If you run a software company, an IT consultancy, a marketing agency or any business that delivers technology services, an insurance broker has probably mentioned two policies in the same breath: cyber liability and Tech E&O (technology errors and omissions).
They sound similar, and some insurers sell them together. But they protect against different problems. Buying only one can leave a serious gap.
This guide explains what each policy covers, where they overlap, and how to decide which one (or both) your business needs. If you’re new to the topic, start with what cyber insurance is and what it covers.
The Short Answer
- Cyber liability insurance responds when your business is hit by a cyber event, such as a data breach, ransomware attack or network intrusion.
- Tech E&O insurance responds when a client says your product or service failed or that you made a mistake that cost them money.
A simple way to remember it: cyber covers what happens to you, and Tech E&O covers what you do for others.
What Is Cyber Liability Insurance?
Cyber liability insurance helps pay for the costs of security incidents involving your own systems and the data you hold. Policies usually combine two parts:
- First-party coverage: incident response, data restoration, business interruption, cyber extortion and notification costs.
- Third-party coverage: legal defense, settlements and regulatory costs if people affected by the incident make claims against you.
For a closer look at that split, read First-Party vs. Third-Party Cyber Coverage: What’s the Difference?
Example of a Cyber Claim
A marketing agency’s email account is compromised. Attackers steal client contact lists and send phishing emails from the agency’s address. The agency needs forensic experts, must notify affected people and faces a lawsuit from a client. Cyber insurance is designed to respond to this.
What Is Tech E&O Insurance?
Tech E&O is a type of professional liability insurance for companies that provide technology products or services. It covers claims that your work was flawed, late, incomplete or didn’t perform as promised, resulting in financial loss for a client.
Typical Tech E&O coverage includes:
- Legal defense: attorney fees and court costs, even if the claim is baseless.
- Settlements and judgments: damages you owe a client because of your error.
- Negligence and errors: mistakes in design, coding, configuration, advice or implementation.
- Failure to deliver: software that doesn’t work as described or services that miss agreed standards, depending on the policy.
- Some contract disputes: claims alleging you breached service terms, though contractual liability is often limited.
Example of a Tech E&O Claim
A software developer builds an inventory system for a retailer. A bug corrupts stock counts during the holiday season, and the retailer loses sales and sues for damages. No hacker is involved, but the client says your work caused the loss. Tech E&O is designed to respond to this.
Cyber Liability vs. Tech E&O: Side by Side
| Cyber Liability | Tech E&O | |
|---|---|---|
| Main trigger | A security incident or data breach | An error, failure or negligence in your work |
| Who is affected? | You and the people whose data was exposed | Your clients or customers |
| Typical losses | Forensics, recovery, notification, downtime, privacy lawsuits | Client financial losses and lawsuits over failed services |
| Common claim | Ransomware, stolen customer data, business email compromise | Software failure, missed deadlines, bad configuration |
| Who needs it most? | Almost any business that stores data or uses online systems | Companies that sell technology products or services |
| Pays for your own recovery costs? | Yes, through first-party coverage | Generally no, mainly third-party claims |
Where the Two Policies Overlap
The line between the two blurs in real situations. Consider a managed IT provider whose employee misconfigures a client’s firewall, and the client is breached as a result. That could involve both:
- Tech E&O, because the provider made an error in its services.
- Cyber liability, because a security incident and data exposure occurred.
Because of overlaps like this, many insurers sell a combined Tech E&O and cyber policy. It can simplify your insurance and reduce gaps, but check how limits work. Some packages share one limit across both coverages, which can leave less money available than two separate limits.
Who Needs Which Policy?
You Probably Need Cyber Liability If You:
- Store customer, patient, client or employee data.
- Accept online payments or process cards.
- Depend on email, cloud tools or a website to run your business.
- Could lose significant revenue if your systems went offline.
You Probably Need Tech E&O If You:
- Develop software, apps or websites for clients.
- Offer SaaS, hosting or managed IT services.
- Provide IT consulting, implementation or data services.
- Sign contracts where clients rely on your technology to run their business.
You Probably Need Both If You:
- Run a SaaS company or software development firm.
- Operate as a managed service provider (MSP) with access to client systems.
- Run a digital agency that builds sites and manages client accounts.
- Handle sensitive client data while delivering a technology service.
If you’re in software, see our guide on cyber insurance for SaaS startups for what customers and investors expect.
What Neither Policy Typically Covers
Both types have limits. Watch for these common gaps:
- Contractual promises beyond normal liability. Guarantees you make in a contract, such as uptime commitments or penalty clauses, may not be covered.
- Intentional or criminal acts by your company.
- Bodily injury and property damage, which fall under general liability. See Does General Liability Insurance Cover Cyber Attacks?
- Fines that can’t legally be insured, depending on the situation.
- Known problems that existed before the policy began.
Also pay attention to claims-made coverage and the retroactive date. Most E&O policies cover claims made while the policy is active, and only for work performed after the retroactive date. Letting a policy lapse can leave past work unprotected.
Questions to Ask Before You Buy
- Is this a standalone policy or a combined Tech E&O and cyber package?
- Do the two coverages share one limit, or does each have its own?
- What is the retroactive date, and is there an extended reporting period?
- Are legal defense costs inside or outside the policy limit?
- How does the policy treat contractual liability and service-level agreements?
- What security controls does the insurer require, and what happens if I don’t meet them?
What Will It Cost?
Pricing depends on your revenue, industry, contracts, claims history and security practices. Tech E&O for small technology companies often costs more than basic cyber coverage, because the potential client claims are larger. To compare, read How Much Does Cyber Insurance Cost for Small Businesses in 2026? and How Much Cyber Insurance Coverage Do You Need?
Frequently Asked Questions
Is Tech E&O the same as cyber insurance?
No. Tech E&O covers claims that your technology products or services failed or were negligent. Cyber insurance covers security incidents such as breaches and ransomware. Some insurers bundle them, but they respond to different events.
Can I get both in one policy?
Yes. Many carriers offer a combined technology E&O and cyber policy. Compare the limits and exclusions carefully, since shared limits can reduce your protection.
Does Tech E&O cover a data breach?
Sometimes, but not reliably. Tech E&O may respond to a client claim that your error caused a breach, while it typically won’t pay for your own incident response and recovery costs. Cyber insurance is designed for that.
Do clients require Tech E&O or cyber insurance?
Often, yes. Enterprise customers commonly ask vendors to show proof of both in contracts, with minimum limits. It’s worth checking before you sign.
Is Tech E&O only for software companies?
No. It’s also relevant for IT consultants, web developers, data processors, digital agencies and others who provide technology-based services.
The Bottom Line
Cyber liability and Tech E&O answer two different questions: “What if we get attacked?” and “What if our work goes wrong?” Businesses that store data need the first. Businesses that sell technology need the second. Many need both.
Talk to a licensed broker who understands your industry, compare limits and exclusions, and make sure your coverage matches the contracts you sign. When you’re ready to look at providers, see Best Cyber Insurance for Small Business: 10 Providers Compared.
Disclaimer: This article is for general information only and is not insurance, legal or financial advice. Policy terms vary by insurer and state. Review the actual policy wording and consult a licensed insurance professional before making a decision.