Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you run a small business in the UK, you’re constantly managing risk - from giving professional advice to dealing with customers and handling data. Indemnity insurance is one of the simplest ways to protect your cash flow when something goes wrong.
In this guide, we’ll explain what indemnity insurance actually is, when it’s required or just strongly recommended, how it interacts with your contracts, and the practical steps to choose cover that matches your risks.
What Is Indemnity Insurance And How Does It Work?
Indemnity insurance (often called professional indemnity insurance or “PI”) is designed to cover the financial loss that a client or third party suffers because of your professional services - for example, negligent advice, errors, or omissions.
It typically operates on a “claims-made” basis. That means the policy responds to claims made (and notified to the insurer) during the policy period, regardless of when the work was done - provided the work falls after the policy’s “retroactive date”. This is why maintaining continuous cover, and sorting out “run-off” insurance if you stop trading, is so important.
What does it usually cover? In broad terms:
- Legal defence costs (solicitors, counsel, experts)
- Compensation or damages you’re liable to pay (within policy limits)
- Costs of rectifying mistakes (in some policies)
- Some regulatory investigations or disciplinary costs (depending on wording)
What doesn’t it cover? Common exclusions include deliberate wrongdoing or fraud, known circumstances you didn’t disclose, certain contractual liabilities you’ve agreed to, and insolvency. Each insurer’s wording is different - the detail matters.
Do Small Businesses Need Indemnity Insurance?
Many small businesses benefit from PI cover because one bad claim can quickly consume a year’s profit - or more. Whether it’s required depends on your industry, contracts, and regulators.
You may need indemnity insurance if:
- A regulator or professional body requires it (e.g. solicitors, architects, accountants have minimum PI standards set by bodies like the SRA, RIBA, ICAEW)
- Your clients insist on it as a condition of doing business (common in B2B services, public sector frameworks, or larger supplier agreements)
- Your business gives advice, designs, or specialist services where a mistake could cause financial loss (IT consultants, marketing agencies, trainers, health and wellness professionals, engineers, and more)
Even where PI isn’t mandatory, it’s usually a sensible layer of protection alongside other core policies. For example, if you employ anyone, Employers’ Liability Insurance is a legal requirement under the Employers’ Liability (Compulsory Insurance) Act 1969 (subject to limited exemptions). If you interact with the public or sell products, you’ll typically consider public and product liability cover. PI complements these by focusing on your professional services and advice.
A quick scenario: you’re a digital agency. Your client claims your PPC strategy caused them to overspend with poor ROI, and they sue for financial loss. Public liability won’t help here; professional indemnity insurance is the relevant cover for allegations tied to your advice and services.
Indemnity Insurance vs Contractual Indemnities And Liability Caps
It’s easy to confuse “indemnity insurance” with “indemnities in contracts”, but they’re not the same thing - and the way they interact can make or break your risk position.
A contractual indemnity is a promise to reimburse the other party for certain losses. If you sign a broad, uncapped indemnity, you could be taking on liability that your insurer won’t cover. Many PI policies exclude liabilities you assume by contract that you wouldn’t otherwise have at law.
That’s why it’s good practice to align your contracts with your insurance. This usually means:
- Limiting your liability to a sensible cap (often linked to fees or a specific amount, with carve-outs only where necessary)
- Avoiding “unlimited” indemnities or indemnities covering remote, unforeseeable, or open-ended risks
- Ensuring your obligations sit within what your policy will respond to (e.g. negligence, breach of professional duty)
If you’re not sure whether your contracts and insurance play nicely together, it’s worth updating your liability provisions. Clear, balanced terms help manage disputes and protect your cover. For more background, see how a well-drafted Service Agreement pairs with limitation of liability clauses to keep risk manageable. If you already have contracts in place, a quick Contract Review can highlight any red flags that might prejudice your insurance.
What Types Of Indemnity Insurance Should You Consider?
Indemnity insurance is a family of covers. Depending on what you do, you might combine several policies for a proper safety net.
Professional Indemnity Insurance (Core “PI”)
Protects you against claims of negligent advice, design errors, or professional mistakes causing financial loss to clients. This is the main indemnity cover for professional services firms and consultants.
Public Liability And Product Liability
Not the same as PI, but closely related in practice. Public liability covers injury or property damage to third parties arising from your business activities, while product liability covers issues with products you sell or supply. Many businesses carry both along with PI to cover different risk scenarios.
Cyber Liability (Including Data Breach Response)
If you collect, store or process personal data, you have duties under UK GDPR and the Data Protection Act 2018. Cyber policies can cover incident response, forensics, notification costs, business interruption, and some third-party claims. A robust cyber policy works hand-in-hand with your Privacy Policy and data protection practices.
Directors’ And Officers’ (D&O) Liability
D&O is not the same as PI, but it protects individual directors and officers from certain claims relating to their management decisions. It’s commonly purchased alongside PI for companies with a board. If you’re a director, consider how D&O fits into your broader risk strategy.
Industry-Specific PI Variants
Some sectors require tailored wordings (e.g. media and advertising, tech and software, engineering and construction, health and wellness). The benefit is that sector-specific policies tend to include the right extensions and fewer irrelevant exclusions for how you actually operate.
How To Choose The Right Cover And Strengthen It With The Right Documents
Buying insurance isn’t just about the price; it’s about matching coverage to your real risks and making sure your contracts and documents support (not undermine) your policy. Here’s a practical checklist to work through before you commit.
1) Map Your Risks
Start by listing what you do for clients, where mistakes could occur, and what losses could follow. Think about:
- Advice, design, or implementation work that could cause pure financial loss
- Use of subcontractors or overseas contractors
- Sensitive data handling or dependencies on cloud tools
- Regulatory complaints or professional discipline risk
- Contractual requirements set by key clients or frameworks
This risk map helps you pick the right policy, limits, and endorsements.
2) Check Contract Requirements (And Align Your Liability)
Many client contracts specify minimum insurance limits, acceptable insurers, and evidence you must provide. They may also include wide indemnities or uncapped liabilities that insurers dislike. Where possible, align your contracts with your policy:
- Use a fair liability cap and proportionate indemnities
- Limit responsibility for consequential or indirect loss where appropriate
- Keep your scope of work clear so expectations match your cover
Well-balanced terms in your Service Agreement make it easier to maintain affordable, effective insurance and reduce claim friction.
3) Understand Key Policy Features
When comparing policies, focus on the parts that really matter:
- Sum Insured And Any Sub-limits: Does the main limit and any sub-limits (e.g. for investigations, rectification, or confidentiality breaches) match your risk and contract promises?
- Excess/Deductible: How much will you pay per claim? Is it affordable if you have multiple notifications in a year?
- Retroactive Date: Does it go back far enough to cover your past work?
- Territorial/Jurisdiction Limits: Where you operate vs where claims can be brought (UK-only vs worldwide including USA/Canada can change price and scope).
- Exclusions: Pay attention to contractual liability, IP infringement, cyber events, defamation, and dishonesty/fraud exclusions. See if there are reasonable carve-backs.
- Claims-Made And Notified: You must notify circumstances promptly once you become aware of them - late notification can prejudice cover.
- Run-Off: If you wind down, can you buy affordable run-off cover to protect against claims from past work?
4) Coordinate Your Operational Policies
Insurers look favourably on businesses with good risk controls - and it genuinely lowers the chance of claims. Practical steps include:
- A clear Privacy Policy and data handling practices for UK GDPR compliance
- Quality assurance checklists for deliverables and sign-offs
- Documented scope, assumptions, and change control in your project communications
- Incident response plans for complaints, data breaches, or service failures
5) Keep Evidence Organised
Good record-keeping is your friend if a claim arises. Keep:
- Signed client agreements, proposals, and change orders
- Project timelines, approvals, and acceptance records
- Emails and meeting notes capturing key decisions and instructions
- Training and policy compliance records for your team
6) Use The Right Legal Documents To Back Up Your Insurance
Your contracts and website documents can reduce disputes and support your cover if a claim happens. Common building blocks include:
- Service Agreement for B2B services, with a sensible liability cap and fair indemnity clauses
- Contract Review for large client templates that try to shift too much risk to you
- Disclaimer wording where appropriate (for websites, training materials, or resources) to set expectations
- Privacy Policy if you collect personal data online or via apps
- Website terms, statements of work, and change control processes to manage scope creep
It can be tempting to grab generic templates, but the devil is in the detail - small wording changes can have a big impact on your risk. If this feels daunting, don’t worry. Tailored contracts and compliant policies make a real difference to both premiums and outcomes if something goes wrong.
7) Don’t Forget The Basics
A quick reminder of other essential insurance and compliance building blocks commonly paired with PI:
- Employers’ Liability: Required by law if you employ staff (with limited exemptions) - see Employers’ Liability Insurance.
- Public And Product Liability: Especially if you have a physical premises or sell products.
- Cyber: To complement your data protection compliance and incident response plan.
If you’re unsure which mix is right for you, talk to a broker and a lawyer. The broker helps you navigate the market; the lawyer makes sure your contracts, promises, and processes are aligned with the policy you’re buying.
Key Takeaways
- Indemnity insurance protects your business against claims arising from professional advice or services - it’s usually “claims-made”, so continuous cover and run-off are important.
- Whether PI is mandatory depends on your regulator and client contracts, but many UK SMEs choose it because one mistake can cause a disproportionate financial hit.
- Align your insurance with your contracts. Use a fair liability cap and avoid broad, uncapped indemnities that insurers may not cover; a balanced Service Agreement helps.
- Look closely at policy features: limits, excess, retroactive date, jurisdiction, exclusions, and notification duties - not just price.
- Strengthen your insurance with solid legal documents: a tailored Contract Review, appropriate Disclaimer wording, and a compliant Privacy Policy if you handle personal data.
- Keep good records, set realistic scopes of work, and maintain clear change control - these practical habits reduce disputes and smooth the claims process.
- Pair PI with other essentials like Employers’ Liability Insurance, public/product liability, and cyber cover based on your risk profile.
If you’d like help aligning your contracts and policies with your insurance (or putting the right documents in place from day one), you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


