You’ve just closed your seed round, and your lead investor asks whether you have D&O in place. A week later, an enterprise prospect’s procurement team sends over an MSA requiring $2M in E&O. Two acronyms, two deadlines, and it’s not clear whether they’re the same thing.

They aren’t. Mixing them up is one of the most common insurance mistakes founders make, and it usually comes to light at the worst possible moment: when a claim arrives and the policy you bought doesn’t respond.

The short answer: D&O (Directors and Officers) insurance protects your company’s leaders when they’re sued over how they run the business. E&O (Errors and Omissions) insurance protects the company, and often its employees or insured professionals, when a client alleges that a product, service or professional error caused a financial loss. D&O covers decisions; E&O covers the work you deliver. Most venture-backed technology companies with outside investors, customer contracts, or both should evaluate, and often carry, both policies.

The two get confused because they sound alike, and both cover lawsuits that aren’t about injuries or property damage. But they answer to different people. D&O most often responds to claims involving investors, regulators, creditors, acquirers, competitors and, in some circumstances, employees. Employment-related claims are commonly addressed through EPLI. E&O responds to customers.

Below we break down what each policy covers, where the gaps are, and how to tell whether your company needs one, the other, or both.

What is D&O insurance?

D&O insurance covers defense costs, settlements and judgments when your directors, officers or the company itself are accused of a “wrongful act” in managing the business. That includes mismanagement, breach of fiduciary duty, misleading statements to investors, and failure to comply with regulations.

Most D&O policies have three parts:

- Side A pays individual directors and officers when the company can’t or won’t indemnify them, for example in bankruptcy.
- Side B reimburses the company when it indemnifies directors and officers for covered defense costs, settlements or judgments.
- Side C (entity coverage) covers the company itself when it’s named in a covered claim. In public-company D&O, this is usually limited to securities claims. Private-company management liability forms may provide broader entity cover, depending on the wording.

Who typically brings D&O claims:

- Investors who say the founders misrepresented the business or diluted them unfairly
- Acquirers or shareholders challenging an M&A deal
- Regulators such as the SEC, FTC or state attorneys general
- Competitors alleging unfair business practices
- Creditors after a company fails

What D&O often excludes or limits: bodily injury and property damage, deliberately fraudulent or illegal conduct once finally established, known prior matters, and certain insured-versus-insured claims. The exact exclusions and exceptions vary by policy. Claims alleging financial loss caused by the company’s products, services, professional advice or implementation are generally an E&O or Tech E&O exposure.

Private companies often buy D&O as part of a management liability package alongside Employment Practices Liability (EPLI) and Fiduciary Liability. Want to know why carriers ask for your financials? Read Why Are Financials Required for D&O Insurance?

What is E&O insurance?

E&O insurance, also called professional liability, covers defense costs and damages when a client claims your product or service failed and cost them money. The claim might be negligence, a mistake, a missed deadline, or work that didn’t do what you promised.

For software and technology companies, the version to buy is Technology E&O (Tech E&O). It’s designed for technology-service failures such as bugs, outages, integration errors and data loss. AI-related claims may also implicate Tech E&O, but coverage depends on the policy’s AI wording, exclusions, contractual commitments and the allegation itself. Tech E&O is often packaged with cyber liability, because one incident, like an outage caused by a breach, can trigger both.

Who typically brings E&O claims:

- Customers whose operations stopped because of your downtime or a bug
- Clients who say your software or advice caused a financial loss
- Enterprise buyers alleging you missed an SLA or deliverable
- Partners harmed by a faulty integration or data error

What E&O often excludes or limits: intentional wrongdoing, bodily injury and property damage (that’s general liability), and liability assumed solely through contract, such as performance guarantees or obligations broader than the duty the company would otherwise owe. Claims alleging management-related wrongdoing are generally a D&O exposure. Coverage turns on the policy wording and the specific allegations.

For a deeper look, see Tech E&O Insurance: Why Software and IT Companies Can’t Afford to Skip It.

‍

D&O vs. E&O at a glance

‍

Before switching carriers: Confirm your retroactive date, continuity date, prior-and-pending litigation date, and any tail or run-off requirements. A lower premium isn’t a saving if the new policy excludes the period when the alleged act occurred.

Contract tip: Customer agreements often require Tech E&O or professional liability, cyber liability, commercial general liability, and specific minimum limits. Before signing, compare the insurance clause with your actual policy definitions, exclusions, aggregate limits and contractual-liability provisions, not just the limits shown on a certificate.

‍

Which policy responds? Five real-world scenarios

The clearest way to see the difference is to look at who is making the claim and what they’re upset about.

1. A SaaS outage takes down a customer’s checkout for two days. The customer sues for lost revenue. → Potentially Tech E&O. The core allegation is that your service failed, but the response depends on the policy’s technology-services definition, exclusions, your contractual commitments and the policy wording.
2. Series A investors sue the CEO after a missed forecast and a down round. They allege the pitch deck overstated revenue. → Potentially D&O. The core allegation concerns leadership conduct and investor disclosures, but coverage depends on the policy wording, notice and any applicable exclusions.
3. An AI feature gives a client bad recommendations that cost them money. → Potentially Tech E&O, if the allegation concerns a failure of the product or service and the policy covers the relevant AI exposure. Review AI exclusions, any affirmative AI coverage, contractual warranties, and cyber, IP or regulatory implications before assuming the claim is covered.
4. A regulator investigates the company’s data practices and names the founders. → Potentially D&O, cyber, or both. D&O may respond to a covered claim or formal investigation involving directors and officers, while cyber or privacy coverage may address the underlying privacy or security event. The outcome depends on the policy’s investigation wording, notice requirements and exclusions.
5. A customer sues over a failed implementation and names the CEO personally. → E&O is the primary policy for the service-failure allegations. D&O may also be implicated if the complaint separately alleges a covered management-related wrongful act by the CEO, but naming an executive alone doesn’t guarantee D&O coverage.

Do you need both?

If you have outside investors and paying customers, you will often need both. The right timing and limits depend on your contracts, stage, board structure, product risk and investor requirements. Here’s how that commonly plays out by stage:

‍

The fastest way to lower both premiums is to be ready for underwriting: current financials, a clean cap table, standard customer contracts with liability caps, and documented security controls. See How Smart Cybersecurity Controls Protect Your Business and Lower Cyber Insurance Premiums.

Frequently asked questions

Does D&O insurance cover errors and omissions?

Not for client claims about your work. D&O may respond when directors or officers are accused of management-related wrongful acts, including alleged misstatements or omissions in their leadership role. But if a customer alleges that your software, service, advice or implementation caused a financial loss, that is generally an E&O or Tech E&O exposure, not a D&O claim.

Is E&O the same as professional liability?

Yes. The names are used interchangeably. Technology E&O is the version built for software, SaaS and IT companies.

Can D&O and E&O be combined in one policy?

Some carriers offer combined or package policies for startups, but they’re still separate coverage parts with their own limits. Make sure a claim against one part doesn’t use up the limit you need for the other.

Which is more expensive, D&O or E&O?

It depends on the company. D&O costs more for companies with more investor exposure, weaker finances or higher-risk industries. E&O costs more for companies whose products are critical to customer operations or whose contracts carry large liability.

Do investors require D&O insurance?

Many institutional investors ask for D&O before or soon after closing, especially if they take a board seat. Outside directors often won’t join a board without it.

Do customers require E&O insurance?

Enterprise customers often do. Look for an insurance clause in the MSA that lists required professional liability or Tech E&O limits, and request a certificate of insurance as evidence of coverage. Confirm that the certificate and the underlying policy meet the contract’s limits and any additional-insured requirements. A certificate doesn’t change the policy’s terms.

Are D&O and E&O claims-made policies?

Usually, yes. Coverage applies to claims made while the policy is active, subject to its retroactive date and notice requirements. A gap in coverage or a missed renewal can leave you exposed for past work or past decisions, which is why tail (run-off) coverage matters when a company is sold or winds down.

Get D&O and E&O that work together

Buying D&O and E&O through different brokers or carriers can create coordination challenges if policy wording, renewals, limits, notice procedures and exclusions aren’t reviewed together. A coordinated review helps identify gaps and overlaps before a claim arises. Fullsteam can review both policies side by side against your investor and customer contracts.

Want a second look at your current coverage? Talk to a Fullsteam advisor about a D&O and E&O review.

‍

‍

‍

‍