What insurance does a professional services firm need?

Most professional firms need professional liability (E&O) for financial loss caused by errors in their work, commercial general liability for injury and property damage, cyber and privacy breach coverage for client data, and an office package with contents and business interruption. Firms with access to client money add crime coverage, and regulated professions must meet their regulator's minimum.

Do I need E&O if I already have general liability?

Yes. General liability covers bodily injury and property damage, such as a client who trips in your office. It does not cover a client's financial loss from your advice, a missed deadline or a design error. Those claims fall under professional liability (E&O), so most service firms carry both policies.

What does claims-made mean on an E&O policy?

A claims-made policy covers claims first made against you and reported while the policy is in force, for work done after the retroactive date. If coverage lapses or the retroactive date is reset when you change insurers, past work can lose its protection. Keep coverage continuous and carry the original retroactive date forward.

What happens to my E&O when I retire or sell the firm?

Because E&O is claims-made, a claim made after you cancel the policy is not covered, even if the work was done while you were insured. Run-off coverage, also called an extended reporting period, keeps reporting open for past work. Plan it before you retire, sell, merge or close, because some options must be bought at cancellation.

Is professional liability insurance mandatory for engineers and architects in Ontario?

For architects, yes: the Architects Act regulation requires errors and omissions insurance with a minimum per-claim limit based on the practice's fees, arranged through Pro-Demnity unless exempted. Engineering firms holding a Certificate of Authorization must carry insurance under Regulation 941, qualify for an exemption, or tell each client that they are not insured to the minimum.

My client contract asks me to indemnify them. Is that covered?

Not always. Most E&O policies exclude liability you take on under a contract unless you would have been liable without it. A broad indemnity, a guarantee of results or an uncapped liability clause can leave you exposed beyond your policy. Have your broker review the clause before signing, and negotiate a limitation of liability where you can.

Do I have to report a data breach?

Under PIPEDA, an organization must report a breach of security safeguards to the Privacy Commissioner of Canada and notify affected individuals when the breach creates a real risk of significant harm. Every breach must be recorded, reported or not, and the Commissioner's guidance says records must be kept for two years. A cyber policy pays for the legal and notification work.

Can a client be added as an additional insured?

On your general liability policy, usually yes, and many contracts require it. On professional liability, generally no, because the client is the party most likely to bring the claim. We add additional insureds to CGL and issue certificates that show both policies, so the client can confirm your limits match the contract.

Industry package

Insurance for Business & Professional Services

Insurance built around your advice, your client contracts and the data you hold.

Get a quote

In short

A professional services firm needs insurance built around its advice, not its building. The core is professional liability (E&O) for financial loss caused by errors in your work, written on a claims-made basis. Add commercial general liability for bodily injury and property damage, cyber and privacy breach cover for client data, crime cover for funds you handle, and an office package for contents and business interruption. Regulated professions may face mandatory minimums.

Last reviewed October 26, 2026

Professional service segments we insure: consultants, accounting, engineering and architecture, IT, agencies, HR and recruitment: 6; Professional service segments we insure: consultants, accounting, engineering and architecture, IT, agencies, HR and recruitment
Canadian insurers we compare for professional risks: 17; Canadian insurers we compare for professional risks
Canadian businesses impacted by cyber security incidents in 2023 (StatCan): 16%; Canadian businesses impacted by cyber security incidents in 2023 (StatCan)
Canadian financial and professional lines rates, Q3 2026 (Marsh): −4%; Canadian financial and professional lines rates, Q3 2026 (Marsh)

Professional and service firms sell judgement, so their largest risk is a client claiming that advice, a design, a filing or a system cost them money. That claim lands on professional liability (E&O), written on a claims-made basis where retroactive dates and continuous coverage decide whether you are protected. Client data, funds you can access and the contracts you sign add cyber, crime and contractual exposure on top.

We build programs around your discipline and your contracts: E&O sized to any regulatory minimum and to what your clients demand, general liability, cyber and privacy breach cover, crime with third-party protection, and an office package with business interruption. We review contracts before you sign and issue certificates as work comes in.

What the package includes

Professional liability (E&O) on a claims-made basis, with retroactive date protection
Excess E&O above regulator-mandated minimums
Commercial general liability with additional insured endorsements for clients
Cyber and privacy breach coverage, including breach notification costs
Technology E&O and media liability for IT firms and agencies
Commercial crime with social engineering and third-party client cover
Office contents, computers and records, including off-premises
Business interruption and extra expense
Directors' and officers' and employment practices liability

Professional services insurance by type of firm

Every professional firm sells judgement, so every one needs E&O. What changes between disciplines is where the claims come from: a missed tax deadline, a design error found during construction, a software outage, a defamatory ad, a bad hire. The program should be shaped around that claim source, and around the contracts your clients ask you to sign.

The main exposures and coverages for each type of professional firm
Type of firm	Where claims come from	Core coverages
Management and business consultants	Advice that leads to a financial loss, missed deliverables, project overruns, contract indemnities	Professional liability (E&O), CGL, cyber, office package; see consultant insurance
Accountants, bookkeepers and tax preparers	Filing errors and missed deadlines, penalties and interest charged to clients, access to client bank accounts	E&O sized to any regulatory minimum, commercial crime with third-party cover, cyber; see accountant insurance
Engineers and architects	Design errors and omissions, site review, long-tail claims that surface years after completion	Regulated professional liability, project-specific E&O, CGL, office package; see engineer and architect insurance
IT, software and managed service firms	System failures, missed service levels, data loss, breaches of client networks	Technology E&O combined with cyber, CGL, contents; see IT insurance
Marketing, advertising and design agencies	Copyright and trademark disputes, defamation, campaign errors, client data	E&O with media liability, cyber, CGL; see marketing consultant insurance
HR consultants, recruiters and staffing firms	Bad hiring advice, discrimination claims by candidates, misconduct by placed workers	E&O, employment practices liability, third-party crime, CGL; see recruitment and staffing insurance

The core coverages, and what each one does

A professional firm's program is usually five or six policies, or a package that bundles several of them. Each answers a different kind of claim, and the gaps between them are where firms get caught.

Professional liability (E&O): pays defence costs and damages when a client or third party alleges a negligent act, error or omission in your professional services caused them a financial loss. This is the policy most professional claims land on.
Commercial general liability (CGL): covers bodily injury and property damage to others, such as a visitor who falls in your office or damage your staff cause at a client site. It does not respond to financial loss from advice. Our post on CGL vs. professional liability walks through which claims go where.
Cyber and privacy breach coverage: pays for breach response, notification, forensic work, ransomware recovery and lost income, plus liability to clients whose data was exposed.
Commercial crime: covers employee theft, funds transfer fraud and social engineering, and third-party cover for theft from a client by your staff.
Office package: business contents, computers and records, CGL, and business interruption if a fire, flood or building closure stops you working.
Directors' and officers' liability for incorporated firms with outside investors, boards or partners exposed to management decisions.

How E&O works: claims-made, retroactive dates and run-off

Most professional liability policies are written on a claims-made basis. The policy that pays is the one in force when the claim is first made against you and reported to the insurer, not the one in force when the work was done. That single feature drives most of the mistakes we see.

Retroactive date: the policy only covers work performed after this date. Keep it as early as possible and never let a new insurer reset it to today, or every past file loses its coverage.
Continuous coverage: a lapse of even a few weeks can end the retroactive date. If you switch insurers, confirm the new policy carries the old date forward.
Reporting: you must report claims, and often circumstances that may lead to a claim, during the policy period. A demand letter sitting in a drawer until renewal can be denied.
Extended reporting period (run-off): when you retire, sell, wind down or merge, buy run-off cover so claims made later about past work are still covered. Some regulators require it.
Defence inside the limit: on many E&O policies, legal costs reduce the limit available for damages. Size the limit with defence costs in mind.
Consent to settle: check whether the insurer can pressure you to settle, and what happens if you refuse.

Our professional liability insurance guide covers the policy in more detail, including limits, deductibles and what to do when a claim arrives.

Client contracts: indemnities, limits and certificates

For most professional firms, the client contract sets the insurance program. Master service agreements, government procurement terms and enterprise vendor onboarding all come with an insurance schedule, and the indemnity clause next to it is often more dangerous than the schedule itself.

Indemnity and hold-harmless clauses: a broad indemnity can make you liable for losses you didn't cause. Most E&O policies exclude liability you assume under contract unless you would have been liable anyway, so an indemnity can create uninsured exposure.
Guarantees and warranties: E&O covers negligence. A promise of a specific result, a fixed saving or fitness for purpose can go beyond what the policy will pay.
Limitation of liability: a cap tied to your fees or your insurance limit is the single most useful clause a professional can negotiate.
Required limits: contracts often name a per-claim E&O limit, a CGL limit and cyber cover. Check whether they want per-claim or aggregate limits, and for how long after the contract ends.
Additional insured status: clients routinely ask to be named on your CGL as an additional insured. That is normally available on CGL, but rarely on E&O, which covers you for claims brought by the client.
Certificates of insurance: many clients won't pay invoices until a current certificate is on file. See why every contract asks for a certificate.

Send us a contract before you sign it. We read the insurance and indemnity clauses against your actual policies and tell you which terms to push back on.

Regulated professions: when insurance is mandatory

Some professions can't practise without professional liability insurance, and the regulator sets the minimum. The mandatory cover is a floor. Large projects, enterprise clients and multi-year contracts often need excess limits above it. Requirements differ by province, so check your own regulator. Here is how it works in Ontario for three common professions.

Professional liability requirements for selected Ontario professions
Profession	Who sets the rule	What is required
Architects	Architects Act and Regulation 27, administered by the Ontario Association of Architects (OAA)	Insurance against errors and omissions in architectural services, with a minimum limit per claim of $250,000, $500,000 or $1,000,000 depending on the practice's gross fees in the previous financial year. Primary cover is arranged through Pro-Demnity Insurance Company unless an exemption is granted.
Engineering firms	Regulation 941 under the Professional Engineers Act, administered by Professional Engineers Ontario (PEO)	Holders of a Certificate of Authorization must carry professional liability insurance under section 74, qualify for an exemption, or notify each client that they are not insured to the minimum requirements.
Accounting firms	CPA Ontario, Regulation 14-1	Members engaged in public accounting must carry professional liability insurance that meets Regulation 14-1. CPA Ontario provides limited coverage only for unpaid assurance work for small charities and not-for-profits.

Unregulated advisers, such as most bookkeepers, marketing consultants and HR consultants, have no statutory minimum. Their minimum is whatever their clients' contracts demand, which is often higher than a regulator would require.

Cyber and client data: your notification duties

Professional firms hold exactly what attackers want: client financial records, payroll data, tax files, designs and network credentials. Statistics Canada found that 16% of Canadian businesses were impacted by cyber security incidents in 2023, and the most common method was scams and fraud, reported by half of affected businesses. Spending on recovery from incidents doubled from 2021 to about $1.2 billion.

When personal information is involved, the law sets the response. Under the federal Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must report a breach of security safeguards to the Privacy Commissioner of Canada and notify affected individuals where it is reasonable to believe the breach creates a real risk of significant harm. It must also keep a record of every breach, whether or not it is reported. The Privacy Commissioner's guidance says those records must be kept for two years. Some provinces have their own private-sector privacy laws, so confirm which regime applies to your clients.

A cyber policy pays for the forensic investigation, legal advice on whether the harm test is met, notification, credit monitoring, restoring data and lost income while systems are down. For IT and managed service firms, cyber is usually combined with technology E&O, because a breach of a client's network is both a cyber event and a professional claim. Read the anatomy of a cyber claim to see how the first 72 hours unfold.

Client funds, payroll access and social engineering

Bookkeepers, payroll providers, accountants and some consultants hold signing authority or online banking access for their clients. That makes them a target, and it makes them responsible when money goes missing.

Employee theft of the firm's own money is covered by standard crime insurance.
Theft by your employee from a client needs third-party or client property coverage, which is not automatic. Ask for it if you have access to client accounts.
Social engineering fraud, such as a fake email from a client asking you to change payment details, is usually a separate insuring agreement with its own sublimit.
Call-back verification on any new or changed banking instructions is the control insurers ask about most.

Your office, your people and business interruption

A professional firm's physical assets are modest: computers, furniture, records and leasehold improvements. Insure them at replacement cost, and remember that laptops travel, so off-premises cover matters. If you lease, the lease will usually set liability limits and require you to name the landlord on your policy. Home-based practitioners need a separate home-based business policy, because a homeowner's policy restricts business property and liability.

Business interruption replaces lost income and pays extra expenses, such as temporary space, after an insured loss closes the office. Many firms can work remotely, which lowers the exposure, but a building fire or a cyber outage can still stop billing for weeks. Note that business interruption pays after damage to property. The loss of a key partner through death or illness is a different exposure, insured through key-person life and disability cover arranged outside the commercial program.

What professional services insurance costs, and the market today

E&O is rated mostly on fees and on what you do. Underwriters ask for gross revenue split by service, the industries your clients are in, the largest contracts, any work for U.S. clients, prior claims, and your contract practices. An engineering firm doing structural design rates very differently from one doing environmental reports, and a consultant to hospitals rates differently from one to retailers. The limit, deductible and retroactive date all move the price.

Cyber is rated on revenue, the volume and sensitivity of records you hold, and controls: multi-factor authentication, offline backups, patching and staff training. The office package is priced like any small property risk, on construction, occupancy, protection and exposure, plus the contents value.

Conditions currently favour buyers. Marsh's Global Insurance Market Index put Canadian financial and professional lines rates down 4% in the third quarter of 2026, with cyber rates down 5% and overall commercial rates down 6%. That is a good time to raise limits, add run-off planning or fold cyber into the program.

Use written engagement letters with a defined scope and a limitation of liability clause.
Keep file notes that show the advice given and the client's decision.
Enforce multi-factor authentication and call-back verification for payments.
Report circumstances early, and keep the retroactive date continuous.
Combine policies with one insurer where it improves terms. Bundling can also simplify renewals and certificates.

How we build a professional services insurance program

1Map the services: we confirm what you actually do, for which clients, in which provinces, and which entity signs the contracts.
2Read the contracts: we review your standard engagement letter and your largest client agreements for insurance schedules, indemnities and certificate demands.
3Check the regulator: where your profession has a mandatory program or minimum, we build around it and add excess limits where contracts require them.
4Protect the history: we confirm retroactive dates, prior claims and circumstances so nothing past is lost when coverage moves.
5Market it: we take the submission to the insurers on our panel of 17 whose appetite fits your discipline and client base, and compare wordings side by side, not just premiums.
6Keep it current: we issue certificates as contracts arrive, adjust limits as fees grow, and plan run-off before you retire, sell or merge.

Good to know

Frequently asked questions

What insurance does a professional services firm need?: Most professional firms need professional liability (E&O) for financial loss caused by errors in their work, commercial general liability for injury and property damage, cyber and privacy breach coverage for client data, and an office package with contents and business interruption. Firms with access to client money add crime coverage, and regulated professions must meet their regulator's minimum.
Do I need E&O if I already have general liability?: Yes. General liability covers bodily injury and property damage, such as a client who trips in your office. It does not cover a client's financial loss from your advice, a missed deadline or a design error. Those claims fall under professional liability (E&O), so most service firms carry both policies.
What does claims-made mean on an E&O policy?: A claims-made policy covers claims first made against you and reported while the policy is in force, for work done after the retroactive date. If coverage lapses or the retroactive date is reset when you change insurers, past work can lose its protection. Keep coverage continuous and carry the original retroactive date forward.
What happens to my E&O when I retire or sell the firm?: Because E&O is claims-made, a claim made after you cancel the policy is not covered, even if the work was done while you were insured. Run-off coverage, also called an extended reporting period, keeps reporting open for past work. Plan it before you retire, sell, merge or close, because some options must be bought at cancellation.
Is professional liability insurance mandatory for engineers and architects in Ontario?: For architects, yes: the Architects Act regulation requires errors and omissions insurance with a minimum per-claim limit based on the practice's fees, arranged through Pro-Demnity unless exempted. Engineering firms holding a Certificate of Authorization must carry insurance under Regulation 941, qualify for an exemption, or tell each client that they are not insured to the minimum.
My client contract asks me to indemnify them. Is that covered?: Not always. Most E&O policies exclude liability you take on under a contract unless you would have been liable without it. A broad indemnity, a guarantee of results or an uncapped liability clause can leave you exposed beyond your policy. Have your broker review the clause before signing, and negotiate a limitation of liability where you can.
Do I have to report a data breach?: Under PIPEDA, an organization must report a breach of security safeguards to the Privacy Commissioner of Canada and notify affected individuals when the breach creates a real risk of significant harm. Every breach must be recorded, reported or not, and the Commissioner's guidance says records must be kept for two years. A cyber policy pays for the legal and notification work.
Can a client be added as an additional insured?: On your general liability policy, usually yes, and many contracts require it. On professional liability, generally no, because the client is the party most likely to bring the claim. We add additional insureds to CGL and issue certificates that show both policies, so the client can confirm your limits match the contract.

Sources

Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, ss. 10.1 to 10.3. Government of Canada, Justice Laws Website, Current consolidation.
What you need to know about mandatory reporting of breaches of security safeguards. Office of the Privacy Commissioner of Canada, Modified August 11, 2025.
Impact of cybercrime on Canadian businesses, 2023. Statistics Canada, The Daily, October 21, 2024.
Application for exemption from professional liability insurance through Pro-Demnity (Architects Act, s. 40; Reg. 27, s. 48). Ontario Association of Architects, Form OAA-04-20, June 2020.
Application for Renewal of Certificate of Authorization (liability insurance, Regulation 941, ss. 47 and 74). Professional Engineers Ontario, Form dated July 2010.
Application for Professional Liability Insurance Coverage (Form 4-4C, Regulation 14-1). CPA Ontario, June 4, 2020.
Canada commercial insurance rates fall for third straight year (Marsh Global Insurance Market Index, Q3 2026). Insurance Business Canada, October 21, 2026.

This page is general information, not insurance or legal advice. Coverage depends on your policy wording and the insurer. Speak with a licensed broker about your situation.

Packages for other industries

Automotive Construction & Contractors Education & Organizations Hospitality & Lodging Manufacturing & Wholesaling Realty Retail Warehousing Transportation & Logistics

Our insurer partners

We compare Canada's leading insurers for you

We compare our full panel of commercial insurers to build and price your industry package.

Business & Professional Services

Compare 17 insurers, no obligation

Get a quote

Speak with an advisor

Get your business its best insurance.

A fast, no-obligation quote from Canada's commercial insurance specialists. Real advice, the whole market compared, and someone who picks up the phone.

Get a quote Contact us