Insurance for IT Professionals, Technology Businesses, and Software Companies Across Australia
Combined professional indemnity and public liability insurance designed for the specific risks of technology work, not a generic small business policy
Insurance for IT professionals, technology businesses, and software companies across Australia
IT insurance in Australia is built around a combined professional indemnity and public liability policy specifically designed for the technology sector. The combination exists because the two most significant risks facing IT professionals: financial loss suffered by a client due to an error or advice failure, and third-party injury or property damage. Both require different policy sections to respond correctly. A standard public liability policy alone does not cover the professional advice and services that are the core of most IT work.
Information technology is one of the most claims-active professional categories in Australian insurance. A software bug that takes down a client's e-commerce platform during a peak trading period, a data breach caused by inadequate cybersecurity advice, a website that goes live with a third-party intellectual property infringement, or a system integration that fails and causes financial loss across a client's business are all real and frequent claim scenarios for Australian IT professionals and technology businesses. The combined IT liability policy was specifically designed to respond to these scenarios without the coverage gaps that arise when professional indemnity and public liability are placed separately.
A standard public liability policy does not cover the financial loss your clients suffer when your work or advice goes wrong
Public liability insurance covers physical injury to people and physical damage to property. If a client visits your office and is injured, or if your equipment damages a client's premises, public liability responds. What it does not cover is the financial loss a client suffers because your software had a bug, your advice was wrong, your system integration failed, or your cybersecurity recommendation left a gap that was exploited.
That financial loss scenario is covered by professional indemnity insurance, not public liability. For most IT professionals the financial loss scenario is the far more likely claim. A software developer whose code has a critical error, an IT consultant whose network architecture recommendation turns out to be flawed, a web developer who uses a stock image without a proper licence, or a managed service provider whose monitoring missed a ransomware attack are all professional indemnity claims, not public liability claims.
The combined IT liability policy packages both covers under one policy with one premium and one insurer, ensuring there is no gap between the professional advice liability and the general liability. It was created specifically for the technology sector because the interaction between professional and public liability risk is particularly complex in IT work.
What types of IT businesses and professionals do we insure?
The combined IT liability policy covers the full range of technology professionals and businesses in Australia, from sole operator IT contractors through to established software development companies and managed service providers with multiple employees and enterprise clients.
Software developers and engineers
Developers building custom software, applications, APIs, and platforms for clients. A software defect or a missed deadline that causes client financial loss is a professional indemnity claim. Developers working as sole contractors or through a company both need the combined IT policy.
IT consultants and advisers
Technology consultants providing strategic, architectural, or implementation advice. Professional indemnity covers the cost of defending and settling claims that your advice was incorrect, incomplete, or caused financial loss to the client. This is the highest-risk category for professional indemnity claims in IT.
Web designers and developers
Designers and developers building websites, e-commerce platforms, and digital experiences. Specific risks include intellectual property infringement from unlicensed images or code, websites going live with errors that affect client revenue, and client data handled through the website being compromised.
Cybersecurity professionals
Penetration testers, cybersecurity consultants, and security architects. The specific risk is advice or testing that fails to identify a vulnerability subsequently exploited in a breach. Claims in this category can be substantial given the financial and regulatory consequences of security failures for clients.
Managed service providers
MSPs managing IT infrastructure, cloud environments, and support services for business clients. The professional indemnity exposure includes service outages, data loss, and security incidents occurring within managed environments. MSPs often carry higher indemnity limits due to the critical nature of the services they manage.
Software product companies and SaaS businesses
Companies selling software products or SaaS platforms to multiple customers. A defect in a software product that affects multiple clients simultaneously generates multiple simultaneous claims. Products liability covers the goods aspect of the software supply and professional indemnity covers the service and advice component.
IT contractors and sole traders
IT contractors engaged directly by clients or through agencies. Many enterprise clients and government agencies require contractors to hold combined IT liability insurance with minimum limits before onboarding. Confirm what your specific engagement contracts require before your next contract starts.
Digital marketing and SEO agencies
Digital marketing agencies providing SEO, SEM, social media, and performance marketing services. Professional indemnity covers claims that your campaigns did not deliver promised results, that your advice caused brand or financial damage, or that your work included intellectual property infringement.
IT hardware and systems installers
Businesses supplying and installing IT hardware, networks, CCTV, and security systems. The physical installation work creates both public liability exposure during installation and professional indemnity exposure if the system does not perform as specified. The combined IT policy covers both aspects of the risk.
What does IT insurance cover?
The combined IT liability policy is built around two core sections that work together. Additional covers sit alongside the combined policy for businesses with specific additional exposures.
Professional indemnity
Errors, advice failures, and financial loss to clientsProfessional indemnity insurance covers legal defence costs and compensation when a client claims that your professional services, advice, or work caused them financial loss. In IT this covers a wide range of scenarios including software defects that cause system downtime, incorrect technical advice that is implemented and causes business disruption, data loss during a migration or upgrade, missed project deliverables that affect client revenue, and intellectual property infringement in software or digital content. Professional indemnity is a claims-made policy, meaning the claim must be made during the period of insurance rather than when the work was done. Retroactive cover for prior work is available and worth arranging if you have been providing IT services for longer than the current policy period.
Public and products liability
Third-party injury, property damage, and software productsPublic liability insurance covers claims for physical injury or property damage arising from your business activities, including client visits to your premises and your visits to client sites. Products liability covers claims arising from software or technology products you supply. For IT businesses the products liability section is particularly relevant for software product companies and SaaS providers where a defect in the product itself (as distinct from the advice about it) causes third-party harm. The combined IT policy specifically avoids the gap that arises when professional indemnity covers the advice and public liability covers the physical harm but neither covers the product itself.
Cyber liability insurance
Data breaches, ransomware, and cyber incidentsCyber liability insurance sits alongside the combined IT policy and covers the costs of responding to a cyber incident affecting your own business, including a ransomware attack on your systems, a data breach exposing client data you hold, and business interruption from a cyber attack. The combined IT policy covers claims that your clients make against you for cyber-related failures in your services. Cyber liability covers your own first-party costs when your business is the victim. For IT businesses holding client data, operating cloud-connected systems, or providing managed security services, both covers are needed. The combined IT policy alone does not cover your own incident response costs.
Intellectual property liability
Copyright, trademark, and IP infringement claimsIntellectual property infringement is one of the most common liability exposures for IT professionals and is specifically included in the combined IT liability policy. IP infringement in IT work occurs most commonly through use of unlicensed code libraries or open source software without compliant licensing, use of stock images or fonts without appropriate commercial licences, code that inadvertently replicates a third party's proprietary algorithm or architecture, and digital marketing content that infringes trademarks or copyrighted material. IP claims in IT can come from sources the developer has never heard of. A code library used in a build may itself incorporate third-party IP, and the liability can flow through to the developer who included it.
Income protection for IT professionals
Income replacement if illness or injury stops you workingIT contractors and sole operator IT professionals have no sick leave and no workers compensation for their own injuries or illness. Burnout, anxiety, and stress-related conditions are among the most common income replacement claims for knowledge workers and are significantly more prevalent in IT than in many other professional categories. Mental health conditions that prevent an IT professional from working are covered by income protection insurance but not by personal accident insurance. For IT contractors operating without a permanent employment safety net, income protection is the only product that replaces income during extended illness. See our dedicated page on income protection for IT professionals for the full picture on waiting periods, own occupation definitions, and contractor income structures.
What IT insurance claims look like in practice
Critical bug causes e-commerce platform downtime during peak sales period
A freelance developer deploys an update to a retail client's e-commerce platform on the Thursday before Black Friday. A database connection error causes intermittent checkout failures across the weekend, resulting in $240,000 in abandoned transactions and $30,000 in emergency remediation costs.
Professional indemnity responds. The client claims the developer's negligence in deploying an insufficiently tested update during a critical trading period caused the financial loss. Legal defence costs and the negotiated settlement are covered under the PI section of the combined IT policy.
Cloud migration advice results in data loss and compliance breach
An IT consultant advises a medical practice to migrate patient records to a cloud platform. The migration plan fails to account for the Australian Privacy Act requirements for health information storage. A configuration error during migration results in partial data loss and a notifiable data breach affecting 2,400 patients.
Professional indemnity covers the practice's claim for costs arising from the consultant's inadequate advice on compliance requirements. The claim includes regulatory notification costs, credit monitoring for affected patients, and business disruption. The consultant's own cyber liability policy responds to their own incident management costs.
Unlicensed stock image used in client website triggers IP infringement claim
A web developer builds a commercial website for a client using a stock image sourced from a free image site. The image is subject to a commercial licence restriction the developer missed. The rights holder identifies the unlicensed commercial use and issues a demand for $35,000 in licence fees and legal costs.
The IP infringement section of the combined IT policy responds. The claim is made against the developer as the party who selected and incorporated the image into commercial work. The client is also named in the demand, and the policy covers both parties' legal defence costs arising from the developer's work.
Ransomware attack on client environment not detected in time
An MSP managing a professional services firm's IT infrastructure fails to detect ransomware propagating through the client's network for 11 days before it encrypts critical files. The client claims the MSP's monitoring service failed to meet the agreed service level, resulting in $320,000 in data recovery, business interruption, and ransom-related costs.
Professional indemnity responds to the client's claim against the MSP for failure to deliver the contracted monitoring service to the agreed standard. This is a professional services failure claim, not a cyber claim against the MSP itself. The MSP's own cyber policy covers their own incident response costs separately.
Lauren Spice is the Director of Morgan Insurance Brokers and works with IT professionals, technology businesses, and software companies across Australia to structure insurance programs that reflect the actual professional and liability risks of technology work rather than fitting IT businesses into generic small business policies that were not designed for this industry.
The most common situation Lauren encounters with IT professionals is a business holding only public liability insurance, without professional indemnity, because the owner assumed public liability was the primary risk. For most IT businesses, professional indemnity is far more likely to be called upon than public liability, and a business without PI cover is uninsured for its most significant claim scenario. The second most common gap is an IT contractor whose contract requires $5M professional indemnity but who is holding $1M because it was cheaper at the time. Neither situation is expensive to fix before a claim makes it visible.
IT insurance FAQs
Do I need professional indemnity if I am just a contractor working inside another company's systems?
Yes, and your contract almost certainly requires it. IT contractors engaged directly by enterprise or government clients are typically required to hold professional indemnity insurance as a condition of their engagement. The client's own insurance does not cover the contractor's professional liability. If your work causes a financial loss and you are not covered by PI insurance, the claim comes to you personally regardless of whether you were working inside the client's systems.
Professional indemnity also covers you after the engagement ends. If a system you built or a recommendation you made causes a problem six months after your contract finished, the claim may still come to you. This is why retroactive cover, which extends the policy to cover work done in prior periods, is worth considering when you first take out IT insurance.
What is the difference between IT professional indemnity and standard professional indemnity?
Standard professional indemnity policies are designed for professions such as accountants, consultants, and engineers where the advice is clearly separated from any physical product. IT work often blurs this line. A software developer is providing a professional service but also delivering a product, and an IT consultant is giving advice that is implemented in technical systems that may later fail. Standard PI policies may exclude or be ambiguous about software product liability, intellectual property claims, and technology-specific scenarios.
The combined IT liability policy is specifically designed to cover technology work with policy wording that explicitly addresses IT-specific exposures including software products, data loss, intellectual property infringement, and technology services. It also packages the professional indemnity and public liability together so there is no gap between the two sections when a claim involves elements of both professional advice and physical work.
Does my IT insurance cover work I do for overseas clients?
Most combined IT liability policies include worldwide professional indemnity coverage, meaning they cover claims arising from work you do for clients anywhere in the world. However, the policy typically excludes claims brought in US or Canadian courts, which have a different legal environment with significantly higher damages awards than Australian courts. If you have US or Canadian clients who might bring a claim in their home jurisdiction, confirm with your broker whether US and Canadian jurisdiction is covered or excluded and whether an extension is available.
The geographic scope of your public liability section is also worth confirming if you travel overseas for client work. Some policies restrict the geographic scope of the public liability section to Australia while the professional indemnity section has worldwide coverage. If you are travelling to a client site internationally, confirm your cover before you go.
My contract requires $5M professional indemnity but I only have $2M. Can this be fixed quickly?
Yes, in most cases an endorsement increasing the limit can be arranged the same day through your existing insurer, and a new Certificate of Currency issued the same day. The premium for increasing from $2M to $5M professional indemnity is often less than contractors expect, particularly for standard IT contracting work with a clean claims history.
If your existing insurer cannot increase the limit to the required level, or if the premium for the increase is unreasonable, a broker can approach alternative insurers for a replacement policy at the required limit. The most important thing is not to sign a contract requiring $5M and then attempt to claim on a $2M policy if something goes wrong. The shortfall is your personal financial exposure. Contact Lauren and the limit can typically be sorted before your contract start date.
How much does IT insurance cost in Australia?
Combined IT liability insurance cost depends on your annual revenue, the type of IT work you do, the policy limits required, your claims history, and the number of employees. As a general guide for Australian IT professionals and businesses:
Sole contractor or freelancer with revenue under $200,000 and $2M professional indemnity and $5M public liability: typically $800 to $1,800 per year. Small IT business with revenue of $200,000 to $1M and $5M professional indemnity: typically $1,500 to $4,000 per year. MSP or software company with revenue above $1M and $10M professional indemnity: typically $3,500 to $8,000 per year. Higher-risk IT work including cybersecurity services and managed security attracts higher premiums. Contact Lauren for a same-day indicative quote based on your specific revenue and work profile.
Need a certificate before a contract starts? Same-day quotes and certificates available.
Get a free quoteGet IT insurance that covers what actually goes wrong
Whether you are a sole contractor needing a certificate for a new engagement, a software developer whose clients require professional indemnity, or an MSP managing critical client infrastructure, we structure IT insurance programs that cover the professional liability, the physical liability, and the cyber exposure in one properly integrated program.
