Commercial · scale · scenario
My business outgrew its first policy.
Most small businesses start with a Businessowners Policy, and the BOP carries them well until it does not. Here is how to tell whether you have outgrown the form, and what comes next.
What's actually happening.
The BOP that fit the first $400K of revenue starts to feel tight somewhere around $1M to $3M. Sub-limits that were generous at year one feel constraining. The class code rates against a smaller operation than the one you actually run. Multiple locations show up with sub-limits per site instead of an honest schedule. Revenue mix shifts away from the class code, and you find yourself wondering whether the new line is technically covered.
Most of these signals do not require a panic move. The BOP is a deliberately simple form, and ‘outgrowing’ it is the natural progression of a healthy operation. The point of this page is not to scare anyone off the BOP; it is to flag the three or four signals that say the form is no longer the cheapest or broadest fit, and to describe what the move to a Commercial Package Policy actually looks like.
Roughly half the operations we look at past $1M of revenue are still in the right BOP, with a few endorsement upgrades. The other half are paying more for less coverage than they would on a package policy with properly scheduled sub-limits and stand-alone supporting forms. The only way to know which side is yours is to actually compare both.
What changes inside the policy.
A BOP is a packaged form. Property and GL are bundled at fixed sub-limit ratios, with cyber, EPL, business income, and equipment breakdown all sub-limited inside the same shell. The form is designed to be fast to bind and cheap at small scale, at the cost of flexibility on the individual sub-limits.
A Commercial Package Policy unbundles those sub-limits and rates each line individually. You buy property at the limit you need, GL at the limit you need, cyber and EPL as stand-alone forms with their own limits, and so on. The premium is usually 1.5 to 2 times the BOP at the same overall coverage, but the coverage itself is often 5 to 20 times broader on the lines that matter. At the right scale, the math flips.
The other thing the package policy unlocks is the schedule of locations. A BOP can write multiple sites but with per-location sub-limits and rate factors that flatten across the schedule. A package policy schedules each location at its own rated exposure, which usually saves money on the lower-risk sites and pays for the proper limit on the higher-risk ones.
The coverages involved.
- Property (Building, Business Personal Property, Tenant Improvements)
On a package, these split into separate scheduled limits per location with their own deductibles. BOP packages them at one ratio; the right answer past $1M of revenue usually wants them split.
- General Liability (with proper aggregate)
BOP aggregates can be tight at $2M; package policies start at $2M aggregate and scale to $5M / $10M cleanly. Worth confirming the aggregate is sized to the actual claim profile, not the form default.
- Cyber Liability (stand-alone)
BOP sub-limits at $25K to $100K do not survive a real ransomware event. Stand-alone cyber at $1M to $5M of limit is 3 to 8 times the BOP sub-limit cost for 10 to 50 times the coverage.
- Employment Practices Liability (EPLI, stand-alone)
BOP EPLI sub-limits at $25K to $100K barely fund the defense of a single claim. Stand-alone EPLI at $250K to $1M is broader, often includes HR-helpline access, and is dramatically more useful at first claim.
- Commercial Auto (or Fleet)
Hired/non-owned auto on a BOP is fine for occasional rentals. A real fleet of owned vehicles wants commercial auto monoline with proper rating, garaging, and MVR-based pricing.
- Umbrella / Excess Liability
Sits over the package's GL, auto, EPLI, and (sometimes) cyber. Most operations past $1M of revenue should carry $2M to $5M of umbrella; cost is usually 1 to 2 percent of underlying premium.
The stack we'd build.
- Commercial Package Policy
Package. Unbundles property and GL, schedules locations individually, opens up stand-alone supporting forms.
- Cyber liability stand-alone
$1M–$5M. BOP sub-limits do not survive a real ransomware event. Stand-alone cyber is broader and almost always cheaper at scale.
- EPLI stand-alone
$500K–$1M. Wrongful termination, discrimination, harassment, retaliation. The BOP sub-limit is too small at any meaningful headcount.
- Umbrella / Excess Liability
$2M–$5M. Over GL, auto, and (sometimes) EPLI and cyber. Roughly 1 to 2 percent of underlying premium at most carriers.
The move from BOP to package is not necessarily an upgrade; it is a re-fitting. At the right scale the package costs 1.5 to 2 times the BOP for the same nominal coverage, but the unbundled limits and scheduled locations usually deliver 5 to 20 times the coverage on the lines that matter. The math flips somewhere between $1M and $3M of revenue for most operations.
We do not push the package as a default. About half the operations we re-quote past $1M of revenue are still better off in a BOP with a few endorsement upgrades. The other half are paying for sub-limits that no longer match their exposure. The audit takes about an hour.
Pitfalls.
- 01Renewing the BOP on autopilot past $1M of revenue.
BOP class codes and sub-limits do not auto-resize to growing operations. Renewing without an audit means renewing into a form that priced you at year-one exposure for year-four revenue.
- 02Trusting the cyber sub-limit inside the BOP.
$25K to $50K of cyber inside a BOP does not survive a real ransomware event. Stand-alone cyber at $1M to $5M is 3 to 8 times the cost for 10 to 50 times the coverage.
- 03Adding revenue lines outside the class code.
Carriers price BOPs to a class code. New revenue streams (retail added to consulting, online added to brick-and-mortar) that do not match the class code are technically uncovered until the policy is endorsed or rewritten.
- 04Skipping the umbrella at scale.
GL aggregate at $2M is a small number against a real injury or product-liability claim. Excess liability at $2M to $5M is usually 1 to 2 percent of underlying premium and is the most efficient liability dollar at any meaningful operation.
- 05Treating multi-location as 'just a sub-limit.'
BOPs handle multi-location with per-site sub-limits that flatten across the schedule. Past two or three locations, a package policy with properly scheduled limits almost always reads better and often costs less.
- 06Forgetting hired/non-owned auto becomes inadequate at fleet size.
Hired/non-owned auto is fine for occasional rentals. Once you own four or more vehicles, or any heavy equipment, a real commercial auto monoline form is the correct fit.
The timeline.
- Pre-renewal audit.
T − 60 days. Send us the BOP dec page, revenue figures, current headcount, and location list. We model the BOP-with-upgrades against a clean Package policy and flag the gaps.
- Decision: stay or move.
T − 30 days. If the math says stay, we endorse the existing BOP with the right sub-limit and class-code upgrades. If it says move, we line up 2 to 3 package quotes and walk through the trade-offs.
- Bind the chosen path.
Renewal day. Either the upgraded BOP or the new Package policy goes effective. Stand-alone cyber, EPLI, and (if applicable) commercial auto line up alongside on the same date. Umbrella sits over them.
- Audit the COI templates.
+90 days. Package policies issue COIs differently than BOPs. We refresh the COI templates your clients ask for to reflect the new structure.
- Re-rate at next renewal.
+12 months. Revenue, headcount, and operations all moved again. Package policies handle growth without restructuring; we re-rate the individual lines instead of re-quoting the whole shell.
Outgrowing the BOP is not a problem. Renewing into the wrong one is.
We start every commercial review by asking whether the existing form still fits, not by selling the next-bigger one. About half the BOPs we look at past $1M of revenue are still right, with a few endorsement moves. The other half are leaking money against sub-limits that no longer match the operation. The only way to know which is yours is to actually compare both.
If you have a renewal coming up, or a revenue line that has shifted, or a second location you have already opened, send us the dec page and a quick summary of where the operation actually is today. The audit takes about an hour; the answer changes about a third of the policies we look at.
Nick RhodesAgency owner · Commercial lines · NPN 19488203 · KS + MO licensed
Questions we answer often.
How do I know if I've outgrown my BOP?
What's the difference between a BOP and a Package Policy?
Why is my cyber sub-limit too low?
Do I need stand-alone EPLI?
When does hired/non-owned auto stop being enough?
What umbrella limit fits a $3M revenue operation?
How does adding a second location change my policy?
Can I switch forms mid-policy or only at renewal?
Related scenarios.
- I'm starting a business.
LLC filed, domain bought, maybe a lease signed. Where the line between 'operating' and 'needs a real policy' actually falls.
- I just hired someone.
First W-2 triggers workers comp, EPLI, and a class-code review. The 90 days after first hire are the cheapest 90 to get this right.
- I run a business from home.
1099 income, home office, client visits. Where personal-lines policies stop covering you, and what to put in their place.