$1M Professional Liability (E&O) Insurance for Managed Service Providers (MSPs)

For MSPs whose client agreements ask for $1M: it usually means $1M per claim, often with a yearly cap, on a Technology E&O policy.

What does a $1M requirement mean for MSPs?

Professional Liability (E&O, short for Errors and Omissions) covers claims that a mistake in your services caused a client a financial loss. A typical clause looks like this:

• Per claim: the most the policy pays for any one claim. Here, $1M.
• Aggregate: the most the policy pays for all claims in one policy year. Here, $2M. A $1M/$1M policy would not meet it. Many Technology E&O and Cyber policies set the aggregate equal to the per claim limit, so $1M/$1M is common. For a $2M aggregate, you may need a higher aggregate or a higher limit. Morrow can request quotes for either option.
• Claims-made: Professional Liability almost always covers claims made and reported while the policy is active, for work done after the retroactive date (the earliest work date covered).
• "Network security and privacy": this is Cyber coverage. A policy without Cyber may not meet a clause that names it.

Who asks MSPs for $1M?

Clients that often ask for $1M include:

• Small and mid-sized businesses that outsource IT.
• Law, accounting and financial firms.
• Medical and dental practices.
• Towns, school districts and nonprofits.
• Larger IT firms that subcontract to you.

$1M is often a starting point, not a ceiling. Enterprise MSAs (master service agreements) often ask for more. A $2M Professional Liability limit for MSPs gives more room if one outage hits several clients at once. A $1M/$2M policy pays $1M per claim but up to $2M for the year, which is not the same as $2M on every claim. See MSA insurance requirements.

How is $1M built?

At $1M, the limit is usually one primary policy (the policy that pays first), with no excess layers (extra policies stacked above the primary one). MSPs usually buy Technology E&O, a form built for software and IT services, rather than Miscellaneous Professional Liability. It is often packaged with Cyber (breach and privacy cover). See Technology E&O vs. Miscellaneous E&O.

A commercial umbrella almost never covers Professional Liability, so it will not meet this. Additional insured status (a party added to your policy so it gets coverage too) is less common on Professional Liability than on General Liability. Clients usually cannot be added. Where a carrier allows it, it is usually limited to liability from your services and needs a written contract. Many clients ask for a certificate of insurance (a one-page proof of coverage) instead.

Morrow can review your contract and policy for gaps, such as a missing Cyber part, a low aggregate, or a contractual liability exclusion (a policy term limiting cover for liability you take on only by contract), which can affect your SLAs (service level agreements, your written uptime promises).

What will underwriters ask MSPs for?

An underwriter (the person who decides whether to offer coverage) usually asks about:

• Your services (help desk, network management, backup, cloud, security) and how many clients and devices you manage.
• How you protect your remote monitoring and management (RMM) tools, the software that reaches client systems, including multi-factor authentication (MFA, a second login step). Carriers often expect MFA and secured RMM tools. Missing them can limit options or raise the price.
• How you back up data, test restores and patch.
• Your standard MSA and SLAs, including uptime promises.
• Revenue, prior claims, and your retroactive date.

What affects the cost?

• Services you sell. Security services and full outsourced IT may cost more than project work.
• Clients and data. More clients or devices, or clients in healthcare and finance, usually raise the price.
• Security controls. Strong RMM security, MFA and tested backups may lead to better terms.
• Revenue and claims. Higher revenue and prior claims can raise the price.
• Aggregate and retention. A higher aggregate usually costs more. A higher retention (the amount you pay on each claim before the policy pays, like a deductible) usually lowers the premium.

Frequently asked questions

Do I need $1M Professional Liability as an MSP?

Only if your contract or client asks for it, but many MSP clients do. Hypothetical example: a backup job fails quietly, and months later the client cannot restore its files. You may face defense costs even if you did nothing wrong. Whether the policy pays depends on its wording.

Do I need Cyber as well as Technology E&O?

Often yes, because many clients expect both. Technology E&O responds to service mistakes. Cyber responds to breaches and privacy events. See Professional Liability vs. Cyber.

I have a $1M/$1M policy and the contract asks for a $2M aggregate. What now?

A $1M/$1M policy usually does not meet a $2M aggregate. Request new quotes that do, either a separate aggregate or a $2M limit, depending on what carriers offer. Morrow can ask carriers to keep your retroactive date and prior acts coverage (cover for work you did before the new policy starts) where the market allows. Report anything that could become a claim to your current carrier before that policy ends.

What happens to my coverage if I sell or close my MSP?

A claim about past work can show up years later and may not be covered without active coverage. An extended reporting period (a "tail") gives you extra time to report claims about past work.

This article is general information, not legal advice or a coverage determination. Coverage depends on the actual policy wording, carrier underwriting and your contract terms.