$2M Professional Liability (E&O) Insurance for Managed Service Providers (MSPs)

For managed service providers (MSPs) whose master service agreement (MSA) asks for $2M, Professional Liability (E&O) usually means $2M per claim, as one policy or a primary plus excess, not just $1M/$2M.

What does a $2M requirement mean for MSPs?

Professional Liability (E&O, short for Errors and Omissions) covers claims that a mistake in your services cost a client money. MSPs usually buy a form called Technology E&O, often combined with Cyber (insurance for data breaches and network attacks). A $2M clause in a client MSA (master service agreement) may read:

• Per claim and aggregate: the most the policy pays for one claim, and for all claims in a policy year. Here, $2M each.
• Claims-made: Professional Liability almost always covers claims made and reported while the policy is active, for work done on or after the retroactive date (the earliest date of work the policy covers).
• Every service you sell: the clause names backup and monitoring. Your policy should describe every managed service you sell.

Compared with $1M, a $2M clause roughly doubles what one large outage or breach claim can draw on, so check whether your limit is $1M/$2M or $2M/$2M. See $1M Professional Liability for MSPs.

Who asks MSPs for $2M?

Many small clients stay at $1M. $2M tends to come from clients where an outage hurts more:

• Mid-sized companies that send a standard vendor MSA to IT suppliers (see MSA insurance requirements).
• Medical and dental groups that rely on you for patient record systems.
• Law, accounting and financial firms with sensitive client data on your networks.
• Schools, towns and public agencies, where a limit may be written into the bid.

How is $2M built?

At $2M, the limit is often one primary policy (the policy that pays first) at $2M/$2M. Some Cyber parts may carry lower caps (sublimits), so check them against your MSA. Another option is a $1M primary plus a $1M excess layer (a second policy that pays after the first is used up). Excess should follow form, meaning it uses the primary policy's terms.

A commercial umbrella almost never covers Professional Liability. Additional insured status (a company added to your policy so it can claim under it) is not automatic, and many forms do not offer it. Some carriers may allow it where your contract requires it, limited to liability arising from your services. Some clients accept a certificate of insurance (a one-page proof of coverage) instead.

If you carry $1M today, request new quotes for $2M through Morrow. Morrow can ask carriers to keep your retroactive date and prior acts coverage (cover for work done before the new policy starts) where the market allows.

What will underwriters ask for?

An underwriter is the person at the insurer who decides whether to offer coverage and on what terms. For an MSP at $2M, they often ask about:

• Your services by share of revenue: help desk, monitoring, backup, security and cloud.
• How many clients you support, how many endpoints (the laptops, servers and other devices you manage), and your largest clients by industry.
• How you secure your own tools: multifactor login on remote and admin accounts, and who can push changes to clients.
• Your backup process, restore tests, and whether backups are kept offline.
• Contract terms, such as uptime promises and subcontractors.
• Prior claims, loss runs (a report of past claims), and your current policy and retroactive date.

What affects the cost?

• Services you offer. Security, backup and cloud work usually cost more than basic help desk.
• Client mix and size. More clients, more endpoints, or healthcare and finance clients usually raise the price.
• How the $2M is built. One primary policy or a primary plus excess can price differently, and adding Cyber adds cost.
• Retention and claims history. The retention (what you pay on each claim before the policy pays, like a deductible) and past claims both matter.

Frequently asked questions

What kind of claim could reach $2M against an MSP?

Here are hypothetical examples. A patch you pushed breaks a clinic's scheduling system for three days. A backup job fails quietly, and a client loses its files in a crash.

Is $1M/$2M enough if my contract says $2M?

It depends on the clause. $1M/$2M meets a clause that asks for $1M per claim and $2M aggregate. If it asks for $2M per claim, you likely need a $2M/$2M policy or a primary plus follow-form excess. Confirm with the client that primary plus excess meets the clause.

Do I need Cyber as well as Technology E&O as an MSP?

Many MSA clauses for MSPs ask for both, or for Technology E&O that includes network security and privacy liability, and some ask for only one, so read your clause. Technology E&O is meant to respond to mistakes in your services, and Cyber to breaches and privacy events. Coverage depends on the policy wording. See Professional Liability vs. Cyber.

What if a client later asks for more than $2M?

Some larger or more regulated clients ask for $3M or $5M. $3M is rarely found online, and $5M is very rare online and almost always needs a broker. Morrow can help you find them. See $3M Professional Liability for MSPs.

This article is general information, not legal advice or a coverage determination. Coverage depends on the actual policy wording, carrier underwriting and your contract terms.