Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.
Insurance Buying Guide for Healthcare Businesses
Start with what your company does next: treat patients, test specimens, store health data, develop a product, or open a lab. Those activities lead to different insurance questions. A healthcare provider is a HIPAA covered entity only if it conducts specified standard electronic transactions; business-associate status depends on its work with protected health information for another covered organization.[1]
Explore Healthcare Verticals
- Consumer Health and Wellness
Prepare for a consumer-health launch by describing your data, product claims, devices, and customer relationships in the insurance quote.
- Diagnostics
Prepare a diagnostics quote around the lab services, result reporting, test products, samples, and equipment your business handles.
- Drug Discovery and Delivery
Prepare for a research contract, an FDA-regulated investigation under an IND, or scale-up by describing your services, sponsor role, materials, and sites.
- Healthcare IT
Prepare for a healthcare software contract by mapping health data, customer duties, vendors, and service commitments to the quote.
- Healthcare Services
Prepare for a clinic, telehealth launch, or clinician hire by listing services, specialties, sites, staff, and patient-data flows.
- Industrial Bio
Prepare for a lab lease or production scale-up by listing biological materials, processes, equipment, sites, and shipments.
- Medical Devices
Prepare for a first device sale or manufacturer contract by listing intended use, product stage, software, sites, and distribution.
- Therapeutics
Prepare for an FDA-regulated clinical investigation under an IND, a manufacturing agreement, or a first sale by listing sponsor duties, product stage, study roles, and supply partners.
Which Insurance Should You Consider?
Consider medical malpractice, cyber liability, general liability, commercial property, and workers’ compensation. Start with the coverages tied to your day-to-day operations, then use the situations and buying questions below to compare your options.
Medical malpractice
You begin treating patients, add a clinical specialty, hire clinicians, or take responsibility for care decisions.
NAIC describes medical professional liability for licensed health professionals and includes defense costs in its general explanation. Ask which clinicians, entities, and services the proposed forms name.[2]
Ask Before Buying
Which clinicians, specialties, procedures, locations, and company entities are covered, and how do claims-made dates and any reporting extension work?
Cyber liability
A customer asks you to sign a business associate agreement, or your product handles identifiable health information for a covered organization.
Most commercial property and general liability policies do not cover cyber risks, and cyber policies are customized. Compare the proposed cyber terms with your data, vendors, response costs, and third-party claims.[4][5][1]
Ask Before Buying
Do the proposed terms address your own incident costs, claims by customers or patients, vendor-held data, service interruption, and the response duties in your contracts?
General liability
You sign a clinic or lab lease, invite customers to a site, or send staff to a customer facility.
General liability addresses certain third-party injury and property-damage risks. Review professional-service, employee-injury, and vehicle risks separately against the proposed wording.[3][6]
Ask Before Buying
Are each of your locations and on-site activities described, and what exclusions or limits apply to visitors, customer property, and work performed away from your site?
Commercial property
You lease a clinic or lab, buy specialized equipment, or keep samples, inventory, or customer property at a site.
California’s commercial guide separates business property at a location from movable property and describes how valuation, covered causes, and deductibles affect the quote. Confirm the specific building interest and property you need to insure.[6]
Ask Before Buying
Which locations, equipment, samples, inventory, and property owned by others are listed, and what values, causes of loss, deductibles, and exclusions apply?
Workers’ compensation
You hire employees or place staff in clinics, laboratories, manufacturing sites, or customer locations.
The California Division of Workers’ Compensation says California employers need workers’ compensation insurance, including employers with one employee. Requirements elsewhere depend on the state; this California example does not decide worker classification.[7]
Ask Before Buying
Which states, work locations, payroll, and job duties are included, and what classifications and employers-liability terms appear in the quote?
Before the Next Commitment
Before you sign a lease, hire clinicians, or accept a customer contract, write down the work each entity performs, where it happens, who handles patient information, and what property or products are involved. Give the broker that operating picture so the quote can be compared with the business you are actually building.[3][6]
If a customer asks for a certificate or specific limits, compare the requested entity, activities, limits, and dates with the quote. Ask which policy form or endorsement supports each contract requirement.[6]
Separate Care, Data, Testing, and Products
Map each entity’s services and health-data role before describing it as HIPAA-covered. Provider status depends on specified standard electronic transactions; business-associate status depends on work involving protected health information for a covered organization.[1]
If you both provide a service and sell a product, list both. Ask how the quote treats clinical work, testing and interpretation, software services, and product-related allegations instead of assuming one liability limit handles them all.[2][3]
Compare the Terms You Will Rely On
Compare named insureds, locations, covered activities, limits, retentions, exclusions, and sublimits across the quote and forms. For cyber, check first-party costs, third-party claims, vendor-held data, and defense wording; NAIC describes these as distinct questions and warns that terms vary by policy.[4][5]
Providers to Compare by Coverage
Medical malpractice
Corgi
Review Score
Not enough ratings
Harper
Spot Score
Review Score
Not enough ratings
Cyber liability
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10
General liability
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10Commercial property
Alliance Risk
Spot Score
Review Score
Not enough ratings
Workers’ compensation
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10Common Questions
Is every healthcare business a HIPAA covered entity?
No. HHS defines a provider as a covered entity when it conducts specified standard electronic transactions. A company may instead be a business associate when its work for a covered entity involves protected health information.[1]
Read the Full AnswerWhat should I send before asking for a healthcare insurance quote?
Send a short operations inventory: entities, services, products, sites, employees, patient-data flows, equipment, and upcoming customer or lease requirements. That helps the broker compare the quote with the actual work and property.[3][6]
Read the Full AnswerSources and Further Reading
- Guidance on HIPAA & Cloud Computing — U.S. Department of Health and Human Services, Office for Civil Rights. Questions 1–3 on covered entities, business associates, cloud service providers, BAAs, and risk analysis; Question 7 on mobile device access to cloud ePHI
Check covered-entity and business-associate roles when your product handles electronic protected health information for a customer.
- Medical Malpractice Insurance — National Association of Insurance Commissioners. Background: scope of medical professional liability and claims-made and occurrence forms
- Small Business Insurance — National Association of Insurance Commissioners. Business owners policy, general liability, general-liability exclusions, and other business liability sections
Compare general liability with professional, employee, and vehicle exposures using NAIC’s general buyer guide.
- Cybersecurity — National Association of Insurance Commissioners, Center for Insurance Policy and Research. Cyber loss categories and qualification that most commercial property and general liability policies do not cover cyber risks and cyber policies are customized
- Cyber Insurance: Cybersecurity for Small Business — National Association of Insurance Commissioners. First-party and third-party coverage sections; vendor-held data and defense wording prompts
- Commercial Insurance Guide — California Department of Insurance. Purchasing insurance; commercial property; commercial general liability; workers compensation
Review California guidance on property, liability, and business locations; check rules in each state where you operate.
- Employer Information — California Department of Industrial Relations, Division of Workers’ Compensation. California employer insurance requirement and out-of-state employer note
Spot, a product of Tools for Enlightenment, publishes this guide and works in the commercial insurance market. This is general buyer education; policy terms and state-specific obligations determine coverage and requirements.
Updated 2026-09-28. Editorial Policy
Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.