What Is CFC Insurance?

CFC is a specialist insurance provider operating an MGA model: a managing general agent performs underwriting functions for insurance capacity providers. Its disclosures identify CFC Underwriting Limited and the U.S. producer CFC USA, Inc.; the CFC brand should not be treated as the name of every policy’s insurer. ^5,4

CFC markets its technology products to startups, midsize companies and multinationals, including businesses before they generate revenue. That stated audience does not establish acceptance of a particular business. ¹

For a founder, the useful starting point is the connection between what your product promises customers and what happens when it fails. A missed implementation deadline, a software error and a data breach raise different questions about the proposed insurance. Read the liability sections together instead of evaluating the cyber label alone. ²

Pros and Cons

Pros

• CFC’s U.S. technology brochure describes errors and omissions, cyber, media/IP infringement and general liability protection, including liability arising from client contract breaches. The brochure describes a package; the quote and wording determine which sections and exclusions apply. ²

  That combination gives a finance team several contract and operational exposures to examine in one proposal.

• CFC says its cyber service includes threat monitoring and alerts, a response app and round-the-clock technical incident support. These are company-described services; access, scope and any conditions should be checked against the proposed policy. ⁷

  A small team can ask how those services would fit its incident-response plan before an event occurs.

• CFC separately markets intellectual-property insurance for infringement defense, enforcement and related IP risks, including patent exposures. Its scope should be compared with the narrower IP provisions in any technology quote. ^14,2

  For a business whose customer contracts require IP indemnities, the separate product is worth asking about rather than assuming that every IP dispute falls within E&O.

Cons

• CFC’s January 2026 U.S. management-liability brochure lists California-domiciled business and standalone employment practices liability under risks it declines. This restriction is specific to the described management-liability offering; it does not establish a California exclusion for every CFC product. ¹¹

  A Bay Area company should resolve domicile and product appetite before counting on this package for board or employment risks.

• The reviewed U.S. technology page, brochure and application do not establish the currently available admitted or surplus-lines route for a particular California startup. CFC announced admitted technology E&O in 2023, but the reviewed materials do not supply a current California product eligibility schedule. ^1,2,3,29

  An early confirmation of the placement route can prevent spending time on an unsuitable application.

• The reviewed U.S. technology brochure, application and Connect page do not disclose a buyer-specific premium, producer commission rate, broker fee or complete schedule of policy charges. Request a written breakdown of premium, taxes, fees and intermediary compensation before purchase. ^2,3,6

  Public product descriptions therefore cannot support a total-cost comparison.

How It Works

The U.S. technology application asks a senior staff member to complete it and return it to the company’s insurance broker. It requests revenue, funding, subsidiaries, products, major contracts, security controls, IP procedures and claims history. CFC’s Connect portal separately supports broker trading and describes a broker appointment process. ^3,6

Prepare the application with whoever owns your customer contracts and security controls. For a bootstrapped business, explain the actual service and its failure consequences clearly; for a growing group, reconcile subsidiary activities and revenue before submitting. The form asks about both, so a description limited to the parent company’s website may not tell the full story. ³

CFC reports that CFC USA, Inc. holds producer licenses in all 50 states and Washington, D.C., plus excess and surplus lines authorization in California, Georgia, New York and Texas. It identifies its California licensing name as CFC General Insurance Agency, Inc. This is CFC’s disclosure, not an independently checked California license record or confirmation of product eligibility. ⁴

CFC’s regulatory page identifies Lloyd’s Syndicate 1988, managed by Asta Managing Agency Ltd. The reviewed U.S. technology materials do not name the insurer or participating syndicates for a California buyer’s actual policy; ask for those names on the quote and declarations. ^4,2,3

Coverage and Availability

Technology and Cyber

CFC’s U.S. cyber catalogue lists Cyber Proactive Response, admitted cyber, Corporate cyber and cyber excess. These are distinct offerings; an admitted label on the website does not establish California eligibility or identical wording across products. ⁹

When comparing a combined technology proposal with separate E&O and cyber policies, ask whether one event can consume limits in more than one section, whether defense expenses reduce those limits, and how contractual liability and IP exclusions interact. A brochure’s coverage labels are a starting point for those questions, not the answer. ²

Industry Packages and Board Risks

CFC offers fintech insurance combining financial and technology liability with other financial-sector risks, eHealth for digital-health businesses, and life-science packages for businesses such as device or drug developers and nutraceutical companies. These sector products require their own underwriting and terms. ^23,19,22

A digital-health or financial-services startup should describe the regulated service it performs as well as the software it sells. Ask which product addresses both activities, including harm caused by service failure. The sector descriptions make this a more useful conversation than simply asking for a generic technology policy. ^19 23

CFC markets management liability covering directors and officers, employment practices, fiduciary exposures and crime, and separately lists Side A DIC excess protection for directors and officers. Its U.S. management-liability brochure declines California-domiciled business; do not read these catalogue entries as California availability. ^10,11

Broader Catalogue

CFC’s U.S. product pages also market professional E&O, property and general liability, media liability, medical malpractice, product recall, kidnap and ransom, and umbrella protection over professional liability, general liability or cyber. This catalogue does not mean every line is included in a technology policy or available for every California risk. ^{12,13,21,20,16,15,18}

CFC markets representations and warranties insurance, small-business buyer and seller protection, and secondary-liquidity transaction solutions. These are transaction-specific products rather than ordinary operating-company liability coverage. ¹⁷

Other CFC specialty offerings include carbon-credit delivery, cancellation and lender non-payment insurance; a CORSIA guarantee product; standalone sexual abuse and molestation liability through Safeprotect; terrorism insurance; and marine hull-war and kidnap-and-ransom cover. Their presence on the U.S. site does not resolve California placement eligibility. ^25,26,27,28

Service and Compensation

CFC’s U.S. claims page provides a general claim-reporting form, email and telephone route, plus a separate cyber-incident phone route and app reporting. These channels establish how CFC invites notifications, not claims payment speed or the outcome of a coverage decision. ⁸

Before binding, have the broker identify who receives urgent notices, who coordinates technical response, and who can authorize outside legal or forensic work. Keep the policy’s reporting instructions with your response plan; a general website contact channel should not substitute for the contractual notice requirements. ^8 7

The reviewed Connect and technology application pages do not specify a customer-facing renewal timetable, certificate turnaround or dedicated account-management commitment for California technology buyers. Confirm those arrangements with the placing broker. ^6,3

For the cost breakdown, distinguish the premium paid for insurance from broker charges and other policy costs. Ask which amounts recur at renewal or change when you amend or cancel the policy. The reviewed application and trading materials do not answer those questions for a specific buyer. ^3 6

What to Confirm in a Quote

• California route and legal parties: Which producer will place this product, is the proposed placement admitted or surplus lines, and which insurer or syndicates will bear the risk? Get the answer for each coverage, including any separate board-risk proposal. ^4 11
• The insured business: Does the description include your subsidiaries, customer industries, hardware, managed services and planned changes? Reconcile it with the activities and revenue in the application. ³
• Contract and technology wording: How are service failures, breach of contract, IP allegations and cyber events covered? Request the proposed forms and endorsements, retroactive date, limits, retentions and defense-cost treatment. ²
• Operational responsibilities and price: Who handles certificates, midterm changes, renewals and urgent notices? Which cyber services are included, and what are the complete charges and compensation arrangements? ^6 7 8