Your Business Insurance May Have Dropped AI Coverage in January 2026

Picture a five-person marketing shop that uses an AI writing tool to draft client ad copy. A campaign goes out, a competitor claims the copy copied its trademarked slogan, and a lawsuit follows. The shop owner calls her broker, expecting her commercial general liability policy to help with legal defense for certain advertising-injury claims. Instead, the insurer points to an endorsement added at her last renewal: an exclusion for claims connected to generative AI. That kind of denial became easier for insurers to write after Verisk made new exclusion endorsements available to carriers in January 2026, and many small business owners are unaware that their policies may now include these optional AI exclusions.

On January 1, 2026, Verisk's ISO program introduced three optional generative AI exclusion endorsements for commercial general liability policies: CG 40 47, CG 40 48 and CG 35 08. The forms are not automatic, and adoption varies by carrier, state and renewal date. But they create a new coverage question for small businesses using AI in marketing, customer service, product work or everyday office software, whether their liability coverage sits inside a standalone CGL policy or a business owner's policy. Brokers and coverage attorneys have started advising business clients to check their renewal paperwork for the new language.

Verisk added optional generative AI exclusion endorsements for commercial general liability policies starting January 1, 2026. ISO, Verisk's forms division, publishes standard policy language widely used by commercial insurers. Before these endorsements, many standard CGL policies did not directly name generative AI, an arrangement coverage analysts sometimes call “silent AI” coverage, similar to the cyber exposure carriers spent years resolving after 2018. When attached, Verisk's new endorsements remove that silence and state directly that claims tied to generative AI are not covered under the affected coverage parts.

The change is optional for insurance companies, not automatic for every policyholder. An insurer has to choose to attach CG 40 47, CG 40 48 or CG 35 08 to a specific policy, and that choice can depend on the state, the insurer's own underwriting rules and when the policy renews. A business owner whose policy renewed in late 2025 may not see the exclusion yet. Businesses that lose this coverage don't have an automatic replacement. Technology errors and omissions coverage, cyber insurance and standalone AI liability policies can respond to some of the same risks, but none is a direct substitute for the general liability coverage a business had before.

CG 40 47 is the broadest of the three forms. It removes coverage under both Coverage A (bodily injury and property damage) and Coverage B (personal and advertising injury) for any claim “arising out of” generative AI, on both occurrence and claims-made policies. CG 40 48 is narrower. It excludes only Coverage B, personal and advertising injury, the part of a CGL policy that responds to claims like defamation, copyright infringement or trademark violations tied to AI-generated marketing content. CG 35 08 applies to a different coverage part, products and completed operations liability, and excludes bodily injury or property damage connected to generative AI in a product a business made or sold.

All three forms share the same definition of generative AI: “a machine-based learning system or model that is trained on data with the ability to create content or responses, including but not limited to text, images, audio, video or code,” according to Verisk's filing language. The definition, which Verisk says draws on government and National Association of Insurance Commissioners sources, covers chatbots, AI writing tools, image generators and AI code assistants. It does not extend to older, non-generative AI tools that only score or classify data instead of producing new content.

The phrase “arising out of” carries more legal weight than its plain-English meaning suggests. Under insurance law, “arising out of” requires only a causal connection to the excluded activity, not direct or sole causation, according to attorneys Hadhy Ayaz and Jay Konkel of the law firm Pillsbury, writing in Policyholder Pulse in April 2026. The attorneys cautioned that if courts read the phrase broadly, insurers may argue that a wide range of claims are connected to AI use, even when AI played only a minor, incidental role in a loss.

Insurance broker Arthur J. Gallagher & Co. gives a concrete example in a 2026 client alert. An AI-assisted drawing or calculation contains an error that leads to a structural failure or an injury. Even when an employee reviewed and approved the work before it went out, an insurer can still argue the loss “arises out of” generative AI and deny the claim. Gallagher also says the exclusion can apply whether a business used AI directly or picked it up secondhand through a vendor, consultant or software platform.

That secondhand exposure is what makes the exclusion relevant well beyond businesses that built their own AI tools. A business doesn't need custom software to trigger the exclusion. This kind of exposure can reach any small business that uses AI features built into everyday software it already pays for, from customer relationship platforms to email and document tools, without treating that use as a technology decision at all.

Generative AI use among small businesses reached 58% in 2025, up from 40% in 2024 and 23% in 2023, based on a U.S. Chamber of Commerce Technology Engagement Center survey of thousands of businesses with fewer than 250 employees, published in its 2025 Empowering Small Business report. The same report found 82% of small businesses using AI added workers over the past year, and 84% of all small businesses plan to increase their use of technology platforms.

A separate survey from the U.S. Chamber of Commerce Foundation, published in June 2026, found half of all workers at small businesses already use AI at work. The Main Street AI Monitor, conducted with Ipsos, also found adoption differs by company size: only 43% of businesses with two to nine employees report using AI for work tasks, compared with 59% of businesses with 100 to 249 employees. Among small business AI users, 90% use it for writing and editing communications and 88% use it for research, according to the same survey.

Writing marketing copy and researching content are exactly the everyday AI uses that can trigger a Coverage B claim under CG 40 47 or CG 40 48. A business doesn't need to build a chatbot or train a model to have AI exposure. Drafting an ad, summarizing a report or answering a customer email with an AI tool can give an insurer grounds to argue the exclusion applies if that work later leads to a defamation, copyright or trademark claim.

PYMNTS reported that carriers including Berkshire Hathaway, Chubb and Travelers have sought state approval to exclude AI-related claims from general liability policies. State regulators have approved more than 80% of the AI-exclusion filings submitted across the industry, with Florida, Connecticut and Maryland approving the highest volume, according to the same reporting, and some approved exclusions began attaching to policies as early as January 2026. Separately, W.R. Berkley, AIG and Great American Insurance Group sought approval to exclude AI-related liabilities from broader corporate coverage, including directors and officers and errors and omissions policies, as the Financial Times and Barron's reported in November 2025.

Insurers are moving at different speeds, and a filing does not always mean an exclusion is already active. AIG told regulators it had filed a generative AI exclusion but had no plans to implement it at the time, Barron's and the Financial Times reported. Gallagher's John Farley told Business Insurance in April 2026 that “there are a few carriers that are starting to adopt those exclusions” and that “we're just at the very beginning.” Zurich North America's Kara Higginbotham told the same publication that “many carriers are currently evaluating the potential benefits and risks of making broad policy language changes.”

Small business owners should assume a policy could carry an AI exclusion now that these endorsements are available and some carriers have begun adopting them, rather than assume coverage is unchanged. Ask an agent or broker directly whether CG 40 47, CG 40 48 or CG 35 08 appears on a current commercial general liability, business owner's policy or products/completed operations form. The form numbers are printed on the policy's declarations page, endorsement schedule or policy forms list, so a broker can confirm their presence in minutes.

A commercial general liability exclusion is not the only place AI risk can show up in a business's insurance program. Cyber insurance often responds to security or privacy breaches, but it usually does not cover claims over AI hallucinations, defamation or intellectual property infringement from AI-generated content, according to Financial Times reporting on how insurers are pricing AI risk. Technology errors and omissions coverage is more likely to respond to AI-related mistakes, and media liability coverage usually responds to content, defamation and intellectual property claims tied to what a business publishes. A growing number of tech E&O, cyber and media carriers have added their own AI exclusions or carve-outs that track language similar to Verisk's CGL forms.

Marsh's Greg Eskins told Business Insurance in April 2026 that “the market has been restrained in taking any drastic actions with either affirmative or exclusionary language, though both exist.” PYMNTS and Independent Agent reported that a handful of standalone AI liability products have entered the market for businesses that use third-party generative AI tools in customer-facing work, including offerings from Armilla AI, Munich Re, Corgi and Testudo.

Review a business's full insurance program, not only its general liability policy. AI exposure can touch cyber, technology errors and omissions, media liability and directors and officers coverage as well. A business that generates marketing copy, runs a customer-facing chatbot or embeds AI recommendations in a product should ask how each policy in its program would respond to an AI-related claim.

Common questions from small business owners about the new generative AI exclusions, whether they apply to a current policy and what coverage remains.