Amelia Risk vs USI Insurance Services Cyber Insurance

Amelia Risk arranges cyber liability coverage for its clients, describing and structuring the policy around network security and privacy liability rather than underwriting it directly. ⁴Company-reported. Amelia's own cyber liability product page as of 23 September 2026. Does not establish who issues a particular client's policy.

USI is a broker, not an insurer, for cyber coverage. It places cyber and privacy liability policies for clients and layers on its own manuscripted program, PrivaSafe, rather than underwriting the risk itself. ^12,10Company-reported. PrivaSafe program page and USI's property & casualty and technology practice pages.

The reviewed pages do not name an insurer for cyber placements; Amelia's marketing describes access to underwriters, wholesale brokers and carrier partners generally, without attributing any of them to cyber liability specifically. ⁴Not publicly disclosed. Cyber product page and specialty pages, checked 23 September 2026.

USI does not name the insurer that issues PrivaSafe or other cyber policies on the pages reviewed. PrivaSafe is described as a manuscripted (custom-drafted) coverage form that USI negotiates with the market, so the carrier varies by placement. ¹²Not publicly disclosed. PrivaSafe program page as read on 2026-09-23; no dedicated cyber carrier list was found.

Amelia Risk lists cyber liability among the policies it places for startups, technology companies, CPG (better-for-you food, beverage and cosmetic) brands, and consumer-product companies. ^5,6,7,8Company-reported. Specialty pages' "policies to consider" lists, marketed segments rather than an underwriting appetite statement.

Amelia Risk recommends buying cyber coverage early in a company's life, pointing to rising ransomware attacks against small businesses as the reason. ⁴Company-reported. Cyber product page timing guidance; a general recommendation, not a stated minimum revenue or headcount threshold.

USI markets PrivaSafe to middle-market firms, saying they are particularly vulnerable to cyber events because they have limited in-house access to security expertise. The page also says any business that gathers personal or health information, manages a network, or accepts electronic payments is a potential target. ¹²Company-reported. Program page marketing description, not an underwriting appetite statement.

Amelia describes its cyber liability placements as combining network security and privacy liability (protecting a client's networks against unauthorized access and protecting personal, health or other sensitive data) with first-party coverage for losses the business incurs and third-party coverage for claims alleging the business is at fault. ⁴Company-reported. Cyber product page description; the actual policy wording and sublimits depend on the issuing insurer and the client's declarations.

Amelia describes cyber-crime and social engineering coverage as a traditional add-on to the base cyber policy rather than something included by default. ⁴Company-reported. Cyber product page description as of 23 September 2026.

USI describes PrivaSafe as covering three areas: liability costs (including inability to protect information and related tort liability), compliance and corrective costs (data breach and forensic costs, privacy regulatory costs, payment-card standards), and direct costs (network interruption, data reconstruction, cyber extortion, bricking, voluntary shutdown, reputational harm business interruption, and cyber crime). ¹²Company-reported. PrivaSafe program page; actual insuring agreements and exclusions are set by the issued policy form.

Not described in the reviewed sources.

USI says PrivaSafe can prevent uninsured or underinsured losses up to $10 million, includes up to $2 million in notification-cost coverage in addition to the policy's aggregate limit, and $250,000 in defense-cost coverage outside the limit (with additional limit available). ¹²Company-reported. Program page figures describe the PrivaSafe structure generally; a buyer's actual limits, sublimits and retentions are set on the policy declarations.

The reviewed cyber page does not describe security-monitoring, incident-response, or other risk-control services for cyber policyholders beyond the coverage description itself. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; does not establish that no such services exist, only that this page doesn't describe them.

USI says PrivaSafe includes pre-breach services to help avoid cyber threats and post-breach services designed to streamline incident response and recovery, on top of USI's general property & casualty cyber specialists. ^12,13Company-reported. Program page and property-casualty practice team description.

Not described in the reviewed sources.

To review cyber exposure with USI, the program page says a buyer should be ready to provide current cyber policies (if any), an assessment of its largest financial and operational cyber vulnerabilities, and its most recent audited financials. ¹²Company-reported. PrivaSafe program page intake description.

The reviewed cyber page does not describe a breach-response process or claims-handling steps specific to cyber incidents. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; Amelia's general claims-advocacy description on other pages is not cyber-specific.

Not described in the reviewed sources.