Introduction

A practical guide for Canadian small and mid‑sized enterprises (SMEs) comparing modular “bundled” management liability solutions that combine Directors & Officers (D&O) with Employment Practices Liability (EPL) and, in many cases, Cyber. Last updated: September 8, 2025.

Summit Commercial Solutions is an independent Canadian brokerage. We help you shop multiple markets, explain trade‑offs in plain language, and move quickly from intake to bind.

What “bundling” means for SMEs

Bundling refers to placing multiple executive risk coverages under one portfolio or policy suite, often with aligned terms and shared administration. For SMEs, common bundles include:

• Core inclusions: D&O (entity and individual protection), EPL, and often Fiduciary/Pension Trust and Crime. Cyber may be embedded as a selectable module or paired within the same carrier portfolio.

• Common exclusions: Intentional fraud/illegal profit, prior known matters, bodily injury/property damage (except certain carve‑backs), and wage‑and‑hour penalties (varies by form).

• Benefits

• Simpler procurement and renewals; one application set, coordinated wording, consolidated claims handling.

• Potential pricing/retention efficiencies and fewer coverage gaps between towers.

• Easier limit management when coverage parts are designed to work together.

• Trade‑offs

• Shared aggregates can erode limits across coverages after a large claim.

• Cyber readiness controls may drive pricing/eligibility; some sectors may still need a standalone cyber tower.

• Highly regulated or U.S.-exposed risks may outgrow SME bundles and require separate programs with bespoke limits.

Which Canadian markets offer SME‑friendly modular bundles

Below are carrier/MGU offerings with official product pages. Availability, appetite, and limit options vary by industry and risk profile. Work with your broker to confirm fit.

Note: Appetite and minimum/maximum revenues or headcounts differ by carrier; some products are broker‑access only and subject to underwriting.

When bundling is a fit vs when to separate towers

• Bundle when

• You’re a private company or nonprofit with modest U.S. footprint and low‑to‑moderate claims history; combined limits and unified wording simplify protection.

• You want a single program for D&O/EPL/Fiduciary/Crime, and either add cyber as a module (e.g., within a portfolio) or place a companion cyber policy with the same market for cohesion. citeturn1search3turn0search1

• You value integrated risk‑management services (e.g., cyber apps, training) that come with portfolio placements. citeturn3search0turn4search0

• Consider separating towers when

• You have material U.S. exposure (sales, staff, or litigation risk) or board requirements that demand higher Side‑A or separate limits for D&O.

• You’re in sectors with heightened EPL or cyber severity (e.g., healthcare, tech SAAS handling sensitive data) and need standalone cyber limits/wordings tailored to operational controls.

• You’re scaling, doing acquisitions, or have recent severity losses; standalone towers allow independent limits, carriers, and tailored retentions.

If you’re unsure, we’ll benchmark carriers’ form strengths and model shared‑aggregate erosion versus separate limits for your profile.

Intake checklist to speed quotes

Gathering these items up front helps us secure accurate terms quickly.

• Corporate details: legal entities, ownership/cap table, provinces/countries of operation, and U.S. nexus (subsidiaries, revenues, venues).

• Financials: most recent fiscal statements; cap raises or debt covenants; any going‑concern flags.

• Board/governance: outside directorships, indemnification agreements, prior/pending litigation details.

• Employment profile: employee count by province/country; turnover; handbook/HR policies; recent terminations/layoffs; third‑party exposure (customers/vendors).

• Claims history: 5‑year loss runs for D&O/EPL/Crime/Cyber; incident narratives and remediation.

• Controls (cyber/EPL): MFA on email/remote access, EDR/AV, backups (offline/immutable), patching cadence, privileged access, vendor management, harassment training and hotline, incident response plan.

• Insurance specs: desired limits/deductibles, shared vs separate aggregates, prior/retro dates, requested endorsements.

Upload securely and we’ll triage to appropriate markets the same day in most cases.

FAQs

Do bundled programs really save money?#

Often, yes—carriers price portfolio placements competitively and you may reduce duplicated minimum premiums across separate policies. But savings vary by industry, claims, and controls; we’ll quote both ways when it’s close.

Can I keep D&O separate but bundle EPL and cyber?#

Yes. Many portfolios let you select coverage parts a la carte, or pair management liability with a companion cyber product from the same market to maintain cohesion without forcing all coverages into one policy. citeturn1search3turn1search1

Which markets offer cyber within the same portfolio?#

Chubb’s ForeFront Portfolio lists Cyber ERM as an available coverage option; Zurich’s Pro Plus packages Professional + Cyber and can sit alongside its Private Company Select for D&O/EPL; CNA’s EPACK 3 framework includes a companion cyber/media/tech module. citeturn1search3turn0search0turn0search1turn1search1

We’re a startup—should we bundle?#

Often yes: early‑stage companies with limited claims can benefit from a simple portfolio and grow into separate towers later. See our internal Startup Playbook and ask us to benchmark options across markets.

Do these products exist for nonprofits?#

Yes. Several portfolios explicitly target private companies and nonprofits; we regularly place modular ML solutions for Canadian nonprofits. See our Nonprofit D&O 2025 guidance, then ask for quotes. citeturn0search7turn1search6

What cyber prerequisites should we expect?#

Varies by carrier, but MFA on email/remote access, EDR, secure/offline backups, and incident response plans are common underwriting touchpoints. App‑enabled offerings from Victor and CFC add preventative tooling that can support eligibility and response. citeturn3search0turn4search0

Related resources

• Deep‑dive on D&O forms: D&O hub

• Cross‑line comparisons: Modular Packages inventory

• Early‑stage guidance: Startup Playbook

• Sector‑specific: Nonprofit D&O 2025