Who We Insure

Fund Administration Insurance: NAV Errors, Investor-Data Breaches and Capital-Call Fraud

Fund administration is a business of being right about other people's numbers. An administrator strikes the net asset value that investors subscribe and redeem at, keeps the capital accounts that decide who owns what, sends the capital-call and distribution notices that move money, and holds the investor records that regulators and auditors rely on. When a valuation input is keyed wrong, a waterfall is calculated on the wrong terms, or a spoofed capital-call notice sends a limited partner's wire to a criminal, the loss is measured in the fund's money and the claim arrives on the administrator's desk.

Why fund administrators & fund-tech platforms carry specialized insurance

Fund-tech platforms that automate the same work carry the same exposure with a software layer on top: a bug in the allocation engine or the investor portal is a professional error at scale, and the portal is a single point of compromise for every investor's identity documents and bank details. This guide covers professional liability, cyber, crime, and D&O for administrators and fund-tech platforms, the limits fund managers require, and what underwriters ask about controls.

Who this guide is for

Written for founders, operating partners, and compliance leads at independent fund administrators and the software companies that sell administration, investor-portal, and capital-call tooling to private funds. Third-party administrators serving venture, private equity, hedge, real estate, and credit funds; Fund-tech platforms running capital accounts, waterfalls, investor onboarding, and reporting as software; Outsourced CFO and back-office firms that strike NAVs and send notices under their own name; Not for the fund managers themselves — the venture capital, private equity, and hedge fund guides cover the GP's own program.

The risk profile of a fund administration business

Administrators rarely cause a loss through fraud; they cause it through an error that moves money or misstates ownership, or by being the weakest link between an investor and a wire instruction. Key exposures: NAV and capital-account errors — wrong valuation inputs, fee calculations, or waterfall terms — that cause investors to subscribe, redeem, or be allocated at the wrong figure; Capital-call and distribution notices impersonated by attackers who have read the administrator's or the manager's mailbox, sending investor wires to fraudulent accounts; Breaches of investor data, which includes identity documents, tax forms, and bank details collected during onboarding; Reporting errors that reach auditors, regulators, or tax filings and have to be restated at the fund's expense; Regulatory and investor scrutiny of the manager that pulls the administrator into subpoenas, investigations, and litigation as a witness or a defendant.

Professional Liability (E&O) for fund administrators & fund-tech platforms

The core policy. It responds when a fund or its investors allege that an administration error — a mispriced NAV, a wrong allocation, a late or inaccurate report — caused a financial loss, and it funds defense from the first demand. Fund-tech platforms need a technology E&O form that treats a software defect producing the same error as a covered professional service.

Cyber Liability for fund administrators & fund-tech platforms

Investor portals concentrate the most sensitive documents a wealthy individual or institution shares with anyone. Cyber funds forensics, notification across many funds' investor bases at once, regulatory defense, and liability, and underwriters look closely at portal authentication and the segregation of each client fund's data.

Crime & Social-Engineering for fund administrators & fund-tech platforms

Capital-call fraud is the signature loss of the category. Crime coverage with funds-transfer-fraud and social-engineering endorsements responds when the administrator's own instructions are manipulated; whether it responds to an investor's loss on a spoofed notice depends on the form's wording for third-party funds and on the engagement letter.

Directors & Officers Liability for fund administrators & fund-tech platforms

Administrators are named in investor suits against failed managers and in regulatory inquiries, and venture-backed fund-tech companies carry the usual investor and employment exposure of a software startup. D&O defends the entity and its officers, and a private-company form adds EPLI where staff are concentrated in a few offices.

Fiduciary & Employment Practices for fund administrators & fund-tech platforms

Fund accountants are recruited aggressively and leave with knowledge of client data, which produces both departure disputes and insider-risk questions. EPLI covers the employment claims; the administrator's own benefit plans need fiduciary liability like any employer's.

Contract and certificate requirements

Administration agreements set the standard of care, the liability cap — commonly tied to fees paid over a stated period — and the insurance the manager requires, with professional liability and cyber at stated limits and a certificate renewed each year. Institutional managers and their investors' operational due-diligence teams ask for the policies themselves, not only the certificate, and for a SOC 1 report on the administrator's controls. Managers increasingly require that the administrator carry crime coverage addressing social engineering and that wire-instruction changes follow a verified call-back procedure written into the agreement. The engagement letter's allocation of responsibility for an investor's fraudulent wire is the clause to negotiate hardest, because the policies on both sides follow it.

What coverage costs

Professional liability pricing follows assets under administration, fund types served — hedge funds with daily NAVs and complex instruments price differently from closed-end venture funds — revenue, staff experience, the controls evidenced by a SOC 1 report, and claims history. Cyber pricing turns on portal security, investor-record volume, and data-segregation practices. Crime pricing reflects wire volume, the strength of call-back and dual-authorization controls, and whether coverage for third-party funds is requested. As of 2026, administrators with documented valuation review, segregated client environments, and tested wire controls occupy a noticeably better market than those still running on spreadsheets and email.

What underwriters will ask for

Underwriters treat the administrator's control environment as the risk. The application asks for evidence, not assurances. Have ready: Assets under administration by fund type, number of funds and investors, and the largest single relationship; NAV and capital-account review procedures, including second-person review and the valuation sources used; Wire controls: dual authorization, verified call-back on instruction changes, and the notice-authentication method investors use; Portal security — authentication, encryption, access logging, client-data segregation — and the most recent SOC 1 report; Technology stack, the share of work done in proprietary software, and change-management for calculation engines; Claims, errors corrected at the administrator's expense, and any regulatory contact in the past five years.

Illustrative example: The waterfall calculated on the old term sheet

A private equity fund amends its carried-interest terms in a side letter. The administrator's model is not updated, and two distributions are paid on the superseded terms. The over-paid limited partners decline to return the difference, and the manager looks to the administrator for the shortfall. Professional liability defends the claim and, if the error is the administrator's, funds the settlement within the limit and above the retention. The liability cap in the administration agreement decides how much of the loss is recoverable in the first place.

Illustrative example: The capital-call notice from the wrong domain

An attacker with access to a fund manager's email studies the administrator's notice format and sends a capital-call letter to all limited partners with new bank details. Several wires are sent before an investor calls to confirm. The investors look to the manager and the administrator. The administrator's crime policy responds for its own losses and, depending on the form and the engagement letter, may address the investors' claims; the professional liability policy defends the allegation that the notice process was inadequate. Investor losses of this kind are most often borne by whoever's mailbox was compromised.

Illustrative example: The investor portal export

A fund-tech platform's export function allows an authenticated user of one fund to retrieve documents belonging to another. A limited partner notices, and the platform must notify investors across dozens of funds and explain the defect to every manager it serves. Cyber funds the forensic review, multi-client notification, and regulatory defense. Technology E&O responds to the managers' claims for their own costs and reputational remediation, within the terms of each agreement.

How much does insurance cost for a fund administration business?

Pricing follows assets under administration, fund types, revenue, control evidence such as a SOC 1 report, wire-control design, and claims history. Professional liability is the largest line; cyber and crime scale with investor-record volume and wire activity. As of 2026, the coverage limits managers require tend to drive premium more than the administrator's own preferences do.

Does our E&O policy cover a NAV error?

Yes, if the error is a negligent professional act and the claim is made during the policy period. The policy funds defense and the loss that flows from the error, subject to the limit, the retention, and exclusions for intentional conduct. It does not restore the fund's own investment losses unrelated to the error.

Who pays when an investor wires a capital call to a fraudster?

Usually whoever's systems were compromised and whoever's procedures failed. Crime coverage with social-engineering terms responds to the administrator's own loss, and may extend to third-party funds if the form allows. The administration agreement's allocation of responsibility and the investor's own verification duties matter as much as the insurance.

Do fund-tech platforms need professional liability as well as Tech E&O?

They need one form that covers both, because the same defect is a software failure and a professional error. A technology E&O policy written to include professional services performed through the software, with no exclusion for financial calculations, is the usual answer.

What limits do fund managers require from their administrator?

Institutional managers commonly require professional liability and cyber in the single-digit millions, scaling with assets under administration and the manager's own investor demands. Crime coverage with social-engineering terms is increasingly specified, and some operational due-diligence teams review the policy forms rather than relying on certificates.

Does cyber insurance cover notifying investors across many funds?

Yes, notification and credit monitoring are standard first-party costs, and they scale with the number of individuals affected rather than the number of client funds. Underwriters price for this concentration, which is why portal access controls and per-client data segregation feature heavily in the application.

Caveats and common gaps

Professional liability excludes intentional misconduct and claims arising from investment performance rather than administration error. Social-engineering coverage is sublimited and conditional on the procedures represented in the application. Whether any policy addresses a third party's loss depends on the form's wording and the engagement letter; the liability caps in administration agreements limit what can be claimed regardless of insurance.

Related guides

Insurance for Venture Capital Firms — the GP-side program for the funds administrators serve · Insurance for Private Equity Firms — sponsor-side management liability and portfolio programs · Insurance for Hedge Funds — daily-NAV managers and their valuation disputes · Insurance for Fractional CFO Firms — outsourced finance work outside the fund context · Professional liability (E&O) coverage · Crime and employee dishonesty coverage

Frequently asked questions