Errors and Omissions (E&O) Insurance: Coverage, Claims-Made Rules, and Tech/AI Gaps

Errors and omissions (E&O) insurance—also called professional liability insurance—is a commercial liability coverage line that protects service providers, software vendors, and research contractors against third-party claims of financial loss caused by professional negligence, inaccurate advice, software failures, or omissions in delivered work. Unlike commercial general liability (CGL), which covers physical bodily injury and property damage, standard E&O covers pure economic loss and legal defense costs under a claims-made policy structure.

Definition and Scope of Errors and Omissions Insurance

According to the U.S. Small Business Administration’s commercial insurance framework (sba.gov/business-guide/launch-your-business/get-business-insurance), professional liability (E&O) insurance applies to organizations that provide services to clients and protects against financial loss resulting from malpractice, errors, and negligence. Depending on the sector, the same underlying legal mechanism carries specialized names:

• Errors and Omissions (E&O): Used by technology vendors, SaaS and AI developers, management consultants, contract research organizations (CROs), and administrative service providers.
• Technology E&O (Tech E&O): Pairs professional services negligence coverage with technology product failure coverage (such as software bugs, API downtime, or algorithmic miscalculation causing client financial loss) and is frequently bundled with cyber liability.
• Medical Professional Liability (Malpractice): Covers clinical acts or omissions in patient care that result in bodily injury or death, governed in federal contracting by clauses such as 48 CFR § 52.237-7 (Indemnification and Medical Liability Insurance).

What Does Errors and Omissions Insurance Cover?

An E&O policy pays legal defense costs (attorney fees, expert witnesses, and court costs) and covered settlements or judgments up to the policy limit when a client or third party alleges financial harm from a covered professional service:

• Negligent acts, errors, or omissions: Mistakes in data analysis, flawed study design execution, coding defects in delivered software, or failure to meet professional standards of care.
• Failure to deliver promised services: Missed contractual milestones, system integration failures, or incomplete deliverables that cause quantifiable economic loss to the client.
• Defense costs (often ‘inside the limits’): Unlike standard CGL policies where defense costs are paid in addition to the policy limit, E&O policies are typically written as defense within limits (eroding/wasting policies), meaning every dollar spent on legal defense reduces the remaining limit available to pay a judgment or settlement.

What Standard E&O Insurance Excludes

Understanding E&O requires reading its boundary exclusions alongside other commercial lines:

• Bodily injury and property damage (BI/PD): Standard E&O and Tech E&O policies exclude claims for physical bodily injury, sickness, disease, death, or tangible property damage. This creates a well-known coverage gap for clinical AI and healthcare software vendors if a software error contributes to patient harm unless a medical malpractice or bodily-injury carve-back endorsement is added (see how AI liability insurance coverage lines compare).
• Intentional wrongdoing and fraud: Deliberate regulatory violations, knowing data fabrication, or criminal acts.
• Contractual liability assumed beyond negligence: Broad hold-harmless pledges or liquidated damages that exceed liability the insured would have had in the absence of the contract (see clinical trial indemnity and insurance).
• Prior acts before the retroactive date: Because E&O is written on a claims-made-and-reported basis, both the alleged error must occur on or after the policy’s retroactive date and the resulting claim must be made and reported while the policy (or an Extended Reporting Period / ‘tail’ endorsement) is active.

How E&O Differs From General Liability and Product Liability

The table below compares the three commercial liability lines defined by the U.S. Small Business Administration and federal acquisition rules (48 CFR § 28.307-2 and 48 CFR § 52.237-7):

Coverage Line	Primary Risk Covered (SBA / FAR)	Typical Trigger Basis	Standard Exclusions to Watch
Errors & Omissions (E&O) / Professional Liability	Pure financial loss from professional errors, omissions, negligence, or failure of software/services to perform	Claims-made and reported (requires active policy at time of claim + error after retroactive date)	Physical bodily injury, tangible property damage, intentional fraud, and prior known claims
Commercial General Liability (CGL)	Third-party bodily injury, property damage, medical expenses, libel, and slander (48 CFR § 28.307-2(b) sets a $500,000 federal contractor minimum per occurrence)	Occurrence-based (policy active on the date of physical injury responds, regardless of when claim is filed)	Professional services exclusion and electronic data exclusion
Product Liability	Bodily injury or property harm caused by a defective physical product manufactured, distributed, or retailed	Occurrence-based (or claims-made for specialized medical devices/biologics)	Pure economic loss where no physical injury or third-party property damage occurred

Where E&O Matters for Research Administration, Informatics, and AI Governance

In university procurement, clinical research contracting, and third-party AI vendor risk assessment (aligned with the NIST AI Risk Management Framework’s GOVERN function for third-party accountability), E&O certificates of insurance (COIs) are a core financial control:

• Aligning limitation-of-liability caps with E&O limits: Vendor Master Services Agreements frequently cap direct damages at 12 months of fees unless the buyer negotiates a higher ‘super-cap’ tied to the vendor’s required E&O and cyber insurance limits (see limitation of liability clauses in vendor contracts).
• Bridging the clinical AI bodily-injury gap: When a hospital or research site procures clinical decision support or ambient scribe software, standard CGL excludes professional software services while standard Tech E&O excludes bodily injury. Procurement teams must verify whether the vendor carries a Healthcare Tech E&O / medical professional liability endorsement covering bodily injury arising from a software or algorithmic error (see also why no state requires standalone AI liability insurance yet).
• Evaluating E&O insurance cost drivers: Searchers evaluating errors and omissions insurance cost should note that underwriters price E&O based on annual revenue, industry hazard class (e.g., administrative consulting vs. clinical software), per-claim and aggregate limits, self-insured retention (deductible), claims history, and how many years of prior acts are covered by the retroactive date.

Common Misunderstandings

• ‘General liability covers our software or research consulting mistakes.’ Standard CGL policies contain a professional services exclusion; financial losses from a flawed dataset, missed grant deadline, or software outage require E&O.
• ‘Once a project ends, we can cancel the E&O policy.’ Because E&O is claims-made, canceling the policy when a contract ends extinguishes coverage for work already performed unless the organization purchases an Extended Reporting Period (tail coverage).
• ‘Tech E&O automatically covers patient injury from medical software.’ Unless specifically endorsed for healthcare bodily injury or paired with medical professional liability, standard Tech E&O excludes bodily injury claims.

FAQ

What is errors and omissions insurance?

Errors and omissions (E&O) insurance is a form of professional liability insurance that protects service businesses, consultants, and technology vendors against claims of financial loss caused by negligent acts, errors, omissions, or failure to perform contracted professional services.

What does errors and omissions insurance cover?

E&O insurance covers legal defense costs (attorney fees, court costs, and expert witnesses) and settlements or judgments up to the policy limit for covered claims of professional negligence, inaccurate work, or software/service failure occurring on or after the policy’s retroactive date, while excluding intentional fraud and—unless specifically endorsed—physical bodily injury and tangible property damage.

Sources

• U.S. Small Business Administration (SBA), Get Business Insurance — Types of Business Insurance (as of 2026-11-09): sba.gov/business-guide/launch-your-business/get-business-insurance
• Electronic Code of Federal Regulations (via Cornell LII), 48 CFR § 28.307-2 — Liability (as of 2026-11-09): law.cornell.edu/cfr/text/48/28.307-2
• Electronic Code of Federal Regulations (via Cornell LII), 48 CFR § 52.237-7 — Indemnification and Medical Liability Insurance (as of 2026-11-09): law.cornell.edu/cfr/text/48/52.237-7
• National Institute of Standards and Technology (NIST), AI Risk Management Framework (AI RMF 1.0) (as of 2026-11-09): nist.gov/itl/ai-risk-management-framework