Skip to main content

Nonprofit Insurance: What Your Organization Needs, and What Underwriters Look For

Nonprofits carry a mix of exposures that does not map neatly onto a standard small-business policy. In a single organization you may run programs for children, operate a facility open to the public, depend on volunteer drivers, hold restricted donor funds, employ clinical or licensed staff, and be governed by a volunteer board whose members can be named personally in a lawsuit. Insuring a nonprofit is therefore less about buying one policy than about assembling a program in which each part answers a different way things can go wrong.

This page covers the coverages nonprofits typically buy, what each one actually does and does not do, the exposures that most often turn into claims, and what underwriters ask before they will quote. That last part deserves attention. The quality of your answers about screening, supervision, financial controls, and loss history usually shapes what you are offered more than the size of your budget does. BluePeak Digital is an independent insurance agency based in Kansas City, working with nonprofits and businesses in Missouri, and in other states where we are licensed and appointed, and the underwriting detail below reflects the supplemental applications nonprofit organizations are actually asked to complete.

Before you compare quotes

What insurance should a Missouri nonprofit review first?

Start with what the nonprofit actually does: programs, board decisions, employees, volunteers, property, vehicles and sensitive information. These risks need different coverage decisions. A general liability policy alone does not establish that your board, professional services or cyber losses are covered. BluePeak helps Missouri nonprofits compare the policy forms against their operations and contracts.

BluePeak Digital Insurance Agency · Updated · Licensing and agency details

Board decisions and governance allegations

Check who is insured, which organizational claims qualify, and how defense expenses affect the available limit.

Directors and officers liability

Advice, counseling or other professional services

Identify the exact services and people insured. A program description and staff qualifications help expose a mismatch.

Professional liability

Donor or client information and a network interruption

Compare incident response and recovery coverage with liability protection for claims made by others.

Cyber insurance

Bring these to your coverage review

  1. Current policies, declarations and endorsements, plus renewal dates.
  2. Program list, participants served, events, locations and transportation activities.
  3. Budget, payroll, volunteer roles and recent loss runs.
  4. Lease, grant and service-contract insurance requirements.

A review example

A nonprofit adds a counseling program and begins storing client records online. A useful review checks both the professional services description and the cyber coverage. Increasing the general liability limit alone does not answer either question. This is an illustrative review, not a client claim or a coverage determination.

Coverage depends on the policy, endorsements and facts of a loss. These questions help prepare a review; they do not confirm coverage or a premium.

Sources and further reading

A working tool for your next renewal

Nonprofit insurance quote comparison worksheet

Use the same program description for each proposal. Record the answer, the policy form or endorsement and its page number. Mark missing information as an open question before comparing price.

BluePeak Digital Insurance Agency · Updated

Download the blank comparison worksheet (CSV)

Open in Excel, Google Sheets or another spreadsheet. No signup required.

How to compare proposals

  1. List your programs, participants, locations, staff, volunteers, vehicles and data. Note any changes planned during the policy term.
  2. Ask for the proposed forms and endorsements. A coverage name, quote summary or certificate alone does not settle these questions.
  3. Complete one column for each proposal. Ask the producer to explain differences and identify any answer that still needs insurer confirmation.
  4. Record the decision, unresolved questions and follow-up owner. Revisit the worksheet when operations or policies change.
Questions and evidence to compare across nonprofit insurance proposals
Review areaQuestion to resolveEvidence to request
Organization and activitiesDo the named insured and described operations match the legal entity, programs and locations?Named-insured schedule, application and relevant endorsements.
People performing the workHow do the relevant forms define insured employees, directors, volunteers and other workers?Each coverage form’s definition of insured and any amendments.
Board and management decisionsIs the organization insured as well as directors and officers? Which management allegations are addressed?D&O insuring agreements, insured-person/entity definitions and exclusions.
Employment practicesIs employment practices coverage included or separate, and does it share a limit with D&O?EPLI form, declarations and shared-limit endorsements.
Professional servicesAre the actual advice, counseling or other professional services described and considered?Professional services definition, exclusions and any scheduled services.
Defense and limitsDo defense expenses reduce a limit? Who selects counsel, and what consent requirements apply?Defense provisions, limit wording, deductible or retention and sublimits.
Past work and claim reportingFor claims-made coverage, what dates and reporting deadlines apply, including when replacing a policy?Retroactive or prior-acts provisions, notice conditions and extended-reporting options.
Cyber incident responseWhich response services, recovery costs and third-party claims are addressed? How are vendors treated?Cyber coverage forms, vendor provisions, sublimits and incident contact instructions.
Program-specific exclusionsDo any exclusions or conditions conflict with participant services, special events or transportation?Full exclusion and endorsement list, checked against the operations description.
Contracts and final termsWhich lease, grant or service-contract requirements remain unresolved, and what terms could change before binding?Contracts, required endorsements, final quote, premium, fees and binding conditions.

This is an original BluePeak preparation worksheet, not an insurer form or a coverage recommendation. Policy wording, endorsements and the facts of a loss govern coverage. Complete it with a licensed producer; do not enter client names, claim details or other sensitive information into a publicly shared copy.

Background sources

These explain selected coverage concepts. They do not endorse BluePeak or determine another insurer’s coverage.

The coverages most nonprofits are evaluated for

General Liability

Responds to third-party claims alleging bodily injury, property damage, or personal and advertising injury arising out of your premises and operations — a visitor hurt at your facility, damage you cause to a space you occupy, or an allegation such as libel, slander or wrongful eviction. On most forms, defense costs are paid in addition to the limit, subject to policy terms.

A nonprofit's space is usually open to clients, volunteers, donors, and the general public, and most current commercial general liability forms extend insured status to volunteer workers acting on the organization's behalf. It is also the policy landlords, funders, and venues most often ask you to evidence before you can sign or occupy.

More on General Liability

Commercial Property

Covers direct physical loss to buildings you own and the contents you use, from causes such as fire, wind, sudden water damage such as a burst pipe, and theft, subject to the perils and exclusions in the form. Flood and other excluded perils require separate coverage. Business income and extra expense coverage can be added to keep the organization funded while you recover.

Nonprofits frequently occupy older, donated, or repurposed buildings, and rebuilding after a loss can trigger current building codes that the original structure never met. How the building is valued and how much business income coverage you carry often determines whether a fire means a pause in programs or the end of them.

More on Commercial Property

Business Personal Property

Covers the contents you own or are responsible for: program equipment, computers, furniture, donated goods and inventory, and tenant improvements you paid for in a leased space. In most cases this is not a separate policy at all. It is a limit inside your commercial property or package policy, which is why it is described here alongside property rather than on its own.

Organizations routinely under-report contents values because donated items and program inventory, such as food pantry stock, clothing, instruments, or medical supplies, never appear in the budget as purchases. Equipment that regularly leaves the building for programs or events often belongs on an inland marine schedule instead, where it is covered off-premises.

More on Business Personal Property

Workers' Compensation

Pays medical treatment and lost wages for employees injured in the course of employment, and includes an employers liability part that responds to related suits. In most states it operates as the exclusive remedy for a covered workplace injury.

Requirements vary by state, including the employee count that triggers a mandate, whether officers or directors may be excluded, and how part-time, seasonal, or household staff are treated, so the answer for a nonprofit in one state may not hold in another. Volunteers are generally not employees for workers' compensation purposes, so a volunteer injury usually is not a comp claim; organizations that want that gap addressed often look at volunteer accident coverage separately.

More on Workers' Compensation

Commercial Auto / Hired & Non-Owned Auto

Commercial auto covers vehicles the organization owns or leases, including liability, physical damage, and coverage for occupants. Hired and non-owned auto liability responds when someone drives a rented vehicle, or their own car, on the organization's behalf and causes injury or damage to others.

Most nonprofits without a van still have staff and volunteers driving personal cars to deliver meals, run errands, or transport participants. The driver's own auto policy generally responds first, and hired and non-owned coverage protects the organization, which is who a plaintiff will name regardless of whose car it was. It typically does not pay to repair the volunteer's own vehicle.

More on Commercial Auto / Hired & Non-Owned Auto

Directors & Officers

Covers claims alleging wrongful acts in the governance and management of the organization, including breach of duty, mismanagement, misapplication of restricted funds, conflicts of interest, and failure to supervise. Coverage usually extends to the entity itself as well as to individual directors, officers, employees, and often volunteers, and it pays defense costs.

Nonprofit boards are staffed by volunteers whose personal assets can be drawn into a dispute, and an indemnification clause in your bylaws is only as good as the organization's ability to fund it. Coverage is typically written on a claims-made basis, so continuity of coverage and the retroactive date can matter as much as the limit you select.

More on Directors & Officers

Employment Practices Liability

Responds to employment-related allegations brought by employees, former employees, and applicants, including discrimination, harassment, wrongful termination, retaliation, and failure to promote or accommodate, and it pays defense costs. Third-party coverage, addressing harassment or discrimination claims brought by clients or volunteers, is sometimes available by endorsement.

In practice, employment disputes are one of the more common reasons a nonprofit's management liability program gets used, and mission-driven organizations are not exempt from them. Wage and hour allegations are usually treated differently from discrimination claims, often excluded or narrowed to a defense-only sublimit, which makes employee classification worth reviewing on its own.

More on Employment Practices Liability

Professional Liability (E&O)

Covers claims arising from the professional services your organization renders, such as counseling, case management, placement services, education, advisory work, or clinical care, where the allegation is that the service was performed negligently rather than that someone was physically hurt on your premises.

General liability forms typically exclude liability arising out of the rendering of professional services, which is precisely what most human services, mental health, and education nonprofits do every day. If you employ or contract licensed clinicians, underwriters will also want to know whether each practitioner carries their own malpractice coverage and at what limits.

More on Professional Liability (E&O)

Abuse & Molestation

Responds to allegations of physical, sexual, or mental abuse of someone in your care, and pays defense costs. It is frequently written as a sublimited endorsement, a distinct coverage part, or a standalone claims-made policy rather than being fully embedded in general liability.

Any organization that serves minors, elderly participants, or vulnerable adults has this exposure, and standard liability forms often exclude or sharply limit it. This is also the coverage where underwriter questions are most specific: screening of staff, volunteers, and contractors, two-adult supervision rules, documented training, and reporting procedures directly shape what is offered and on what terms.

More on Abuse & Molestation

Cyber

Covers costs following a network intrusion, ransomware event, or privacy breach, typically including forensic investigation, legal counsel, notification, credit monitoring, business interruption, extortion response, and liability to affected individuals. Funds transfer fraud and social engineering losses are commonly addressed by sublimit.

Nonprofits hold precisely the data attackers want: donor payment information, employee records, and, in health and human services, protected health information. The common loss is often not a dramatic breach but a spoofed email that redirects a grant disbursement or a vendor payment to a fraudulent account, which is why the sublimits deserve a close read.

More on Cyber

Crime / Fidelity

Covers loss of money, securities, and other property from employee dishonesty, forgery or alteration, theft, and, in most forms, computer fraud and funds transfer fraud. It is first-party coverage, meaning it pays your organization's own loss rather than a third party's.

Nonprofits frequently run lean finance functions in which one person receives, deposits, and reconciles funds, and grant and donor money moves through accounts with limited separation of duties. Crime forms also define who counts as an employee, so if you want volunteers or board members included, that generally has to be added rather than assumed.

More on Crime / Fidelity

Umbrella / Excess Liability

Provides additional limits above scheduled underlying policies, most often general liability, auto liability, and employers liability, and typically follows the terms of those underlying forms.

Funders, municipalities, school districts, and landlords increasingly require limits above what a primary policy carries, and a single serious loss such as a transportation accident with participants aboard can exhaust a primary limit quickly. Note that abuse, professional, and management liability are not automatically picked up by an umbrella; where the market allows it, they have to be specifically scheduled underneath.

More on Umbrella / Excess Liability

How nonprofit coverage is usually put together

Smaller nonprofits are often written on a package or business owners policy that combines general liability and property into a single contract, sometimes with crime and inland marine folded in. Larger or more program-heavy organizations tend to end up with a package plus separate policies for workers' compensation, auto, management liability, abuse, professional liability, cyber, and umbrella. Neither structure is inherently better. What matters is that every real exposure lands somewhere on purpose rather than by accident.

It helps to think of your program in three layers. The first is what nearly every organization with a location and a payroll needs. The second is driven by what your programs actually do, which is where abuse, professional liability, and auto exposures enter. The third is driven by contracts, because funders, landlords, and partner agencies impose limit and additional-insured requirements that may exceed what you would otherwise buy. Reviewing those three layers each year is usually more productive than shopping the same policy repeatedly.

  • Foundation layer: general liability, property and business personal property, workers' compensation where required, and crime.
  • Program layer: abuse and molestation, professional liability, commercial or hired and non-owned auto, and coverage for events and off-site activities.
  • Governance layer: directors and officers, employment practices, fiduciary liability where you sponsor a benefit plan, and cyber.
  • Contract layer: umbrella or excess limits, additional insured status, and waivers of subrogation required by leases, grants, and partner agreements.

how a packaged business owners policy works · browse all coverage lines · a practical coverage checklist for nonprofits

Volunteers: what is covered, and what is not

Volunteers create a coverage question in two directions, and they are answered by different policies. When a volunteer causes harm to someone else while working on your behalf, most current general liability forms treat volunteer workers as insureds, so the organization and the volunteer generally have liability protection. When the volunteer is the one who gets hurt, the answer is usually less comfortable. Volunteers are generally not employees for workers' compensation purposes in most states, so a sprained ankle at a build day is typically not a comp claim, and it is not a general liability claim either unless the organization is alleged to have been negligent. Organizations that want a predictable answer here often add volunteer accident coverage, which pays medical expenses on a stated basis without requiring anyone to prove fault.

Driving is the volunteer exposure that most often produces a serious claim. If a volunteer drives their own car to deliver meals or transport a participant and causes an accident, their personal auto policy generally responds first, but the organization will usually be named as well on the theory that it was the volunteer's principal. Hired and non-owned auto liability is what stands behind the organization in that scenario. Underwriters ask specifically whether you check driving records before someone drives and periodically thereafter, whether you verify that volunteer drivers carry their own auto insurance and confirm it again at renewal, and what minimum limit you require of them.

Finally, remember that your board members are volunteers too, and their exposure is governance rather than operations. Volunteer protection statutes at the federal and state level offer some limited immunity to individual nonprofit volunteers under defined conditions, but they generally do not protect the organization itself, and they do not stop someone from filing suit or generating defense costs. That is the work directors and officers coverage does.

  • Background screening is asked separately for employees, for volunteers, and for contracted or temporary staff. Screening only paid staff is a visible gap to an underwriter.
  • Volunteers who work with minors or vulnerable adults draw the same screening, training, and supervision questions as employees, and often the same documentation requirements.
  • Volunteer drivers: expect questions about motor vehicle record checks at onboarding and annually, proof of personal auto coverage, a written vehicle-use policy, and a distracted-driving rule.
  • Crime and fidelity forms define who counts as an employee, so if volunteers handle cash, deposits, or donations, ask whether they need to be added by endorsement.
  • Volunteer injuries are typically not covered by workers' compensation; volunteer accident coverage is the usual way organizations address it.

who counts as an insured under general liability · how workers' compensation treats employees · coverage when staff and volunteers drive their own cars · protection for your volunteer board · employee dishonesty and fidelity coverage

Special events, galas, and fundraisers

Events concentrate risk. For one evening or one weekend, you have more people on site than usual, temporary staff and volunteers doing unfamiliar jobs, vendors you did not hire for the rest of the year, and often alcohol. Many organizations assume their general liability policy simply follows them to an event, and frequently it does, but that assumption is worth checking rather than making, particularly for events held away from your own premises or involving activities outside your normal operations.

Alcohol is the most common complication. Under most general liability forms, an organization that is not in the business of selling or serving alcohol has some host liquor protection built in, but that changes quickly once you sell drinks, charge admission that includes drinks, or hold a license. Underwriters ask directly whether you furnish the liquor, whether a license is required, whether a drink maximum is imposed, and what controls prevent service to minors. If a caterer or bartending service handles alcohol, obtaining their certificate of insurance and additional insured status matters considerably.

Certain activities routinely require a separate event application, separate underwriting, or a standalone event policy, and a few are simply not available in a standard market. Knowing which ones apply before you sign the venue contract gives you time to solve the problem rather than discover it.

  • Activities that commonly trigger separate underwriting: amusement rides, inflatables and bounce houses, fireworks, firearms, animals other than household pets, rodeos, parades, air shows, auto or motorcycle rallies, contact sports, and larger concerts.
  • Expect to be asked your prior experience hosting the same type of event, projected attendance, the number of paid staff and volunteers on site, security arrangements, and how a medical emergency will be handled.
  • Collect certificates of insurance from every vendor, caterer, and exhibitor, and get named as an additional insured on their liability policy rather than relying on a handshake.
  • Venue contracts often require you to name the venue as an additional insured and to carry limits above your primary policy. Read those requirements before signing, not after.
  • Event cancellation, which pays lost revenue and unrecoverable expenses if an event cannot proceed, is a separate product from liability and has to be purchased on its own.
  • Off-site events, auctions with high-value donated items, and events involving transportation of attendees all raise questions beyond your normal premises coverage.

liability coverage for events open to the public · when a venue requires higher limits · fundraising organizations · start an application for an upcoming event

Property: older buildings, donated contents, and the gap in the middle

Nonprofit property underwriting tends to focus on the physical condition of the building rather than on what you do inside it. Expect detailed questions about construction type, year built, number of stories, square footage, roof material and the year it was last replaced, and when the plumbing, electrical wiring, circuit panel, and HVAC were last updated. Certain findings draw immediate attention because of their loss history: knob-and-tube or aluminum wiring, fuse boxes, and specific older panel types are common reasons a building is declined or priced differently, and original supply or drainage plumbing in an older structure raises water damage concerns. Protection matters too, including sprinkler coverage, fire and burglar alarms, extinguishers, and the distance to the nearest hydrant and fire station.

The gap in the middle is valuation. Two decisions determine whether a claim payment actually rebuilds you: how the property is valued, and whether you satisfy the coinsurance condition. Insuring a donated building for what the organization paid, which may have been nothing, or for its assessed value rather than the cost to rebuild, is a recurring and expensive mistake. If your building is on a historic register or has architectural features that would have to be reproduced, that should be disclosed and priced rather than discovered during a claim. Ordinance or law coverage addresses the extra cost of complying with current codes when rebuilding an older structure, and it is worth asking about specifically.

Contents are the other blind spot. Business personal property is generally a limit inside the same policy rather than a separate purchase, and nonprofits consistently understate it because donated inventory and program equipment never went through accounts payable. Anything that regularly leaves the building, such as laptops, audiovisual gear, medical or testing equipment, tools, or instruments, may need to be scheduled under inland marine to be covered while off-premises. Finally, business income and extra expense coverage answers the question of how you keep paying staff and meeting grant obligations while the building is unusable, which is a question most boards have not asked until it is urgent.

  • Have ready: year built, construction type, stories, total and occupied square footage, roof type and replacement year, and update years for plumbing, wiring, panel, and HVAC.
  • Flag any aluminum wiring, knob-and-tube wiring, fuses, or older panel types; these are frequent underwriting obstacles and are better disclosed up front.
  • Insure buildings for the cost to rebuild rather than purchase price, book value, or assessment, and review the coinsurance percentage and valuation basis on your declarations.
  • Vacant or partially unoccupied buildings, active renovation projects, and structures on a historic register all require specific disclosure.
  • If you cook on premises, expect questions about hood suppression systems, automatic fuel shutoff, and how often the hood and duct are professionally cleaned.
  • Separately value donated goods and program inventory, and schedule portable equipment that travels off-site.
  • Consider business income and extra expense coverage sized to how long a rebuild would realistically take, not to a comfortable-sounding number.

what a commercial property policy covers · packaged property and liability for smaller organizations · housing and shelter organizations · arts and cultural institutions

Management liability: D&O, EPLI, and fiduciary as one family

General liability answers for physical harm. Management liability answers for decisions. The three coverages in this family overlap enough that they are often written together, sometimes on a single form, and it is worth understanding what each one is doing. Directors and officers coverage responds to allegations about how the organization is governed and managed: breach of duty, misapplication of restricted funds, conflicts of interest, misrepresentation to donors or funders, failure to supervise, and disputes over major decisions such as a merger, a program closure, or the sale of a property. Employment practices liability responds to allegations by employees, former employees, and applicants. Fiduciary liability responds to allegations about the administration of employee benefit plans.

Underwriters treat governance quality as a proxy for risk, and their questions reflect it. Expect to be asked how many directors and officers you have, whether the board includes independent members who are neither employees nor otherwise affiliated, how often the board meets, whether written minutes are kept for board and committee meetings, and whether you maintain written bylaws and a conflict-of-interest policy. On the employment side, the questions get more granular: whether written applications are obtained, whether written performance evaluations are completed and shared with employees, whether reprimands and warnings are documented in personnel files, whether you maintain an employee handbook with equal employment opportunity and anti-harassment policies, when employment policies were last reviewed by qualified counsel, and when you last reviewed exempt and non-exempt classifications and independent contractor status. Any recent or planned layoff or reduction in force brings its own set of questions about selection criteria, documented business reasons, impact analysis, and whether waivers or severance agreements were reviewed by counsel.

Two structural points matter more than most boards expect. First, these coverages are usually written on a claims-made basis, which is discussed in the next section. Second, on most management liability forms, defense costs erode the limit rather than being paid in addition to it, unlike general liability. A protracted employment dispute can consume a meaningful portion of a modest limit before anyone reaches a settlement, which is a practical argument for looking at the limit alongside the retention rather than in isolation.

Fiduciary liability is the piece most often overlooked. If your organization sponsors a retirement plan, a health plan, or another benefit plan, the people who select investment options, choose service providers, or administer the plan are acting as fiduciaries, and they can be held personally responsible for those decisions. This is not the same thing as the fidelity bond that federal law generally requires for individuals who handle plan funds. The bond protects plan assets from dishonesty; fiduciary liability insurance defends the people making plan decisions. Many organizations carry the bond, believe they are covered, and are not.

  • Have your bylaws, conflict-of-interest policy, board roster, and evidence that minutes are kept available before you apply.
  • An indemnification provision in your bylaws only helps if the organization has the funds to honor it, which is often least true precisely when a claim arises.
  • Employment allegations frequently include a wage and hour component; those are often excluded or narrowed to a defense-only sublimit, so classification reviews are worth doing independently.
  • A planned or recent layoff should be disclosed early, with the selection criteria and business reasons documented before applications go out.
  • If you sponsor any benefit plan, confirm whether you carry fiduciary liability in addition to the required plan fidelity bond; they solve different problems.

directors and officers coverage explained · employment practices liability · fiduciary liability for benefit plan sponsors · why D&O matters for a volunteer board · reasons nonprofits look at EPLI

Claims-made versus occurrence, and why the retroactive date matters

This distinction causes more unpleasant surprises than any other technical point in nonprofit insurance, and it is worth ten minutes of a board's attention. General liability, property, and auto are usually written on an occurrence basis, meaning the policy in force when the incident happened responds, even if the claim arrives years later. Directors and officers, employment practices, professional liability, and frequently abuse and molestation are usually written on a claims-made basis, meaning the policy in force when the claim is first made responds, and only if the underlying act occurred on or after a date printed on the policy called the retroactive date.

The practical consequences are straightforward once you see them. If you have carried claims-made coverage continuously and your retroactive date reaches back to when the program started, past acts are generally still within reach. If you let coverage lapse, or you switch and the new policy is issued with a current retroactive date, the years before that date can fall outside coverage entirely, which is why applications ask whether coverage has been carried continuously and what the prior retroactive date was. When you leave a claims-made policy and do not replace it, an extended reporting period, commonly called tail coverage, is what preserves the ability to report a claim afterward. This matters most for organizations that are winding down, merging, or closing a program, since allegations relating to past services can surface long after the work ended.

Applications for these lines also carry a warranty-style question asking whether anyone is aware of any fact, circumstance, or situation that could reasonably be expected to give rise to a claim. Known circumstances are generally not insurable going forward, and answering that question carelessly can jeopardize coverage for the very matter you were worried about. If something is pending or brewing, tell your agent before the application is signed so it can be handled correctly.

  • Occurrence coverage: the policy in force when the incident happened responds. Typical for general liability, property, and auto.
  • Claims-made coverage: the policy in force when the claim is made responds, subject to the retroactive date. Typical for D&O, EPLI, professional liability, and often abuse.
  • Protect your retroactive date when you change policies; moving it forward can quietly strip years of prior acts.
  • If you close, merge, or drop a claims-made line, ask about an extended reporting period before the policy expires rather than after.
  • Disclose known circumstances honestly on the application; non-disclosure is a far worse outcome than a modest premium adjustment.

claims-made structure in D&O policies · professional liability and errors & omissions · abuse and molestation liability

What actually generates claims at nonprofits

It is useful to separate the losses that keep boards awake at night from the ones that arrive routinely. Both matter, but they call for different responses. The routine losses are largely premises and operations events, and they are managed with maintenance, documentation, and training. The severe losses are concentrated in a smaller number of categories, and they are managed with limits, controls, and honest disclosure at application time.

Across nonprofit operations, claim activity tends to cluster in recognizable patterns. Reviewing this list against your own programs is a quick way to find the exposure nobody has thought about.

  • Premises injuries: a slip or trip on a walking surface, a fall on ice where snow removal was contracted out without a certificate of insurance, a playground injury, or a fall at a poorly lit event.
  • Transportation: an accident while a volunteer or staff member drives participants, which combines auto liability with allegations of negligent selection or supervision of the driver.
  • Employment: wrongful termination, discrimination, harassment, retaliation, and misclassification of employees or independent contractors.
  • Governance: disputes over restricted funds, allegations of mismanagement following a deficit or program closure, conflicts of interest, and regulatory or licensing inquiries.
  • Abuse allegations arising in youth programs, residential and shelter settings, mentoring relationships, transportation, and overnight trips, including allegations relating to past years.
  • Professional services: an allegation that a client was improperly assessed, referred, supervised, or discharged, or that confidentiality was breached.
  • Employee dishonesty: diverted donations, altered checks, fictitious vendors, and payroll manipulation, most often where one person controls multiple steps of a financial process.
  • Cyber and fraud: ransomware that locks program records, a business email compromise redirecting a grant or vendor payment, and exposure of donor payment or client health information.
  • Property: fire, storm and water damage, theft of program equipment, and losses to equipment while off-site at an event or program location.
  • Special events: injuries at fundraisers and festivals, alcohol-related incidents, and vendor or contractor accidents on your event footprint.

how general liability responds to premises claims · abuse and molestation exposure · cyber exposure for nonprofits and small organizations · general liability in plain language

What underwriters actually ask before they will quote

Nonprofit supplemental applications are long, and the length is not arbitrary. Underwriters are trying to answer three questions: what do you actually do, who is exposed while you do it, and what controls stand between an incident and a claim. The specific questions vary by program type, but the themes below appear again and again across human services, religious, school, youth, and cultural applications. Reading them before you apply is the single most effective way to shorten the process, because half of these answers require someone other than the executive director to look something up.

Start with the basics of the organization. Applications ask for the full legal name including affiliated entities and any DBAs, your federal employer identification number, entity type, years in operation, and, separately, years under present management. A change in leadership within the past year is asked about specifically. You will describe all operations and programs in full, identify your primary funding source, and provide your annual operating budget and annual payroll. Financial questions go further than many boards expect: total assets, revenues, and expenditures, whether you are operating at a surplus or a deficit, and if there is a deficit, what caused it and how you plan to eliminate it. Whether the organization maintains operational reserves is also asked. Any program discontinued, added, or materially changed in the past year is fair game.

Then comes who you serve. Applications for organizations working with people typically ask for the annual number of individuals served broken into age bands, commonly under nine, nine through eighteen, and over eighteen. That single question does more to shape your abuse and professional liability terms than almost anything else, because it establishes how much contact you have with minors. You will also be asked whether you serve, supervise, or care for minors or vulnerable adults at all, and to describe the programs that involve them.

Staffing and hiring practices are examined in detail. Expect to provide total employees and total volunteers, then a staff count broken out by position and by status, distinguishing employees, volunteers, contractors, and interns, and full-time from part-time. Turnover is asked for. On hiring, the questions are whether formal written hiring procedures exist, whether every candidate completes a signed employment application and a personal interview, whether employment references are verified, whether licenses and credentials are verified, and whether criminal background checks are conducted. Critically, background screening is asked separately for employees, for volunteers, and for contracted or temporary staff, and for organizations working with minors, the scope is probed further, including whether checks are local, statewide, federal, and whether sex offender registries are searched. Whether your employment application asks about convictions for abuse or sex-related offenses is its own question.

Abuse prevention controls are the most scrutinized area for any organization touching minors or vulnerable adults, and the questions are specific enough that they function as a checklist. Underwriters ask whether you have written policies for preventing and responding to physical and sexual abuse, whether staff and volunteers sign an acknowledgment that they have read them, whether there is documented formal training on recognizing and reporting abuse, whether there is a written procedure for reporting suspected abuse to authorities, whether you have a supervision plan that monitors staff interactions both on and off your premises, and whether you enforce a rule that more than one adult is present so a child or vulnerable person is never alone with a single adult. Where these controls exist and are documented, terms improve. Where they do not, the market narrows quickly.

Safety and operational controls come next. Common questions include whether a formal written safety program exists, whether there is a plan for medical emergencies, whether someone trained in CPR and first aid is always on the premises, whether AEDs are present and staff are trained on them, and whether a written smoking policy is posted and enforced. Organizations with residential or behavioral programs are asked what de-escalation method is used and how often staff are recertified. Facility controls include sign-in and sign-out procedures for staff, clients, and visitors, building access measures such as locked exterior doors, visitor sign-in, and cameras, and regular review of interior and exterior walking surfaces. Snow and ice removal procedures are asked about directly, including whether a certificate of insurance and additional insured status are obtained when removal is contracted out. Incident handling is examined too: whether staff must report every incident that may result in a claim, whether written records are kept and reviewed, and whether a formal incident review committee exists.

Program-specific questions layer on top. Organizations providing clinical or medical services are asked whether medications are dispensed and how they are stored and documented, who is authorized to dispense them, whether informed consent is obtained before prescribing, whether physicians or nurse practitioners are employed or contracted, their specialties and licensure, and whether each carries their own malpractice coverage. Telehealth and remote counseling raise questions about which states clients are located in and the licensure of the clinicians serving them. Foster care and adoption programs bring questions about home licensing and inspection, background checks across all states before a home is approved, how frequently case managers visit and whether visits are scheduled or unscheduled, whether families receive full written disclosure of a child's history, and whether foster parents are treated as employees or contractors. Schools are asked about enrollment by level, accreditation status and any threatened action, fraternization policies, harassment complaint procedures, active-threat response training, whether firearms are permitted on premises, pool and playground safety, and international travel including chaperone ratios and evacuation planning. Religious organizations are asked about attendance and membership trends, facility rentals to outside groups and the revenue from them, youth programming, sponsored sports and coach training, higher-hazard activities such as camps, shelters, pools, or overseas mission trips, and overnight trips exceeding a week.

Finally, every application ends with loss history, and this is where accuracy matters most. You will be asked for currently valued loss runs, commonly covering the current year plus three to five prior years depending on the line and the market. You will be asked whether any claim, allegation, or incident, including any relating to abuse, has been made in the past several years, and to describe each one with dates, current status, amounts paid and reserved, and what changed as a result. You will be asked whether any similar insurance has ever been declined, cancelled, or non-renewed. And you will be asked whether anyone is aware of any fact, circumstance, or situation that could reasonably be expected to give rise to a claim. Answer these carefully and completely. A disclosed loss with a documented corrective action is a manageable underwriting fact; an undisclosed one discovered later is a coverage problem.

  • Organization profile: legal name and affiliates, FEIN, entity type, years in operation, years under present management, and any leadership change in the past year.
  • Financials: operating budget, payroll, primary funding source, revenues and expenditures, surplus or deficit with an explanation, reserves, and total assets.
  • Population served: annual counts by age band, and whether you serve or supervise minors or vulnerable adults.
  • Staffing: employee and volunteer totals, a breakdown by position and by status, and turnover.
  • Hiring: written procedures, signed applications, interviews, reference and credential verification, and background checks run separately on employees, volunteers, and contractors.
  • Abuse controls: written policy, signed acknowledgment, documented training, mandated reporting procedure, supervision plan on and off premises, and a two-adult rule.
  • Safety: written safety program, medical emergency plan, CPR and first aid coverage, AEDs, de-escalation training and recertification, and incident reporting with a review committee.
  • Facility and third parties: certificates of insurance and hold-harmless agreements from contractors, vendors, and outside groups using your space, with additional insured status and stated minimum limits.
  • Transportation: vehicle schedule, whether you transport clients or minors, motor vehicle record checks at hire and annually, driver training, maintenance program, and distracted-driving rules.
  • Licensing and accreditation: current standing, any suspension or revocation, deficiencies noted at the last inspection, and accrediting bodies.
  • Technology: sensitive data types held, record counts, multi-factor authentication, backups that are encrypted and kept offline, patching timeframes, security awareness training, and a written incident response plan.
  • Loss history: currently valued loss runs, details on each claim including corrective action, prior declinations or non-renewals, and disclosure of known circumstances.

human and social services organizations · churches and religious organizations · schools and educational nonprofits · youth development programs · mental health organizations · cyber controls underwriters look for

Documents you will normally need to get quoted

Gathering these before you start compresses a process that otherwise stretches out over weeks of back-and-forth. Not every item applies to every organization, and some lines require only a subset, but this list covers what nonprofit submissions typically request. If a document does not exist, that is itself useful information, because the absence of a written policy is usually easier to fix before an application than to explain during one.

One practical note: applications for management liability, professional liability, and abuse coverage are signed by an authorized officer and carry warranty language. The signature is a representation that the answers are accurate to the best of your knowledge. Route the application through whoever actually knows the answer rather than filling it in from memory.

  • Currently valued loss runs, generally covering the current year plus three to five prior years depending on the line.
  • Current declarations pages or an expiring policy summary showing carriers, policy periods, coverages, limits, deductibles or retentions, and premiums.
  • Most recent financial statements or audited financials, plus the annual operating budget showing revenues, expenditures, and surplus or deficit.
  • Annual payroll figures and a staff roster broken out by position and by status, with employee and volunteer counts.
  • Employee handbook and written equal employment opportunity, anti-harassment, and anti-discrimination policies.
  • Written abuse prevention and response policy, staff and volunteer acknowledgment forms, training records, and the supervision plan.
  • Bylaws, conflict-of-interest policy, board roster, and confirmation that board and committee minutes are maintained.
  • Program descriptions, brochures, and your website, which underwriters will read regardless of what the application says.
  • Copies of licenses and accreditations, the most recent licensing inspection report, and documentation of any cited deficiencies and their resolution.
  • Certificates of insurance for contracted clinicians, professionals, and regular vendors, along with your standard hold-harmless or facility-use agreement.
  • Vehicle schedule with year, make, model, VIN and use, plus a driver list with dates of birth and license numbers, and your MVR review practice.
  • Property detail by location: address, building and contents values, tenant improvements, business income figures, construction and protection information, and update years for roof, wiring, panel, plumbing, and HVAC. A recent appraisal helps if you have one.
  • Written pandemic or communicable disease procedures, and disaster recovery or business continuity documentation.
  • For any planned or recent reduction in force, the written layoff selection plan and any waiver or release form used.
  • For benefit plan sponsors seeking fiduciary coverage, plan documents, participant counts, and current plan financial information.
  • A separate event application for any one-off event, including the venue, dates, projected attendance, activities, alcohol arrangements, and vendor list.

start an application · talk through what applies to your organization · a coverage checklist to work from

Certificates of insurance, additional insureds, and contract requirements

Two directions of paperwork are worth getting right, because both show up in underwriting questions and both show up in claims. The first is what you collect from others. Any time a contractor works on your property, a vendor participates in your event, a caterer serves food, a snow removal company clears your lot, or an outside group uses your building, you should be collecting a certificate of insurance, requiring that you be named as an additional insured on their liability policy, and having a signed hold-harmless or indemnification agreement in place. Applications ask about each of these specifically, including what minimum limits you require. Where those documents are missing, a loss caused by someone else can end up on your policy and in your loss history.

The second direction is what you provide to others. Leases, grant agreements, school district and municipal contracts, and partner agreements commonly specify required coverages, minimum limits, additional insured status, waiver of subrogation, and sometimes primary and non-contributory wording. These provisions have real cost and coverage implications, and they are much easier to address while a contract is still in draft. Sending the insurance requirements to your agent before you sign is a small step that avoids the more common alternative, which is discovering after signing that your program does not meet a requirement you already agreed to.

For facility use in particular, a written building-use agreement combined with a certificate naming your organization as an additional insured is the standard practice underwriters expect to see. Organizations that rent space to outside groups, whether for receptions, meetings, recovery groups, or community programs, are asked directly about annual rental revenue and whether these documents are obtained every time.

  • Collect a certificate of insurance, additional insured status, and a signed hold-harmless agreement from every contractor, vendor, and outside group using your space.
  • Set and enforce a minimum limit requirement rather than accepting whatever certificate arrives.
  • Keep certificates on file and current; expired certificates are functionally the same as none at the moment they matter.
  • Send lease and grant insurance requirements to your agent before signing so limits and endorsements can be arranged.
  • Use a written facility-use agreement for every outside group, including recurring community users you know well.

the policy most contracts require you to evidence · meeting higher contractual limit requirements · membership organizations

How to start, and what to expect

The process is more predictable than it looks. It begins with a conversation about what your organization actually does, which programs run, who they serve, what property you occupy, and who drives. From there we identify which supplemental applications apply, because a nonprofit that operates a shelter, a school, and a food program will complete different supplements than one that does grantmaking. You gather the documents listed above, we prepare and submit the file, and underwriters come back with questions, quotes, or requests for controls to be put in place first.

Give the process room. For a straightforward package renewal, starting roughly a month or two before expiration is usually adequate. For a first-time placement, or for lines where underwriting is more involved, including abuse coverage, professional liability for clinical services, management liability for an organization with prior claims, or any account requiring a loss control inspection, more lead time is genuinely useful. Rushing a submission narrows the number of markets willing to look at it, which is the opposite of what you want.

Expect some back-and-forth, and expect a few questions you cannot answer immediately. That is normal and not a bad sign. It is also worth knowing that a request to strengthen a control, such as documenting abuse prevention training or adding multi-factor authentication, is not an obstacle so much as a path. Those requirements exist because they change outcomes, and organizations that meet them usually see the difference reflected in the terms they are offered.

New organizations are a common case and a manageable one. If you have no loss history, no financials beyond a projected budget, and programs that have not launched yet, you can still be placed. The submission simply leans more on program descriptions, governance documents, and the controls you have written down. If you are in that position, it helps to build the policies underwriters ask about, particularly screening, supervision, and financial separation of duties, before you need them rather than after.

  • Step one: describe your programs, locations, staffing, vehicles, and events in plain terms so the right supplements are identified.
  • Step two: collect loss runs, current declarations pages, financials, and your written policies.
  • Step three: complete the applicable supplemental applications accurately, routing questions to the people who actually know the answers.
  • Step four: review quotes as a program rather than line by line, comparing limits, retentions, sublimits, exclusions, and whether defense is inside or outside the limit.
  • Step five: put the recommended controls in place and calendar a review before the next renewal, particularly if programs, staffing, or property changed during the year.

start an application · contact our team · new and startup nonprofits · see the industries we work with

Frequently asked questions

Does our general liability policy already cover abuse allegations?
Often it does not, or not to a meaningful degree. Many general liability forms exclude abuse and molestation outright, and others include it at a sublimit well below the policy limit. Coverage is commonly provided by a specific endorsement, a separate coverage part, or a standalone policy, frequently on a claims-made basis. If your organization has any contact with minors or vulnerable adults, this is worth checking on your actual declarations page rather than assuming, because the answer differs meaningfully from one policy to another.
Are our volunteers covered?
It depends on which direction the harm runs. If a volunteer causes injury or damage to someone else while working on your behalf, most current general liability forms treat volunteer workers as insureds, so there is typically liability protection for both the volunteer and the organization, subject to policy terms. If the volunteer is the one who gets hurt, that is usually not covered by workers' compensation, since volunteers are generally not employees, and it is not a liability claim unless negligence is alleged. Organizations that want a clear answer for volunteer injuries often add volunteer accident coverage.
We only have a few employees, or none at all. Do we still need workers' compensation?
Requirements vary by state, and there is no single national answer. States differ on the employee count that triggers a mandate, whether officers and directors can be excluded, and how part-time and seasonal workers are counted. Even where coverage is not required, the employers liability portion has value, and many funders, landlords, and contract partners require evidence of coverage regardless of what state law says. It is worth confirming for your specific state and staffing situation rather than relying on a general rule.
Our board members are unpaid volunteers. Do we really need D&O coverage?
Being unpaid does not prevent someone from being named in a lawsuit, and defense costs accrue whether or not the allegation eventually holds up. Volunteer protection statutes at the federal and state level provide some limited immunity for individual nonprofit volunteers under defined conditions, but they generally do not protect the organization itself and do not prevent a suit from being filed. An indemnification clause in your bylaws helps only if the organization can fund it, which is often least true at the exact moment a claim arises. Many prospective board members also ask whether D&O coverage is in place before agreeing to serve.
We don't own any vehicles. Do we need commercial auto coverage?
You may still need hired and non-owned auto liability. That coverage responds when staff or volunteers drive their own cars, or a rented vehicle, on the organization's behalf and cause injury or damage to others. The driver's personal auto policy generally responds first, but the organization is typically named as well, and general liability policies usually exclude auto liability. It does not pay to repair the volunteer's own car. If anyone drives for you at all, even occasionally to run errands or deliver items, it is worth reviewing.
What is the difference between claims-made and occurrence coverage, and why does it matter to us?
Occurrence coverage responds based on when the incident happened, so the policy in force at that time answers even if the claim comes years later. Claims-made coverage responds based on when the claim is first made, and only for acts that occurred on or after the policy's retroactive date. General liability, property, and auto are usually occurrence. Directors and officers, employment practices, professional liability, and often abuse are usually claims-made. The practical implication is that with claims-made lines you need to protect your retroactive date when you switch policies, and you need to consider an extended reporting period if you drop the coverage, close, or merge.
We rent our space. Do we still need property insurance?
Almost always yes, though for different reasons than an owner. Your landlord's policy covers the building, not your contents. You need coverage for your own business personal property, including program equipment, computers, furniture, and donated inventory, and typically for any tenant improvements and betterments you paid for. Business income coverage is also worth considering, since a fire in a building you do not own can still shut your programs down. Your lease likely specifies liability limits and additional insured requirements as well, which is worth reviewing alongside the property piece.
A funder and our landlord are asking to be named as additional insured. What does that actually mean?
Additional insured status extends certain protections of your liability policy to another party for liability arising out of your operations or your use of their premises. It is added by endorsement, and the wording of that endorsement determines how far the protection reaches. It is a routine request in leases, grant agreements, and partner contracts, and it is generally straightforward to arrange. The important step is sending the actual contract language to your agent before you sign, because some agreements also require waiver of subrogation, primary and non-contributory wording, or limits above what you currently carry.
How much liability limit does a nonprofit actually need?
There is no single correct number, and anyone offering one without knowing your operations is guessing. The practical inputs are the severity of what could go wrong given your programs, particularly whether you transport people or work with minors, the limits your contracts and funders require, your asset base and what a judgment could reach, and how your excess or umbrella limits sit above the primary layers. It is generally more useful to look at limits alongside retentions, sublimits, and whether defense costs erode the limit than to fixate on a headline number in isolation.
We are a brand-new nonprofit with almost no budget. Where should we start?
Start with the exposures that could end the organization rather than the ones that would merely be inconvenient. For most new nonprofits that means general liability, coverage for whatever contents and equipment you own, directors and officers coverage so your founding board is protected, and, if any program touches minors or vulnerable adults, abuse coverage from day one rather than after the program grows. Workers' compensation follows your state's requirements once you have employees. A packaged policy is often the practical starting structure, and the program can be layered up as programs and contracts expand.
Do we need cyber coverage if we don't process donations online or take credit cards?
Quite possibly. The exposure is not limited to payment card data. If you hold employee records, donor contact and banking details, client files, or any protected health information, you hold data that carries notification obligations if it is exposed. Ransomware that locks up program and client records is disruptive regardless of whether you sell anything, and one of the more frequent losses is a fraudulent email that redirects a legitimate payment to an attacker's account. Whether that particular loss is covered often depends on a social engineering or funds transfer sublimit, which is a specific thing to ask about.
How far in advance should we start our renewal, and what will make it go smoothly?
For a straightforward package renewal, roughly one to two months ahead is usually adequate. Allow more time for a first-time placement, for abuse or professional liability, for management liability where there is claims activity, or where a loss control inspection is likely. What makes it go smoothly is having loss runs, current declarations pages, financials, and your written policies assembled before applications go out, and disclosing anything unusual early. Underwriters respond well to a complete, honest submission with documented controls, and poorly to information that surfaces late.

Explore related coverage

Ready to review your nonprofit's coverage?

Start an application built for nonprofit organizations, or talk it through with an advisor first. There is no cost to have your current program reviewed.

About BluePeak Digital Insurance Agency

Nonprofit Insurance

Nonprofit insurance is our deepest specialty: nonprofits carry exposures standard small-business programs were never built to answer. A 501(c)(3) determination is a tax classification. It does not shield the organization or its board from liability. Board members make employment, financial and programmatic decisions, and directors and officers liability protects them personally when one of those decisions is challenged. Employment practices liability covers the wrongful termination, discrimination and harassment claims that follow from being an employer.

Programs serving minors or vulnerable adults need abuse and molestation coverage evaluated explicitly — limits, whether defense costs erode them, and how the policy treats an accused employee or volunteer. Organizations providing counseling, case management or direct client care need social service professional liability, since general liability excludes professional services claims. Volunteers are the exposure most often missed: they are generally not covered by workers’ compensation, and a volunteer driving on the organization’s behalf creates a hired and non-owned auto exposure the same way an employee does.

The rest rounds out the program: cyber coverage for donor and client data, commercial crime for employee theft and fraudulently induced transfers, property coverage for buildings and program equipment, fiduciary liability where the organization sponsors a benefit plan, and an umbrella above it all. Nonprofit forms differ from one another more than commercial forms do, so exclusions and limits deserve a line-by-line read at renewal.

nonprofit insurance · directors and officers (D&O) liability · employment practices liability insurance · abuse and molestation liability · hired and non-owned auto liability · commercial crime and fidelity coverage · fiduciary liability · nonprofit insurance checklist · abuse and molestation coverage for nonprofits · nonprofit workers’ compensation guide