$2,500 to $25,000+/yr depending on profession (enterprise vendor and federal contractor tier)

$3M / $5M E&O Coverage Cost 2026

$3M per claim / $5M aggregate is the standard enterprise vendor tier in 2026. Fortune 500 procurement, federal contractor flow-downs, healthcare BAA work with significant PHI, mid-size architect and engineer firms, and most $1M+ ARR SaaS companies serving enterprise customers all live at this tier. This guide breaks down 2026 cost ranges by cohort, explains when the upgrade from $1M/$2M is genuinely required, and walks through the structural choices (single-primary vs primary-plus-excess, defense inside vs outside, project-specific endorsements) that determine the final price.

Seven Triggers That Push Coverage to $3M / $5M

Coverage decisions at this tier are almost always driven by specific contractual triggers rather than aspirational risk management. The seven scenarios below account for the vast majority of $3M/$5M placements in the US market.

Fortune 500 enterprise vendor contract

Procurement standardizes vendor insurance at $5M or $10M minimums; sub-$5M coverage disqualifies the bid.

Federal contractor (FAR 52.228-7)

Federal Acquisition Regulation default minimums for professional services contracts often start at $5M when professional liability is required.

FedRAMP / CMMC vendor

Federal cyber-compliant vendors typically commit to $5M cyber + $5M tech E&O via flow-down requirements from prime contractors.

Healthcare BAA with significant PHI volume

Business Associate Agreements handling more than roughly 50,000 patient records commonly require $3M to $5M minimum.

Financial services SOX or SEC vendor

Publicly-traded company vendors often face SOX-driven flow-downs requiring $5M+ coverage.

Architect or engineer on $25M+ project

Project-specific limits scale with construction value; $50M project commonly requires $5M designer E&O at minimum.

Mid-size law firm (20+ attorneys)

Lawyers Professional Liability for firms above 20 attorneys typically writes at $5M to $10M per claim.

Pricing by Cohort

Annual premium ranges for $3M per claim / $5M aggregate. Mid-size firms with no prior claims, mid-cost states. Single-primary or primary-plus-excess structure; pricing similar across structures.

Mid-size SaaS company ($1M to $10M ARR)

$5,000 to $20,000

Combined tech E&O + cyber tower. Vouch and Embroker built for this segment.

Mid-size accounting firm (5 to 25 staff)

$5,000 to $25,000

AICPA program common. Tax-prep load adds to base.

Mid-size law firm (10 to 50 attorneys)

$8,000 to $60,000+

Practice area mix dominates; PI plaintiff and class action heavy firms higher.

Mid-size consultancy (10 to 50 employees)

$4,500 to $18,000

Vicarious liability for consultant team plus subcontractor exposure.

Mid-size MSP (500 to 2,000 endpoints)

$8,000 to $30,000

Tech + cyber combined; underwriting requires demonstrated security controls.

Mid-size architect / engineering firm (10 to 50 design professionals)

$10,000 to $50,000

Project-based exposure; tail considerations for completed-projects exposure.

Insurance broker mid-size (10 to 50 producers)

$15,000 to $60,000

Per-producer rating; commercial lines higher than personal lines.

Mid-size financial advisor RIA ($100M to $1B AUM)

$15,000 to $50,000

Suitability claims and complex product exposure drive cost.

Sourced from Vouch, Embroker, Coalition, Hiscox, Travelers Technology, AIG CyberEdge, and the AICPA, ACEC, ABA endorsed-program rate ranges. As of May 2026.

Single Primary vs Primary Plus Excess

$5M of total coverage can be structured two ways. A single-primary $5M policy with one carrier writes the entire tower as one product. A primary-plus-excess structure splits the tower into a $1M primary policy and a $4M excess policy, often with different carriers.

Single primary advantages: one carrier, one wording, one set of conditions, simpler claim coordination. Disadvantages: limited carrier choice at $5M monolithic limits, especially for niche professions; pricing sometimes higher than a layered approach.

Primary-plus-excess advantages: digital primary carriers (Hiscox, NEXT, Coterie) often quote the $1M primary aggressively, then an excess carrier (Travelers, Hartford, Chubb) prices the layer above; total premium can be lower. Coverage gaps can be avoided by ensuring the excess wording matches the primary wording (following-form excess). Disadvantages: two carriers means two claim notification processes; primary-excess coordination disputes can arise when the layers do not align cleanly.

For most mid-size firms in 2026, the answer is whichever structure the broker can deliver at the lowest total cost with following-form excess wording. The premium difference is typically less than 10 percent, so optimization at this level is rarely worth significant effort.

Defense Costs at the $5M Tier

At $3M / $5M, defense-outside-limits should be the default structure. Defense costs in contested professional liability cases at this severity level routinely run $500K to $2M before settlement or verdict, especially in cases involving expert witnesses (financial damages experts, technical-domain experts) and extended discovery. A defense-inside-limits policy at this tier can have meaningful aggregate erosion from defense alone; defense-outside preserves the full $5M for indemnity.

Premium load for defense-outside at this tier is typically 10 to 18 percent of base premium. On a $15,000 base premium that is $1,500 to $2,700 per year. Worth it relative to the alternative of aggregate erosion at the moment the policy is needed most.

Project-Specific Coverage: When and Why

For architects, engineers, IT systems integrators on major implementations, and certain consulting practices, the standard practice-policy aggregate can be consumed by a single large project even at $5M aggregate. Project-specific insurance is a separate policy that responds only to claims arising from one named project, with limits sized to project value.

The structure preserves the practice-policy aggregate for the rest of the firm's work. If a $100M construction project produces a $5M claim, the project-specific $5M policy responds without touching the firm's practice-policy aggregate. The firm's other work in the same policy period remains fully protected.

Cost varies significantly with project type and exposure. A typical $5M project-specific designer E&O for a $100M construction project might cost $50K to $150K as a single payment for the duration of the project plus a tail period. Often the project owner pays through the prime contract rather than the design firm. The AIA Document E235 series and the ACEC project-policy guidelines lay out the typical framework. When the project is unusual in size or duration, this structure is worth the time to evaluate.

Frequently Asked Questions

When do I actually need $3M / $5M coverage instead of $1M / $2M?

Specific contract requirements drive most upgrades. Federal contractors and FedRAMP vendors routinely face $5M minimum requirements through flow-down provisions in prime contracts. Fortune 500 vendor MSAs increasingly require $5M as the procurement floor. Healthcare BAA work with significant PHI volumes commonly requires $3M to $5M. Architects and engineers on construction projects above $25M project value often face $5M designer E&O requirements specified in the prime contract. If your business does not include any of these triggers, $1M / $2M is usually sufficient and the upgrade is not worth the premium load. The question is contract-driven, not aspirational.

How much more expensive is $3M / $5M compared to $1M / $2M?

The step from $1M/$2M to $3M/$5M typically adds 50 to 100 percent to the premium, varying by profession and individual underwriting. The marginal cost is significant in dollar terms but per-dollar-of-additional-coverage it is actually cheaper than the step from $500K to $1M. Underwriters price the layer above primary at a lower marginal rate because the loss distribution thins out beyond $1M for most professions. For a solo IT consultant whose $1M/$2M premium is $1,000, $3M/$5M might be $1,800 to $2,200. For a mid-size firm whose $1M/$2M premium is $10,000, $3M/$5M might be $17,000 to $20,000.

Can I buy $5M as primary or do I need primary plus excess?

Either structure works for most professions. Single-primary $5M policies are available from the major specialty markets (Hiscox, Travelers, Hartford, AIG, Chubb) for most cohorts. Primary $1M plus a $4M excess layer is the alternative structure: a $1M primary policy with a separate excess policy sitting on top. The excess structure is often used when the primary is in a competitive market (digital carriers like Hiscox or NEXT) and the excess is placed with a traditional carrier (Travelers, Hartford). Cost is typically similar across structures; the choice often comes down to broker preference and how easily the primary and excess wordings coordinate at claim time.

Are defense costs included in the $5M aggregate or on top?

Depends on the policy. Defense-inside-limits at the $3M/$5M tier means defense costs erode the $5M aggregate available for indemnity. Defense-outside-limits keeps the full $5M for indemnity and pays defense separately. At this tier the defense-outside structure is far more common because defense costs in cases that warrant $3M+ coverage routinely run $250K to $1M, which would meaningfully erode aggregate. Premium load for defense-outside is typically 8 to 15 percent. Always verify the structure explicitly before binding.

Do I need separate cyber liability when buying $3M / $5M tech E&O?

Yes, almost always. Cyber and tech E&O cover different risks, and at the $3M/$5M coverage level the underlying business almost certainly handles enough customer data or system access that cyber liability is independently needed. Many modern tech-focused carriers (Vouch, Embroker, Coalition) write combined tech-cyber towers with shared or separate limits; the key question is whether the primary tower has aggregate large enough to absorb both a tech-services claim and a cyber breach in the same policy period. Buying separate towers (often through different carriers) is common above the $5M total tier.

What is project-specific or contract-specific insurance and when does it apply?

For architects, engineers, and certain construction-adjacent professions, the standard practice-policy limit may be inadequate for a specific large project. Project-specific insurance is a separate policy that responds only to claims arising from the named project, with limits sized to the project value. This protects practice-policy aggregate from being consumed by a single project. Typical use: a $5M project-specific E&O policy for a $100M construction project, sitting alongside the firm's $5M practice policy. Cost varies dramatically with project type and exposure. The AIA and ACEC publish guidance on when project-specific insurance is appropriate.

Related Coverage Tiers

$500K Coverage Cost

Entry tier for solo low-risk professionals

$1M / $2M Coverage Cost

Modal small-business tier

2-to-5 Employee Firm

Common upgrade trigger as headcount grows

2026 Premium Benchmarks

Median rates across professions and limits

Architects E&O

Common $3M+ project-driven requirements

MSP Tech Errors Cost

Common $3M+ enterprise client requirements

This guide is informational, not insurance advice. Enterprise-tier E&O placements deserve a specialist broker familiar with your industry and client mix. Updated 17 May 2026.