAC compliance work. Without cyber, all of that is on you.

• 03

  Business interruption from a cyber event pays

  Standard property BI requires physical damage. Cyber BI triggers on a network event — the form most small businesses don't realize they're missing.

• 04

  Defense and regulatory penalties are inside the limit

  GDPR, CCPA, and state AG investigations come with legal defense costs and potential fines. Cyber forms cover defense; many cover the fines where insurable by law.

Three doors.

• Cyber Liability

  the product page

  What cyber covers, what it doesn't, and the form differences between standalone cyber and the cyber endorsements bolted onto BOPs and management liability.

  See the product

• Quote standalone cyber

  30-min call · we'll quote 3 carriers and explain the form differences

  We'll quote three standalone cyber markets and compare them against any cyber endorsement you already have. Limits, retention, and the exclusion language all vary widely.

  Book the call

• Coverage Hub

  the full commercial menu

  If cyber isn't the first move, the coverage hub walks through GL, property, BOP, and the other lines that usually come first. Circle back to cyber as you grow.

  Coverage hub