Founder answers · 6 min read
Insurance for Your First Enterprise Contract
Signing your first enterprise contract is a milestone — and it usually arrives with an insurance clause that stops the deal until you satisfy it. Large customers push a standard set of coverage requirements into their master services agreement (MSA), and their procurement or legal team won't countersign until you produce a certificate of insurance proving you carry them. Founders are often surprised by both the specific policies named and the limits demanded. This page walks through the coverages a typical enterprise MSA requires — general liability, cyber, technology errors & omissions, and workers' compensation — plus the paperwork mechanics (certificates of insurance and additional-insured status) that actually close the requirement. It also explains how to read the insurance clause so you buy exactly what the contract asks for, no more and no less.
The short answer (as of August 2026)
A typical enterprise MSA requires four coverages: commercial general liability, cyber liability, technology errors & omissions (tech E&O), and workers' compensation where you have employees. The customer usually also requires a certificate of insurance (COI) evidencing those policies and asks to be named as an additional insured on your general liability. Read the contract's insurance clause line by line — it specifies the exact policies, minimum limits, and endorsements you must carry before the deal can close.
What Coverages a Typical Enterprise MSA Requires
Enterprise insurance clauses are more alike than different. The core set almost every large customer asks a technology vendor to carry:
- Commercial general liability (GL). The baseline third-party coverage for bodily injury and property damage, commonly required at $1M per occurrence / $2M aggregate. GL runs a median of about $45 a month (Insureon, 2025), and is often the easiest requirement to satisfy. See general liability insurance.
- Cyber liability. For any vendor that touches customer data, cyber is now standard — it responds to data breaches, privacy claims, and the customer's exposure if your systems are compromised. See what cyber insurance a SaaS company needs.
- Technology errors & omissions (tech E&O). Covers financial loss the customer suffers if your software or service fails to perform as promised. Enterprise buyers increasingly require it alongside cyber, and the two are often written together. See tech E&O insurance.
- Workers' compensation. Required in nearly every state once you have employees, and enterprise customers routinely ask you to evidence it; workers' comp runs a median of about $54 a month (Insureon, 2025).
Some contracts add umbrella/excess limits, employment practices liability, or higher cyber limits depending on the data involved. For the full picture, see enterprise contract requirements.
How to Read the Insurance Clause
The insurance clause is usually a dense paragraph or exhibit in the MSA. Read it for four things:
- Which policies are named. Match each named coverage to a policy you hold — or need to buy. Watch for combined requirements like "technology E&O including cyber liability," which a single combined policy can satisfy.
- The minimum limits. Each policy carries a required limit (e.g. $1M / $2M on GL, a stated cyber and tech E&O limit). You can raise a limit mid-term if your current policy falls short.
- Endorsements. The clause almost always requires additional-insured status on GL, and sometimes a waiver of subrogation or primary-and-noncontributory wording. These are policy endorsements your broker adds.
- Evidence and notice terms. It will specify a certificate of insurance and often a notice-of-cancellation period.
Don't over-buy. Match the policy and limit to exactly what the clause requires; you can always raise a limit when a specific deal demands it. A detailed breakdown lives at customer contract insurance requirements.
The COI and Additional-Insured Mechanics
Buying the coverage is only half the job — the customer needs proof, and that proof is a certificate of insurance (COI). Two mechanics matter:
- The certificate of insurance. A one-page summary from your broker or carrier listing each policy, its limits, and effective dates. The customer's procurement team compares it line by line against the MSA's requirements. A broker can typically issue a COI quickly once your policies are in place — often the same day, though you should confirm timing with your broker. See certificate of insurance.
- Additional insured. The MSA usually requires the customer to be named as an additional insured on your general liability policy, which extends your GL coverage to claims arising from your work for them. This is an endorsement your broker requests from the carrier; the COI then reflects it.
Because these two steps can gate a signature, start them as soon as you see the term sheet or draft MSA — not the day before close.
Common Requirements at a Glance
The table below summarizes the coverages a typical enterprise MSA names and the common limit convention. Limits are contract conventions, not quotes, and your specific contract governs.
| Coverage | Typical requirement | What it protects the customer from |
|---|---|---|
| General liability | $1M per occurrence / $2M aggregate | Third-party bodily injury and property damage |
| Cyber liability | Stated limit (often $1M+) | Data breach, privacy, and security-failure exposure |
| Tech E&O | Stated limit (often $1M+) | Financial loss if your product/service fails to perform |
| Workers' compensation | Statutory | Employee injury; required in most states with employees |
| Additional insured (GL) | Endorsement | Extends your GL to claims arising from your work for them |
Cyber and tech E&O are frequently written as one combined policy, which can satisfy both line items with a single limit — see tech E&O vs cyber.
Close Your First Enterprise Deal with OnePark Risk
OnePark Risk is an independent brokerage that builds insurance programs for startups and technology companies — including the exact coverages, limits, and additional-insured endorsements enterprise contracts require. Send us the MSA's insurance clause and we'll map it to a program placed with A-rated carriers, then issue the certificate your customer needs. Request a coverage review and we'll help you clear the requirement.
Frequently asked questions
What insurance does my first enterprise contract require?
Most enterprise MSAs require commercial general liability, cyber liability, technology E&O, and workers' compensation where you have employees — plus a certificate of insurance and additional-insured status naming the customer on your GL. Your specific contract's insurance clause governs the exact policies and limits.
What limits do enterprise customers usually ask for?
General liability is commonly required at $1M per occurrence / $2M aggregate, with cyber and tech E&O at stated limits that often start at $1M. Limits vary by contract and by how sensitive the data is; read the clause and match your policies to it.
What is a certificate of insurance and why does the customer need it?
A certificate of insurance (COI) is a one-page summary of your policies, limits, and effective dates issued by your broker or carrier. The customer's procurement team compares it against the MSA to confirm you carry the required coverage before they countersign.
What does 'additional insured' mean in an enterprise contract?
It means the customer is added to your general liability policy so your coverage extends to claims arising from your work for them. It's an endorsement your broker requests from the carrier, and it then appears on the certificate of insurance.
Can I buy the coverage after I sign?
It's risky. Enterprise buyers typically won't countersign until you produce a certificate evidencing the required coverage and endorsements. Start the process when you see the draft MSA so the program is bound and the COI is issued before your close date.
Do I need separate cyber and tech E&O policies?
Not necessarily. Many carriers write technology E&O and cyber liability as a single combined policy with one limit, which can satisfy both line items in the insurance clause. Whether one policy or two fits depends on the contract's exact wording.
Sources
This material is general educational information, not legal, tax, or insurance advice. Coverage availability, policy terms, and regulatory requirements vary by state, carrier, and applicant.