Summit - Commercial & Business Insurance Solutions Canada logo

Tech & SaaS: average cost of $2M CGL in Canada

Introduction

Office‑based SaaS often sees $2M CGL ≈ $350–$600/yr (~$30–$50/mo), with total package costs rising when you add Tech E&O and Cyber. These are working estimates for small, Canada‑based, office/remote software businesses with low premises exposure, no hardware manufacturing, and a clean claims history.

What $2M CGL covers for Tech & SaaS

Commercial General Liability (CGL) responds to third‑party bodily injury and property damage, tenants’ legal liability, and advertising/personal injury. For software companies with leased offices, client meetings, or events, CGL is the contractually required baseline and is often bundled with property/contents. See Commercial General Liability.

Why Tech E&O and Cyber are usually added

  • Tech E&O (professional liability) addresses financial loss from software/services failures, outages, bugs, and contract disputes. It’s frequently required in MSAs/SOWs and by channel partners. See Professional Liability (E&O).

  • Cyber covers first‑party costs (incident response, forensics, data restoration, business interruption, ransomware) and third‑party liability (privacy, network security). See Cyber Insurance.

Cost comparison: CGL vs Tech E&O vs Cyber (typical small SaaS)

The figures below are indicative market ranges for Canada‑based, office‑centric SaaS with low hazard operations, <20 staff, <$1M revenue, standard contracts, and claims‑free. Actual pricing depends on the underwriting drivers listed further below.

Coverage Typical limit (small SaaS) Typical deductible/retention Indicative annual premium What it primarily covers
CGL $2,000,000 per occurrence $0–$1,000 (often $0) $350–$600 Third‑party bodily injury/property damage; tenants’ legal liability; personal/advertising injury
Tech E&O $1,000,000 per claim / agg. $2,500–$10,000 $650–$1,500 Financial loss from failure of software/services; breach of contract allegations; negligence/errors & omissions
Cyber $1,000,000 aggregate $10,000–$25,000 $700–$2,500 Incident response, business interruption, data restoration, ransomware, privacy liability

Notes:

  • Many carriers offer blended Tech E&O + Cyber; combined entry‑level packages often land around $1,200–$3,500/yr for small SaaS depending on security controls and client mix.

  • Higher revenue, US customer exposure, data sensitivity (e.g., health/financial), or negotiated indemnities will increase pricing and retentions.

Package cost scenarios (illustrative)

  • Pre‑revenue, B2B SaaS, office/remote, no US contracts: CGL $400 + E&O/Cyber combo $1,200–$1,600 → total ≈ $1,600–$2,000/yr.

  • Seed–Series A, 10–25 staff, SOC 2 in progress, some US customers: CGL $450–$650 + E&O $900–$1,800 + Cyber $1,000–$2,200 → total ≈ $2,350–$4,650/yr.

  • Scaleup selling to mid‑market/enterprise with uptime SLAs and privacy addenda: CGL $500–$800 + E&O $1,800–$4,000 + Cyber $1,800–$4,500 → total ≈ $4,100–$9,300/yr.

Key pricing drivers for Tech & SaaS

  • Revenue, growth rate, and client concentration (especially enterprise/government buyers)

  • Contract terms (indemnity caps, consequential damages, uptime/penalty clauses, IP warranties)

  • US or other foreign sales and jurisdiction/venue requirements

  • Data sensitivity and volume; third‑party processors; regulatory touchpoints

  • Security posture (MFA, endpoint protection, backups, EDR, email filtering, patch cadence, incident response testing)

  • SDLC maturity (code review, unit/integration testing, change management)

  • Claims history and prior insurance continuity

Underwriting checklist: what to prepare for faster quotes

  • Legal name(s), operations description, years in business, websites/apps

  • Gross revenue (last year, current year projection) and customer geographies

  • Contracted indemnities/SLAs; sample MSA/SOW; any hold‑harmless requirements from counterparties

  • Data map (what data, where stored/processed, key vendors), privacy policy, and security controls

  • Incident response plan and backup/restoration practices (RPO/RTO), MFA status

  • Loss runs/claims history and current policy declarations (if applicable)

How Summit helps Tech & SaaS teams

  • Market comparison across multiple insurers and MGAs to find fit on coverage terms, limits, and deductibles

  • Fast bind and COI turnaround for procurement and partner reviews

  • Dedicated account management and renewal planning as your contracts and revenue evolve

  • Transparent compensation and fee options; see How We Get Paid

  • Claims advocacy if something goes wrong; start at Claims Support

Methodology and assumptions

  • Ranges reflect recent small‑account quotes and binding activity observed by brokers for office‑based software businesses in Canada. They assume claims‑free history, basic premises exposure, and standard indemnity caps. Cyber pricing assumes baseline controls (MFA, backups, EDR) and no high‑sensitivity regulated datasets by default.

  • Pricing and availability vary by insurer appetite and risk profile; final terms depend on submitted underwriting information and market conditions at time of quoting.

  • Last reviewed: December 18, 2025.

Next step

If you’re unsure which limits and retentions fit your contracts and risk tolerance, connect with a broker to model scenarios and secure comparative quotes. Start with CGL at $2M, then layer Tech E&O and Cyber to match your client and data profile. Reach out via Contact Summit.