Amelia Risk vs CFC Cyber Insurance

Amelia Risk arranges cyber liability coverage for its clients, describing and structuring the policy around network security and privacy liability rather than underwriting it directly. ⁴Company-reported. Amelia's own cyber liability product page as of 23 September 2026. Does not establish who issues a particular client's policy.

CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. ¹³Company-reported. Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy.

The reviewed pages do not name an insurer for cyber placements; Amelia's marketing describes access to underwriters, wholesale brokers and carrier partners generally, without attributing any of them to cyber liability specifically. ⁴Not publicly disclosed. Cyber product page and specialty pages, checked 23 September 2026.

The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. ^16,12Not publicly disclosed. Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response.

Amelia Risk lists cyber liability among the policies it places for startups, technology companies, CPG (better-for-you food, beverage and cosmetic) brands, and consumer-product companies. ^5,6,7,8Company-reported. Specialty pages' "policies to consider" lists, marketed segments rather than an underwriting appetite statement.

Amelia Risk recommends buying cyber coverage early in a company's life, pointing to rising ransomware attacks against small businesses as the reason. ⁴Company-reported. Cyber product page timing guidance; a general recommendation, not a stated minimum revenue or headcount threshold.

CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. ¹³Company-reported. Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting.

Amelia describes its cyber liability placements as combining network security and privacy liability (protecting a client's networks against unauthorized access and protecting personal, health or other sensitive data) with first-party coverage for losses the business incurs and third-party coverage for claims alleging the business is at fault. ⁴Company-reported. Cyber product page description; the actual policy wording and sublimits depend on the issuing insurer and the client's declarations.

Amelia describes cyber-crime and social engineering coverage as a traditional add-on to the base cyber policy rather than something included by default. ⁴Company-reported. Cyber product page description as of 23 September 2026.

Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. ¹³Company-reported. Cyber product page Key features list for Cyber Proactive Response.

Not described in the reviewed sources.

For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. ¹³Company-reported. Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations.

The reviewed cyber page does not describe security-monitoring, incident-response, or other risk-control services for cyber policyholders beyond the coverage description itself. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; does not establish that no such services exist, only that this page doesn't describe them.

Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. ^14,15Company-reported. Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here.

Not described in the reviewed sources.

The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. ¹⁶Company-reported. Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents.

The reviewed cyber page does not describe a breach-response process or claims-handling steps specific to cyber incidents. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; Amelia's general claims-advocacy description on other pages is not cyber-specific.

CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. ¹⁵Company-reported. Cyber brochure claims statistics; these are company-reported figures and were not independently audited.