"Will my business insurance ask about AI?" It may, and it may not. Some owners will go through a renewal with no mention of it. Others will find a new line on a questionnaire, or a broker who wants a short call, and will have to answer on the spot. This article is for the owner of a company with ten to two hundred people at a commercial insurance renewal. It explains why a broker or insurer may raise the subject, what the question usually means underneath, what to have ready on paper, what to ask your broker, and how to avoid guessing or overclaiming on a form. If you also want a written rulebook for staff, do I need an AI policy for my small business covers that part. If you run an insurance agency yourself, see how AI can help an insurance agency.
I was COO and then President of a public company that closed more than forty acquisitions, and I ran the integration on most of them, so I have sat on the company side of a good many renewals and diligence requests. I am a lawyer by training. Now I write fixed-fee AI plans for CEOs of private-equity-backed and owner-led mid-market companies through 013 Labs. This is not legal advice, and it is not insurance advice. I do not know your policy, your insurer or your broker's process, and I do not say here what any policy covers or leaves out. Your own policy and your own broker answer that.
Why a broker or insurer may ask
I cannot tell you what yours will do, and practice differs from one insurer and one broker to the next. These are the places where the subject can come up.
Cyber and technology questionnaires. Renewal forms often ask how the company handles its systems, its accounts and its data. A question about outside software, or about which tools staff use with company information, is a natural next line for a form like that.
Fraud and payment controls. Insurers and brokers care about money sent to the wrong place. AI makes fake emails, invoices and even voices cheaper and more convincing, so a question about how your team confirms a change of bank details would not be odd.
Errors from automated work. If a tool drafts quotes, reports, letters or customer messages, a mistake can leave the building under your name. A broker may want to know that a person checks the work before it goes out.
Data handling. If staff paste customer details, contracts or pricing into an outside tool, the question of where that information goes follows. The piece on whether ChatGPT is safe for business use sets out what an owner should check about plans and terms.
What they are really asking
Under all four sits one question. Is the risk understood, and is someone managing it? The insurer is not marking your technology. It wants to see that you know what tools are in use, that nothing important happens without a person checking it, and that someone owns the answer when it goes wrong.
That is good news, because it means a short, concrete, honest answer works better than a long, impressive one. It also means that "we have not thought about it" is the answer that does you harm.
What to have ready
Five things, kept together in one folder, none of which needs more than a page or two.
The one-page AI policy. What staff may and may not do with AI, in plain words, and one sentence on what must never go into an outside tool, for example customer lists, pricing, contracts or bank details. It is the same page a lender or a buyer would ask for. The article on whether AI makes a business worth more when you sell shows why it keeps paying off.
The tools list and account types. Name every tool staff actually use and the task each one does, including any that people signed up for on their own. Beside each, note whether it is a company account or a personal one, and who can see what goes into it. A free personal account and a paid company account are not the same answer to a data question, and you should know which you have.
What a tool never does alone. Write down the actions that always need a person: sending anything to a customer, approving a payment, changing bank details, signing or committing the company. If a tool drafts a customer message, say who reads it before it goes. For the customer-facing side, can AI answer customer emails for a small business covers the checking step.
Payment and bank-detail confirmation controls. A familiar scam is a message that looks like it comes from a supplier or a senior colleague, asking you to pay to new bank details. Tools that write convincing messages make it easier to run. The control is dull and works: any change to payee bank details is confirmed by calling a number you already held on file, not one in the message, and by a second person, before the first payment goes. Write down who does it and how it is logged. If you have told your bank the same thing, what to tell your bank about AI covers that side, and the two answers should match.
How mistakes are reported. Say who staff tell when a tool produces something wrong, or when someone pastes something they should not have, and what happens next. Staff who fear blame will say nothing, so make the route short and free of punishment. Keep a simple log with the date, what happened and what you changed.
What to ask your broker
Your broker is the right person to put these to, and the answers belong to your policy, not to me.
What do you expect to see on the renewal form about technology and AI? Ask before the form arrives, not after, so you can prepare.
How should I describe our use of AI on a questionnaire? Ask what level of detail they want and what wording they would find clear.
Which of our controls matter most to the insurer? Payment confirmation, account security and data handling are the likely candidates, but ask rather than assume.
If our use changes during the year, do I need to tell you? Whether a change must be reported depends on your policy and its terms. Ask, and ask for the answer in writing.
What does our own policy say that bears on this? Read your policy, with your broker beside you, and ask about anything that is unclear. I will not tell you what it covers or excludes, and nobody should guess at that for you.
Do not guess or overclaim on a questionnaire
A form is a statement you sign. Treat it that way.
Do not guess. If you do not know whether staff use a tool, find out before you answer. A question you cannot answer today is a reason to ask your broker for more time, not a box to tick.
Do not say "we don't use AI." Often untrue, because staff use free tools. If it turns out to be false, it harms trust more than the tool did.
Do not say "a person reviews everything" unless a person does, and you can name who.
Do not claim controls you have not written down. If you say bank-detail changes are confirmed by a call-back, be ready to show the rule and say who does it.
Do not describe your policy from memory. Check the wording with your broker, and with counsel where it matters, before you tell anyone what it says.
Do not forecast. Say what you do now, not what you plan to do. If you have a plan, say it is a plan.
If an answer is "not yet, and here is the date we will have it", that is a perfectly respectable answer, and a far better one than a confident claim that falls apart later.
Picture a regional distributor of seventy people coming up to renewal. The broker's form adds a short section on technology and a question about outside software. The owner, who has not thought about it, asks the office manager for three things within the week: a list of the tools people use, with company or personal account beside each, a one-page rule on what stays out of them, and the finance lead's written bank-detail call-back step. The owner finds two tools staff signed up for themselves, moves one to a company account and stops using the other. The owner then calls the broker, asks what the insurer is likely to want, and answers the form from the folder. The answers are short and each can be backed up. This is a hypothesis, a composite and not a client.
Mistakes that repeat
Waiting for the form. Answering a questionnaire from memory. Saying nobody uses AI when staff do. Claiming a check that nobody can name. Letting a tool near payment details without a call-back rule. Guessing what your policy says instead of asking your broker. Having no route for staff to report a mistake.
Frequently asked questions
Will my business insurance ask about AI?
It may. It can come up on a cyber or technology questionnaire, in fraud and payment control questions, in questions about errors from automated work and in data handling. Whether yours does depends on your insurer and your broker, so ask your broker what to expect.
Why would an insurer or broker ask about AI?
Underneath, the question is whether the risk is understood and managed. They want to know what tools are used, what always needs a person and who owns the answer when something goes wrong.
What should I have ready at renewal?
One page on how you use AI and your data rule, a list of tools with account types, the actions a tool never does alone, your payment and bank-detail confirmation controls and a simple route for reporting mistakes.
Does AI use change what my policy covers?
I cannot say, and I do not claim to. Whether anything changes depends on the wording of your own policy. Go through it with your broker and ask.
What should I not say on an insurance questionnaire about AI?
Do not guess, do not say you do not use AI if staff do, do not claim a review or a control you cannot name a person for and do not describe your policy from memory.
Do I have to tell my insurer when I start using AI?
It depends on your policy and its terms. I cannot answer that for you. Ask your broker, and ask for the answer in writing.
Is this legal or insurance advice?
No. It cannot be, because I do not know your policy. Ask your own broker and your own counsel what applies to you.
Not sure where you stand? Take the 3-minute AI readiness scorecard.