Who We Insure

PEO Insurance for PEOs, EORs and Payroll Providers: Co-Employment, Payroll Errors and Fraud

PEO insurance has to cover a business that is legally an employer of other companies' workers. A professional employer organization co-employs the worksite employees of its clients; an employer of record is the sole legal employer of workers it places with clients in other states or countries; a payroll provider moves the money and files the taxes. The main risk across all three is a payroll or compliance error that lands on thousands of paychecks at once, followed by employment claims from workers the firm has never met and fraud against the payroll funds it holds.

Why PEOs, EORs & payroll providers carry specialized insurance

The exposures are structural. A missed tax deposit becomes penalties for every client in the batch, a client manager's harassment becomes a claim against the co-employer, and a compromised login becomes a diverted payroll run. In many states the PEO also carries workers' compensation for worksite employees under its own master policy, covering worksites it does not supervise. This guide covers professional liability for payroll and compliance errors, EPLI with co-employment cover, cyber, crime and fidelity, D&O, and how workers' compensation is structured for PEOs, EORs, and payroll providers, plus what client contracts require and what underwriters ask.

Who this guide is for

Written for founders, operators, and risk and finance leaders at firms that employ, co-employ, pay, or administer benefits for other companies' workers. Professional employer organizations, including certified PEOs and industry-specific PEOs; Employers of record and global employment platforms that hire workers on behalf of clients; Payroll service providers, payroll software companies with tax-filing services, and administrative services organizations; Not for staffing agencies that recruit and place their own temporary workers, or for HR software without payroll or employment functions — see the staffing and HR tech guides linked below.

The risk profile of a PEO, EOR or payroll provider

The firm's errors and its clients' conduct both become its claims, and most exposures scale with worksite headcount rather than the firm's own revenue. Key exposures: Payroll and tax errors — missed deposits, misclassification, wrong withholdings, late filings — producing penalties and client claims across the book; Employment claims by worksite employees naming the PEO or EOR as employer: harassment, discrimination, wage-and-hour, and wrongful termination; Diverted payroll funds through compromised credentials, fraudulent change-of-account requests, or insider theft; Breaches of Social Security numbers, bank details, and benefits data for every worksite employee; Benefits-administration errors and fiduciary claims on plans the firm sponsors or administers; Workers' compensation losses at client worksites the firm does not supervise.

Professional Liability (E&O) for PEOs, EORs & payroll providers

The policy for payroll, tax, benefits, and compliance errors. It should define professional services to include payroll processing, tax filing and remittance, benefits administration, and, for EORs, employment itself. Confirm how the form treats penalties and interest assessed on clients, because those are the most common loss. Typically responds to: client claims for penalties, interest, and losses from payroll and tax errors; benefits-administration and enrollment mistakes; defense of regulatory inquiries tied to professional services, where granted.

Employment Practices Liability (EPLI) for PEOs, EORs & payroll providers

A PEO or EOR is sued as an employer for conduct at client worksites. The EPLI form must cover worksite employees as well as the firm's own staff, include wage-and-hour defense where available, and carry third-party coverage. Many firms also offer a client-level EPLI program, which makes their own coverage the excess layer in practice. Typically responds to: claims by worksite employees naming the firm as employer or co-employer; claims by the firm's own internal staff; third-party claims and wage-and-hour defense where included.

Crime, Fidelity, and Social-Engineering for PEOs, EORs & payroll providers

The firm holds and moves client payroll funds. Crime coverage with client-funds, computer fraud, funds-transfer fraud, and social-engineering agreements responds when payroll is diverted or stolen; whether client funds in the firm's possession are covered must be answered expressly in the form.

Cyber Liability for PEOs, EORs & payroll providers

Payroll systems hold the most monetizable personal data there is — identifiers, bank accounts, pay history — for every worksite employee. Cyber funds breach response across the entire book, regulatory defense, business interruption for a locked payroll platform, and funds-transfer fraud, and clients increasingly require it at limits that reflect their own headcount.

Workers' Compensation Program for PEOs, EORs & payroll providers

For PEOs, workers' compensation is a product and an exposure. Depending on the state, worksite employees are covered under the PEO's master policy or under client-based policies the PEO arranges, and large programs are often structured with deductibles or captives. Loss-sensitive structures reward underwriting discipline on client selection and safety, and punish its absence.

Directors & Officers and Fiduciary Liability for PEOs, EORs & payroll providers

D&O protects leadership from investor, client, and regulator claims; fiduciary liability covers the firm's role as sponsor or administrator of health and retirement plans for worksite employees. Firms that sponsor multiple-employer plans should confirm the fiduciary form's limits reflect plan assets across the whole book.

Contract and certificate requirements

Client service agreements allocate employment responsibilities between the firm and the client, and that allocation drives the insurance review. Client exhibits increasingly require E&O, cyber, crime, and EPLI at stated limits, with the client as additional insured where applicable, and enterprise clients ask for the workers' compensation structure and benefits plan documents during vendor review. Regulation adds to the stack: states license or register PEOs and may require bonds, the Internal Revenue Service requires a bond for certified PEOs, and cross-border EORs face each country's employment and social security mandates. Your advisor should map the client agreement, the regulatory requirements, and the policies side by side; the common gap is a client indemnity for penalties that the E&O form limits.

What coverage costs

Pricing for a PEO, EOR, or payroll provider turns on worksite employee count and payroll volume, client industries and states, the share of revenue from tax filing and benefits administration, funds-movement and access controls, claims history, and the workers' compensation structure. Workers' compensation is usually the largest line by far, priced on client payroll by class code and the firm's loss experience. E&O, EPLI, and crime are priced on the scale of what the firm touches rather than its own revenue, and cyber severity follows the data: IBM's Cost of a Data Breach Report 2026 put the global average breach cost at $4.99 million, and a payroll breach touches every worksite employee in the book. Limits follow client exhibits, the largest payroll run, and state requirements.

What underwriters will ask for

Underwriters evaluate the firm the way a client's diligence team would: by what it controls across the book. Have ready: Worksite employee count, payroll volume, and client distribution by industry and state; Service mix: co-employment, employer-of-record, payroll and tax filing, benefits administration; Funds controls: segregation of client funds, change-of-account verification, dual approval, reconciliation; Workers' compensation structure, loss runs, and client-selection and safety practices; Employment-claims history, worksite and internal, and any client-level EPLI program; Security posture, SOC reports, access controls, and incident history.

Illustrative example: The missed deposit across the batch

A configuration error during a payroll-system migration causes federal tax deposits for an entire client segment to be filed late for two cycles. Penalties and interest are assessed against each client, and dozens demand reimbursement under the service agreement. Professional liability responds to the clients' penalty and interest claims, subject to the form's treatment of fines and its retention. Whether the batch counts as one claim or many is a wording question that materially changes the retention outcome.

Illustrative example: The worksite harassment claim

A worksite employee at a client restaurant group alleges harassment by a client manager and names the PEO as her employer. The client's own EPLI is minimal, and the client looks to the PEO's program. The firm's EPLI defends the claim as co-employer, provided worksite employees are insured persons under the form. The service agreement's allocation of supervision to the client supports contribution, and a client-level EPLI program would have put the primary layer where the conduct occurred.

Illustrative example: The payroll that went to the wrong account

An attacker using a compromised client administrator login changes direct-deposit details for a group of worksite employees days before payroll. The run executes, the funds are gone, and the employees must be paid again. Crime coverage's computer fraud, funds-transfer fraud, and social-engineering agreements respond within their sublimits, and cyber funds the forensics and notification. Change-of-account verification and anomaly detection are the controls that would have stopped it and the ones underwriters now require.

How much does PEO insurance cost?

It depends on worksite employee count, payroll volume, client industries and states, service mix, funds-movement controls, claims history, and the workers' compensation structure, which is usually the largest line. As of 2026, E&O, EPLI, and crime limits are set with reference to client exhibits and the largest payroll run rather than the firm's own revenue.

Does our EPLI cover claims by worksite employees?

Only if the form defines insured persons to include worksite or co-employed employees, which standard EPLI forms do not. PEO-specific EPLI forms and endorsements add them. Confirm the definition, the third-party extension, and wage-and-hour defense before relying on the policy.

How is workers' compensation structured for a PEO?

It varies by state. Some states allow worksite employees on the PEO's master policy; others require client-based policies arranged by the PEO. Larger programs use deductibles or captives to retain predictable losses. The structure affects licensing, client contracts, and the firm's balance sheet, so it is designed with the broker and counsel together.

Does E&O cover tax penalties assessed on our clients?

It should, and many payroll E&O forms expressly cover client penalties and interest caused by the firm's error. Some forms exclude fines and penalties generally; that exclusion must be carved back for client penalties or the policy misses the most common claim in the category.

What coverage responds when payroll funds are diverted by fraud?

Crime insurance with computer fraud, funds-transfer fraud, and social-engineering agreements, supported by the funds-transfer fraud coverage in a cyber policy. Confirm that client funds in your possession are covered, not only your own, and match the sublimits to your largest payroll run.

Do employers of record face different exposures than PEOs?

The structure differs: an EOR is the sole legal employer, so employment claims land on it directly rather than as a co-employer, and cross-border EORs face each country's employment, social security, and insurance mandates. The policies are the same families, with wording adjusted for sole-employer status and foreign jurisdictions.

Caveats and common gaps

Worksite-employee definitions in EPLI, client-funds coverage in crime forms, and penalty wording in E&O forms vary by carrier and decide whether the central claims in this category are covered. Workers' compensation structures are governed by state law. Review every form against the service agreement, the state requirements, and the funds flow before relying on it.

Related guides

Insurance for HR Tech Companies — HR software without employment or payroll functions · Insurance for Staffing Agencies — agencies that recruit and place their own temporary workers · Insurance for Background Screening Companies · Insurance for HR Consulting Firms · Employment practices liability coverage · Workers' compensation coverage · Crime and employee dishonesty coverage · Insurance for Startups With International Employees

Frequently asked questions