Commercial Insurance for Small and Mid-Sized Businesses

How a Business Owners Policy Differs from Standalone Policies

A Business Owners Policy bundles commercial property and general liability into one pre-packaged form, usually with business income and extra expense included rather than sold as an add-on. For an eligible business it is typically the cleanest and most cost-effective way to cover the two most fundamental exposures at once, and it is where most small businesses should start.

The meaningful difference is not the bundling, it is the flexibility. A BOP is a program product with set terms and limited room to adjust individual pieces. A commercial package policy keeps property and liability as separate coverage parts, each with its own limits, deductibles, valuation basis, and endorsements. That separation is what you want once your property values become specific or your operations get complicated: different deductibles by location, blanket or agreed-value property limits, scheduled inland marine coverage for tools and mobile equipment, equipment breakdown, spoilage coverage for refrigerated stock, and scheduled signage.

Businesses typically outgrow BOP eligibility rather than choose to leave it. Revenue or square footage above program thresholds, higher-hazard operations such as large-scale cooking or heavy manufacturing, a significant products and completed-operations exposure, work performed in many states, or a habitational component in the building will all push a risk toward a package policy or toward specialty markets.

The most important thing to understand about a BOP is what it leaves out. It is a foundation, not a finished program, and the lines it omits are the ones that produce the largest claims for many businesses.

• Typically bundled in a BOP: buildings and business personal property, tenant improvements, general liability, and business income with extra expense.
• Typically not included: workers' compensation, commercial auto, professional liability, and standalone cyber, EPLI, or crime coverage, though some carriers offer these by endorsement with modest sublimits that may not be sufficient on their own.
• Common reasons a business is not BOP-eligible: revenue or building size above program limits, higher-hazard classes, heavy contracting or manufacturing exposure, multiple states of operation, or residential units in the building.
• On a package policy, property and liability can be tuned independently, which matters once you need location-specific deductibles, blanket limits, or specialized property forms.
• Watch the property valuation basis and coinsurance. Insuring a building for less than its replacement cost can reduce what is paid on a partial loss, not only on a total loss.

how a Business Owners Policy is structured · commercial property coverage in detail · what general liability does and does not cover · coverage for small businesses generally

What Underwriters Actually Look At

Underwriting comes down to three questions: what is the exposure, what controls reduce it, and what has actually happened. Applications feel long because underwriters are trying to answer those three questions for a business they will never visit. Knowing what they are asking about lets you present your operation accurately, and often lets you fix something inexpensive before it costs you eligibility.

Nearly every commercial submission opens with the basics of the operation: legal entity name and structure, any subsidiaries or affiliated entities and the ownership percentage of each, a description of the products and services you provide, years in business under current name and management, and years of industry experience your leadership holds. Underwriters ask directly whether ownership or management changed in the past twelve months and whether you plan to add or discontinue products or services, because both change the risk they are being asked to price. Professional licenses, certifications, and accreditations come next, along with a pointed question about whether any of them has ever been revoked, suspended, or canceled.

For property, the questions get physical and specific. Underwriters want year built, construction type, number of stories, total and occupied square footage, roof material with the year it was last replaced and when a licensed contractor last inspected it, the year the electrical wiring and circuit panel were last updated, whether the building has aluminum wiring, knob-and-tube, fuses, or certain older panel types, when the plumbing and HVAC were last updated, distance to the nearest hydrant and fire station, sprinkler coverage, and alarm systems. Where there is cooking on premises they will ask about hood suppression systems, automatic fuel shut-offs, grease extractors, and how often the hood and duct system is professionally cleaned.

For liability and workers' compensation, the focus shifts to people and process. Payroll by category, annual gross receipts with a forward projection, employee counts and turnover, whether a written safety program exists and is acknowledged by employees, whether there is a formal accident investigation process and a return-to-work program, and the extent of training for the specific hazards of your trade. Where subcontractors are used, underwriters ask about written contracts, hold-harmless and indemnification provisions with a separate defense obligation, minimum limits required of subs, and whether you obtain certificates and additional insured endorsements before work begins and keep those records.

Anything involving vehicles brings its own set: whether motor vehicle records are pulled at hire and monitored afterward, whether drug testing is required, whether driver training is provided, whether there is a vehicle maintenance program, whether written rules govern cell phone use while driving, and how many employees use personal vehicles for business and whether you verify their personal auto insurance at renewal.

Employment practices underwriting is largely a documentation audit: written employment applications, a current employee handbook with equal employment opportunity and anti-harassment policies, documented performance evaluations and reprimands in individual personnel files, periodic review of policies by employment counsel, when exempt and non-exempt classifications were last reviewed against wage and hour law, when independent contractor classifications were last confirmed, and whether any reduction in force has occurred or is planned. Cyber underwriting has become similarly control-driven, and a small number of answers now largely determine eligibility rather than price.

Finally, every submission ends with loss history and disclosure. Expect to provide about five years of loss runs, to disclose any prior cancellation or non-renewal, and to answer whether anyone in the organization is aware of any fact, circumstance, or situation that could give rise to a claim. Treat that last question with care. It functions as a warranty, and an inaccurate answer can jeopardize coverage for the very claim you were worried about.

• Operations: entity structure and affiliates, description of services, years in business and management experience, recent ownership changes, planned new or discontinued services, and licensing or accreditation history.
• Exposure size: payroll by class including seasonal and temporary labor, annual receipts for the past year and projected for the next twelve months, employee counts, turnover, and total cost of subcontracted work.
• Property condition: age and construction, roof age and last inspection, electrical and panel updates, plumbing and HVAC updates, protection class, sprinklers, and alarms.
• Risk transfer: written subcontracts, hold-harmless and indemnification language, minimum limits required of subs, and whether certificates and additional insured endorsements are collected before work starts and retained.
• Fleet controls: motor vehicle record checks at hire and periodically, driver training, maintenance programs, distracted driving policies, and verification of personal auto coverage for employees who drive their own vehicles.
• Employment practices: handbook, written applications, documented evaluations and discipline, counsel review of policies, wage and hour and contractor classification reviews, and any planned reduction in force.
• Cyber controls: multi-factor authentication on remote access, webmail, and privileged accounts; endpoint detection and response; daily backups kept segregated or offline and tested for integrity; a defined patch cadence for critical vulnerabilities; restricted or disabled remote desktop protocol; email filtering and macro blocking; a written incident response plan; and security awareness training.
• Loss history: roughly five years of loss runs, any prior cancellation or non-renewal, and disclosure of known circumstances that could become claims.

how contractors are underwritten · manufacturing operations · restaurant and hospitality risks · cyber controls and coverage

Documents to Have Ready Before You Ask for a Quote

Preliminary indications can be produced from basic information, but a firm, bindable quote generally requires paper. Gathering the following before you start is the single most effective way to compress the process, and one item in particular should be requested first because it depends on someone else.

Order your loss runs today. They come from your current and prior carriers, usually through your existing agent, and they often take several business days to arrive. Nearly every market will ask for about five years, and a submission without them is frequently set aside rather than declined, which quietly costs you weeks.

• Legal entity name exactly as registered, plus any subsidiaries or affiliated entities to be named, with ownership percentages; mailing and physical addresses; federal tax ID; and the date you want coverage to take effect.
• Declarations pages for every policy currently in force, showing limits and deductibles: general liability, property, auto, umbrella or excess, workers' compensation, and any professional or cyber coverage.
• Loss runs covering approximately five years, from current and prior carriers. Request these first.
• Payroll broken out by type of work, separating owners and officers, field or production employees, clerical staff, and any casual, leased, seasonal, or temporary labor.
• Annual gross receipts for the past year and a good-faith projection for the next twelve months.
• Employee counts, full time and part time, annual turnover, and your current workers' compensation experience modification factor if one has been issued.
• A vehicle schedule with year, make, model, VIN, garaging location, and use, plus a driver list with license numbers and dates of birth.
• Property detail for each location: year built, construction type, square footage total and occupied, number of stories, roof age and material, and the dates of the most recent electrical, plumbing, and HVAC updates. A recent appraisal or replacement cost estimate helps support building limits.
• A schedule of equipment with values, particularly mobile or specialized equipment used away from your premises.
• Total cost of subcontracted work for the past year, a sample subcontract, and a description of how you track certificates and additional insured endorsements.
• Your employee handbook and written anti-harassment and anti-discrimination policies, which are commonly requested for employment practices coverage.
• Your written safety program, training records, and any recent regulatory citations, which matter for both workers' compensation and general liability.
• For cyber: approximate counts of customer and employee records containing sensitive data, and accurate answers on multi-factor authentication, backups, and endpoint protection.
• Copies of customer or landlord contracts that specify insurance requirements, including required limits, additional insured status, and waiver of subrogation language.
• Recent financial statements, which are often requested for professional liability, directors and officers, and larger property or fleet accounts.

start a commercial quote · talk through your operation with us · how to choose the right coverage

Certificates of Insurance, Additional Insured Status, and Waivers of Subrogation

This is the part of commercial insurance that businesses deal with weekly, and it is the part most often misunderstood. A certificate of insurance is evidence of coverage. It is a snapshot of what was in force on the day it was issued, and by its own terms it confers no rights and does not amend the policy. A certificate that lists someone as an additional insured does not make them one. Only an endorsement attached to the policy can do that. When a dispute arises after a loss, the certificate is not what gets read; the policy and its endorsements are.

Additional insured status extends your liability policy to protect another party, typically a customer, landlord, general contractor, or municipality, for liability arising out of your work. Two variations matter enormously. Coverage for ongoing operations applies while the job is in progress. Coverage for completed operations applies after the work is finished, which is exactly when construction defect and product claims tend to surface. Many contracts require both, and a form that provides only ongoing operations quietly fails the requirement. Contracts also frequently require that your coverage apply on a primary and non-contributory basis, meaning your policy responds first and does not ask the other party's insurer to share. That is a separate endorsement consideration from additional insured status itself.

A waiver of subrogation gives up your insurer's right to pursue recovery from the other party after paying a claim. It generally requires an endorsement, is applied per policy line, and often carries additional premium. Workers' compensation waivers are handled separately from general liability waivers, and because workers' compensation is regulated at the state level, availability and treatment vary by state.

Underneath all of this sits the hold harmless or indemnification clause, which is a contractual obligation you take on rather than an insurance term. General liability policies typically provide some coverage for liability assumed under an insured contract, but many states have anti-indemnity statutes that limit how far one party can be required to indemnify another for that party's own negligence, particularly in construction. Because those statutes differ, contract language should be reviewed by counsel for every state where you perform work.

The practical advice is simple and almost never followed: read the insurance requirements exhibit before you sign, and send it to your agent while you can still negotiate. Requirements that are impossible, unavailable for your class, or expensive are far easier to address before signature than after you have committed. A common example is a contract demanding additional insured status on a professional liability policy, which is generally not how those policies are written and is usually a point to negotiate rather than a request to fulfill.

The mirror image applies when you are the one hiring. Collect certificates and the actual additional insured endorsements from every subcontractor before they set foot on the job, require limits at least equal to what your own contracts demand of you, and retain those records. At audit, the cost of subcontractors for whom you cannot produce evidence of insurance is commonly treated as your own payroll or cost and charged accordingly, which turns a filing habit into a real number on an invoice.

• A certificate evidences coverage; it does not create, extend, or amend it. Endorsements are what change a policy.
• Additional insured status should match the contract, including completed operations when the contract requires it.
• Primary and non-contributory is a distinct contractual requirement, separate from being named as an additional insured.
• Waivers of subrogation are endorsed per line of coverage, may carry premium, and are subject to state rules, especially on workers' compensation.
• Professional liability is generally not written with additional insured status; if a contract demands it, raise it before signing.
• Collect subcontractor certificates and endorsements before work begins and keep them, because uninsured subcontractor cost is routinely picked up as additional premium at audit.
• Keep your certificate holder list current. Certificates issued to former customers are often still being relied upon, and renewal certificates should go only to parties with a current contractual interest.
• Send contract insurance requirements to your agent during negotiation, not after signature.

general liability and contractual requirements · meeting higher contract limits with umbrella coverage · insurance for contractors and trades · the contractors insurance guide

The Claims Businesses Actually File

Coverage discussions become concrete when you look at what actually goes wrong. The following are the loss patterns that show up repeatedly across commercial accounts. None of them are exotic, and that is the point: the ordinary claims are the ones worth insuring against, because they are the ones that happen.

Two patterns deserve particular attention because they surprise people. First, water causes more property loss for many businesses than fire does, and a failed supply line above a finished space on a weekend can damage far more than the plumbing repair suggests. Second, the largest liability verdicts against small businesses frequently involve vehicles rather than premises, often a vehicle the business does not own being driven by an employee on a routine errand.

• Slip, trip, and fall claims by customers and visitors, on premises and in parking lots, which is the most common general liability claim for retail, restaurant, and office operations.
• Property damage caused by your crew at a customer's location, from broken glass and damaged flooring to a struck utility line during excavation.
• Water damage from burst or failed supply lines, roof leaks, and sewer backup, followed by the business income loss while the space is unusable.
• Fire, particularly where cooking equipment, hot work, or older electrical systems are present.
• Auto liability arising from an employee running an errand in a personal vehicle, an exposure that hired and non-owned auto coverage is designed to address.
• Employee injuries from lifting and material handling, falls from ladders and elevated work, cuts, and repetitive motion, which drive most workers' compensation costs.
• Discrimination, harassment, retaliation, and wrongful termination claims, which frequently follow a termination or a reduction in force and generate defense costs regardless of outcome.
• Ransomware and business email compromise, including funds transfer fraud triggered by a spoofed instruction to change payment details.
• Employee theft of money, inventory, or funds, and forgery or alteration of instruments, which commercial property policies generally exclude.
• Professional liability claims alleging that delivered work was defective, late, or wrong, brought by clients seeking economic damages rather than injury damages.
• Products and completed operations claims that arrive months or years after the work was finished or the product was sold.

general liability explained · cyber exposure for small businesses and nonprofits · workers' compensation basics · commercial crime coverage

How the Program Changes by Industry

The ten lines above are the vocabulary, but the sentence differs by trade. A restaurant's program is driven by cooking equipment, hood suppression, liquor liability where alcohol is served, and delivery vehicles. A contractor's program is driven by payroll, subcontractor risk transfer, elevated work, completed operations, and the insurance requirements written into every job contract. A technology firm's program is driven by client contract terms, professional liability with the right retroactive date, and cyber controls. A manufacturer's program is driven by products liability, property values, and equipment breakdown.

Because appetite varies by class, the practical work of an independent agency is matching an operation to the markets that write it well. Supplemental applications exist for exactly this reason, and the questions in a restaurant supplement look almost nothing like those in a technology or accounting supplement. If your industry appears below, the corresponding page goes deeper on the exposures and coverage decisions specific to it.

Restaurants and hospitality · Retail businesses · Contractors and trades · Manufacturing · Technology companies · Auto dealers and garage operations · Real estate businesses · Professional services firms · the professional services insurance guide · browse all industries we serve

How to Start and What to Expect

The process is more predictable than most people expect, and the timeline is driven almost entirely by how quickly documents come together. A straightforward small business with clean losses can often be quoted within a few business days once the paperwork is in hand. A larger account, a tough class, or a submission with open claims may take two to four weeks, and complicated risks that require specialty markets can take longer. Starting sixty to ninety days before your renewal date is the difference between choosing a program and accepting whatever arrives.

It begins with a conversation about what you actually do, because the class of business assigned to your operation drives eligibility, rating, and which markets will look at it. From there we identify the applications required, typically a general commercial application plus the supplemental forms specific to your class, and the supporting documents listed above. We then approach carriers whose appetite fits the risk. Because we are independent, that means presenting your operation to more than one market rather than fitting it into a single company's box.

When quotes come back, the comparison is not just a number. Limits, deductibles and retentions, whether defense costs sit inside or outside the limit, the retroactive date on any claims-made policy, exclusions specific to your operation, and the ability to meet your contractual requirements all determine whether a quote is genuinely comparable. We walk through those differences with you rather than presenting a single line of pricing, and no agency can guarantee that a particular carrier will offer terms or that any specific claim will be covered, since coverage always depends on the policy language and the facts of the loss.

After binding, certificates of insurance can usually be issued quickly, which matters if a job or a lease is waiting. Keep two things in mind for the policy term. Many commercial policies, particularly general liability and workers' compensation, are auditable: the premium you pay up front is an estimate based on projected payroll or receipts, and it is adjusted after the term to reflect actual figures. Budget for that adjustment rather than being surprised by it. And report changes as they happen rather than at renewal, including new vehicles, new locations, work in a new state, new services, acquisitions, and significant changes in payroll or receipts. Coverage gaps most often appear in the space between what a policy was written to cover and what the business quietly started doing.

• Start sixty to ninety days before renewal, and request loss runs on day one.
• Expect a general commercial application plus supplemental applications specific to your class of business.
• Compare limits, retentions, defense cost treatment, retroactive dates, and exclusions, not price alone.
• Confirm before binding that the program satisfies the insurance requirements in your customer and lease contracts.
• Plan for premium audit on auditable lines, and keep subcontractor certificates on file to avoid additional charges.
• Report material changes mid-term: new locations, new states, new vehicles, new services, and payroll or revenue swings.

request a commercial insurance quote · contact our team · explore all coverage lines · nonprofit organizations start here instead

Frequently asked questions

What coverage does a business actually need to start with?

For most small businesses the foundation is general liability and commercial property, which are commonly packaged together in a Business Owners Policy, plus workers' compensation once you have employees. From there, the additions are driven by what you do: commercial auto or hired and non-owned auto if anyone drives for the business, professional liability if you provide advice or services to clients, cyber if you hold sensitive data or rely on your systems to operate, and employment practices liability as your headcount grows. Your contracts often decide the rest, since customers and landlords frequently specify both the lines and the limits you must carry.

What is the difference between occurrence and claims-made coverage?

An occurrence policy responds to incidents that happen during the policy period, regardless of when the claim is reported, so a policy in force in one year can still respond years later to an injury that occurred then. General liability is typically written on an occurrence basis. A claims-made policy responds only to claims first made against you while the policy is in force, and only for wrongful acts occurring on or after the retroactive date. Professional liability, cyber, employment practices liability, and directors and officers coverage are usually claims-made. The practical consequence is that claims-made policies must be maintained continuously, or replaced with the retroactive date preserved, to keep protecting your past work.

Do I need workers' compensation if I only have one or two employees, or if I use 1099 contractors?

It depends on your state, and the differences are significant. Most states require coverage once you have employees, but the employee-count threshold, whether owners and officers can be excluded, how family members are treated, and whether coverage must be purchased through a state fund all vary. Independent contractor status is not a reliable exemption either: many states apply their own tests, and if a worker is later reclassified as an employee, the obligation typically follows. Separately, if you hire subcontractors who do not carry their own coverage, their cost is frequently added to your payroll at audit. The safe approach is to confirm the rules for every state where you have workers rather than assuming a familiar rule applies.

Does general liability cover damage to my own work?

Generally not. General liability policies typically exclude damage to your own work or your own product, which is why a contractor who installs a roof incorrectly usually cannot look to general liability to pay for tearing it off and redoing it. What the policy is designed to address is the resulting damage to other property, such as the water damage inside the building caused by that faulty roof, subject to the policy terms and any applicable exclusions. The distinction between the cost of fixing your work and the damage your work caused is one of the most common sources of surprise in construction and trade claims, and it is worth understanding before a loss rather than after.

My business owns no vehicles. Do I still need commercial auto coverage?

Very likely yes, in the form of hired and non-owned auto liability. If employees drive their own vehicles for any business purpose, including bank deposits, supply runs, client visits, deliveries, or travel between job sites, the business can be held liable for an accident even though it does not own the vehicle. Personal auto policies commonly limit or exclude business use, and general liability does not respond to auto claims. Hired and non-owned auto liability is usually inexpensive relative to the exposure and is frequently added to a package or Business Owners Policy. Underwriters will typically want to know whether you check motor vehicle records and verify that those employees carry their own auto insurance.

Does my commercial property policy cover flood or earthquake?

Standard commercial property forms typically exclude flood and earthquake. Both are generally covered through separate policies or specific endorsements, and availability and terms depend on location and the characteristics of the building. It is also worth checking how your policy treats sewer and drain backup, which is a distinct exclusion from flood and is often added back by endorsement, and how surface water is defined, since water entering a building at ground level may be treated as flood even without a nearby body of water. If you are in an area with meaningful exposure to either peril, it should be an explicit conversation rather than an assumption.

A customer's contract requires higher limits and additional insured status than I currently carry. What should I do?

Send the insurance requirements to your agent before you sign, while the terms are still negotiable. Higher total limits are usually addressed by adding an umbrella or excess liability policy above your existing coverage rather than replacing the underlying policies. Additional insured status is added by endorsement to your liability policy, and you should confirm whether the contract requires completed operations as well as ongoing operations, and whether it requires your coverage to be primary and non-contributory. Some requirements cannot be met as written, such as additional insured status on a professional liability policy, and those are far easier to negotiate before signature than to explain after a loss.

Why did I receive an additional bill after my policy expired?

That is almost certainly a premium audit. General liability and workers' compensation are commonly auditable lines, meaning the premium charged at inception is an estimate based on projected payroll or gross receipts, and it is adjusted at the end of the term against actual figures. If your payroll or revenue grew during the year, additional premium is due; if it shrank, a return is possible. Two things reduce unpleasant surprises: give a realistic projection at the outset rather than a conservative one, and keep certificates of insurance for every subcontractor, since uninsured subcontractor cost is frequently added to your own exposure basis at audit.

Is cyber insurance worth it if we do not store credit card numbers?

Card data is only one exposure, and often not the largest. Most cyber claims for small businesses involve ransomware that halts operations or funds transfer fraud triggered by a convincing fake email, neither of which requires you to hold payment card data. Cyber policies typically fund the response itself, including forensics, legal counsel, notification, data restoration, and lost income while systems are down, which is the part businesses cannot easily absorb. Note that eligibility now depends heavily on controls: multi-factor authentication on remote access and email, tested backups kept offline or segregated, and endpoint detection are commonly expected before a quote will be offered at all.

What is a retroactive date, and why does it matter when I switch professional liability carriers?

On a claims-made policy, the retroactive date is the earliest date of work for which a claim will be covered. Work performed before that date is excluded, even if the claim arrives while your policy is active. When you change carriers, the goal is to have the new policy pick up your original retroactive date, known as maintaining prior acts coverage. If a new policy is issued with a current retroactive date, everything you did before that day becomes uninsured, which can be a serious gap for firms whose work surfaces problems years later. If continuous coverage is not possible, or if you are closing or selling the business, an extended reporting period, often called tail coverage, is the alternative and should be discussed before the old policy lapses.

We are privately held with no outside investors. Do we need directors and officers coverage?

It is worth evaluating rather than dismissing. Directors and officers liability is not limited to public companies, and privately held businesses face management liability claims from minority shareholders, lenders, competitors alleging unfair practices, regulators, and sometimes acquirers during a transaction. The exposure is personal as well as corporate, since claims are typically brought against the individuals. Companies that have taken any outside investment, have a formal board, are contemplating a sale, or want to recruit outside directors should look closely. If your business sponsors a retirement or health plan, fiduciary liability is a related but distinct exposure that neither directors and officers nor employment practices coverage addresses.

How long does it take to get commercial insurance in place?

For a straightforward small business with clean loss history and documents ready, quotes can often be produced within a few business days and coverage bound quickly after that, with certificates issued shortly afterward. Larger accounts, higher-hazard classes, open claims, or risks that require specialty markets commonly take two to four weeks or more. The bottleneck is almost always documentation, and specifically loss runs, which have to come from your current carrier and can take several days. If you are approaching a renewal, starting sixty to ninety days out gives enough room to market the account properly and to address any contract requirements before your existing coverage expires.

Explore related coverage