The single most common insurance mistake made by service businesses, technology companies, and consultants is assuming that their Commercial General Liability policy protects them against everything. It does not. This assumption is understandable — CGL is the foundational business liability policy, it is what most clients and landlords require, and its name suggests broad protection. But the coverage it provides is specific and limited, and for service-oriented businesses, the types of claims that are most likely to arise are precisely the types that CGL does not cover.
CGL and professional liability insurance serve different purposes and protect against different kinds of harm. CGL is designed to cover accidental physical harm: someone gets hurt, something gets broken, a physical accident occurs. Professional liability — also called Errors and Omissions or E&O insurance — is designed to cover claims that arise from the quality of your work: you made a mistake, your advice was wrong, your deliverable failed, and a client lost money as a result. Both types of claims are real risks for most businesses, and both require specific coverage.
Understanding the distinction between these two types of insurance is not an academic exercise. It has direct consequences for whether you are covered when a claim actually arises. This guide explains what each policy covers, where each one falls short, and why most service and technology businesses need both.
What Commercial General Liability Insurance Covers
CGL insurance is the standard policy that protects your business against liability for third-party claims involving physical harm and a few related categories of injury. It covers four broad categories: bodily injury, property damage, personal injury, and advertising injury.
Bodily injury coverage responds when someone — a customer, a visitor, a delivery person, a passerby — is physically hurt because of your business operations or your premises. The most common examples are slip-and-fall accidents at your office or retail location, injuries caused by your employees while performing work, and similar physical incidents. If a client visits your office and trips on a loose carpet, sustains an injury, and sues your business, your CGL policy covers your legal defense and any resulting damages.
Property damage coverage responds when your business or your employees damage someone else’s property. If your employee is working at a client’s facility and accidentally drops equipment that breaks a client’s server, that is a property damage claim that CGL typically covers. If your company’s vehicle damages a third party’s car or property, CGL (or your commercial auto policy) would respond.
Personal injury and advertising injury coverages extend CGL to certain non-physical harms: defamation (libel or slander), wrongful eviction, false arrest, and copyright infringement in your advertising. These coverages make CGL broader than its name suggests, but they are still distinct from the professional work your business actually performs. A marketing agency that inadvertently uses a copyrighted image in a client’s ad campaign might trigger an advertising injury claim. A business that makes false public statements about a competitor might face a defamation claim. These scenarios fall within CGL’s scope.
What CGL is not designed for is the most important thing to understand: it is not a general-purpose liability policy that covers any claim filed against your business. It covers the specific categories above, and it explicitly excludes others — most importantly, claims arising out of your professional services.
The Professional Services Exclusion — Why CGL Does Not Cover Your Work
Almost every Commercial General Liability policy contains what is known as the professional services exclusion, sometimes called the professional liability exclusion. This exclusion removes from CGL coverage any claim arising out of the rendering of or failure to render professional services. The language varies by insurer and policy form, but the effect is consistent: if the claim is about your work — your advice, your deliverables, your professional judgment, your failure to perform — your CGL policy will not cover it.
This is the most significant coverage gap that service businesses and technology companies face. Consider a few common scenarios. A software development firm delivers a product with a defect that causes a client’s system to go offline for two days, costing the client significant revenue. A management consultant gives strategic advice that contributes to a costly business decision. A marketing firm delivers a campaign that uses creative elements that turn out to infringe a competitor’s trade dress. In each of these cases, the claim arises from the firm’s professional work — and in each case, the CGL policy does not respond.
The professional services exclusion exists because CGL is designed to cover accidental physical harm, not the quality or adequacy of professional work. Insurers view professional work-quality claims as a distinct category of risk requiring its own actuarial modeling, underwriting standards, and pricing. They therefore create a separate product — professional liability insurance — to cover that risk. The exclusion ensures that CGL does not inadvertently become a catchall policy that covers professional liability claims that belong in the professional liability market.
For business owners, the practical consequence is stark: if you sell services, advice, software, consulting, or professional expertise of any kind, your most likely type of claim — a client alleging your work caused them harm — is specifically excluded from your CGL policy. Without professional liability coverage, those claims are entirely uninsured. This is not a gap that an umbrella policy fills, because umbrella policies sit on top of underlying coverage and generally follow the same exclusions.
What Professional Liability Insurance Covers
Professional liability insurance — variously called Errors and Omissions (E&O) insurance, Tech E&O for technology businesses, or simply professional liability — is designed specifically to cover the gap that CGL leaves. It responds to claims by clients or others alleging that your professional services were negligent, contained errors or omissions, or caused financial harm.
The coverage works through two related mechanisms: defense and indemnity. Defense coverage means the insurer pays your legal defense costs — attorney fees, expert witness fees, court filing fees, deposition costs, and other litigation expenses — to defend you against the claim. Indemnity coverage means the insurer pays any settlement you reach with the claimant, or any judgment entered against you, up to the policy limits. Both components are critical. Defense costs alone in a commercial lawsuit can easily reach six figures before the case is resolved, and even a meritless claim can be financially devastating if you must pay defense costs out of pocket.
The scenarios that professional liability covers vary by industry, but the pattern is consistent. A software developer whose application has a bug that corrupts a client’s database may face a claim for the cost of data recovery and the revenue the client lost during the outage. A business consultant whose strategic recommendations contributed to a failed initiative may face a claim for the financial losses that resulted. A staffing firm whose employee turns out to be unsuitable for the role may face a claim for costs incurred finding a replacement. In each case, the claim is about the quality or outcome of professional services, and professional liability insurance is what responds.
It is important to understand that professional liability coverage is typically written on a claims-made basis — meaning the claim must be first made during the policy period for coverage to apply. This has significant implications for coverage continuity and is discussed in detail in a later section.
Why Technology Companies Need Both
Technology companies occupy a particularly important position in the CGL-versus-professional-liability analysis because they face meaningful risks in both categories. Many technology company owners assume that because they are primarily a services business, they only need professional liability. Others assume that because they have a CGL policy for physical incidents, they are broadly covered. Both assumptions lead to significant gaps.
From the CGL side: technology companies have physical operations. They have offices where clients, vendors, and contractors come and go. Their employees work at client sites. They use vehicles. They attend trade shows and conferences. Any of these activities can produce the bodily injury or property damage claims that CGL covers. A technology company with no CGL has no coverage for a client injured during an office visit or for equipment a technician accidentally damages at a customer site.
From the professional liability side: technology companies deliver professional services. Software development, system integration, cloud architecture, cybersecurity consulting, data analytics — these are all professional services, and a failure in any of them can result in a client claim. A company with only CGL and no professional liability has no coverage for its most probable category of claim: a client alleging that the technology it paid for did not work as promised or caused harm.
When both policies are in place, they work together to provide more comprehensive protection. A claim involving both physical harm and professional work — say, an employee damages a client’s server while performing an integration — may implicate both policies, and the insurers may coordinate on the defense. Understanding which policy responds to which type of claim, and what the gaps are between them, is an important part of building a sound coverage program.
The remaining significant gap for technology companies is cyber risk. If a software vulnerability in your product allows a hacker to breach your client’s systems, that incident may implicate professional liability (was the vulnerability a professional failure?), cyber liability (were your own systems involved?), and potentially the client’s own cyber policy. Technology companies should carry dedicated cyber insurance in addition to both CGL and professional liability to address the full range of technology-related claims. Cyber insurance is discussed in a separate guide on this site.
Claims-Made vs. Occurrence — How It Applies to Professional Liability
The claims-made versus occurrence distinction — discussed in detail in the policy reading guide on this site — has particular importance for professional liability. Almost all professional liability policies are written on a claims-made basis, which means you must understand and actively manage your coverage continuity.
On a claims-made policy, coverage depends on two key dates: the retroactive date (also called the prior acts date) and the policy period. The retroactive date is the date from which prior work is covered — any professional services you rendered on or after the retroactive date can give rise to a covered claim. The policy period is the window during which the claim must be reported to the insurer. If a claim is filed outside the policy period — after the policy has expired or been cancelled — it is not covered, even if the underlying work was done during the policy period.
This structure creates a practical problem when you switch insurers or shut down your business. Your new insurer’s policy will have its own retroactive date, and if that date does not go back far enough to cover your prior work, there will be a gap in coverage for the intervening period. The solution is tail coverage: an extended reporting period endorsement that allows you to report claims to your old insurer for a period of years after the policy ends. Tail coverage is not cheap — it typically costs a substantial multiple of the annual premium — but without it, you may be uninsured for claims arising from years of prior work. Any business that is closing down, selling, or significantly changing its insurance program should discuss tail coverage with both its broker and an attorney.
When negotiating with a new insurer, it is important to request a retroactive date that goes back to the beginning of your professional operations, or at least back to the beginning of your relationship with the client at issue. Insurers may offer policies with a ‘full prior acts’ retroactive date (covering all prior work) or with a specific date that leaves earlier periods uncovered. Understanding what you are buying is essential to avoiding gaps.
What Enterprise Clients Require and How to Negotiate
As a service business or technology company grows and begins pursuing contracts with larger clients — enterprise corporations, government agencies, major institutions — it will encounter increasingly detailed and specific insurance requirements. These requirements are not suggestions. They are conditions of doing business, and failing to satisfy them can prevent the contract from being signed or, if discovered after signing, can constitute a breach that exposes your business to significant consequences.
Enterprise contracts commonly require both CGL and professional liability at specified limits — often $1 million, $2 million, or $5 million per occurrence and in the aggregate — along with requirements about coverage form, additional insured status, waiver of subrogation, and in some cases, specific policy language. Technology clients often require dedicated Technology E&O coverage rather than a general professional liability policy, because Technology E&O is specifically underwritten for technology-related claims. They may also require separate cyber insurance at specified limits.
Before signing any contract with insurance requirements, a business owner should do two things. First, have the contract’s insurance requirements reviewed by an attorney to confirm exactly what is being required and what the consequences of non-compliance are. Second, present the insurance requirements to your broker and confirm that your existing coverage meets them, or determine what coverage you need to purchase. The worst outcome is signing a contract that requires $2 million of professional liability and then discovering, after a claim arises, that you only carry $1 million — or that the policy you have does not meet the coverage form requirements specified in the contract.
Insurance requirements are negotiable in some cases, particularly for smaller businesses working with larger clients. A client may be willing to accept lower limits for a new vendor relationship, or to accept a BOP as the basis for CGL coverage rather than a standalone policy. However, your negotiating position depends on understanding exactly what you have and what you need, which is another reason to involve both a broker and an attorney before the contract is signed rather than after.