Guides
Startup insurance: what founders need at each stage
Which policies a startup needs before launch, at the first customer contract, the first hire and the first investor, and the trigger behind each one.
A startup does not need every policy on day one, and it does not get to wait for the first claim. The practical rule is to buy coverage when a trigger arrives: a lease or customer contract, the first employee, the first outside investor, or the first time you hold other people's data or money. Each stage below names the policy that trigger usually calls for, who asks for it, and the mistakes that cost founders the most.
Stage by stage
| Stage | Typical trigger | Coverage to put in place |
|---|---|---|
| Formation, no revenue | Laptop, home office, a shared workspace | Review the homeowners or renters policy for business limits; cyber if you already hold customer data; skip D&O |
| First customers | Customer contract, lease, platform terms | General liability or a BOP; professional or technology E&O for services and software; cyber; product liability if you sell a physical product |
| First employee | Payroll, a contractor who works like an employee | Workers' compensation (state law); employment practices liability; hired and non-owned auto if staff drive for work |
| Outside capital | Term sheet, board seat, investor rights agreement | Directors and officers liability; key person if investors or lenders ask; crime for wire and payment risk |
| Scale or exit | Enterprise customers, a benefits plan, an acquisition | Higher limits and an umbrella; fiduciary and ERISA bond for a retirement plan; tail coverage and reps and warranties in a deal |
Use the What business insurance do I need? at each step. The reasoning for the new-business basics sits in insuring a brand-new business with no loss history.
Before launch
Pre-revenue companies carry the least exposure and often buy the wrong thing first. A homeowners policy excludes most business activity (see home-based business insurance: why a homeowners policy falls short), so the founder working from a spare room has little protection for equipment or visitors. If you rent a workspace, the lease or coworking agreement will usually set the liability requirement; read it before you sign. If you keep user data on a laptop or in a cloud account, the cyber exposure exists on day one even with zero revenue.
Do not buy Directors and officers (D&O) insurance for a two-founder shell with no investors, no employees and no board. The coverage matters when someone other than the founders can sue the company's managers.
First customers: contracts set the minimums
Once you sign a customer agreement, the contract usually sets the insurance. Enterprise buyers commonly require general liability, professional or tech E&O, cyber and sometimes an umbrella, with named limits and a certificate. The exact numbers are negotiated, not standard, so ask the buyer's procurement team for their insurance exhibit before you quote. Tools such as the contract insurance requirements checker help, and how to review the insurance requirements in a contract explains how to read the language.
Match the policy to the product:
- Software, data or consulting. Customer claims that your product failed or your advice was wrong are financial-loss claims. General liability does not respond to them; Technology E&O insurance for software, SaaS and IT firms or Professional liability (E&O) insurance explained does. These policies are written on a claims-made policy basis, so continuous coverage and the retroactive date matter. See prior acts coverage and retroactive dates.
- Cyber. First-party response costs and third-party privacy claims belong to cyber insurance: what it covers for a business. Underwriters now ask about multifactor authentication, backups and endpoint detection; the cyber insurance readiness checklist shows the controls. The boundary with tech E&O is explained in Cyber insurance vs tech E&O: which policy pays when.
- Physical products. Hardware, food, supplements and consumer goods bring product liability insurance for makers, sellers and importers, and marketplaces and retailers often require it before they list you. Recall coverage is separate; see product recall insurance.
- Marketplaces and sales channels. Platform seller agreements frequently demand a certificate naming the platform as an additional insured. Check the endorsement, not just the certificate; see certificates of insurance: what they prove and what they do not.
First hire
Workers' compensation is a state-law requirement, and the trigger differs by state: some states require it with the first employee, others set a headcount threshold, and Texas lets most private employers opt out. Check the state in the workers' comp and benefits requirements by state before the first offer letter. A contractor who works set hours, uses your tools and takes direction is a classification risk; see independent contractors and workers' comp: the misclassification risk. Founders who use a PEO should understand who holds the policy; see PEOs and workers' comp: co-employment explained.
Employment claims arrive early at startups: a founder fires a friend, a candidate alleges discrimination, an employee sues over unpaid overtime. Employment practices liability insurance (EPLI): what it covers covers the first two types of claim. Most EPLI policies carry a wage-and-hour exclusion or a sublimit; see Wage-and-hour exclusions and third-party EPLI.
Investors change the program
Venture investors typically make D&O insurance a condition of the deal. As one example of how the covenant reads, an investors' rights agreement filed with the SEC by LB Pharmaceuticals in 2025 says that for so long as a Preferred Director is serving on the board, the company shall not cease to maintain a D&O policy in an amount of at least $3,000,000 (LB Pharmaceuticals Form S-1, Exhibit 4.2). Amounts and wording are negotiated in each financing and vary by deal; the NVCA model documents are the usual starting point. A D&O program for a private company also usually bundles employment practices, fiduciary and crime coverages. The structure, including Side A protection for individual directors, is in D&O insurance for private companies and startups and D&O Sides A, B and C explained.
Two other asks appear around funding:
- Key person insurance. Investors or lenders may want a policy on a founder whose loss would sink the company. See key person insurance: protecting the business from a loss of talent.
- Crime coverage. Companies that move money by wire are targets for payment fraud. commercial crime insurance: what it covers and what it excludes and business email compromise and funds transfer fraud coverage show what policies pay.
If the company sponsors a 401(k) or other plan, ERISA requires a fidelity bond for each person who handles plan funds, equal to at least 10% of the funds handled, with a $1,000 minimum and a $500,000 maximum per plan official (up to $1 million for plans holding employer securities), according to DOL Field Assistance Bulletin 2008-04. That is distinct from fiduciary liability insurance; see ERISA fidelity bonds vs fiduciary liability insurance.
Where startups buy
Founders buy through independent brokers, through agents of a single carrier, and through digital intermediaries built for venture-backed companies. Vouch describes itself on its site as an insurance broker for growth companies, and Embroker lists packages for funded startups. In either case, confirm which insurer issues the policy. Whichever route you take, compare the exclusions, retroactive dates and limits rather than the headline price, and ask who the issuing insurer is and how it is rated; see how to judge a business insurance company. The submission underwriters read is described in how to prepare an insurance submission underwriters will read.
A hypothetical example
Say a 12-person software company closes a Series A. The details are invented for illustration.
| Event | Coverage that responds |
|---|---|
| A customer says a data-processing bug caused a $400,000 billing error | Technology E&O, claims-made |
| An engineer's laptop is stolen with customer records on it | Cyber (breach response); computers also appear on property policies |
| A former sales rep alleges discrimination | EPLI |
| A shareholder alleges the founders misstated the company's traction | D&O, Side A and B |
| An employee falls during an offsite | Workers' compensation |
| An attendee trips at the offsite venue | General liability |
Before the round, the company had general liability and cyber. After it, the investors' counsel required D&O with a minimum limit and asked for evidence of EPLI.
Key takeaways
- Buy by trigger: contracts and leases first, employees second, investors and benefit plans third.
- Contracts with customers and investors usually set the limits. Get the insurance exhibit before you negotiate price.
- Software and service startups need E&O and cyber because general liability does not respond to financial-loss claims.
- Workers' comp rules differ by state, and the first hire or a misclassified contractor can create the obligation.
- Venture deals commonly require D&O; the limit is negotiated per deal and should be tracked as the company grows.