Updated 17 August 2026 for the EU AI Omnibus, in force since 27 July 2026.
The AI Omnibus entered into force on 27 July 2026 and moved the dates this article was originally written against. High-risk obligations for Annex III systems now apply from 2 December 2027, and for Annex I systems embedded in regulated products from 2 August 2028. The transparency and governance rules, Article 50 among them, applied from 2 August 2026, and the AI Office and the national authorities have held implementation, supervision and enforcement responsibility since that date. Article 5 prohibitions, the Article 4 AI literacy duty and the GPAI obligations under Articles 53 and 55 are unchanged, as is the 9 December 2026 transposition deadline for the revised Product Liability Directive. Source: European Commission, regulatory framework for AI, checked 17 August 2026.
Underwriting does not follow the deadline. Specialist carrier capacity kept expanding through the whole period in which the delay was uncertain, and specialist underwriters price to operator practice rather than to regulatory dates. What the Omnibus in force changes for AI agent insurance sets out the consequences for cover.
- The AI liability insurance market is in active price discovery: no standardised rate schedule exists, and actuarial models are being built in real time from a very small pool of placed policies.
- Three distinct pricing models have emerged: monoline specialty products (Armilla, and policies backed by the AIUC-1 standard), E&O extensions from mainstream carriers (Counterpart), and performance guarantee products (Munich Re aiSure). Each carries different premium logic and coverage scope.
- Enterprise deployers with meaningful autonomous agent programmes and Annex III sector exposure should expect their premium to reflect autonomy, sector and limit. No standardised rate schedule exists for this class, so no figure is stated here.
- SME buyers face a binary access problem: either minimal E&O extension coverage at relatively modest cost, or no meaningful monoline capacity available at any price until market volume increases.
- The four primary premium drivers are deployment scope, autonomy level, certification posture, and sector. A buyer who addresses all four before going to market gives the underwriter less to estimate, which is the case a broker can put for better terms.
The 2026 market structure
Three product architectures have emerged in the AI agent liability space, each with a different pricing logic.
The first is the monoline specialty product. These are policies built ground-up for AI agent risk, written by carriers or managing general agents (MGAs) that have invested in proprietary underwriting criteria. The Artificial Intelligence Underwriting Company launched from stealth in July 2025 with a USD 15 million seed round led by Nat Friedman at NFDG, and published its AIUC-1 standard, which backed the first policy of its kind, written for ElevenLabs in February 2026 and placed through Lloyd's of London; AIUC itself is a standards body rather than an insurer. Armilla, a Lloyd's coverholder, has published its own underwriting criteria and offers limits up to USD 25 million through the Lloyd's market. Monoline specialty products price directly against the AI deployment, not against a legacy professional indemnity base. They carry the most granular underwriting process.
The second architecture is the E&O extension. Counterpart launched its Affirmative AI Coverage product in November 2025, writing affirmative language for hallucinations, misclassification, bias, and deepfake fraud into its Management Professional Liability (MPL), Allied Health, and Tech E&O product lines. Extensions like this add AI-specific coverage to existing professional indemnity frameworks. The pricing is additive to the base E&O premium and is typically available at lower premium levels than a standalone monoline product, but the coverage scope is constrained by the parent product's structure and language.
The third architecture is the performance guarantee product. Munich Re aiSure settles on measurable performance data rather than on actual loss. This eliminates the claims adjustment process but introduces basis risk: if the actual loss exceeds the performance-based payout, the gap falls to the insured. Pricing for this kind of cover reflects the performance threshold agreed at inception, not the actual loss potential of the deployment. For a detailed analysis of how aiSure works and where its gaps sit, see our companion article on Munich Re aiSure and AI performance insurance.
Rate structure by deployer tier
The following table sets out how deployer tiers differ in profile, the limits they typically seek, and what drives their premium. No carrier active in the class publishes a rate schedule, so the premium column records that in place of a figure. Actual pricing will depend on underwriting review of the specific deployment, the documentation provided, and the carrier writing the line.
| Deployer tier | Profile | Coverage range | Indicative annual premium | Primary drivers |
|---|---|---|---|---|
| SME | 1 to 5 agents in production. Lower-risk sector. Human review in place. No Annex III exposure. | EUR 1M to 5M per occurrence | Not published | Governance quality, deployment scope, E&O base premium |
| Mid-market | 6 to 25 agents. Mixed autonomy. Some Annex III adjacent sector exposure. Partial governance documentation. | EUR 5M to 15M per occurrence | Not published | Autonomy loading, sector loading, governance documentation |
| Enterprise | 25+ agents or high-volume decision pipelines. Annex III sector (healthcare, financial services, critical infrastructure). Multi-jurisdiction deployment. | EUR 15M to 25M per occurrence | Not published | Autonomy envelope, sector loading, claims trigger architecture, documentation depth |
| Enterprise with certification | As above, with ISO/IEC 42001 implementation and Agent Certified assessment completed. | EUR 15M to 25M per occurrence | Not published | The same drivers, read from an evidence file; no carrier has published a certification discount |
The SME tier presents the most access-constrained picture. Monoline specialty carriers are primarily focused on enterprise buyers where the underwriting investment is proportionate to premium volume. SME buyers seeking meaningful limits in the EUR 5 to 10 million range will typically find their best near-term route through E&O extension products such as Counterpart's affirmative AI coverage, or through brokers with Lloyd's access who can assemble a line from the syndicate market.
The five underwriting factors driving premium
Across all three product architectures, five factors shape how an underwriter reads an AI agent risk in 2026.
1. Deployment scope. The number of agents in production, the volume and nature of the decisions they influence, and the breadth of jurisdictions in which they operate. A single agent assisting one internal workflow carries a fundamentally different risk profile from a fleet of customer-facing agents making autonomous decisions across EU member states. Scope is the primary scale variable in AI underwriting.
2. Autonomy envelope. How independently the agent acts without human review. Carriers differentiate between agents that recommend (human approves), agents that act with post-hoc review, and agents that act without meaningful human oversight. The autonomy envelope is the factor an underwriter can least infer without documentation. Fully autonomous agents in financial or healthcare settings attract the highest autonomy loadings.
3. Certification posture. Whether the organisation has implemented a recognised AI governance framework, specifically ISO/IEC 42001:2023 (the AI management system standard published by the International Organization for Standardization in December 2023), and whether an independent third-party assessment has been completed. Certification affects underwriting in two ways: it reduces the information burden during the submission process, and it provides evidence that known risk categories have been addressed. For the mechanism by which certification could affect premium, see the dedicated section below.
4. Sector. The EU AI Act's Annex III categories, including AI in biometric identification, critical infrastructure, education, employment, access to essential services, law enforcement, migration, and administration of justice, attract materially higher risk assessments from AI-specialist underwriters. Operators in these sectors should expect sector loadings as a standard feature of any quote.
5. Claims history. With the AI insurance market having essentially no multi-year loss data, claims history is currently the least differentiated factor. As loss events accumulate through 2026 and 2027, this will change rapidly. Organisations that invest in incident tracking and near-miss documentation now will be better positioned when claims history becomes a pricing factor.
Named carriers writing meaningful limits in 2026
The carrier landscape for AI agent liability in 2026 is small by conventional insurance market standards. Four organisations shape the policies with limits that are commercially relevant to enterprise buyers; one of them, AIUC, is a standards body rather than an insurer.
Artificial Intelligence Underwriting Company (AIUC) launched from stealth in July 2025 with a USD 15 million seed round led by Nat Friedman at NFDG, and publishes the AIUC-1 standard: 51 requirements and 130 controls across six pillars. The first policy written under AIUC-1 was issued to ElevenLabs in February 2026. AIUC's approach is standards-led: the AIUC-1 document sets the technical and governance criteria an AI system is tested against before an AIUC-1-backed policy is placed.
Munich Re, via its aiSure AI performance product distributed through a partnership with Mosaic Insurance, offers up to EUR/USD/CAD 15 million in initial capacity through Mosaic Insurance, which underwrites and markets the product. Munich Re's reinsurance capacity is structurally significant because it enables other primary carriers to offer AI coverage with credible limits behind them.
Armilla is a Coverholder at Lloyd's and offers structured AI liability coverage up to USD 25 million. Armilla announced a collaboration with Trustible on 8 October 2025. For a detailed analysis of how the Lloyd's coverholder model works for AI coverage, see our companion article on Armilla and the Lloyd's coverholder model.
Counterpart launched affirmative AI Coverage in November 2025, writing explicit AI coverage triggers into its Management Professional Liability, Allied Health, and Tech E&O products. The covered perils include hallucinations, misclassification, algorithmic bias, and deepfake fraud. Counterpart's approach differs from specialist MGAs in that it extends existing E&O structures rather than building a standalone AI product, which makes it more accessible to organisations already holding a Counterpart professional liability policy.
Lloyd's of London syndicates, beyond those accessed through Armilla, are also developing appetite for AI risk, though specific syndicate-level product announcements remain limited as of April 2026. Individual syndicates are expected to formalise AI coverage positions as the EU AI Act's enforcement machinery beds in. Note that the high-risk timetable moved: the AI Omnibus entered into force on 27 July 2026 and Annex III obligations now apply from 2 December 2027.
Coverage limits typically available
Per-occurrence limits in the 2026 market range from EUR 1 million at the lower end of E&O extensions to the USD 25 million per organisation that Armilla publishes as the ceiling of its Standalone AI Liability Policy, underwritten by certain underwriters at Lloyd's. Munich Re aiSure is available up to EUR/USD/CAD 15 million in initial capacity through Mosaic Insurance.
Aggregate annual limits are agreed per placement, often as a multiple of the per-occurrence limit. No standard ratio is published, so none is stated here.
Sublimits are common. The categories most frequently subject to sublimiting include: defamation and reputational harm arising from AI outputs; intellectual property infringement from generated content; privacy breach and data exposure through AI outputs; and bias or discrimination claims arising from automated decisions. Buyers in sectors where any of these categories represents a primary exposure should review sublimit levels carefully before binding coverage.
Defence costs are typically written either within the limit (reducing the amount available for settlements) or as a separate additional limit. The distinction matters significantly for sectors such as financial services and healthcare, where regulatory investigations are both more likely and more expensive than in other sectors.
How certification to ISO 42001 or Agent Certified can affect premium
The mechanism is structural; the pricing decision stays with the carrier. An underwriter evaluating an AI agent liability submission needs to answer four questions before quoting: What does the agent do? What oversight exists? What is the quality of the organisation's AI risk management? What happens when something goes wrong?
An organisation that presents an ISO/IEC 42001:2023 implementation alongside a third-party assessment gives the underwriter answers to all four questions in a standardised format that the underwriter's own technical team can validate efficiently. This can shorten the underwriting timeline, reduce the need for the underwriter to build their own risk picture from scratch, and reduce the probability that coverage will be declined due to incomplete information.
In premium terms, there are two places this efficiency could show up. The first is the autonomy loading: a certified organisation has documented its autonomy envelope and governance controls, and the underwriter has less uncertainty to price for. The second is the governance loading: the underwriter has third-party evidence that the known risk categories, bias, privacy, accuracy, incident response, have been addressed. No carrier has published a certification discount for this class, and no insurer has committed to a premium change for holding an Agent Certified result, at any tier. Whether the evidence moves the price is the carrier's decision.
Munich Re describes aiSure as requiring its own technical due diligence, which is where documented governance evidence gets read. Armilla announced a collaboration with Trustible on 8 October 2025; neither has published how a governance assessment changes the terms offered. For details on what a complete underwriting submission looks like, see our article on preparing an AI agent for underwriting review.
The pricing trajectory: what to expect through 2027
The structural forces acting on AI liability insurance pricing over the next eighteen months point in one direction: rates will tighten, and access will become more selective.
The August 2026 EU AI Act enforcement date and the December 2026 Product Liability Directive transposition deadline will bring a wave of demand from European operators who have delayed coverage decisions. When that demand meets a market with limited carrier capacity, the result is premium pressure. Organisations that establish underwriting relationships and provide documentation packages before the summer deadline will be better positioned than those seeking coverage reactively.
As loss data accumulates from the first cohort of placed policies, actuarial models will become more granular. The current premium ranges reflect uncertainty: underwriters are pricing for a distribution of possible outcomes that spans from uneventful deployment to catastrophic agentic failure. As the distribution becomes better understood through actual claims experience, rates for well-documented, low-autonomy deployments in lower-risk sectors should moderate. Rates for high-autonomy, Annex III sector deployments may move in either direction depending on whether early loss events are concentrated in that cohort.
EIOPA's Opinion on AI governance and risk management, published 6 August 2025, is the supervisory document shaping how European primary carriers approach AI risk appetite: it situates AI inside Solvency II, the Insurance Distribution Directive, DORA and the GDPR rather than creating a separate regime. Its practical effect on the market is the reason underwriters ask for governance evidence at all. The direction of any further guidancn will affect the depth of European-native capacity available from 2027 onwards. The European Insurance and Occupational Pensions Authority's February 2026 survey on GenAI use in the European insurance sector provides the baseline from which that capacity development will be measured.
What to expect in a quote: binder timing, documentation, and common exclusions
For organisations approaching a monoline specialist such as Armilla, or a placement backed by the AIUC-1 standard, the primary driver of the time from submission to binder is documentation completeness. An applicant who presents a full technical package (system architecture, training data provenance, accuracy benchmarks, monitoring programme, governance framework, and incident response documentation) at submission will reach binder faster than one who provides documentation in stages.
The documentation categories that underwriters consistently require are the same categories that the EU AI Act's Article 11 and Annex IV require for high-risk AI systems. Organisations building compliance documentation for regulatory purposes can put the same documentation to work in the underwriting submission.
Common exclusions to review carefully before binding include: intentional wrongdoing or fraud by the insured; losses arising from systems not disclosed at underwriting; regulatory penalties and fines (these are not insurable under most European insurance regimes and are excluded as a matter of public policy); bodily injury and property damage (typically written under separate general liability or product liability instruments); and losses arising from AI systems operating outside the autonomy parameters disclosed at underwriting. For a comprehensive analysis of AI exclusion language in existing policies, including how cyber and E&O markets are carving out AI activity, see our article on AI exclusions in cyber and E&O policies.
Organisations registered with the Agent Insured pre-launch coverage desk are invited into a structured intake process that assesses coverage needs, identifies the most appropriate product architecture, and prepares the documentation file before direct underwriting engagement.
Sources
Questions
How much does AI liability insurance cost?
In 2026, AI liability insurance pricing varies significantly by deployer size, deployment scope, and risk profile, and no standardised rate schedule exists for the class. SME buyers with limited deployments in lower-risk sectors are most likely to find cover as an E&O extension, priced on top of the base E&O premium. Mid-market and enterprise deployers with autonomous agents across multiple sectors, or operating in Annex III high-risk categories under the EU AI Act, should expect autonomy and sector loadings and a fuller underwriting review. No premium figure is given here because no published source supports one. Actual pricing depends on underwriting review of the specific deployment.
What factors affect AI insurance premium?
The five primary underwriting factors driving AI insurance premium in 2026 are: deployment scope (number of agents, decision volume, jurisdictions); autonomy envelope (how independently the agent acts without human review); certification posture (ISO/IEC 42001:2023 implementation and an independent assessment, which gives the underwriter evidence to read, though no carrier has published a discount for it); sector (Annex III high-risk categories under the EU AI Act attracting sector loadings); and claims history (limited in value today, but increasingly significant as loss data accumulates).
Who offers AI agent insurance in 2026?
The named organisations behind AI agent liability cover in 2026 are the Artificial Intelligence Underwriting Company (AIUC) (a standards body rather than a carrier, whose AIUC-1 standard backed the first policy of its kind, written for ElevenLabs in February 2026 and placed through Lloyd's of London), Munich Re via its aiSure AI performance product and Mosaic Insurance, Armilla as a Lloyd's coverholder with limits up to USD 25 million, and Counterpart with its affirmative AI coverage across MPL, Allied Health, and Tech E&O lines. No European-native AI insurer had formally launched primary market products as of April 2026.
Does AI certification reduce insurance cost?
No published evidence shows it yet. Certification to ISO/IEC 42001:2023, or an assessment under a structured AI governance framework such as Agent Certified, is designed to shorten the underwriter's diligence, reduce the documentation burden on both sides, and give third-party evidence that the risk categories the underwriter is concerned about have been addressed. Where that reaches pricing, it would be through lower autonomy and governance loadings. No carrier has published a certification discount for this class, and no insurer has committed to a premium change for holding an Agent Certified result: whether the evidence moves the price is the carrier's decision.
What are typical AI insurance coverage limits?
Coverage limits available in the 2026 market range from EUR 1 million at the lower end of E&O extensions to the up to USD 25 million per organisation that Armilla publishes, underwritten by certain underwriters at Lloyd's. Munich Re aiSure, through Mosaic Insurance, offers up to EUR/USD/CAD 15 million in initial capacity. Sublimits frequently apply for defamation, intellectual property infringement, and privacy breach. Aggregate annual limits are agreed per placement, and no standard ratio to the per-occurrence limit is published. Defence costs may be written inside or outside the per-occurrence limit depending on the product structure and carrier.
Sources
- Artificial Intelligence Underwriting Company. Launch from stealth, July 2025, USD 15 million seed round led by Nat Friedman at NFDG. aiuc.com. AIUC-1 standard, first edition, July 2025. ElevenLabs first AIUC-1-backed policy, February 2026.
- Munich Re. aiSure product, Mosaic Insurance press release, 26 February 2026: Mosaic underwrites and markets Munich Re's aiSure with up to EUR/USD/CAD 15 million in initial capacity for AI developers and vendors worldwide. mosaicinsurance.com.
- Armilla. Coverage overview and limits disclosure, armilla.ai. Collaboration with Trustible announced 8 October 2025 on armilla.ai. Armilla operates as a Lloyd's coverholder.
- Counterpart. Affirmative AI Coverage product, launched November 2025. Covered perils (hallucinations, misclassification, bias, deepfake fraud) confirmed from Counterpart product announcement across MPL, Allied Health, and Tech E&O lines.
- Lloyd's of London. AI-related market bulletins, 2023. Lloyd's market bulletin on AI risk appetite, syndicate-level guidance.
- European Insurance and Occupational Pensions Authority. Survey on GenAI use in the European insurance sector, February 2026. EIOPA Opinion on AI governance and risk management, 6 August 2026. EIOPA, Frankfurt.
- Regulation (EU) 2024/1689, Annex III (high-risk AI categories), Article 11 (technical documentation), Article 99 (penalties). Official Journal of the European Union, 12 July 2024.
- Directive (EU) 2024/2853 of the European Parliament and of the Council on liability for defective products, repealing Council Directive 85/374/EEC. OJ L, 18 November 2024. Member state transposition deadline: 9 December 2026.
- International Organization for Standardization and International Electrotechnical Commission. ISO/IEC 42001:2023, Information technology: Artificial intelligence: Management system. Geneva, December 2023.
- National Institute of Standards and Technology. AI Risk Management Framework (AI RMF 1.0). NIST AI 100-1. Gaithersburg, January 2023.