Skip to content
CoverMatch
STATE REQUIREMENTS · IT & SOFTWARE SERVICES

IT & software services insurance in California

QUICK ANSWER

IT & software services in California usually carry professional liability (E&O), cyber liability and general liability. California itself requires workers' compensation from the first employee, even part-time. The state's rules with their sources, what IT firms carry, who asks for proof and how to keep it all current are below.

Reviewed by CoverMatch licensed agents, Licensed property & casualty agents · Reviewed Oct 12, 2026 Updated
Coverage scoreA IT firm with the right wallet
Professional Liability (E&O)Renews in 47d
Cyber LiabilityLive cert ✓
General LiabilityCan switch
CoverMatch I read your Professional Liability (E&O) — one thing on this checklist is missing. Want quotes?
California rules with sources
TopicThe rule in CaliforniaSource
Workers' compensation: when it appliesEvery employer with one or more employees must carry workers' compensation under Labor Code section 3700; one part-time employee is enough.Cal. Labor Code § 3700, § 3700.5, § 3710.1, § 3722; California Department of Industrial Relations — Division of Workers' Compensation: employer FAQ
Penalty for being uninsuredOperating without coverage is a misdemeanor; the Labor Commissioner issues stop orders and assesses penalties, and uninsured employers are liable for benefits plus a surcharge.California Labor Code §§ 3700.5, 3710.1, 3722

Rules change. Each row links to the agency or statute it came from; the review date above is when a licensed agent last checked them.

What California asks of IT firms

California's rules that reach an IT services firm are in the table above, each with its official source: workers' compensation: when it applies, penalty for being uninsured. Everything else an IT services firm carries in California comes from leases, contracts, platforms and clients rather than from statute, which is why the next two sections matter as much as the first.

What IT firms in California carry

Coverage Who usually asks Why it matters
Technology errors & omissions · expected Every client contract, vendor onboarding Your code, configuration or advice fails and a client loses money. The core policy for this industry.
Cyber liability (first- and third-party) · expected Clients, insurers of your clients, your own survival You hold credentials to client systems. A breach through you is their breach too. Covers response, liability, extortion and business interruption.
General liability · expected Landlord, clients whose sites you visit Physical injury and property damage; needed on certificates even when the real exposure is digital.
Workers' compensation · expected Your state once you have employees; clients in vendor onboarding Legal requirement, and vendor programs check it regardless of how safe a desk is.
Employment practices liability Prudent with staff; investors often require it Hiring, termination and discrimination claims.
Commercial crime with social engineering Clients handling payments through you; your own interest Funds transfer fraud and employee theft; social engineering coverage is often a separate add-on.
Umbrella / excess liability Enterprise clients Large contracts ask for liability limits above a primary policy.

Who will ask a California IT services firm for proof

  • Enterprise clients & vendor onboarding — general liability, professional or cyber liability, workers' compensation and often an umbrella (what they require)

Each of them wants a certificate, and most want it again at every renewal. A live certificate link from the wallet shows today's coverage to every holder and tells them when it changes.

Workers' comp the day a California IT services firm hires

In California workers' compensation is required from the first employee, even part-time, so the policy belongs in place before the first shift that crosses the line. CoverMatch quotes workers' compensation from the first employee, and asks every carrier that offers pay-as-you-go to bill through your payroll company, so premium follows each payroll run instead of a large deposit against an estimate.

Bring it, control it, get matched in California

Bring your policies here. Upload what you already have. If the carrier is one we are appointed with in California, one signed letter moves the policy to CoverMatch with no change to carrier, coverage or price; if not, we quote a replacement now or before the renewal. The wallet only holds policies CoverMatch takes care of.

Control them here. Renewal dates, documents, the roster of locations, vehicles and staff, and a live certificate for every landlord, contractor, platform or client in the list above, all in one place and current on their own.

Let us match you. When an IT services firm in California needs professional liability (E&O), cyber liability, general liability, we compare quotes from the carriers we are appointed with on coverage first and price second, and a licensed agent is one tap away at every step.

Sources

Questions people actually ask

Does California require an IT services firm to carry workers' compensation?

Every employer with one or more employees must carry workers' compensation under Labor Code section 3700; one part-time employee is enough. Whether a worker is an employee is decided by California's own test of control and independence, not by the form you file, and workers who fail it are added at audit.

What insurance does a California IT services firm need to sign a lease or win a contract?

Usually professional liability (E&O), cyber liability, general liability; Enterprise clients & vendor onboarding typically ask for general liability, professional or cyber liability, workers' compensation and often an umbrella. A live certificate from the wallet answers each request without a new call to the agent, and changes to the policy update it on their own.

Can a California IT services firm pay workers' comp through payroll?

Usually, yes. With carriers that offer pay-as-you-go, premium is billed from each actual payroll run through most payroll companies instead of an annual estimate, so an IT services firm can start coverage the week it hires with less to settle at audit. Ask for it on the quote request.

Can CoverMatch take over the policies a California IT services firm already has?

When the carrier is one we are appointed with in California, one signed broker-of-record letter moves the policy into the wallet with no change to carrier, coverage or price, and the live certificate and renewal shopping switch on. For any other carrier we quote a replacement now or before the renewal; the wallet only holds policies CoverMatch takes care of.

Is cyber insurance the same as technology E&O?

No. Tech E&O covers claims that your work or product failed and caused a client a financial loss. Cyber covers breaches, ransomware and privacy events. Many carriers combine them on one policy, which is what vendor forms usually mean by a 'tech E&O / cyber' requirement.

My clients' insurers ask about my security controls. Why?

An MSP is a route into every client it manages. Carriers price your cyber policy on controls such as multi-factor authentication, backups and endpoint protection, and some clients require evidence of them alongside the certificate.

Do I need coverage for open-source or third-party code in my product?

Tech E&O responds to failures in what you deliver, including components you integrated. Intellectual property claims are often excluded or sublimited, so check the forms if you ship software.

MANAGE IT IN THE APP

Every policy, renewal and live certificate in one wallet.

Scan a dec page and the card appears. Share a live certificate link that updates itself. Get matched when a renewal comes around.

IT & software services insurance in other states

Keep reading