Maker workshop with a long bench and shelves of stock in daylight

Business Insurance for Small and Mid-Market Companies

Business insurance is not a policy. It is a category: a stack of coverages that together protect a company from lawsuits, property damage, employee injuries, professional errors and a growing list of other risks that can derail an otherwise healthy operation. Most small businesses need at least two or three of them, and the useful question is not what exists but which two or three you start with.

Talk to an expert

Get a quote

Continue

The stack

What does business insurance cover?

The stack covers the exposures that turn a bad day into a business-ending one: a customer injury, a fire at your facility, a professional error that costs a client money, a breach that exposes your customer records. No single policy answers all of those, which is the entire reason it is a stack rather than a product.

01Most stacks start here

General liability. The one contracts name.

Third-party bodily injury, property damage, personal and advertising injury, and legal defense costs. The policy most contracts and commercial leases name by default, and usually the first one a business is asked to evidence.

02Most stacks start here

Workers compensation. From the first hire.

Employee medical bills and lost wages from work-related injury or illness. Legally required in 49 states the moment you take on staff, which makes it the one line with an answer rather than a judgement.

03Most stacks start here

Commercial property.

Your building, equipment, inventory and fixtures against fire, theft and covered weather events. For any business with physical assets or a commercial space, owned or leased.

04Then, depending

Professional liability. Where advice is the product.

Claims that your professional services caused a client a financial loss through error, omission or negligence. For consultants, service providers, tech companies and financial professionals.

05Then, depending

A business owner's policy.

General liability and commercial property bundled into one form, usually at a lower combined rate. The common starting point for a smaller business with premises and regular public contact.

06Then, depending

Cyber liability. The data, not the website.

Breach response, ransomware recovery, regulatory notification costs and third-party liability. For any business that stores customer data, takes payments or operates online.

07Then, depending

Commercial umbrella.

Liability limits above your underlying policies. For higher-risk industries, and for contracts demanding higher total limits than the primary carries on its own.

Two of those seven are structural rather than additional, and both are worth understanding before you buy anything else. A smaller business with premises and public contact should price how the bundled version works against buying the two halves separately, and any business facing a contractual limit higher than its primary should look at a layer above your primary limits rather than at raising every underlying policy in turn.

Your stack

Four questions that decide your stack

Three questions settle most of a stack and a fourth decides how complicated it gets. All four are about the shape of the business rather than the industry it sits in, because two companies in the same sector can need very different programmes.

Do you have employees?

The clearest line in the whole subject, and the only one with a legal answer rather than a commercial one.

What underwriters askHeadcount, payroll by role, the states you employ in, and any contractors
The claim that shows upAn employee injured at work, with medical costs and lost wages
Endorsements it needsWorkers compensation, at the threshold your state actually sets
Watch forIt is mandatory in 49 states from the moment you hire. Texas is the only state where most private employers can opt out, and opting out there still leaves you exposed if an injured employee sues you directly.Talk to a broker about this

Beyond these four the specifics follow the trade. A business handling customer payment data should carry cyber. A contractor frequently has to meet a minimum general liability limit to win the job at all. A hospitality business may need liquor liability sitting on top of everything else. Those are conversations about what you do rather than about your shape, and they are where our industry pages start rather than this one.

Bakery counter and till with the display shelves behind it

Which policy answers, and the gaps between them

The stack works when the seams hold. Most of the surprises in commercial insurance are not a policy failing to do its job. They are a loss falling between two policies that each assumed the other had it.

Four losses at one business, and which policy each one lands on:

Covered: A customer trips in your shop and is injured. General liability, with defense.

Not covered: One of your staff is injured doing the same job. That is workers compensation, and general liability does not reach it.

Covered: A fire damages your premises and the stock inside. Commercial property, or the property half of a bundled policy.

Not covered: The income you lose during the weeks you are shut. That is business interruption, endorsed on rather than assumed.

The pattern is worth stating plainly, because it is the argument for taking the stack seriously rather than buying whichever policy a contract happened to ask for. Each form has a clear centre and a hard edge, and the losses that hurt most tend to land on somebody's edge. The fourth of those four is the one businesses most often assume they already have, so read cover for the income you lose while closed before you need it rather than after.

The gaps

What the stack still does not cover

Even a complete-looking programme leaves gaps, and most of them are gaps by design rather than by oversight. Eight that catch businesses out, with what answers each one.

Flood and earthquake

WHAT YOU NEED

Separate policies. Both are excluded on standard property forms by default, everywhere, regardless of where you trade.

Employee injury, without workers compensation

WHAT YOU NEED

Workers compensation. No liability policy in the stack will answer an injury to your own staff.

A professional error, under general liability

WHAT YOU NEED

Professional liability. An error is not an accident, and the general liability form responds to accidents.

A data breach, under either liability policy

WHAT YOU NEED

Cyber liability. Neither general nor professional liability reaches breach response, notification or ransomware.

Vehicles used for business

WHAT YOU NEED

Commercial auto. A personal policy does not cover a vehicle used primarily for business, and nearly every state requires the commercial version.

Serving alcohol

WHAT YOU NEED

Liquor liability. Standard general liability specifically excludes alcohol-related claims for businesses in the trade of serving it.

Your own work product

WHAT YOU NEED

Nothing. No standard form pays to redo work you got wrong. The damage that work causes is a different question from the rework itself.

Anything excluded beneath an umbrella

WHAT YOU NEED

A fix on the underlying form. An umbrella extends limits on covered claims, so extra limit above an exclusion is extra limit over nothing.

The fourth and the sixth are the two that have moved fastest. A business that took no card payments five years ago may take them now, and a cafe that adds a licence has changed its liability profile rather than its menu. A stack assembled correctly in 2023 can have a hole in it today without anything having gone wrong, which is why the data question in particular is worth revisiting: cover for a breach of client data is the fastest-moving line in the stack.

The order

It is a stack, and the only real question is which two or three you start with

Every business could buy every policy on this page. Almost none should, and the ones that do it in the wrong order end up over-insured against the loss they were never going to have and under-insured against the one they were. Three principles decide the order, and not one of them is about price.

Rental agreement on a clipboard with a set of keys resting on it

Start with what the law and the contract already decide

Workers compensation the moment you hire, in 49 states. Commercial auto for any vehicle used mainly for business, in nearly every state. Then the general liability limit your lease or your client contract specifies, which is frequently higher than what you would have chosen and is not negotiable in the way a preference is. This layer is not a judgement call at all, and settling it first stops the rest of the conversation being distorted by it.

Shop shelves stacked with jars, tins and packaged stock

Then close the gap your revenue actually sits on

A business whose value is physical assets needs the property side. A business whose value is advice needs professional liability. A business whose value is a customer database needs cyber. Most operators can name which of those they are in a single sentence, and most stacks get built without anyone asking. It is the single highest-value question on this page.

Grid of timber pigeonhole shelving rising in even layers

Then buy limit, not more policies

Once the forms are right, additional protection is usually cheaper bought as an umbrella above them than as a higher primary limit on each one. That is also the order contracts tend to demand: a total limit rather than a particular structure. Buying limit before the forms are right is the common and expensive mistake, because a tower follows the form underneath it.

Those three steps are why we start by asking what you do rather than what you want to buy. The stack a business needs is largely readable from its headcount, its assets, its contracts and where its revenue comes from, and the rest is limits. The contracts are usually the part nobody has read closely, so start with what your contract asks the certificate to say and work back from there.

Speak to our team

Stack check

Tick what your business actually is

Each line below adds something to the stack or changes what it has to carry. Nothing here is priced and nothing here is a quote.

What the stack has to include

Tick what describes your business and the policies it implies appear here.

Bring your headcount, your lease and one client contract. Between them they answer most of this, and the contract usually turns out to be the document setting your limits rather than anything you chose.

Speak to our team

Cost

What drives the cost of business insurance

There is no single answer, which is exactly why a flat quote from an online tool is almost always wrong before it has factored in your real exposure. What follows is what actually moves the number, across every policy in the stack.

01

Industry and classification code

The first thing every rate table reads, on every line. Two businesses with identical revenue in different class codes are not in the same conversation at all.

Effect on premium
02

Revenue and payroll

General liability frequently scales with revenue and workers compensation is calculated directly on payroll by class code. Both are audited after the fact rather than taken on trust.

Effect on premium
03

Claims history

A clean loss history moves the rate on every line at once, and on the harder classes it decides carrier appetite rather than only price.

Effect on premium
04

Location and state

Jurisdiction sets the legal minimum, and local claim frequency and jury awards set the rest. Multi-state operations carry the compound version of this.

Effect on premium
05

Property values and assets

Building value, building age, contents and inventory drive the property side, and the age of the building does more work than most owners expect it to.

Effect on premium
06

Data volume and security controls

What you hold, how much of it, and what protects it. On cyber this is effectively the whole submission, and controls are now rated rather than merely noted.

Effect on premium

Three marks is an input that moves a premium more than the others here. It is a relative weighting drawn from how carriers rate, not a rate and not a quote.

On structure rather than price

Bundling where it makes sense, such as a business owner's policy instead of separate general liability and property policies, generally reduces total spend for a business it suits. That is a question about structure rather than a discount, and it is worth pricing both ways rather than assuming either. The same is true one layer up: an umbrella above correct forms usually costs less than raising every primary limit underneath it.

Talk to an expert

Process

How a placement works

We understand your business first, then take it to the carriers who want to write it. An advisor walks you through the options and what they cost. No two files are the same, so what follows is the shape of a placement rather than a script.

  1. Loss runs and a payroll schedule spread on a desk beside a calculator and laptop

    You tell us what the business actually does

    Industry, revenue, headcount and the types of work you take on. From that we identify which lines belong in your stack and which are noise, and build one submission rather than asking you to describe the business repeatedly.

  2. Brokerage desk with a monitor in morning light

    We go to market in parallel, not one at a time

    Your submission goes to the carriers most likely to bind your risk at the same time rather than sequentially, which is what makes the quotes that come back genuinely comparable instead of a series of separate conversations.

  3. Stamped certificate on a clipboard with a pen and a magnifier

    An advisor reads what came back

    What limits make sense, where an exclusion could hurt you, and which carrier has the better track record on the line that matters to you. We also handle how COIs get issued for the landlords, clients and licensing bodies who need proof before you can start.

It is a category rather than a policy: a stack of separate coverages, of which most small businesses need two or three to start with.

Whatever the law and your contracts already decide, which is usually workers compensation and a general liability limit. After that, the policy covering wherever your revenue actually sits.

In 49 states, from the moment you hire. Texas is the only state where most private employers can opt out, and opting out still leaves you exposed to a direct suit from an injured employee.

General liability and commercial property bundled into one form, usually at a lower combined rate. It suits a smaller business with premises and regular public contact.

No. An error or omission that costs a client money is professional liability. General liability responds to accidents, and advice is not an accident.

If you store customer records or take card payments, yes. The exposure follows the data rather than the website.

The requirements compound. Employment thresholds, commercial auto rules and licensing all differ, and contract terms sit on top of the legal minimum in each one.

Usually, once the underlying forms are right. It is generally cheaper than raising each primary limit, but it only extends cover that already exists underneath it.

Get started

Ready to build your coverage stack?

Whether you are launching, replacing an underperforming broker or consolidating policies under one roof, we start from what your business does rather than from a product list, and your submission goes to the carriers most likely to bind it in parallel rather than one at a time.

  • Submissions run in parallel, not sequentially
  • 100+ carrier portals
  • Standard and E&S markets across the stack
Row of small business frontages on a quiet street
Export Design
Download files for your developer
General
WordPress Builders