Constellation GRC Qualified Coverage
Cyber and Tech E&O insurance, priced for companies that do security right
A specialty Cyber and Technology E&O program built exclusively for companies whose SOC 2 and ISO 27001 audits are validated by Constellation GRC. Backed by Tokio Marine Kiln at Lloyd's of London — with combined limits available under current program terms and pricing that reflects the controls you've already put in place.
Exclusive to validated companies.
This program is available only to companies whose SOC 2 and/or ISO 27001 audits have been validated by Constellation GRC. If Constellation GRC has confirmed your framework, you're positioned for preferred coverage — no starting from zero with underwriters who've never seen your controls. Don't have an audit yet? Start your SOC 2 or ISO 27001 with Constellation GRC and qualify when you're done.
Insurance designed around your security program — not in spite of it.
Most cyber and Tech E&O policies treat every applicant the same: a long questionnaire, conservative assumptions, and pricing built for the lowest common denominator. The Constellation GRC Qualified Coverage program flips that model. When your SOC 2 or ISO 27001 audit is validated by Constellation GRC, the carrier already has independent proof that you meet a high bar for security and compliance. That evidence translates directly into stronger coverage and better economics — an exceptional value for companies that have invested in doing things right.
Coverage built for the way modern tech companies operate.
$1,000,000 Limit*: Core cyber and Tech E&O protection for early-stage and growing technology companies — ideal for satisfying customer and contractual insurance requirements. $2,000,000 Limit*: Expanded capacity for companies with larger contracts, enterprise customers, or heightened data and service obligations. *Limits shown reflect current program terms and are subject to underwriting, carrier approval, availability, and eligibility. Lines covered: Cyber Liability + Technology Errors & Omissions Available limits: $1M and $2M under current program terms Eligibility: SOC 2 and/or ISO 27001 audits validated by Constellation GRC Carrier: Tokio Marine Kiln (Lloyd's of London) Designed for: Startups, SaaS, and technology companies
Cyber coverage — for what happens to you, and what you owe others.
Comprehensive cyber protection spanning both first-party losses (costs your business incurs directly) and third-party liability (claims brought against you). Standard coverages include: Ransomware and cyber extortion (including ransom payments and negotiation) Business interruption and loss of income from a cyber event Data and digital asset restoration / recovery Incident response and IT forensic investigation Breach notification costs (customers, employees, regulators) Crisis management and public relations / reputation repair Credit and identity monitoring for affected individuals Funds transfer fraud / wire transfer fraud Social engineering and business email compromise (BEC) Cyber extortion / digital threat response Network and information security liability Privacy liability (data breach claims by affected parties) Regulatory defense, fines, and penalties (where insurable by law) PCI fines, penalties, and assessments Media and content liability (defamation, IP infringement online) Legal defense costs, settlements, and court-ordered judgments Explicit protection for funds transfer fraud, wire fraud, and social engineering — among the most common and costly losses for tech companies — plus coverage that responds to privacy and regulatory compliance obligations.
Technology E&O — when a client says your product or service caused them a loss.
Technology E&O is professional liability built for technology companies. It responds when a client alleges that your software, service, or advice failed to perform and caused them financial harm — covering legal defense, settlements, and judgments. Standard coverages include: Errors, omissions, and negligent acts in your technology products or services Professional negligence and failure to meet accepted professional standards Service errors or failures (failed integrations, malfunctioning platforms) Software bugs, system failures, or downtime causing client financial loss Missed deliverables, deadlines, or contracted milestones Breach of contract or warranty (failure to perform as promised, e.g. uptime/SLA) Misrepresentation or inaccurate statements relied upon by a client Accidental / unintentional intellectual property infringement Third-party data breach liability stemming from your technology Errors or misrepresentation by your employees or contractors Legal defense costs, settlements, and judgments (including for non-meritorious claims) A complete program covers both sides of a technology incident: Tech E&O answers when a client claims your product or service failed them, while Cyber answers when your own systems are breached, extorted, or defrauded. Structured together, they coordinate without gaps.
Built for startups and technology companies.
This is a special program designed for startups and technology companies — from venture-backed SaaS businesses to established tech firms — that have invested in real security and compliance and want coverage that reflects it. If you've earned a SOC 2 or ISO 27001 audit validated by Constellation GRC, this program offers an exceptional value: enterprise-grade cyber and Tech E&O protection, preferred pricing, and the confidence of Lloyd's-backed capacity.
Program terms and source
Coverage is provided by Tokio Marine Kiln (TMK) — the carrier supplying the policy and coverage capacity through the Lloyd's of London market. TMK is a managing agent operating at Lloyd's, and policies written in the Lloyd's market are backed by the market's financial strength ratings. Ratings shown are the Lloyd's of London market's financial strength ratings, as published by Lloyd's. Tokio Marine Kiln (TMK) is the managing agent providing the policy and coverage capacity through the Lloyd's market. Ratings source: Lloyd's market ratings.