$3M / $5M E&O Coverage Cost 2026
$3M per claim / $5M aggregate is the standard enterprise vendor tier in 2026. Fortune 500 procurement, federal contractor flow-downs, healthcare BAA work with significant PHI, mid-size architect and engineer firms, and most $1M+ ARR SaaS companies serving enterprise customers all live at this tier. This guide breaks down 2026 cost ranges by cohort, explains when the upgrade from $1M/$2M is genuinely required, and walks through the structural choices (single-primary vs primary-plus-excess, defense inside vs outside, project-specific endorsements) that determine the final price.
Seven Triggers That Push Coverage to $3M / $5M
Coverage decisions at this tier are almost always driven by specific contractual triggers rather than aspirational risk management. The seven scenarios below account for the vast majority of $3M/$5M placements in the US market.
Fortune 500 enterprise vendor contract
Procurement standardizes vendor insurance at $5M or $10M minimums; sub-$5M coverage disqualifies the bid.
Federal contractor (FAR 52.228-7)
Federal Acquisition Regulation default minimums for professional services contracts often start at $5M when professional liability is required.
FedRAMP / CMMC vendor
Federal cyber-compliant vendors typically commit to $5M cyber + $5M tech E&O via flow-down requirements from prime contractors.
Healthcare BAA with significant PHI volume
Business Associate Agreements handling more than roughly 50,000 patient records commonly require $3M to $5M minimum.
Financial services SOX or SEC vendor
Publicly-traded company vendors often face SOX-driven flow-downs requiring $5M+ coverage.
Architect or engineer on $25M+ project
Project-specific limits scale with construction value; $50M project commonly requires $5M designer E&O at minimum.
Mid-size law firm (20+ attorneys)
Lawyers Professional Liability for firms above 20 attorneys typically writes at $5M to $10M per claim.
Pricing by Cohort
Annual premium ranges for $3M per claim / $5M aggregate. Mid-size firms with no prior claims, mid-cost states. Single-primary or primary-plus-excess structure; pricing similar across structures.
Mid-size SaaS company ($1M to $10M ARR)
$5,000 to $20,000Combined tech E&O + cyber tower. Vouch and Embroker built for this segment.
Mid-size accounting firm (5 to 25 staff)
$5,000 to $25,000AICPA program common. Tax-prep load adds to base.
Mid-size law firm (10 to 50 attorneys)
$8,000 to $60,000+Practice area mix dominates; PI plaintiff and class action heavy firms higher.
Mid-size consultancy (10 to 50 employees)
$4,500 to $18,000Vicarious liability for consultant team plus subcontractor exposure.
Mid-size MSP (500 to 2,000 endpoints)
$8,000 to $30,000Tech + cyber combined; underwriting requires demonstrated security controls.
Mid-size architect / engineering firm (10 to 50 design professionals)
$10,000 to $50,000Project-based exposure; tail considerations for completed-projects exposure.
Insurance broker mid-size (10 to 50 producers)
$15,000 to $60,000Per-producer rating; commercial lines higher than personal lines.
Mid-size financial advisor RIA ($100M to $1B AUM)
$15,000 to $50,000Suitability claims and complex product exposure drive cost.
Sourced from Vouch, Embroker, Coalition, Hiscox, Travelers Technology, AIG CyberEdge, and the AICPA, ACEC, ABA endorsed-program rate ranges. As of May 2026.
Single Primary vs Primary Plus Excess
$5M of total coverage can be structured two ways. A single-primary $5M policy with one carrier writes the entire tower as one product. A primary-plus-excess structure splits the tower into a $1M primary policy and a $4M excess policy, often with different carriers.
Single primary advantages: one carrier, one wording, one set of conditions, simpler claim coordination. Disadvantages: limited carrier choice at $5M monolithic limits, especially for niche professions; pricing sometimes higher than a layered approach.
Primary-plus-excess advantages: digital primary carriers (Hiscox, NEXT, Coterie) often quote the $1M primary aggressively, then an excess carrier (Travelers, Hartford, Chubb) prices the layer above; total premium can be lower. Coverage gaps can be avoided by ensuring the excess wording matches the primary wording (following-form excess). Disadvantages: two carriers means two claim notification processes; primary-excess coordination disputes can arise when the layers do not align cleanly.
For most mid-size firms in 2026, the answer is whichever structure the broker can deliver at the lowest total cost with following-form excess wording. The premium difference is typically less than 10 percent, so optimization at this level is rarely worth significant effort.
Defense Costs at the $5M Tier
At $3M / $5M, defense-outside-limits should be the default structure. Defense costs in contested professional liability cases at this severity level routinely run $500K to $2M before settlement or verdict, especially in cases involving expert witnesses (financial damages experts, technical-domain experts) and extended discovery. A defense-inside-limits policy at this tier can have meaningful aggregate erosion from defense alone; defense-outside preserves the full $5M for indemnity.
Premium load for defense-outside at this tier is typically 10 to 18 percent of base premium. On a $15,000 base premium that is $1,500 to $2,700 per year. Worth it relative to the alternative of aggregate erosion at the moment the policy is needed most.
Project-Specific Coverage: When and Why
For architects, engineers, IT systems integrators on major implementations, and certain consulting practices, the standard practice-policy aggregate can be consumed by a single large project even at $5M aggregate. Project-specific insurance is a separate policy that responds only to claims arising from one named project, with limits sized to project value.
The structure preserves the practice-policy aggregate for the rest of the firm's work. If a $100M construction project produces a $5M claim, the project-specific $5M policy responds without touching the firm's practice-policy aggregate. The firm's other work in the same policy period remains fully protected.
Cost varies significantly with project type and exposure. A typical $5M project-specific designer E&O for a $100M construction project might cost $50K to $150K as a single payment for the duration of the project plus a tail period. Often the project owner pays through the prime contract rather than the design firm. The AIA Document E235 series and the ACEC project-policy guidelines lay out the typical framework. When the project is unusual in size or duration, this structure is worth the time to evaluate.
Frequently Asked Questions
When do I actually need $3M / $5M coverage instead of $1M / $2M?
How much more expensive is $3M / $5M compared to $1M / $2M?
Can I buy $5M as primary or do I need primary plus excess?
Are defense costs included in the $5M aggregate or on top?
Do I need separate cyber liability when buying $3M / $5M tech E&O?
What is project-specific or contract-specific insurance and when does it apply?
Related Coverage Tiers
$500K Coverage Cost
Entry tier for solo low-risk professionals
$1M / $2M Coverage Cost
Modal small-business tier
2-to-5 Employee Firm
Common upgrade trigger as headcount grows
2026 Premium Benchmarks
Median rates across professions and limits
Architects E&O
Common $3M+ project-driven requirements
MSP Tech Errors Cost
Common $3M+ enterprise client requirements
This guide is informational, not insurance advice. Enterprise-tier E&O placements deserve a specialist broker familiar with your industry and client mix. Updated 17 May 2026.