Does my cyber policy cover AI-related claims?

Last verified: March 24, 2026

Answer

Not necessarily. Standard cyber policies were written before AI-specific risk and may neither clearly cover nor clearly exclude AI-related claims, leaving "silent" gaps. Hamilton addresses AI within E&O and Cyber through a sublimit — capping, rather than excluding, AI-related claims and conditioning full limits on AI governance documentation. Whether your cyber policy responds to an AI claim depends on its specific wording.

Traditional cyber policies were not designed for AI risk. Hamilton's sublimit endorsement addresses AI within cyber/E&O policies, but standard cyber coverage may have silent AI exclusions or simply not contemplate AI-specific scenarios.

Sources checked

Scope

General business and insurance-risk analysis, not legal advice. AI failures can create liability to clients and third parties regardless of how cyber coverage is structured. On the coverage side — cyber and E&O for AI-related incidents — standard cyber forms may contain silent AI exclusions or simply not contemplate AI, while Hamilton uses a sublimit rather than an exclusion. Whether a policy responds depends on whether it names AI, caps it, or is silent; Hamilton's sublimit endorsement is filed or pending in select states and is not yet nationwide as of the last verified date. Confirm specifics with your broker and the filed forms.

Operational implication

Cyber coverage cannot be assumed to extend to AI incidents. Knowing whether your policy is silent, sublimited, or exclusionary on AI is necessary before relying on it for AI risk.

Carrier Endorsement Details

HAM-AI-2025

Hamilton — Hamilton AI Sublimit

Rather than excluding AI claims, applies a sublimit to AI-related professional liability claims, typically 25-50% of the policy limit.

Key Provisions

Applies sublimit (not exclusion) to AI-related claims
Sublimit typically 25-50% of aggregate policy limit
Requires AI governance documentation for full limit access
Includes incident response requirements for AI failures
Type: sublimit Policies: E&O, Cyber

Where this lands operationally

Gridex turns the compliance or coverage question into operated workflow controls: intake, review points, audit trails, and the places a person stays in the decision.

Discuss Broker Risk Intake

Review your cyber and E&O policies for AI treatment — covered, sublimited, or silent — and document your AI incident-response steps, which sublimit forms increasingly expect.

Discuss Broker Risk Intake

Related Questions

  • What is the Hamilton AI sublimit endorsement? Hamilton's AI endorsement takes a sublimit approach rather than full exclusion, providing capped coverage for AI-related claims with governance incentives that can increase the sublimit for organizations with documented AI risk management programs.
  • What is the difference between AI exclusions and AI sublimits? AI exclusions (like Verisk CG 40 47) eliminate all coverage for AI claims. AI sublimits (like Hamilton's) cap coverage at a lower amount but still provide some protection, often with governance incentives.
  • Which insurance carriers have filed AI exclusions? Verisk (CG 40 47 for CGL), W.R. Berkley (PC 51380 for D&O/E&O), and Hamilton (sublimit for E&O/Cyber) are the three carriers with filed AI endorsements. Verisk's form is being adopted across multiple carrier groups.
  • What AI documentation do insurers require? Insurers increasingly want documented AI governance programs, risk assessments, and usage inventories when underwriting technology-related policies. Hamilton's sublimit endorsement explicitly rewards governance documentation with higher coverage limits.