Insurance for IT support companies UK
The core covers for a smaller IT firm
Professional indemnity answers claims that your work or advice caused a client financial loss — restored the wrong backup, misconfigured a server, recommended a solution that failed. It pays to defend the claim as well as settle it, and for an IT firm it is the load-bearing policy. Cyber insurance covers your own incident: response help, recovery, and your lost income if your systems go down — a distinct job from PI, not a substitute for it. Public liability covers injury and physical damage: the dropped server, the trailing cable, the spilled coffee on a client’s kit. Employers’ liability becomes compulsory the day you take on staff — including, in many cases, casual or part-time help. Portable equipment cover for kit in vans and site bags rounds out the picture for most firms.
Break-fix to managed: the risk changes shape
Ad-hoc support is a series of small engagements: fix the thing, invoice, leave. When the same firm signs a managed contract, the relationship inverts — you now hold standing responsibility for uptime, backups, patching and security, usually with remote access and admin credentials held permanently. The client’s reliance on you is continuous, so an error can incubate quietly: a backup job that fails for months matters very differently under a managed agreement that promised to monitor it. If your insurance was arranged in the break-fix era, the description of your business on the proposal form may no longer match what you do — and mismatches between the described and actual business are exactly where claims get difficult. The move to managed services is the right moment to re-describe the firm to insurers, not just renew.
The first contract that demands £1m or £2m of PI
For many small IT firms, the first serious insurance decision arrives inside someone else’s contract: a new client — often the biggest yet — whose standard terms require professional indemnity at £1m or £2m, sometimes with cyber cover alongside, before signature. This is now routine in UK commercial contracts and it is worth reading as good news: the client is telling you they intend to rely on you. Meeting the requirement is rarely difficult or ruinously expensive at small-firm scale. The subtler point is that the contract figure is that client’s floor, not your ceiling — the right limit for the firm depends on everything else on your books too.
Growing pains worth insuring for
Growth adds exposures faster than it adds process. Subcontractors doing delivery under your name still generate claims against you. Remote access tooling turns one compromised password into a multi-client problem. A first apprentice or helper triggers the employers’ liability requirement. None of this argues against growing — it argues for a programme that gets reviewed when the business changes, not just at renewal. Firms that grow into full managed service providers will find the larger version of this picture on our MSP insurance page.
How Apex works with smaller IT firms
We are a Bristol-based, FCA-regulated commercial broker, and small technology firms are a natural fit for how we work: describe the business accurately, choose wordings that match the services actually provided, and set limits by looking at the client base rather than copying last year’s figure. When the first big contract lands with an insurance schedule attached, we can usually get the evidence of cover in place quickly — and make sure the policy behind the certificate would actually respond.
Frequently asked questions
Is any insurance legally required for an IT support business?
Employers’ liability is compulsory once you have employees — that is statutory, with penalties for going without. Everything else, including professional indemnity and cyber, is driven by contracts and common sense rather than law. In practice client requirements make PI unavoidable for most firms fairly early on.
A client’s contract requires £1m of PI — is that what we should buy?
It is a floor, not an answer. The contract figure is what that client demands; your right limit depends on the work across your whole client base and what a single error could cost. Buying exactly what the largest contract requires is common at the first ask, but it is worth revisiting as the client list grows.
Does public liability cover data loss or software errors?
No. Public liability covers injury to people and damage to physical property. Losing a client’s data, breaking their systems or giving advice that goes wrong are financial losses, and they belong to professional indemnity — with your own breach response sitting under a cyber policy. The three covers do three different jobs.
Do sole traders and very small IT firms really need this?
The exposures do not scale down as fast as the business does. A one-person consultancy administering a client’s server can cause the same loss as a ten-person firm doing the same work — and has fewer resources to absorb a claim. Cover is priced with turnover, so early-stage premiums are usually modest relative to the risk being carried.
Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority (FRN 724952). This page is general information, not advice on a specific policy.