Small Business Insurance Explained: What You Actually Need

Filing an LLC is the moment most owners stop thinking about risk. The paperwork is in, the wall is up, the business is officially a real thing. Then a customer trips over a cable at a pop-up, or a client says your recommendation cost them $80,000, and the owner finds out what an LLC does and does not do.

An LLC protects your personal assets from the business. Insurance protects the business from itself. Two different jobs, and only one of them pays a claim.

Educational, not insurance advice. Requirements, policy forms and pricing vary by state and industry. A licensed independent agent will read your specific exposures and quote them, and that hour is worth taking.

An LLC is a wall. Insurance is a wallet.¶

An LLC or corporation limits your personal liability for the business's debts and judgments. Sue the business, win, and the creditor generally reaches business assets — not your house, not your personal savings. That is real protection and it is worth having.

Here is what it does not do:

• It doesn't pay. A judgment against your LLC still drains the business: the bank account, the equipment, the receivables, the business itself. The wall protects you personally while the company behind it gets emptied.
• It doesn't fund a defense. Most claims cost real money long before fault is established, and a fair number of claims are ones you'd eventually win. Liability insurance hires and pays the lawyer from day one. That is frequently the part that saves the business.
• It doesn't erase your own acts. Plaintiffs routinely name the individual who did the work alongside the entity that employed them. An LLC does not make your own negligence disappear — a liability policy defends you and the entity both.
• It doesn't survive sloppiness. Commingled funds, contracts signed in your personal name, lapsed state filings. Keeping the shield intact is ongoing work, covered in our complete LLC guide.
• It doesn't touch personal guarantees, which is how most small business loans and commercial leases are written anyway.

The reverse is also true: insurance doesn't do the LLC's job. Policies have limits, and a bad enough claim runs past them and keeps going into whatever the entity structure allows. These are complements, not alternatives. Buy both.

“An LLC decides who pays. Insurance decides whether anyone has to.”

General liability: other people's injuries, other people's stuff¶

Commercial general liability (CGL) is the baseline policy, the one your landlord and your clients mean when they say "are you insured?" It answers for three things:

• Third-party bodily injury — a customer, vendor or passer-by is hurt because of your business or on your premises
• Third-party property damage — you or your crew break something that belongs to someone else
• Personal and advertising injury — libel, slander, and copyright or slogan infringement in your advertising

There's usually a small medical payments amount as well, typically $5,000 to $10,000, which pays minor injuries quickly without arguing about fault. It exists to stop small incidents from becoming lawsuits, and it works.

How the limits are actually written¶

Policies express limits as a pair: $1,000,000 per occurrence / $2,000,000 aggregate. The per-occurrence limit is the most the insurer pays for any single claim. The aggregate is the most it pays across the whole policy year, for everything combined. Spend the aggregate in March and you are uninsured until renewal unless you buy it back.

Standard forms carry a few sublimits underneath that headline: a separate products-completed operations aggregate for claims arising from work you've finished, a "damage to premises rented to you" limit (commonly $100,000) for the space you occupy, and the medical payments sublimit above.

Professional liability (E&O): the policy for being wrong¶

General liability answers for what your body and your property do to other people. Professional liability — errors and omissions, malpractice in regulated fields — answers for what your work does.

The distinction matters more than any other in this article. A client says your advice cost them a contract. Your design was structurally wrong. Your code lost their orders for a weekend. Your filing missed a deadline. Nobody is bleeding and nothing is broken, so there's no bodily injury and no property damage, so there's nothing in the general liability policy to trigger. That claim isn't uncovered by oversight. It's uncovered by design, because it belongs to a different policy.

If you are paid for judgment — consulting, accounting, design, development, marketing strategy, inspections, anything ending in "advisor" — this is the policy that matches how you can actually cause a loss. Two details to check before you buy:

• Are defense costs inside the limit? On most E&O policies they are. A $1M policy that spends $300,000 defending you has $700,000 left to settle with. Ask, and price the difference.
• It's almost always claims-made, which behaves very differently from your general liability policy. See the reading-the-policy section below, because this is where coverage gets accidentally thrown away.

Client contracts frequently require E&O by name at a stated limit. Read that requirement before you sign — it is one of the clauses that quietly sets your operating costs. Our guide to contract clauses that actually protect you covers the rest of them.

Commercial property: where you learn what you bought¶

Commercial property covers your building if you own it, your business personal property — equipment, inventory, furniture, tools — and usually the improvements you've made to a space you rent.

Then there is the single line that decides how much money you actually get:

Two more property mechanics worth knowing:

• Coinsurance. Most property policies require you to insure to a stated percentage of value, commonly 80%. Insure $100,000 of equipment that's really worth $200,000 and the insurer pays a proportional share of even a small loss. Underinsuring doesn't buy you a cheaper policy so much as a cheaper claim.
• Business income. This pays the profit you would have earned while you're shut down, plus the extra expense of operating from somewhere else. For most businesses the lost income is larger than the burned equipment, and this is the coverage owners most often skip.

Standard commercial property excludes flood and earthquake. Flood is a separate purchase: National Flood Insurance Program commercial policies cap at $500,000 for the building and $500,000 for contents, with excess flood available privately above that — and coverage takes effect 30 days after purchase. Buying flood insurance when the forecast turns is not a plan.

Workers' compensation: the one that's actually mandatory¶

Workers' comp pays medical bills and lost wages for employees hurt on the job, regardless of fault. In exchange, it is generally the employee's exclusive remedy — they take the benefits instead of suing you. That trade is the whole design of the system, and it's why the state cares whether you have it.

When it kicks in depends on your state, and the thresholds genuinely differ:

• California requires coverage for every employer with even one employee, including family members. Going without is a misdemeanor punishable by a fine of up to $10,000, up to a year in county jail, or both, and the state can shut the work down.
• Florida requires it at one employee in construction, and at four employees outside construction.
• Texas doesn't require most private employers to carry it at all. Employers that opt out are "non-subscribers," must notify their workers and the state, and lose the liability protection coverage provides — an injured employee can sue the business directly for damages. Optional and free are not the same thing.

Owners are usually treated separately: sole proprietors, partners, LLC members and corporate officers can typically exclude themselves from their own policy. Do that and your own workplace injury falls to your health insurance, which has opinions about it.

The contractor misclassification trap¶

This is where small businesses get hurt, and it has two independent halves.

First, calling someone a contractor doesn't make them one. Your state's workers' comp system applies its own test — usually turning on how much control you exercise over how the work gets done — and it does not care what the invoice says. If an injured "contractor" is found to have been an employee, you were uninsured for an employee, with the penalties that carry. The full breakdown of the classification tests is in 1099 vs W-2.

Second, even when the classification holds, uninsured subs land on your premium. At the annual audit, insurers generally add what you paid to subcontractors who can't produce their own certificate of insurance into your payroll base, and charge your rate on it. The fix is procedural: collect a current certificate before you pay a sub, not at audit. Subs with no employees often carry a minimum-premium policy covering nobody for exactly this reason — so they have a certificate to hand over.

The BOP: liability and property in one package¶

A business owner's policy bundles general liability, commercial property and business income into a single package, usually for less than buying the pieces separately. The discount isn't generosity — carriers reserve BOPs for the risks they want, so eligibility is the catch.

Rules are carrier-specific, but they cluster: small, low-hazard operations with modest square footage and revenue. Offices, professional services, most retail, many trades. Restaurants, bars, auto shops, manufacturing and higher-hazard contracting are usually written on separate policies instead.

A BOP is a good default for an eligible business. It is not a complete insurance program, and no BOP has ever covered a professional liability claim.

Commercial auto: the claim your personal policy will decline¶

Personal auto policies are priced for personal use, and they say so. They exclude vehicles used as a public or livery conveyance — delivery, courier and rideshare work without a specific endorsement — and they do not cover vehicles titled to your business.

Driving your own car to a client meeting is usually fine. The moment the vehicle is part of how the work happens — deliveries, hauling tools and materials, a wrapped van, employees behind the wheel — you are outside what your personal insurer underwrote and priced. Denials in this category arrive after the accident, which is the expensive time to find out.

Cyber liability: no longer optional if you take payments¶

Cyber policies have two halves. First-party coverage pays your costs: forensics, notifying customers, credit monitoring, restoring data, extortion and ransomware response, and income lost while systems are down. Third-party coverage pays claims from the people whose data you lost.

What moved this from optional to standard is not hacking volume — it's legal process. All 50 states, the District of Columbia and the US territories have breach-notification statutes. A breach is not merely a technical problem you can quietly fix; it is a mandatory notification project with lawyers, deadlines and defined recipients. If you take cards, your merchant agreement adds contractual exposure on top: forensic audits and card-brand assessments after a card breach flow down to the merchant.

Meanwhile the general liability policy people assume covers this specifically excludes electronic data.

You do not need a server room to be exposed. A booking system, an inbox full of client documents and a card reader are enough.

How premiums are actually set¶

Insurance pricing looks arbitrary from outside. It isn't; it's a small number of inputs, and knowing them tells you which quotes to trust.

• Class code. The biggest lever by far. Insurers classify what you do, and rate off that class. A consultant and a roofer buying identical $1M/$2M limits are not shopping in the same market or anywhere near the same price. Make sure your code describes what you actually do — a wrong class code is both an overcharge and a coverage argument waiting to happen.
• Exposure basis. General liability typically rates per $1,000 of revenue. Workers' comp rates per $100 of payroll — cents on the dollar for clerical work, and in the highest-hazard trades, a substantial share of payroll. Property rates on insured values; some classes rate on square footage or headcount.
• Claims history. Carriers pull loss runs for the last three to five years. In workers' comp, your past claims become an experience modification factor that multiplies premium directly, in both directions.
• Limits and deductible. The first million is the expensive one. Doubling a limit from $1M to $2M usually costs far less than double, which is why umbrella policies are such efficient purchases.
• The audit. Most general liability and workers' comp premiums are deposits, calculated on estimated revenue or payroll and trued up after the year ends. Understate revenue at quote time and you have not saved money; you have deferred it into an audit invoice.

On actual dollars, be suspicious of anyone quoting a national average. A solo low-risk consultant's $1M/$2M general liability commonly lands in the low hundreds of dollars a year. The same limits for a roofing contractor can be more than ten times that. An "average business insurance cost" is an average of a bookkeeper and a demolition company.

Reading the policy without becoming an underwriter¶

Six things deserve your attention. The rest you can leave to the agent.

1. The declarations page. The one page that's about you: named insured, policy period, limits, deductible, and a list of every form and endorsement attached. Check the named insured is your exact legal entity — a policy in your personal name behind contracts signed by your LLC is a problem waiting for a claim.
2. The insuring agreement. What the carrier actually promises. Everything after it narrows this.
3. The exclusions. Read these first, not last. Most coverage disputes are decided here, and the list is shorter than you fear.
4. The deductible or retention. Per claim or per occurrence. In wind-prone states, property policies often use a percentage deductible — a share of the insured value rather than a flat dollar amount, which is a much larger number than owners expect.
5. Occurrence vs claims-made. An occurrence policy responds to injury or damage that happened during the policy period, whenever the claim eventually surfaces — years later is fine. General liability is usually written this way. A claims-made policy responds only to claims first made while the policy is in force, and only for work done after its retroactive date. Professional liability and cyber are usually written this way. Cancel or switch a claims-made policy and everything you did under it becomes uninsured unless you buy tail coverage (an extended reporting period), typically priced at a multiple of the expiring annual premium. Never let a new carrier reset your retroactive date to today.
6. Certificates of insurance. The ACORD form clients demand. It is evidence, not coverage — the form states on its face that it is issued as a matter of information only and confers no rights on the certificate holder. If a contract requires you to make the client an additional insured, that requires a real endorsement on your policy; listing them as certificate holder does nothing. Same for waiver of subrogation and primary and non-contributory wording. All three cost money and change your policy, so price them before you sign the contract that demands them.

What to buy first, with nothing in place¶

1. 1

   Workers' compensation, if you have even one employee

   Start here because it's the only one with legal penalties and a deadline you may already have missed. Check your state's threshold rather than assuming — they range from one employee to four, with construction almost always at one.

2. 2

   General liability — or a BOP if you're eligible

   This is everyone else's condition for doing business with you: landlords, venues, clients, marketplaces. $1M per occurrence / $2M aggregate is the market default because it's what contracts ask for. If you also own equipment or inventory, price the BOP against buying the two separately.

3. 3

   Professional liability, if you're paid for judgment

   Advice, design, code, strategy, inspections, filings. If the realistic way you damage a client is by being wrong rather than by breaking something, this is your primary policy, not an add-on.

4. 4

   Property and business income

   Once you own equipment, inventory or leasehold improvements you couldn't replace out of pocket. Insure to value, choose replacement cost, and include business income. Read your lease first — it likely already dictates both this and a minimum liability limit.

5. 5

   Commercial auto, plus hired and non-owned

   The moment a vehicle is part of the work or anyone drives on your behalf. Vehicles titled to the business belong on a commercial policy regardless of how little they're driven.

6. 6

   Cyber liability

   If you take payments or hold customer data. Confirm whether social engineering and funds transfer fraud are included, and at what sublimit.

7. 7

   Umbrella or excess liability

   When a contract demands $2M, $3M or $5M. Excess limits stacked over a $1M primary are almost always cheaper than raising the primary policy to the same number.

Frequently asked questions¶

Insurance is the most boring possible use of money right up until the afternoon it's the only thing standing between an incident and a closed business. Get the class code right, read the declarations page, keep the certificates current, and re-quote when the business changes. While you're doing the unglamorous paperwork, the rest of the compliance checklist and your local licensing rules are the same kind of chore — cheap, one-time, and much less expensive than the alternative.

It's just business, properly covered.

Sources

1. U.S. Small Business Administration — Get business insurance
2. NAIC — State Insurance Departments
3. California Department of Industrial Relations — DWC FAQs for employers
4. Florida Department of Financial Services — Workers' Compensation employer coverage requirements
5. Texas Department of Insurance — Workers' compensation employer FAQ
6. NCSL — Security Breach Notification Laws
7. FEMA FloodSmart — Flood insurance policy terms and coverage limits