Why no policy you own responds when your AI does the wrong thing

Every buyer asks the same first question. I already carry professional liability, cyber, crime, general liability, employment practices and directors and officers cover. Why do I need this?

The answer most of the market gives is that AI exclusions are arriving, so a hole is opening. That is true and it is not the reason. Exclusions are arriving unevenly, most buyers do not yet carry one, and an argument that rests on them collapses the moment a carrier decides not to attach.

The real reason is older and does not depend on anyone excluding anything. The policies you own were built for a particular claimant, a particular class of business, a particular trigger and a particular limit. A large part of the AI exposure misses on all four.

The four mismatches

Wrong claimant. Professional liability insures the duty you owed the person who engaged you. A job applicant down-ranked by a screening tool never engaged anybody. Nor did the consumer declined for credit, the tenant refused a tenancy, or the patient triaged by a tool their provider bought. Each can sue, and none is a client of the organization that deployed the system.

Wrong class. Errors and omissions cover contemplates a professional service rendered for a fee. A staffing firm screening candidates, a lender making a credit decision, a retailer setting prices and a landlord screening tenants are not rendering a professional service to the person harmed. Many are not buying E&O for that activity at all.

Wrong trigger. Seven of our ten agreements are not claims. They respond when you discover your own loss. There is no claimant, no complaint and no demand, and a policy whose trigger is a claim made against the insured has nothing to answer. This is the difference between a first-party and a third-party instrument, and no endorsement to a liability form crosses it.

Wrong limit. Where cover does exist, it is the same limit and retention you need for your ordinary business. A first-of-its-kind algorithmic matter defended under your professional liability policy erodes the aggregate that has to answer for every other error that year. A firm that spends half its tower defending one novel case has not been covered for AI. It has paid for it out of the cover it bought for something else.

Where each line stops

• Professional liability needs a client claimant and a fee-earning service, and a third-party claim. It does not reach discrimination, publication, regulatory proceedings, bodily injury, or your own discovered loss.
• Cyber needs unauthorized access, a failure of security, or an unplanned outage. A system working exactly as built, holding valid credentials, doing the wrong thing is none of the three.
• Commercial crime needs a dishonest employee, or a fraudulent instruction from a third party, or an unauthorized entry. An agent is not an employee, its instruction is genuinely yours, and its access is authorized. All three limbs fail on their wording.
• Property needs physical damage. Electronic data is not tangible property, and a wrong decision is not a peril.
• General liability now carries the ISO generative-AI exclusions CG 40 47, CG 40 48 and CG 35 08, effective 1 January 2026, on the line every commercial buyer holds.
• Employment practices reaches the employee or applicant. It does not reach the consumer, tenant or credit applicant at all.
• Directors and officers reaches the management decision, not the operating liability, and filed exclusions now reach directors and officers, errors and omissions and fiduciary cover together.

The one line to remember

Cyber pays when the system stops working. This pays when the system works perfectly and does the wrong thing.

Section A of Form AXM-AIL-001 is written for exactly that gap: an agent that acts inside its own authority and does the wrong thing with it. Seven agreements that respond to your own loss the moment you find it, with no claimant required. It is the half of the exposure the tower you already own cannot reach, not because of an exclusion, but because there is no trigger to pull.