A Bay Area software, SaaS or AI company with 50 to 300 people usually needs a program, not a single policy: technology E&O and cyber, often written together, plus D&O, employment practices liability, general liability and workers’ compensation. What forces a review is usually a document: an enterprise customer’s insurance exhibit, an investor or board requirement, or a renewal that adds AI exclusions. Golden Benchmark reads those documents against your policy forms before you sign or renew.
Placing coverage with Hartford · Travelers · Liberty Mutual · Chubb
AI-Related Securities Class
Actions Filed 2020–2025
DLA Piper / Harvard Law Forum on Corp. Gov., 2025
AI-Related D&O Filings
Doubled in 2024 vs. Prior Year
D&O Diary / Stanford Securities Class Action Clearinghouse, 2025
AI-Related Securities Class
Actions Filed in 2025
Embroker Tech Insurance Research, 2025
Startup Founders: Cyber Coverage
Data Breach, 2026
Embroker Cyber Risk Index, 2024
Most tech founders assume they’re covered for anything their product does. They’re not. Starting in late 2025, major U.S. carriers began filing to add sweeping AI exclusions to standard E&O, D&O, and cyber policies, often buried deep in endorsement forms that most policyholders never read.
Between January 2025 and January 2026, the professional liability market experienced a structural break from “silent” AI coverage to explicit affirmative warranties or absolute exclusions. Firms entering 2026 without documented AI governance frameworks now face coverage denials or absolute exclusions at renewal.
California AB 316: Effective January 1, 2026: California now bars AI companies from using AI as a defense. If your product or service causes harm, you cannot argue the AI acted autonomously. This significantly raises the stakes for every AI company operating in California.
We review policy language for AI exclusions at every renewal and source carriers providing affirmative AI coverage, explicitly naming your AI product as covered, through Lloyd’s syndicates, Munich Re, and specialty markets unavailable to online platforms.
California AB 316: Effective January 1, 2026
California AB 316 bars businesses that developed, modified, or used AI from asserting that the AI acted autonomously as a defense in civil actions. If your product or service causes harm, you cannot shift liability to the model. This applies to developers, modifiers, and users of AI, and raises the stakes for every AI company operating in California. Other defenses (causation, foreseeability, comparative fault) remain available.
Source: CA AB 316, signed October 13, 2025, effective January 1, 2026 (EPIC / Perkins Coie, 2025)
Sources: Harvard Law Forum on Corp. Gov. (Sept 2025) · Hunton Andrews Kurth Insurance Recovery Blog (Oct 2025) · Financial Times (Nov 2025) · Zelle Law AI Insurance Update (Oct 2025) · EPIC California Tech Legislation Roundup (Oct 2025)
Berkley Insurance Group
Berkley’s PC 51380 form excludes any claim “based upon, arising out of, or attributable to” any actual or alleged use, deployment, or development of any AI system, including chatbot communications, failure to detect AI-produced materials, and regulatory actions related to AI oversight. The scope is broad enough to capture most modern software products. Filing and approval status varies by state, so read your own policy’s endorsements at every renewal; see the 2026 AI exclusions to check before you renew.
Hamilton Insurance Group
Hamilton has removed coverage for claims involving any use of generative AI, explicitly naming ChatGPT, Google Bard, Midjourney, and DALL-E. Companies using any of these tools in their workflow or product may find professional liability claims denied, even for losses unrelated to the AI output itself.
Verisk / ISO: January 2026
ISO endorsement CG 40 47 01 26, available to carriers from January 1, 2026, lets a carrier exclude bodily injury, property damage and personal and advertising injury arising out of generative AI from a commercial general liability policy. It is optional: it applies only where your carrier attaches it, so check the endorsement schedule at every renewal.
The Solution
Carriers including Lloyd’s syndicates (via Armilla), Munich Re, and emerging specialty markets are offering explicit affirmative AI endorsements. Coverage that names your product as insured, not excluded. Golden Benchmark sources these for qualifying tech and AI companies and reviews every policy for exclusion language at renewal.
Sources: Zelle Law (Oct 2025) · Lexology / Hunton Andrews Kurth (Jan 2026) · Insurance Business Magazine (Dec 2025) · Verisk/ISO Form CG 40 47 01 26 (Jan 2026)
Each policy addresses a distinct risk category. Most tech companies need four or more of these working together, reviewed as a coordinated program, not purchased in isolation.
Covers client financial losses from product failures, bugs, outages, or missed SLAs, and your own costs from data breaches or ransomware. The two most essential policies for any tech company with paying clients, ideally placed as a combined form to eliminate gaps between policies.
⚠ CA Fact: General liability does NOT cover client losses from software failures. Tech E&O is a separate, required line for any California software or SaaS company.
Protects founders, executives, and board members from personal liability for management decisions. Investors can, and do, require D&O before closing a round. Most VC term sheets include an explicit D&O requirement before funding closes.
⚠ Board fact: Cornerstone Research counted 16 AI-related securities class action filings in 2025. Read the AI and securities exclusions in your D&O form before a raise or a sale.
Covers data breaches, ransomware, and first-party recovery costs. For AI companies, specialized endorsements can cover AI-specific liabilities that standard cyber forms now increasingly exclude via generative AI or autonomous-system exclusions.
⚠ AI Alert: Major carriers are adding AI exclusions to standard cyber and E&O policies in 2025–2026. Your renewal may arrive with new exclusions embedded. Review before signing.
Covers wrongful termination, discrimination, harassment, and retaliation claims. Critical for scaling tech companies, California has the most employee-friendly employment laws in the U.S. and the highest volume of EPLI claims of any state.
⚠ CA Fact: California’s new AI-in-employment disclosure rules require employers to notify employees when AI is used in hiring or performance decisions, creating new EPLI exposure in 2026.
Required in California for any business with one or more employees, including remote workers. No exemptions for startups, small teams, or companies with primarily remote workforces. The mandate applies from your very first California-based hire.
⚠ CA Mandate: Penalties for non-compliance include fines up to $100,000 and stop-work orders. Remote workers with a California home office are fully covered under the mandate.
Foundational protection for third-party bodily injury, property damage, and personal/advertising injury. Required by most commercial leases and a baseline condition of most enterprise vendor agreements and government contracts.
⚠ Reminder: GL covers physical incidents, not software failures, data breaches, or client financial losses. Tech E&O and cyber are separate, required coverages that GL does not replace.
Requirements grow with headcount, customers and funding. The trigger is usually a document: a term sheet, an enterprise customer’s master service agreement or a new office lease.
Friends & family / bootstrapped · <$500K raised
General Liability (required for office lease)
Workers’ Comp (required from employee #1)
D&Ooptional but advisable
Tech E&Oif you have paying clients
Minimum viable coverage · Start before you sign a lease or hire
Institutional seed / angels · $500K–$5M raised
GL + Workers’ Comp
Tech E&O + CyberInvestor Required
D&OInvestor Required
EPLIadvisable at 5+ employees
Most VC term sheets include explicit D&O + E&O requirements before closing
Institutional VC · $5M–$25M raised
GL + Workers’ Comp (scaled limits)
Tech E&O + Cyber $2M–$5M: Required
D&O $3M–$5M: Required
EPLIRequired
Enterprise clients and board members both require higher limits at this stage
Growth / late stage · $25M+ raised
Full program + umbrella excess layers
D&O $5M–$15M+ with Side A coverage
Key Person / Fiduciary Liability
Affirmative AI endorsements reviewed at every renewal
Affirmative AI coverage review required, exclusions embedded in standard renewals
Berkley, Hamilton, and Verisk/ISO exclusion forms now affect policies at every funding stage. Standard renewals in Q1–Q2 2026 may arrive with new exclusion language already embedded. Review E&O, D&O, and cyber language before every renewal, not after a claim.
Between Jan 2025 and Jan 2026 the market bifurcated: governance = coverage, no governance = exclusion
AB 316 (Jan 2026) eliminates the “AI acted autonomously” defense. AB 325 bans algorithmic price-fixing. AB 489 restricts AI healthcare impersonation. SB 53 mandates frontier AI safety frameworks. Non-compliance with SB 53 carries penalties up to $1M per violation.
CA AB 316 effective Jan 1, 2026 · SB 53 penalties up to $1M per violation
Golden Benchmark works with Bay Area software, SaaS and AI companies that have enterprise customers, a board and several policies to coordinate. IT services firms, managed service providers (MSPs) and engineering firms: see insurance for IT services, engineering and consulting firms. Device makers: see hardware and device company insurance. Earlier stage: see what investors and enterprise contracts require.
Why Golden Benchmark vs. Online Platforms
Two of the largest startup insurance platforms were acquired by major corporations in 2021 and 2025. Golden Benchmark remains independently owned, with no acquisition pressure to push preferred carriers or standardized programs.
We actively review policy language for AI exclusions at every renewal, something algorithm-driven platforms don’t do. If a carrier adds an exclusion mid-term or at renewal, we catch it and find alternatives before you sign.
We place with Hartford, Travelers, Liberty Mutual, and Chubb, plus California surplus lines and specialty AI markets for complex risks. No single-carrier constraint, no algorithm deciding your coverage.
When you have a claim, you need someone who knows your business, not a queue. Every policy has a named broker who advocates for your payout from first notice to settlement.
We offer a no-pressure coverage review. Most AI policy gaps are found at renewal, find yours before that. It ends with a written summary of the gaps found.
Answers written for founders, not underwriters. Each answer reflects current California law and 2025–2026 insurance market conditions.
Does standard cyber insurance cover AI-related claims in California?
Not automatically: and increasingly not at all.
Major carriers including Berkley Insurance Group and Hamilton Insurance Group filed broad AI exclusions to standard E&O, D&O, and cyber policies in late 2025. Verisk’s ISO Form CG 40 47 01 26, effective January 2026, enables carriers to exclude generative AI claims from commercial general liability policies. Policies renewing in Q1–Q2 2026 are most likely to be first affected. Review your renewal documents before signing.
Harvard Law Forum on Corp. Gov. (Sept 2025) · Financial Times (Nov 2025) · Verisk/ISO Form CG 40 47 01 26 (Jan 2026)
When do California startups need D&O insurance: before or after funding?
Before.
Most VC term sheets include explicit D&O requirements, and investors often require coverage before closing to protect their board seats. Waiting until a VC requests it means shopping under time pressure. Private companies can face D&O claims from investors, creditors, customers, competitors and regulators. Listed companies also face securities class actions: Cornerstone Research counted 207 filings in 2025, including 16 AI-related federal filings.
D&O Diary (Feb 2026) · Embroker Tech Insurance Research (2025) · DLA Piper / Stanford Securities Class Action Clearinghouse (2025)
What does Tech E&O cover that general liability doesn’t?
General liability covers bodily injury and property damage: it does not cover client financial losses from software failures, bugs, outages, or missed SLAs.
Tech E&O covers exactly those scenarios: a client who loses revenue because your platform went down, or a customer whose data was corrupted by your product. For AI companies, E&O is also the primary line where AI exclusions are being added, making carrier and form selection critical at every renewal.
What is California AB 316 and how does it affect AI companies?
California AB 316, signed by Governor Newsom on October 13, 2025 and effective January 1, 2026, bars companies from using AI as a liability defense.
If your product or service causes harm, you cannot argue the AI acted autonomously and that therefore you are not responsible. This applies to developers, modifiers, and users of AI. Other defenses, causation, foreseeability, comparative fault, remain available. This significantly raises the stakes for every AI company operating in California or serving California customers.
CA AB 316 (eff. Jan 1, 2026) · EPIC California Tech Legislation Roundup (Oct 2025) · Perkins Coie (Oct 2025)
Do I need both cyber and Tech E&O, or can I bundle them?
Most California tech companies benefit from a bundled Tech E&O + Cyber policycovering third-party client losses from your product failures (E&O) and your own costs from data breaches or ransomware (cyber) in a single form.
Bundling simplifies renewal and typically reduces coverage gaps between policies. It also means only one set of AI exclusion language to review, important given the current market environment where exclusion language differs significantly by carrier and form.
Does workers’ comp apply to remote employees at California tech companies?
Yes: no exceptions.
California workers’ comp is mandatory for any business with one or more employees, including fully remote workers whose home office is in California. There are no exemptions for startups or small teams. Penalties for non-compliance include fines up to $100,000 and stop-work orders. The mandate applies from your first California-based hire, including part-time and contract-to-hire employees in many circumstances.
CA Labor Code ·3700 · WCIRB
What insurance do enterprise clients require before signing with a tech vendor?
Typically: Commercial General Liability ($1M–$2M per occurrence), Tech E&O / Cyber ($1M–$5M), and Workers’ Comp. Larger enterprise clients, especially in healthcare, finance, or government, often require $5M+ limits on Tech E&O and may request D&O as an additional condition.
Some enterprise procurement teams are now also asking for evidence of AI governance frameworks and explicit affirmative AI endorsements, a new requirement emerging in 2025–2026 as buyers become aware of the AI exclusion trend.
How does AI governance affect my ability to get insurance coverage in 2026?
Significantly. The 2025–2026 market bifurcation means: firms with documented AI governance frameworks may secure affirmative coverage; firms without evidence-based governance artifacts face absolute exclusions at renewal.
Carriers are now requiring AI disclosure questionnaires, model inventories, and governance protocols as part of underwriting. Companies that can demonstrate AI risk registers, output verification processes, and human oversight protocols are viewed as better risks and may negotiate narrower exclusions or affirmative endorsements.
Lexology / Hunton Andrews Kurth (Jan 2026) · Insurance Business Magazine (Dec 2025)
Send your current policies and the insurance section of your largest customer contract. A named broker reads them against each other and tells you what to change before renewal.
Burlingame office: (650) 417-9877 · Fremont office: (510) 818-9877 · CA Lic #0D06566 · Broker experience since 1988 · Reviewed October 2026 by Emmi Ensign, CEO and licensed California broker
