Covering AI: AI Insurance Becomes a Procurement Requirement

May 15, 2026
5 min read

By: Phil Dawson

"GCs should be evaluating a new wave of 'affirmative AI insurance' offerings that provide targeted coverage for risks, such as hallucinations, bias, IP infringement and safety failures."
Gartner Legal & Compliance Practice, April 2, 2026

Large enterprises are now requiring their AI vendors to carry insurance for AI-related risks.

More specifically, Fortune 1000 companies are updating their MSAs and SLAs to introduce broad AI governance obligations, and the insurance requirements now extend beyond Cyber and Tech E&O to what is now simply called AI insurance. The clauses name AI-related risks and perils — AI bias and discrimination, copyright infringing model outputs, AI regulatory violations, and AI system failures or output harms — and require limits sized to the enterprise customer's exposure, often more than 10m per claim.

For mid-market AI providers selling into these accounts, AI insurance is moving from a specialty coverage discussion to a procurement requirement. In some cases, it is becoming a condition of doing business, even as AI insurance as a product category remains in its infancy.

AI Investment Requires Coverage Certainty

So why are large companies getting ahead of traditional insurers on this? In short, AI as a strategic asset is too important to leave to uncertainty. In 2025, global corporate AI investment hit $581.7 billion, up 130% year-on-year (Stanford HAI, 2026 AI Index Report). AI litigation is rising in lockstep, and regulation is now operative, with AI legislation advancing across California, Colorado, Connecticut, New York, Virginia, and other states. 

Against this backdrop, AI-related exclusions, sublimits, and coverage uncertainty are becoming more common across corporate insurance programs, raising questions about the reliability of silent coverage for AI-specific loss scenarios. AI is a core asset producing core liability, and the market is treating its risk transfer accordingly.

What the Clauses Actually Say

In the MSAs we have reviewed, the requirement for AI insurance typically reads along these lines:

"Provider shall obtain and maintain, at its own expense, insurance coverage for AI-related risks, including but not limited to coverage for claims of algorithmic bias and discrimination, hallucinations, copyright fringement, AI regulatory penalties, in amounts satisfactory to [Customer]."
Vendor MSA from a Fortune 100 Company

In addition to the insurance requirement, three types of AI governance provisions are common across the agreements provided to us:

  • AI risk assessments aligned with international standards. Providers must maintain documented AI governance policies with at least annual compliance testing, and warrant alignment with ISO 23894, the NIST AI RMF, and the EU AI Act.
  • Change control and material changes provisions. No AI system may be deployed or updated without the customer's prior written approval, with new technology or third-party AI providers subject to a thirty-day review window.
  • AI Audit rights. The customer retains access to systems, training data, model architecture, decision logs, and testing programs for two years following termination.

Procurement requirements for AI solutions are increasingly aligning with established third-party risk management practices, such as those used for cybersecurity. Armilla's underwriting reflects this same approach, reviewing the controls and assessments carried out by AI developers and deployers against these standard practices.

Where We're Seeing This

Three recent engagements at Armilla illustrate what this looks like in practice.

  • AI media and video generation platform (~$200M revenue). Required to evidence coverage for AI-generated copyright infringement and bias and discrimination.
  • HR technology providers ($300M–$3.5B+ revenue). Required to evidence AI bias and discrimination coverage tied to AI-driven hiring tools.
  • Various AI solution providers (1,000+ employees, $100M–$500M revenue). Required to obtain coverage for AI hallucinations, bias, and IP infringement in generated outputs.

Silent AI Is Resolving Faster Than Silent Cyber 

A decade ago, cyber risk sat unpriced inside traditional policies — "silent cyber" — until a wave of losses forced carriers to exclude it and build standalone products in its place. That transition took years. The same shift is now underway for AI, but on a compressed timeline. Multiple forces are converging at once:

  • Procurement. Enterprise buyers are writing AI insurance into AI vendor MSAs as a condition of doing business.
  • Exclusions and sublimits. Carriers are introducing AI-specific restrictions across the traditional policies.
  • Regulation. The EU AI Act and state-level AI legislation are creating new compliance obligations and exposure.
  • Litigation. AI-related claims are accelerating — Gartner forecasts more than 2,000 globally by year-end — establishing the loss patterns that drive product development.

Add the unprecedented speed of AI adoption, and the result is an environment of mutually reinforcing uncertainty around AI coverage that is picking up speed.

"This is highlighting a crucial blind spot for businesses. They are clamoring to join the AI bandwagon, but they have to pause and ask if they're fully protected." 
— Ifeoma Ajunwa, Professor, Emory University School of Law, via
Fast Company, May 2026 
"More than 90% expressed interest in dedicated insurance cover for AI-related exposures, with two-thirds prepared to pay at least 10% higher premiums for such protection."
The Geneva Association, October 2025

How Armilla Helps

Armilla helps AI providers meet these requirements across three areas:

  • Assessments. We provide assessments and certifications aligned to global standards — ISO 23894, ISO 42001, NIST AI RMF — so providers can evidence the governance posture their customers are now asking for.
  • Implementation support. We connect insureds with specialist partners who can help them implement the new MSA and SLA requirements operationally, from AI agent security platforms to audit and testing services.
  • Standalone AI insurance. We provide standalone AI insurance, whether through our AI software performance warranty or all-risks liability coverage, so providers can produce the certificate of insurance their enterprise customers now require.

The changes we're seeing in AI vendor MSAs are recent. If you're finding them in your clients' contracts, review them against the current tower, identify where standalone AI coverage is warranted, and get in touch — we'd welcome the chance to share what we're seeing and explore where we can help.

Covering AI is Armilla's newsletter for insurance brokers and risk managers navigating the complexities of AI liability, risk management and governance. 

Share this post

Ready to Insure Your AI?

Armilla’s Affirmative AI Coverage is your fail-safe against fast-evolving AI risks. We combine deep technological insight with robust insurance solutions so you can focus on innovation, without interruption.
Get in Touch