Boring Insurance Agency
A wall-mounted status board in a quiet office showing uptime graphs and an on-call rotation, a laptop open on a desk below it with a deployment pipeline on screen
Uptime green. Rotation posted. Pipeline clean.Your service level agreement is a contractual promise, and technology errors and omissions is what backs it.

Your customers’ lawyers wrote your insurance requirements. We read them.Founded by a software developer who owns a software company.

We insure SaaS and software companies: technology E&O for the product failing, cyber for the data it holds, and the excess limits enterprise procurement actually asks for.

/ Start here

Tell us the situation.

Already a client and need a certificate, ID card, policy change or to report a claim? Send a service request.

One licensed human replies the same business day — not five agents, not an auto-responder. If the policy you have is already the right one, we will tell you.

We use this to quote and service your insurance, and we do not sell it or pass it to lead networks. Privacy policy.

/ Who is reading your contract

The person placing your tech E&O builds and sells software.

Kevin Kelsey, Founder | Principal Agent

Kevin Kelsey

Founder | Principal Agent

Boring’s founder, Kevin Kelsey, is a software developer. He owns Manifest Post, post-production coordination software for episodic television, built B/side, a video editor for teams, holds a number of patents on that software, and wrote the platform this agency quotes, files and services every policy on. So when an enterprise customer’s contract asks for technology E&O and cyber at $5M, the clause is read by someone who knows what an uptime promise and a data processing agreement mean to a software company, rather than by someone matching a class code to a rate.

See Manifest Post ↗See B/side ↗

/ Don’t want to read all this?

Send us what you have. We’ll tell you if it’s right.

Your current policy paperwork, a renewal notice, or nothing at all. A licensed agent reads it and replies the same business day.

/ Coverage

What SaaS businesses actually need.

Cyber & tech E&O

Breach response, ransomware and the notification costs that follow. Technology errors and omissions sits on the same policy and covers the software or service itself failing a client, which is the half most tech companies find out about too late.

Without it — A subscription platform is a standing promise about uptime and data. Both halves — the product failing a customer, and the data escaping — need their own answer.

Umbrella & excess liability

Extra limit stacked above general liability, auto and employers liability. Usually the cheapest million dollars on the policy.

Without it — Enterprise DPAs and MSAs name limits your primary carrier may not sell. Excess above cyber and tech E&O is how the number on the contract gets onto the certificate.

Employment practices liability

Wrongful termination, discrimination and harassment claims brought by your own employees. General liability specifically excludes these.

Without it — Growth-stage hiring and its reversals generate the claims general liability never touches.

Workers compensation

Required in almost every state the moment you have employees. Priced on payroll and class code, which is why the class code is worth arguing about.

Without it — A remote team means coverage in every state someone works from, and the states check.

Crime & employee dishonesty

Theft by your own staff, funds transfer fraud, and the dishonesty bond a home care contract will ask you for by name.

Without it — Funds-transfer fraud and social engineering are crime claims, not cyber ones: a distinction discovered at the worst possible time.

Business owners policy

General liability and property packaged together. Cheaper than buying them separately when you qualify, and most small businesses do.

Without it — The office, the laptops and the general liability certificate in one policy, sized for a company whose real risk lives elsewhere.

/ An account we placed

A SaaS platform holding end-user personal data came to us with a miscellaneous E&O policy bought online. The form sublimited PII-release claims to a small fraction of the limit, and for a business whose entire risk was a database of personal information, the coverage was thinnest exactly where the exposure was thickest.

We replaced it with a technology E&O and cyber form built for data businesses, at full limits, and the renewal cost less than the misclassified policy it replaced. What they had been paying for was a certificate, not coverage.

/ Questions

What our SaaS clients ask us.

Our customer’s DPA makes us liable for data incidents. Does our E&O respond?

Only if the form says so. Cheap miscellaneous E&O policies fail software companies right there: many exclude or heavily sublimit claims arising from the leak of personally identifiable information and HIPAA violations, which for a data business is the main event. A form built for technology risks treats PII release as a covered core, not a carve-out. We read the exclusions before quoting, because the difference does not show on a price comparison.

An outage cost our customer money and they invoiced us for it. Is that insurable?

That is precisely what technology E&O exists for. It is the claim that your service failing cost a client money. Cyber does not answer it unless the outage came from a security event, and general liability never does, because no one was injured and no property was damaged. If your SLA carries credits or your MSA carries liability, this is the policy doing the work.

How much does SaaS insurance cost?

Revenue, data volume and limits drive it more than headcount. A seed-stage platform with modest data might place tech E&O and cyber together at a four-figure annual premium; a company holding millions of records or signing $5M-limit contracts is a different program with excess layers. The honest answer arrives after two questions, your revenue and what your contracts require, which is most of what our quote form asks.

We’re pre-revenue. When does this actually matter?

The day the first real customer’s procurement checklist arrives, which is usually the same week you most need the deal to close quickly. Placing coverage takes days; doing it under a procurement deadline compresses your leverage. Starting the program at first contract, at small limits, means later growth is an endorsement rather than a scramble.

Our SaaS product added an AI assistant. Does anything about our insurance change?

Two things. The tech E&O policy now has to cover AI output affirmatively, because a wrong answer the assistant gives is a failure to perform and a 2026 renewal can exclude it. And if the assistant sees customer data, the cyber and privacy side has to cover an AI model as a system, with a business associate agreement behind it when the data is health information. Tell the carrier what the assistant does and which model it calls; the endorsement is usually modest and the exclusion is usually silent.

Tech E&O for AI features that touch customer data

A customer’s procurement team sent an insurance exhibit and a security questionnaire. Where do we start?

Send both to us at once. The exhibit sets the limits and the wording the certificate has to show, usually technology E&O and cyber at $1M to $5M each plus general liability and workers comp. The questionnaire asks nearly the same questions as a cyber application, and a SOC 2 report or ISO 27001 certificate is evidence an underwriter will credit in the price. Answering them consistently, once, is the fastest way to a certificate procurement will accept.

Tech contract insurance requirements, clause by clause

Commercial insurance is 96% of what we do — it is not a department here, it is the whole business. Not ready to talk? The guides answer the questions this page raises in more depth. Already insured with us and need a certificate or a policy change? Ask the service team rather than starting a quote — it is faster and it goes to the people whose job it is. We also write home and auto, which is usually cheaper alongside the business policy than apart from it.

Handed a lease, a vendor packet or a client contract with insurance requirements? Paste it into the COI Requirements Decoder to see what each one means for your business, or read what the requirements mean.

Tell us what you do.We’ll tell you what you need.

Call/Text(626) 344-2158Quote