Does standard E&O insurance cover AI-caused errors?

Maybe, and the ambiguity is the problem. Standard errors and omissions (E&O) policies cover professional errors in the services you provide. If your service output was wrong because an AI tool gave you bad information, that may fall within E&O coverage, but many insurers have begun adding AI exclusions or sublimits.

Is there dedicated AI liability insurance available?

Yes, but few products publish their terms. In April 2025 Chaucer, which trades through Lloyd's, launched a standalone AI liability product with Armilla AI covering hallucinations and model drift. Cowbell's Prime One cyber policy, launched in the U.S. in April 2026, adds affirmative AI coverage for companies with $250 million to $1 billion in revenue.

What does cyber insurance cover for AI risks?

Cyber insurance typically covers data breaches, network security failures, ransomware, and privacy liability. It generally covers these events even when they involve AI systems, so an AI-caused data breach would typically be covered. Some cyber policies are beginning to add coverage for AI-specific incidents like AI model poisoning, adversarial attacks on AI systems, and privacy violations caused by AI outputs.

Who is liable when an agentic AI takes an unauthorized action?

This is genuinely unsettled law in 2026. The most likely answer in most jurisdictions is the organization that deployed and authorized the AI agent to act on its behalf. If your AI agent signs a contract, makes a purchase, or takes an action that causes harm, you are likely the liable party, not the AI vendor.

What is the most common AI liability gap for small teams?

The most common gap is content liability. Teams generating marketing copy, legal summaries, medical information, or financial content using AI may inadvertently publish defamatory content, infringe copyright, or provide incorrect information that a user relies on to their detriment. Standard general liability does not cover this. Media liability or professional liability (E&O) with explicit AI coverage is the correct product.

Should I consult a lawyer about AI insurance coverage?

Yes, for anything material. This article provides an overview of coverage options, not legal or insurance advice. For material AI deployments where errors could cause significant harm (medical tools, financial advice, legal information), consult both an insurance broker with technology E&O expertise and a lawyer familiar with AI liability in your jurisdiction.

AI liability insurance in 2026: what coverage actually…

TL;DR: Standard business insurance policies were not written with AI in mind. General liability typically does not cover AI-specific risks. E&O may cover AI-caused professional errors only if the policy does not exclude AI. Cyber insurance covers AI-involved data breaches. Dedicated AI liability policies are emerging. Small teams should audit their current coverage for AI exclusions before assuming they are protected.

Disclaimer: This article is for informational purposes only. It is not legal or insurance advice. Consult a licensed insurance broker and legal counsel for advice specific to your situation.

AI liability is one of those topics where the gap between "what teams assume their insurance covers" and "what their insurance actually covers" is expensive. Most small teams using AI tools in their products or services assume their existing policies have them covered. In many cases, they do not.

The insurance market has not kept pace with how quickly AI moved from novelty to core business infrastructure. Standard commercial policies written three to five years ago made no provision for AI-generated content claims, algorithmic discrimination liability, or agentic AI taking unauthorized actions on behalf of organizations. That gap is closing, but slowly and unevenly.

This article maps the types of AI liability your team faces, what current insurance products cover them, what gaps to look for, and how to have the right conversations with your broker.

The five types of AI liability that matter

1. AI-generated content claims

Your AI-generated blog posts, marketing copy, product descriptions, legal summaries, or customer communications can produce defamatory statements, infringe copyright (through training data or output), violate right of publicity, or constitute false advertising.

The defamation risk is real and underappreciated. Large language models hallucinate. They produce plausible-sounding false statements about real people and organizations. If your AI-generated content makes false factual claims about an identifiable person and you publish it, you face potential defamation liability. If you publish AI-generated content without adequate human review, your publishing volume combined with hallucination rates creates material exposure.

Copyright infringement from AI output is a live litigation area in 2026. Whether AI-generated content that closely resembles training data constitutes infringement is still being worked out in courts in multiple jurisdictions. But the practical risk exists now.

2. Algorithmic discrimination claims

Any AI system that makes or influences decisions about people, whether in hiring, lending, insurance, housing, healthcare access, or service pricing, can produce outcomes that violate anti-discrimination laws if those outcomes disparately affect protected classes.

This is not theoretical. The Workday AI lawsuit HR screening checklist covers one of the most visible cases. EEOC guidance, NYC Local Law 144, Colorado SB 189, and Illinois employment AI laws all create specific liability frameworks for employment AI discrimination. GDPR and EU AI Act create similar frameworks for EU-based discrimination.

The liability exposure is significant and often inadequately covered by standard commercial policies.

3. Data breach and privacy violations in AI systems

AI systems often process large amounts of personal data as part of their operation. Training data, inference inputs, output logs, and user interactions all create data privacy obligations and breach liability. A breach involving an AI system is a breach. Your cyber insurance coverage applies. But AI-specific attack vectors, prompt injection attacks, model inversion attacks, and training data extraction, may not be explicitly covered depending on how your cyber policy was written.

4. AI-caused errors in professional services

If you use AI tools to deliver professional services, and those tools produce incorrect outputs that you relay to clients or incorporate into deliverables, you face professional liability exposure. A legal summary that misses a key case, a financial model with an AI-generated formula error, or a medical information tool that provides incorrect dosing guidance all create E&O-type claims against your professional services.

The question is whether your E&O policy covers the scenario where an AI tool caused the error. Many do. Some now explicitly exclude AI-related errors or cap coverage for them. The ambiguity requires direct investigation with your broker.

5. Agentic AI unauthorized actions

This is the newest and least settled category. Agentic AI systems take autonomous actions: they browse the web, execute code, send emails, call APIs, make purchases, schedule meetings, and interact with third parties on your behalf. When an AI agent takes an action that causes harm, who is liable?

In most current legal frameworks, the answer is: the organization that authorized and deployed the agent. Your AI vendor's contract almost certainly disclaim liability for actions taken by AI agents. You accepted those terms. Your organization is the principal. AI agent errors are your errors.

This creates liability exposure for contracts inadvertently agreed to by AI agents, financial transactions executed incorrectly, communications sent to third parties, and data shared with external services. Reviewing agentic AI vendor contract clauses is a prerequisite before deploying any agentic AI with real-world action capabilities.

A man in a dark suit and tie buttoning his jacket on a staircase, representing AI liability insurance 2026

What insurance products currently cover AI liability

Coverage type	What it covers	AI coverage status	Typical premium range (small team)
General liability	Bodily injury, property damage, personal injury	Typically does NOT cover AI-specific risks	$500 to $2,000 per year
E&O / Professional liability	Professional errors causing client harm	May cover if no AI exclusion; verify	$2,000 to $10,000 per year
Cyber insurance	Data breaches, network security failures, privacy liability	Covers AI-involved breaches; check AI exclusions	$3,000 to $15,000 per year
Media liability	Content-related claims, defamation, IP infringement	Covers AI-generated content claims if policy is current	$2,000 to $8,000 per year
Directors and Officers (D&O)	Leadership liability for governance failures	May cover AI governance failures; limited	Varies
Dedicated AI liability	AI-specific risks across categories	Emerging; limited availability for small teams	$5,000 to $30,000+ per year

General liability was not designed for AI risks and typically will not respond to AI liability claims. It covers bodily injury, property damage, and some personal injury claims arising from your operations. AI errors causing financial harm, defamatory AI outputs, and algorithmic discrimination claims generally fall outside standard general liability coverage.

E&O (Professional Liability) is the most important existing coverage for AI-caused professional errors. If your AI tool causes you to deliver incorrect professional services, E&O should respond. The critical variable is whether your policy has added an AI exclusion or sublimit. This has become more common since 2024. Pull your current E&O policy declarations and look for any AI-specific language. If you cannot find a clear answer, ask your broker directly and in writing.

Cyber insurance covers data breaches and privacy liability from AI systems just as it does from other systems. Some cyber policies are extending coverage to include AI-specific attack vectors and AI model-related incidents. Review your policy for any AI exclusions that may have been added at renewal. The data breach coverage in a solid cyber policy is one of the more reliable parts of your AI coverage picture.

Media liability is underused by small tech teams but highly relevant for teams generating significant AI-assisted content. It covers defamation claims, copyright infringement, right of publicity violations, and advertising injury arising from your published content. If your AI-generated content creates a content liability claim, media liability is the correct coverage.

Dedicated AI liability policies exist, but few publish their terms. In April 2025 Chaucer, a specialty insurer that trades through Lloyd's of London, launched a standalone third-party liability product with Armilla AI for US insureds. It covers hallucinations, model drift and legal defense for claims arising from AI underperformance; Armilla is a Lloyd's coverholder whose application Chaucer sponsored. Cowbell's Prime One, launched in the U.S. on April 21, 2026, is a cyber policy rather than a standalone AI policy: it adds affirmative coverage for AI-related incidents and is built for organizations with $250 million to $1 billion in annual revenue. Both are new and narrow, so for a small team the first step is still making sure your existing E&O, cyber and media liability policies don't exclude AI.

Six questions to ask your insurance broker

Before your next renewal or mid-term review, ask your broker these specific questions:

Does our current E&O policy have any AI exclusion or sublimit? Get the answer in writing with a citation to the relevant policy language.
Does our cyber policy cover privacy violations caused by AI outputs, not just system breaches? Some cyber policies cover only unauthorized access events, not privacy violations from authorized AI processing.
Are agentic AI actions covered as part of our professional services? If your team deploys AI agents that interact with clients or third parties, ask whether unauthorized or erroneous agent actions are covered as professional errors.
Does our media liability policy cover AI-generated content? Some older media liability policies have content-creation limitations that may not cleanly apply to AI-assisted generation.
What is our coverage for algorithmic discrimination claims? This may require an employment practices liability endorsement or a dedicated AI liability product.
What should we do to avoid triggering an AI exclusion we are not aware of? Brokers can often advise on documentation, usage policies, and governance practices that strengthen your coverage position.

Cost estimates for small teams

For a team in the $100K to $5M ARR range, realistic insurance costs for adequate AI coverage look like this:

Coverage	Annual cost estimate
E&O with AI coverage (no exclusion)	$3,000 to $10,000
Cyber insurance with AI endorsement	$3,000 to $12,000
Media liability	$2,000 to $5,000
Total for reasonable AI coverage	$8,000 to $27,000 per year

Dedicated AI liability policies, where available, add $5,000 to $30,000+ depending on revenue and risk profile.

Risk mitigation strategies when you cannot afford dedicated AI coverage

Not every small team can absorb $15,000 to $25,000 per year in insurance premiums at early stages. These risk mitigation strategies reduce liability exposure and may also reduce the premiums you are quoted:

Implement human review checkpoints. For any AI output that goes to customers or is published, implement a documented human review step. This reduces both the probability of harm and your liability exposure. Courts and regulators treat human oversight as a significant mitigating factor.

Maintain an AI tool register. Document every AI tool you use, what it does, what data it accesses, and who is responsible for its output. This documentation matters for both insurance coverage disputes and regulatory investigations. See the AI governance guide for small teams for register templates.

Deploy an AI incident response plan. When an AI system causes harm, having a documented response procedure matters. It reduces harm, demonstrates good governance, and is directly relevant to insurance claims. The AI incident response plan template provides a starting point.

Review AI vendor contracts. AI vendors routinely disclaim liability for AI outputs and actions. Negotiate liability provisions where you can. Understand what you have accepted in your current vendor agreements. The AI vendor contract redline template 2026 provides specific clause language to push for.

Assess enforcement risk from your jurisdiction. The GDPR AI fines 2026 enforcement cases article covers the regulatory enforcement picture. Understanding where actual enforcement is happening helps you prioritize which risks warrant insurance spend and which warrant mitigation investment.

Correction, October 15, 2026: an earlier version said Tokio Marine HCC and "several Lloyd's syndicates" sell AI liability products and that Cowbell offers an AI-specific endorsement. We found no published AI liability product from Tokio Marine HCC and no source for the Lloyd's syndicate count; the section now names the Chaucer and Armilla product and Cowbell's Prime One from their own announcements. We also removed the unsourced $1 million and $5 million ARR cutoffs from that section and the FAQ.