Business insurance gets bought once, filed, and renewed automatically. The gaps are discovered at the worst possible moment — when a claim is denied.
Most of those gaps are not obscure. They are standard exclusions in standard policies, and they are predictable enough to check for deliberately.
What a general liability policy actually covers
A commercial general liability policy covers bodily injury and property damage to third parties arising from your operations, along with personal and advertising injury. A customer slips in your showroom; your crew damages a client’s floor.
What it does not cover is the part owners misread. General liability does not cover:
- Damage to your own property. That is commercial property insurance.
- Faulty workmanship itself. The classic construction distinction: if bad wiring you installed burns down the house, the fire damage may be covered, but replacing your own defective work generally is not.
- Professional advice. Errors in design, specification, or counsel fall to professional liability.
- Employee injuries. That is workers’ compensation, and it is excluded from GL by design.
- Vehicles. Commercial auto, including the non-owned exposure discussed below.
- Employment disputes. Discrimination, harassment, and wrongful termination claims fall to employment practices liability.
The SBA’s overview maps the standard coverage types, and the NAIC — the association of state regulators — publishes plain-language explanations of what each is meant to do.
The gaps that recur
Non-owned and hired auto. Your employee runs an errand in their own car and causes an accident. Their personal policy responds first, but it is frequently inadequate, and the business is a defendant because the errand was work. This is inexpensive to add and routinely absent.
Business interruption without the right trigger. Business interruption covers lost income while you cannot operate — but only when the interruption stems from a covered physical loss. Loss of a key customer is not covered. Neither, in most policies written after 2020, is a communicable disease closure.
Flood. Standard commercial property policies exclude flood. Coverage comes through the National Flood Insurance Program or the private market. Owners outside mapped high-risk zones often skip it, and a substantial share of flood claims arise outside those zones.
Cyber. General liability was not designed for data breaches, and most policies now carry explicit exclusions. A cyber policy covers notification costs, forensics, business interruption from an outage, and increasingly ransomware response. For any business holding customer payment or personal data, this is no longer optional — CISA’s small business guidance is a reasonable starting point on the underlying risk.
Employment practices liability. Claims are common, and defense costs are substantial even when the employer prevails. Businesses that have added employees without revisiting coverage are frequently exposed here.
Coinsurance penalties. This one is subtle and expensive. Property policies commonly include a coinsurance clause requiring you to insure to a specified percentage of replacement cost — typically 80% or 90%. Insure for less and the insurer reduces every claim proportionally, including partial losses. A building insured at 60% of a required 80% can see a partial claim cut by a quarter. Construction costs have moved sharply enough in recent years that policies renewed on autopilot are frequently underinsured against this test.
Replacement cost versus actual cash value
Actual cash value pays replacement cost less depreciation. Replacement cost pays what it takes to replace the item today.
For a ten-year-old roof or aging equipment, the difference between the two is the difference between repairing and not repairing. The premium gap is usually modest; the claim gap is not.
Certificates of insurance prove less than people think
Collecting certificates from subcontractors is standard practice, and it is worth doing — but a certificate is a snapshot, not a contract. It confirms a policy existed on the date issued. It does not obligate the insurer to notify you if the policy lapses next month.
Where a subcontractor’s coverage genuinely matters, the stronger positions are being named as an additional insured by endorsement, and requiring a waiver of subrogation. Both are written into the underlying policy rather than described on a certificate.
An annual review that takes an hour
Once a year, before renewal, work through five questions:
- What changed? New services, new states, new vehicles, more employees, higher revenue. Each can move a rating basis or open an exposure.
- Are the limits still proportionate? Limits set when revenue was a third of today’s are no longer calibrated.
- What are the actual exclusions? Not the summary — the exclusions pages.
- Would replacement cost today match the insured value? This is the coinsurance test.
- What is the deductible, and could you fund it? A deductible you cannot pay in a bad month is a coverage problem.
Where this connects to the rest of your finances
Insurance decisions are usually made in isolation, by a broker who never sees the financial statements. That is how businesses end up over-insured against remote risks and under-insured against the exposure that would actually end them.
The useful sequence is to identify the losses the business could not absorb, insure those properly, and self-insure the rest through a deliberate deductible — a judgment that requires knowing your working capital position, not just your premium.