Who We Insure

Nonprofit Liability Insurance: Board Claims, Wrongful Termination and Donor-Data Breaches

Nonprofit liability insurance covers an organization whose directors are volunteers, whose employees are mission-driven and often underpaid, and whose donors, beneficiaries, and regulators all have standing to complain. The main claims are employment-related — wrongful termination, discrimination, and retaliation make up most nonprofit management liability losses — followed by board decisions challenged by members, funders, or a state attorney general, and breaches of donor and client data held in systems that were never budgeted for security.

Why nonprofits & foundations carry specialized insurance

Tech-forward and larger nonprofits carry exposures that a small charity's package policy does not contemplate. They run platforms and apps for beneficiaries, process donations and grants through online systems, employ staff across states, operate programs that involve minors or vulnerable adults, and hold endowments that make fiduciary and investment decisions material. The insurance program for such an organization looks more like a company's than a volunteer group's, with D&O, EPLI, cyber, and abuse coverage at limits that match the mission's scale. This guide covers nonprofit D&O with employment practices coverage, cyber for donor and client data, general liability for programs and events, crime, fiduciary liability, and abuse and molestation coverage where programs need it, together with the grant, venue, and underwriting requirements boards should expect.

Who this guide is for

Written for executive directors, board chairs and treasurers, chief operating officers, and finance leads at nonprofits, foundations, and associations with staff, programs, and technology to protect. Operating nonprofits with employees, multi-state programs, and online platforms serving beneficiaries; Private and community foundations managing endowments and grant programs; Professional associations, advocacy organizations, and nonprofit startups funded by venture philanthropy; Not for all-volunteer groups without staff or programs — a simple package policy may be adequate there.

The risk profile of a nonprofit

Nonprofit claims come from the people the organization serves, employs, and answers to. Employment matters are the most frequent; board and data matters are the most expensive. Key exposures: Employment claims — wrongful termination, discrimination, harassment, retaliation, and wage-and-hour — from staff and from volunteers treated as employees; Board and management decisions challenged by members, donors, funders, or the state attorney general: restricted-fund use, conflicts of interest, executive compensation, and mergers; Breaches of donor payment data, beneficiary records, and case-management systems, often through third-party fundraising platforms; Bodily injury at programs, events, and facilities, including volunteers injured while serving; Abuse and molestation allegations in programs serving minors, the elderly, or vulnerable adults; Theft and misappropriation by insiders with access to donations, grants, and payment systems.

Nonprofit Directors & Officers with Employment Practices Liability for nonprofits & foundations

Nonprofit D&O is usually written as a combined management liability form covering directors, officers, employees, volunteers, and the organization itself, with employment practices coverage as the component that generates most claims. It defends board decisions, regulatory and attorney general inquiries, and employment suits, and it should include third-party discrimination coverage for claims by beneficiaries and volunteers, defense outside the limits where available, and a duty-to-defend structure that a volunteer board can rely on without managing litigation. Typically responds to: wrongful termination, discrimination, harassment, and retaliation claims by staff and volunteers; claims against directors and officers over governance, finances, and conflicts of interest; state attorney general and regulatory inquiries into the organization's conduct.

Cyber Liability for nonprofits & foundations

Donor records, payment data, and beneficiary files — health, immigration, housing, counseling — are as sensitive as anything a company holds, and nonprofits are targeted precisely because their security budgets are thin. Cyber funds breach response, notification, regulatory defense, extortion, and business interruption, and it should extend to incidents at the fundraising, email, and case-management platforms the organization relies on.

General Liability for nonprofits & foundations

Covers bodily injury and property damage at facilities, programs, and events, including volunteer injuries where the policy is endorsed for them, host liquor at fundraisers, and the additional-insured requirements venues, municipalities, and funders impose. Abuse and molestation coverage is usually written as an endorsement or a separate policy alongside it for organizations serving minors or vulnerable adults. Typically responds to: participant, visitor, and volunteer injuries at programs and events; venue and funder additional-insured requirements; abuse and molestation claims where the coverage is added.

Crime & Employee Dishonesty for nonprofits & foundations

Insider theft is a recurring nonprofit loss because small finance teams combine custody, recording, and approval in one person. Crime coverage responds to employee theft, forgery, funds-transfer fraud, and social-engineering losses, and grant agreements and auditors increasingly ask for it. Dual approval on disbursements is the control underwriters expect.

Fiduciary Liability for nonprofits & foundations

Covers the fiduciaries of the organization's retirement plan for claims over administration, fees, and investment options. It is distinct from the board's duties over the endowment, which the D&O policy addresses, and it is inexpensive for an organization with a 403(b) or 401(k) plan.

Contract and certificate requirements

Grant agreements from government agencies and foundations commonly require general liability, workers' compensation, D&O, and increasingly cyber at stated limits, with certificates and sometimes additional-insured status for the funder. Venue and municipal permits for events require general liability with host liquor coverage. Contracts to deliver services for a government agency may add professional liability and abuse coverage requirements and audit rights over the certificates. Boards should also set requirements inward. Fiscal sponsorship agreements, chapter and affiliate relationships, and shared-service arrangements should state whose policies respond for whose activities, and vendors handling donations or beneficiary data should carry cyber and crime coverage of their own. Volunteer agreements and waivers reduce exposure but do not replace the coverage.

What coverage costs

Nonprofit D&O and EPLI pricing follows headcount, states of operation, turnover and employment practices, budget size, program type, governance practices, and claims history; organizations serving vulnerable populations or engaged in advocacy price differently from grantmaking foundations. Cyber pricing follows donor and beneficiary record counts, platform dependencies, multi-factor authentication, and backups. General liability pricing follows program and event exposure; abuse coverage follows the screening and supervision program; crime follows cash and payment controls. As of 2026, the nonprofit management liability market is well established, and most organizations with staff can assemble the full program through carriers that specialize in the sector, with limits scaled to budget and funder requirements rather than to a formula.

What underwriters will ask for

Underwriters evaluate governance and employment practices first, then programs and data. Have ready: Mission, programs, budget, headcount by state, and volunteer count, with any work involving minors or vulnerable adults; Governance: board composition, conflict-of-interest policy, financial controls, audited statements, and the most recent Form 990; Employment practices: handbook, training, hiring and termination procedures, and turnover and claims history; Screening, training, and supervision program for staff and volunteers in sensitive programs; Data held on donors and beneficiaries, platforms used, multi-factor authentication, and backup practices; Grant and contract insurance requirements, event calendar, and loss history across all lines.

Illustrative example: The program director's termination

A long-tenured program director is terminated after a restructuring that the board approved to address a funding shortfall. She alleges the restructuring was pretext for age discrimination and that she was retaliated against for raising concerns about restricted-fund use to the treasurer months earlier. The management liability policy's employment practices coverage assigns defense counsel and funds settlement for the discrimination and retaliation claims; the restricted-fund allegation, if pursued by a funder or the attorney general, falls under the D&O part of the same form.

Illustrative example: The donor database and the fundraising platform

The organization's online donation platform is compromised through a vulnerability in a third-party plugin, exposing names, addresses, and partial payment data for tens of thousands of donors. The platform vendor's contract limits its liability to fees paid. Cyber funds the forensic investigation, notification to donors across many states, call-center support, regulatory response, and the public-relations work that protects the next fundraising campaign. The vendor contract's limitation of liability is why the organization needs its own coverage.

Illustrative example: The treasurer's transfers

An internal review before an audit finds that a bookkeeper with both payment authority and reconciliation duties moved grant funds into a personal account over three years using fictitious vendor records. Crime coverage's employee theft insuring agreement responds to the loss, subject to the limit and to the discovery and proof requirements of the form. The funder whose grant was diverted may also assert a claim against the board, which D&O addresses.

What does nonprofit liability insurance cost?

Pricing follows headcount and states, budget, program type and populations served, governance and employment practices, data held, event exposure, and claims history, so there is no standard figure. As of 2026, most staffed nonprofits assemble nonprofit D&O with employment practices coverage, general liability, cyber, and crime through sector carriers, with limits scaled to funder requirements and budget.

Does a nonprofit need D&O insurance if directors are volunteers?

Yes. Volunteer protection statutes limit some personal liability but do not cover the organization, do not apply to every claim, and do not pay for defense. Nonprofit D&O defends the directors, the officers, and the organization, and most experienced board candidates ask whether it is in place before joining.

Are volunteers covered by our general liability policy?

Volunteers are usually covered as insureds for liability they cause while acting for the organization, but their own injuries are not covered unless the policy is endorsed for volunteer accident medical coverage. Confirm both, especially for programs with physical activity or travel.

Do we need abuse and molestation coverage?

Any organization whose programs involve minors, the elderly, or vulnerable adults should carry it, because general liability policies commonly exclude abuse claims and the allegations are among the most severe a nonprofit faces. Underwriters require a screening, training, and supervision program as a condition.

Does nonprofit liability insurance cover an attorney general investigation?

Nonprofit D&O forms typically cover regulatory and attorney general inquiries into governance and finances, often with a defense sublimit, and some add pre-claim inquiry coverage for individuals. Fines and penalties are usually excluded. Ask how the form treats investigations that have not yet named an individual.

Do grants require specific insurance?

Government and foundation grants commonly require general liability and workers' compensation at stated limits and increasingly D&O and cyber, with certificates and sometimes additional-insured status. Read the insurance clause before accepting the grant so the cost of compliance is in the budget.

Caveats and common gaps

Nonprofit management liability forms vary in volunteer and third-party coverage, defense structure, and regulatory sublimits. Abuse coverage is excluded from most general liability forms unless added. Crime coverage carries discovery and proof requirements. Grant and venue requirements set limits that a package policy may not meet, so read them before the policy renews.

Related guides

Directors & Officers liability coverage — the core board protection · Employment practices liability coverage — the most frequent nonprofit claim · Insurance for Startup Board Members — the individual director's view of board liability · Insurance for Startup Accelerators & Venture Studios — nonprofit incubators and university programs · Insurance for Mental Health Apps — nonprofits delivering digital behavioral health services · Cyber liability coverage · General liability coverage

Frequently asked questions