PI insurance for boutique consultancies in the UK — 2026

A considered guide for two-to-eight-person consultancy practices — management, strategy, engineering, technology, sustainability and forensic — on how PI, PL and EL fit together, what client contracts typically demand, and where the wording detail actually matters.

What a boutique consultancy typically needs

A boutique consultancy of two to eight people usually sits outside the FCA regulated perimeter for its own services, yet almost always finds itself contractually required to hold professional indemnity cover. The requirement flows from the client rather than from statute. Framework agreements with government departments, master services agreements with corporate procurement functions, and subcontracts under larger primes all tend to name a minimum PI limit, an obligation to maintain the cover for a defined run-off period and, occasionally, a right for the client to see the certificate.

The typical starting position for a small practice is a PI limit of £1 million to £2 million on an any-one-claim basis, a retroactive date that reaches back to the day the practice first traded (or the founders’ earliest relevant work), and a wording that covers the actual professional disciplines being sold. Where the consultancy performs several disciplines — a strategy firm that also builds financial models, or an engineering practice that also drafts specifications — each activity needs to be listed on the schedule. A wording that names “management consultancy” and nothing else may leave technical output uninsured, and insurers are typically strict on the point when a claim arrives.

Alongside PI, most consultancies need public liability, employers’ liability if they have staff, and increasingly a standalone cyber policy. The Insurance Act 2015 duty of fair presentation applies to all of these placements, so the presentation of the risk at inception and renewal matters as much as the price.

Niche work and how insurers price it

Insurers price consultancy PI on a different basis to a solicitors’ or accountants’ policy. Solicitors sit under a mandatory Minimum Terms and Conditions regime enforced by the SRA and accountants under bye-laws set by their professional bodies. Consultancy PI is negotiated on open-market terms, so the underwriter’s view of your niche materially shifts the rate.

A strategy consultancy advising on organisational design will typically be rated more favourably than a technology consultancy delivering software integration, because the potential quantum of loss on a failed IT programme is easier to particularise. Engineering consultancies working on buildings within the scope of the Building Safety Act 2022 will typically see higher rates and closer wording scrutiny, reflecting the extended liability window under section 135 of that Act. Sustainability and ESG consultancies are a newer class where insurers are still calibrating pricing, and forensic consultancies expert-witnessing on disputes tend to attract heightened underwriting scrutiny because the counterparty in any negligence claim is likely to be another litigator. Consultancies weighing up who should handle the placement can read about a broker who places management consultancy PI every day.

Presentation matters. A short covering note describing the mix of work by percentage of fee income, the largest three contracts by value, the sectors served and any regulated counterparties can move the rate. Underwriters price against the picture in front of them; a thin proposal form tends to price to the top of the range.

Client-contract PI requirements

Client contracts vary widely, but a boutique consultancy typically needs to read three specific clauses before signing. The first is the insurance schedule, which sets out the minimum PI limit, whether it is required on an aggregate or any-one-claim basis, the run-off period and any specific extensions such as loss of documents or fidelity. The second is the liability cap, which should ideally sit at or below the PI limit and be denominated in the same currency. The third is any indemnity given to the client, because a broad contractual indemnity may sit outside the PI policy’s cover, particularly where the wording excludes assumed liability that goes beyond common law.

Framework agreements — Crown Commercial Service frameworks, NHS SBS lots, local authority DPSs — often set the PI limit at £5 million or £10 million and require the cover to be maintained for six or twelve years post-completion. That is a material commitment for a small firm and needs to be planned into the retirement or sale of the business. The Contracts (Rights of Third Parties) Act 1999 is occasionally used by clients to extend the benefit of the consultancy’s obligations to end users; where present, it should be flagged to the PI insurer at presentation.

PL, EL and PI — placing them together

Public liability, employers’ liability and professional indemnity address different heads of loss. PL responds to third-party injury or property damage arising from the consultancy’s operations, EL responds to injury of employees, and PI responds to financial loss arising from negligent professional service. A single combined package policy can carry all three sections, and for many two-to-eight-person practices this is the practical structure at renewal.

Employers’ liability is compulsory under the Employers’ Liability (Compulsory Insurance) Act 1969 and the Regulations 1998 at a statutory minimum of £5 million, though the market standard is £10 million and most insurers default to that limit. The Corporate Manslaughter and Corporate Homicide Act 2007 sits alongside these placements as a reminder that health and safety obligations attach at the corporate level, not only to individuals, and it applies to consultancies of any size that carry out activities on client premises or that manage subcontractors.

The advantage of a combined placement is a single renewal date, one proposal form and one aggregate premium. The disadvantage is that the sections may share limits or excesses in ways that are not always obvious, and moving one section to a different insurer at renewal typically breaks the combined discount. The trade-off is usually resolved in favour of a combined policy up to around £5 million PI and separately placed above that.

Aggregation of claims across projects

Aggregation is the single most under-appreciated feature of a consultancy PI policy. An any-one-claim wording provides the full limit for each separate claim in the period. An aggregate wording caps the total payable across all claims combined. In between sits a range of hybrid structures — aggregate with automatic reinstatement, aggregate with a reinstatement premium, and any-one-claim with an aggregate cap on a specific extension.

For a small consultancy running six or seven concurrent engagements, aggregation is a live risk. A single methodology or template used across multiple client projects can crystallise into linked claims that a court or insurer will treat as one matter, exhausting an aggregate limit in a single event. Insurers apply their own aggregation clauses to determine whether related matters are one claim or several, and the wording varies materially between markets.

The practical response is to read the aggregation clause at renewal, to consider whether the policy limit is expressed as any-one-claim (preferable for most consultancies), and to check whether reinstatement is automatic or paid. Where a client contract requires the limit to be maintained “in aggregate”, the schedule should be structured to satisfy that requirement without leaving the consultancy exposed elsewhere in the policy year.

Where cyber liability meets PI

The boundary between PI and cyber is not always clean. A consultancy that suffers a data breach because of a phishing attack is looking at a cyber loss — forensic investigation, ICO notification obligations under UK GDPR and the Data Protection Act 2018, third-party claims from affected data subjects, potential ransomware costs and business interruption. PI will not typically respond to the first-party costs.

Where PI can engage is when the cyber event arises from a negligent professional act — for example, a technology consultancy that misconfigures a client system, or a sustainability consultancy that inadvertently discloses commercially sensitive supplier data in a report. In those scenarios the PI insurer may respond to the third-party claim while the cyber insurer responds to first-party costs. Consumer-facing consultancies also need to keep the Consumer Rights Act 2015 in mind, because remedies for defective services flow from that Act independently of any data protection breach.

The practical response is to hold both covers, to check that the definitions do not gap between them, and to notify both insurers when an incident occurs that could engage either. Waiting to see which policy responds first is typically the wrong answer under standard notification wordings.

Sizing the limit as the practice grows

A limit that made sense at three fee earners rarely still makes sense at eight. Growth typically brings larger contracts, more concurrent engagements, higher-value counterparties and, often, a shift into public-sector or regulated-industry work that carries its own contractual PI floors. Each of these factors pushes the appropriate limit upwards.

A practical approach is to review the limit at renewal against three measures: the value of the largest single contract in the year (limit should typically be a multiple of it), the aggregate value of concurrent engagements (to test aggregation exposure), and the run-off obligations still attached to work delivered years earlier. Where the practice has taken on associates or acquired another small firm, the retroactive date and the extension to sub-contracted work both need attention. The Financial Services and Markets Act 2000 boundary should also be checked if any of the work strays into arranging, advising or dealing in regulated products — a growing consultancy occasionally drifts across that line without noticing.

Common pitfalls and red flags

Frequently asked questions

Offices: QCS, 53 Queen Charlotte Street, Bristol BS1 4HQ · Unit 24, Basepoint Centre, Jubilee Close, Weymouth DT4 7BS