--- title: "If we have privileged customer access, does a customer’s vendor-risk review tell us what our insurance covers?" description: "No. A customer’s vendor-risk review assesses supplier security; it does not interpret the security provider’s policy." canonical: "https://spot.insure/industries/security/does-customer-access-make-us-a-vendor-risk" page-type: "industry-faq" updated-at: "2026-09-28" --- Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Spot Score, get_rankings for current provider rankings, search_provider_reliability to filter Spot Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication. [Human-readable page](https://spot.insure/industries/security/does-customer-access-make-us-a-vendor-risk) # If we have privileged customer access, does a customer’s vendor-risk review tell us what our insurance covers? No. A customer’s vendor-risk review assesses supplier security; it does not interpret the security provider’s policy. [Cybersecurity for Small Business](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity) List the credentials, systems, logs and incident records your team can access, plus response promises in customer contracts. Ask your insurer how the proposed wording treats those activities and vendor events. [Cybersecurity for Small Business](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity), [Technology Exposures](https://www.chubb.com/us-en/business-insurance/technology-exposures.html) ## Need Help Choosing Coverage? Spot prepares your applications, coordinates with brokers, and helps you compare quotes so you can choose coverage with the key details in front of you. [Book a Free Consultation](https://cal.com/team/spotinsure/insurance-consultation) [Read the Security Services Insurance Buying Guide](https://spot.insure/industries/security) ## More Security Services Questions - [Can one policy cover both physical guarding and cybersecurity services?](https://spot.insure/industries/security/can-one-policy-cover-guarding-and-cyber) ## Coverage to Discuss - [General liability](https://spot.insure/coverage/general-liability) - [Professional errors and omissions (E&O)](https://spot.insure/coverage/professional-errors-omissions) - [Technology errors and omissions (E&O)](https://spot.insure/coverage/technology-errors-omissions) - [Cyber liability](https://spot.insure/coverage/cyber) - [Tools, equipment and inland marine](https://spot.insure/coverage/inland-marine) ## Sources and Further Reading - [Small Business Insurance](https://content.naic.org/consumer/small-business.htm) — National Association of Insurance Commissioners. BOP and exclusions; general liability and exclusions; professional liability, crime and cyber; business property. General educational descriptions, not policy terms. - [Launch Your Business: Get Business Insurance](https://www.sba.gov/counseling/launch-your-business/) — U.S. Small Business Administration. Get business insurance and four steps to buy; general coverage categories and quote comparison guidance. Do not rely on the page’s overbroad employee insurance statement. - [Cybersecurity for Small Business](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity) — Federal Trade Commission. Supplier risk, response planning and cyber-insurance buyer questions. Educational guidance, not policy wording. FTC cybersecurity guidance on supplier risk and policy questions. - [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) — Federal Trade Commission (content developed with NAIC and federal partners). First-party coverage, lines 46–77; third-party coverage, lines 78–102. Examples are not a promise for any policy. - [Technology Exposures](https://www.chubb.com/us-en/business-insurance/technology-exposures.html) — Chubb. Information loss, network-security failure, interruption, vendor incidents and technology-service errors; exposure examples, not a coverage determination. Chubb risk scenarios for technology-service and vendor exposure. - [Cyber Insurance Coverage and Products](https://www.chubb.com/us-en/business-insurance/products/cyber-insurance/cyber-insurance-products.html) — Chubb. DigiTech Enterprise Risk Management product description; Chubb’s named product summary describes technology E&O for third-party financial injury arising from insured products and services. Product-specific summary, not a universal definition or buyer policy form. - [Commercial Insurance Guide](https://www.insurance.ca.gov/01-consumers/105-type/95-guides/09-comm/commercialguide.cfm) — California Department of Insurance. Revised June 14, 2024; commercial property, inland marine, boiler and machinery/equipment breakdown, commercial general liability, commercial auto, umbrella, and workers compensation. California-focused guidance; confirm other jurisdictions and actual policy wording. California-focused reference for commercial liability, property and inland-marine topics; confirm terms and requirements where the business operates. Spot, a product of Tools for Enlightenment, publishes this guide and works in the commercial insurance market. This is general buyer education; policy terms and state-specific obligations determine coverage and requirements. Updated 2026-09-28. [Editorial Policy](https://spot.insure/editorial-policy). ## Agent and Developer Resources - [Markdown page](https://spot.insure/industries/security/does-customer-access-make-us-a-vendor-risk.md) - [Developer resources](https://spot.insure/developers) - [Public MCP server](https://spot.insure/mcp) - [MCP server manifest](https://spot.insure/server.json) - [OpenAPI description](https://spot.insure/openapi.json) - [Public page index](https://spot.insure/llms.txt)