First-party coverage
Covers direct losses your organisation incurs — including data restoration, business interruption, incident response, infrastructure overage, and incorrect funds transfer.
Third-party coverage
Covers liabilities arising from claims by third parties — including harmful or infringing AI outputs, misrepresentation, misselling, and regulatory breach.
Coverage areas
| Coverage area | Type | What it covers |
|---|---|---|
| Data and model restoration and retraining | First-party | Costs to restore corrupted data or retrain a model following an AI-related incident |
| Business interruption | First-party | Lost revenue and increased operating costs resulting from an AI system outage or failure |
| Incident response and regulatory costs | First-party | Forensic investigation, legal counsel, regulatory notification, and crisis communications costs following an incident |
| Runaway usage and infrastructure overage | First-party | Unexpected compute or API costs caused by an agent behaving outside its intended parameters |
| Incorrect funds transfer | First-party | Financial losses resulting from an AI agent initiating or approving a payment in error |
| Harmful or infringing AI outputs | Third-party | Claims from third parties alleging harm caused by AI-generated content, including intellectual property infringement |
| Misrepresentation and misselling | Third-party | Claims arising from an AI agent providing inaccurate information that a third party relied on to their detriment |
| Regulatory breach | Third-party | Fines, penalties, and defence costs arising from a regulator’s investigation into AI-related conduct |
How coverage is priced
Coverage is priced at the agent level, not the organisation level. Each agent you submit for evaluation receives its own premium, which is determined by:- Deployment context — the environment the agent operates in and the sensitivity of that environment
- Permissions and data access — the scope of what the agent can read, write, call, or execute
- Tools — the external systems and APIs the agent can interact with
- Users — whether the agent serves internal staff, business customers, or members of the public
- Volume — the number of interactions or transactions the agent processes
- Guardrails and controls — the strength of the permissioning, human-in-the-loop gates, auditability, and model governance measures you have in place
