{"id":7838,"date":"2026-04-16T10:01:00","date_gmt":"2026-04-16T10:01:00","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=7838"},"modified":"2026-04-16T10:01:00","modified_gmt":"2026-04-16T10:01:00","slug":"insurance-carriers-quietly-back-away-from-covering-ai-outputs","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=7838","title":{"rendered":"Insurance carriers quietly back away from covering AI outputs"},"content":{"rendered":"
\n
\n
\n
\n
<\/div>\n

Several major insurance carriers have begun to back away from providing cybersecurity and other insurance to companies using AI to run internal processes, insiders say.<\/p>\n

While there\u2019s no standard response to customer use of AI in the insurance market, many carriers are now quietly declining to write policies for claims related to AI-generated outputs in cybersecurity<\/a> and errors and omissions<\/a> (E&O) coverage, these observers say. Other insurance carriers are jacking up prices to cover AI-related claims, they say.<\/p>\n

Dozens of insurance carriers appear to be rethinking coverage for mistakes related to AI, says Connor Deeks<\/a>, CEO of Codestrap, an AI development and consulting firm that works with insurance firms.<\/p>\n

Many insurance companies aren\u2019t comfortable with covering AI outputs because they can\u2019t track the reasoning path the AI took to come up with a result, he says.<\/p>\n

\u201cThat\u2019s playing out downstream with insurance companies basically carving out coverage, whether that\u2019s across cybersecurity or E&O,\u201d he says. \u201cAll of these vibe-coded solutions and these AI systems that people have constructed have inherent risk baked into the cake now, and you can\u2019t actually see the full process.\u201d<\/p>\n

The insurance carrier concerns about AI workloads first surfaced in November 2025, when Financial Times reported<\/a> that three major carriers, AIG, Great American, and W.R. Berkley, filed requests with US regulators to offer insurance policies that exclude liabilities tied to AI tools such as chatbots and agents. At the time, those requests appeared to be preemptive moves to be allowed to exclude AI mistakes sometime in the future.<\/p>\n

But now, many carriers seem to be moving forward with plans to exclude AI mistakes<\/a> from policies, Deeks says. Several carriers he\u2019s been in contact with are moving to limit or end coverage for AI-related business disruptions and liabilities, he adds. The irony is that many insurance carriers are embracing AI<\/a> for their own internal purposes.<\/p>\n

Deeks\u2019 company has a vested interest in AI insurance coverage \u2014 Codestrap markets its AI coding platform as traceable and therefore insurable \u2014 but other industry insiders have also seen similar carrier decisions.<\/p>\n

Carriers find exclusions<\/h2>\n

It\u2019s still unclear how many carriers will refuse to insure AI workloads, but several carriers are now writing insurance policies that exempt coverage for AI-related business chaos, says Jason Bishara<\/a>, financial practice leader at global carrier NSI Insurance Group.<\/p>\n

\u201cThe risk appetite is changing among the carriers, and it\u2019s always constantly evolving,\u201d he says. \u201cWith regard to AI, there are carriers that are just removing it from their risk appetite and declining to quote altogether.\u201d<\/p>\n

While some carriers have declined to cover AI outputs, others are building in rate hikes to cover the increased risk, Bishara says. While he doesn\u2019t have numbers on the extent of the rate hikes, they are significant, he adds.<\/p>\n

\u201cEvery business has insurance, and every business now is using AI to some extent,\u201d he adds. \u201cAre you seeing those liabilities and exclusions within these policies and an aversion to it from the carriers? The answer is yes.\u201d<\/p>\n

Carriers are also treating AI vendors differently than AI users, he says. In many cases, carriers are declining to cover AI vendors altogether, while they carve out exceptions in policies against covering AI at companies using the technology.<\/p>\n

\u201cIf you\u2019re an AI-related company or specifically an AI company, there\u2019s a good chance that you\u2019ll get a declination at this point,\u201d he adds.<\/p>\n

In recent months, many carriers have been asking detailed questions about how customers are using AI to better understand the risk of insuring potential mishaps, he says. Ultimately, this increased scrutiny will make it more difficult for companies to buy insurance for AI workloads.<\/p>\n

\u201cFor everybody leveraging AI right now, you\u2019re seeing questions like, \u2018What are your AI policies? What are your procedures? How are you leveraging AI within your business?\u2019\u201d Bishara adds. \u201cWe\u2019re getting a lot of questions from the underwriters on, \u2018How do you leverage AI within your business?\u2019\u201d<\/p>\n

Coverage in flux<\/h2>\n

Phil Karecki<\/a>, CTO for the insurance sector at managed services provider Ensono, also sees some carriers backing away from covering AI outputs, although he\u2019s not sure whether it\u2019s a major trend. Insurance carriers continuously experiment with how to provide coverage, he notes.<\/p>\n

Carriers have tried to separate tightly governed AI deployments from more experimental projects when determining whether to provide coverage, he says.<\/p>\n

\u201cYou\u2019ve got this bifurcation of AI, the governed generative and the autonomous pieces,\u201d he says. \u201cIt\u2019s no longer, \u2018Are you using AI?\u2019 It\u2019s asking, \u2018Are you using governed AI? How are you governing it? How are you keeping it safe and secure?\u2019\u201d<\/p>\n

Carriers have been trying to determine whether covering AI workloads can be profitable for them, Karecki adds. Governed AI tools operating in a bounded decision-making process will be more insurable, while experimental AI systems with no monitoring and no easy rollback will be difficult to cover, he notes.<\/p>\n

\u201cThere\u2019s a repositioning versus a pullback, and that\u2019s very common to the industry, and they will at times open up coverage just to see if it\u2019s this type of insurance that will sell,\u201d he says. \u201cThey will assess the results and what needs to change so they can decide whether to re-enter this marketplace or abandon it completely.\u201d<\/p>\n

In some cases, whether an AI system is insurable may come down to circumstances at individual insurance customers. Carriers in general don\u2019t want to get out of the business of providing insurance, Karecki says.<\/p>\n

\u201cWhat they\u2019re working for right now is, \u2018How do I make this profitable, and is this sector insurable?\u2019\u201d he says. \u201cThey make those decisions on every application regardless, but now, depending upon what they\u2019re being asked to insure, the questions will follow. \u2018What are you using AI for? How are you governing it? What risks does that introduce?\u2019\u201d<\/p>\n

It makes sense that some carriers have begun to question whether to cover AI outputs, given the current level of unreliability of most AI systems, says Dorian Smiley<\/a>, CTO at Codestrap.<\/p>\n

\u201cThe math says these models should be deterministic, like given the same input, you should get the same output,\u201d he says. \u201cBut you can get very different output from the same input, and they can\u2019t know if the answer that they\u2019re giving you is actually correct.\u201d<\/p>\n

In most cases, AI models lack inductive reason and can\u2019t review their own work, but many organizations are talking about deploying hundreds of autonomous agents<\/a> and treating them like digital employees, he notes.<\/p>\n

\u201cThe idea that these agents are going to become employees, autonomous people working in your organization, is insane,\u201d he says. \u201cYou would never hire a person that can\u2019t learn new information, can\u2019t reliably retrieve information, or check their own work.\u201d<\/p>\n

NSI\u2019s Bishara has advice for IT and business leaders looking for insurance coverage for their AI workloads: Be honest about how they\u2019re using AI. If they try to hide their AI risks, they risk having their claims rejected when something goes wrong, he says.<\/p>\n

\u201cIf you don\u2019t fully disclose these things appropriately in the way in which you\u2019re functioning and operating, it could be utilized as an excuse to deny a claim at a later date,\u201d he says. \u201cYou don\u2019t want a carrier to come back and say, \u2018We didn\u2019t underwrite to that risk. We asked these questions, and you didn\u2019t disclose it.\u2019\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

Several major insurance carriers have begun to back away from providing cybersecurity and other insurance to companies using AI to run internal processes, insiders say. While there\u2019s no standard response to customer use of AI in the insurance market, many carriers are now quietly declining to write policies for claims related to AI-generated outputs in […]<\/p>\n","protected":false},"author":0,"featured_media":7839,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-7838","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/7838"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7838"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/7838\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/7839"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7838"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7838"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7838"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}