Does Cyber Insurance Cover AI Agents?

An AI agent may use credentials, retrieve files, send messages, or initiate transactions on a company’s behalf. If it exposes data or causes unauthorized system activity, a cyber policy’s response depends on whether the policy treats the agent, its provider, and the resulting event as covered. Neither the label “agent” nor automation alone determines insurance treatment. The FTC’s vendor guidance is relevant when an outside AI service processes company data, but it does not promise coverage.

Review who qualifies as an insured user, what counts as authorized access, and whether a third-party AI platform is a dependent system or service provider. Check exclusions for voluntary transfers, contractual promises, software errors, and professional services. Ask about funds-transfer fraud separately if an agent can move money. Document access permissions, human approvals, data retention, and incident reporting so the underwriter can assess the actual exposure.