AIG vs USI Insurance Services: How Do They Compare for Cyber Insurance?

AIG markets three distinct cyber forms: CyberEdge, CyberEdge Plus and CyberEdge PC. AIG says coverage may be bought as a standalone CyberEdge policy or endorsed onto selected Financial Lines, Property and Casualty policies; the forms are not interchangeable descriptions of one coverage grant. ³Company-reported. AIG’s U.S. CyberEdge page; endorsement availability is stated only for selected policies. AIG’s legal footer says policies are written by subsidiaries or affiliates and coverage depends on underwriting and policy language.

USI is a broker, not an insurer, for cyber coverage. It places cyber and privacy liability policies for clients and layers on its own manuscripted program, PrivaSafe, rather than underwriting the risk itself. ^7,5Company-reported. PrivaSafe program page and USI's property & casualty and technology practice pages.

Confirm in your quote.

USI does not name the insurer that issues PrivaSafe or other cyber policies on the pages reviewed. PrivaSafe is described as a manuscripted (custom-drafted) coverage form that USI negotiates with the market, so the carrier varies by placement. ⁷Not publicly disclosed. PrivaSafe program page as read on 2026-09-23; no dedicated cyber carrier list was found.

AIG describes cyber coverage and risk services for organizations and clients. The reviewed product page does not publish a complete eligible-industry, revenue or security-control appetite; a particular applicant’s eligibility remains subject to underwriting. ³Company-reported. Audience stated by AIG on its U.S. CyberEdge marketing page; no application eligibility schedule was reviewed.

USI markets PrivaSafe to middle-market firms, saying they are particularly vulnerable to cyber events because they have limited in-house access to security expertise. The page also says any business that gathers personal or health information, manages a network, or accepts electronic payments is a potential target. ⁷Company-reported. Program page marketing description, not an underwriting appetite statement.

AIG describes CyberEdge as addressing breach-related financial costs such as response, data restoration, network interruption and cyber extortion. CyberEdge Plus is described for physical-world losses caused by a cyber event, including business interruption, property damage and physical injury; CyberEdge PC is described as excess of traditional property and casualty policies on a difference-in-conditions/difference-in-limits basis. The page says actual coverage depends on the facts and policy terms, conditions and exclusions. ³Company-reported. Product summaries on AIG’s U.S. page, preserving differences among the three forms. Examples are not a promise that any loss or expense is covered under an issued policy.

USI describes PrivaSafe as covering three areas: liability costs (including inability to protect information and related tort liability), compliance and corrective costs (data breach and forensic costs, privacy regulatory costs, payment-card standards), and direct costs (network interruption, data reconstruction, cyber extortion, bricking, voluntary shutdown, reputational harm business interruption, and cyber crime). ⁷Company-reported. PrivaSafe program page; actual insuring agreements and exclusions are set by the issued policy form.

The reviewed page does not state standard cyber limits, retentions or sublimits. Confirm each amount and applicable form in the quote and issued policy. ³Not publicly disclosed. AIG’s U.S. CyberEdge marketing page reviewed 2026-09-30; no buyer-specific quote, application outcome or policy wording was reviewed.

USI says PrivaSafe can prevent uninsured or underinsured losses up to $10 million, includes up to $2 million in notification-cost coverage in addition to the policy's aggregate limit, and $250,000 in defense-cost coverage outside the limit (with additional limit available). ⁷Company-reported. Program page figures describe the PrivaSafe structure generally; a buyer's actual limits, sublimits and retentions are set on the policy declarations.

AIG describes cyber risk assessment, threat intelligence, alerts about known vulnerabilities, and a Cyber Resiliency Program. The page says these services help clients assess and improve cyber resilience; it does not promise that they prevent a breach or are available on identical terms with every form. ³Company-reported. Company-described cyber risk services on AIG’s U.S. CyberEdge page; product and account applicability should be confirmed in the quote.

USI says PrivaSafe includes pre-breach services to help avoid cyber threats and post-breach services designed to streamline incident response and recovery, on top of USI's general property & casualty cyber specialists. ^7,8Company-reported. Program page and property-casualty practice team description.

AIG links a U.S. Cyber underwriting application and invites brokers to contact its national product and distribution teams. The page does not say that submitting an application results in a quote, acceptance or binding. ³Company-reported. Application and broker contact links on AIG’s U.S. CyberEdge page; no completed application or binding workflow was reviewed.

To review cyber exposure with USI, the program page says a buyer should be ready to provide current cyber policies (if any), an assessment of its largest financial and operational cyber vulnerabilities, and its most recent audited financials. ⁷Company-reported. PrivaSafe program page intake description.

AIG says its cyber insureds can use a 24/7 claims hotline and that its claims team works with specialized legal and forensic firms on incident response. AIG’s example also describes assistance with regulatory disclosures and notifications. These service statements do not guarantee claim acceptance, payment or a particular response time. ³Company-reported. Company-reported services and example on AIG’s CyberEdge page; policy terms and the circumstances of a loss control any claim.

Confirm in your quote.