Contractual Liability Insurance: The Exclusion-Then-Restoration Mechanism Nobody Explains

Contractual liability insurance is the part of a general liability policy that responds when your business signs a contract promising to answer for someone else’s tort liability, and most owners misread it completely. The confusion starts with the policy itself. The standard commercial general liability form, designated CG 00 01 by Insurance Services Office, first excludes contractual liability under Coverage A, then quietly hands most of it back through a definition buried in the policy’s fine print. If you have ever signed a lease, a subcontract, or a vendor agreement with a “hold harmless” clause, you already bought into this machinery whether you understood it or not.

The stakes are practical. A single indemnity clause can shift a six-figure lawsuit onto your balance sheet, and the coverage that protects you against that shift is narrow, conditional, and easy to lose. The word “contract” in this coverage does not mean what a business owner assumes it means. It does not cover your promise to finish a job on time. It covers your promise to pay for bodily injury or property damage that another party would otherwise owe.

Quick answer: what contractual liability insurance actually covers

Contractual liability insurance covers tort liability you assume on behalf of another party through a written contract, typically a hold-harmless or indemnification clause. Inside a standard CGL policy, Coverage A first excludes contractual liability, then restores it for six defined “insured contracts,” the broadest being any business agreement where you assume a third party’s liability for bodily injury or property damage. It does not cover pure breach of contract, missed deadlines, financial guarantees, or professional errors. Those need separate coverage. Understanding this line between assumed tort liability and contractual performance is the whole game.

The two-step trick inside CG 00 01 that decides whether you are covered

The mechanism at the center of contractual liability coverage is a two-step move most explanations skip. Step one: the standard commercial general liability form, designated CG 00 01, contains an exclusion under Coverage A that removes liability the insured assumes “under any contract or agreement.” Read alone, that exclusion looks like it wipes out every indemnity promise you ever signed. Step two: the same policy carves out an exception for what it calls an “insured contract,” and that exception restores coverage for a specific set of agreements. So the question is never “do I have contractual liability coverage.” The question is whether your particular contract fits the definition of an insured contract that survives the exclusion.

Think of it as a gate that slams shut, then reopens for six named keys. If your agreement matches one of those keys, the assumed liability flows back into Coverage A and the insurer defends and indemnifies as if you had caused the harm directly. If it does not match, you are personally on the hook for whatever you promised.

The International Risk Management Institute, which maintains the most widely used glossary of insurance terminology, defines the coverage precisely: it applies “not to all contractually imposed liability but to the assumption of the other contracting party’s liability under specified conditions.” You can read the full entry in the IRMI glossary definition of contractual liability insurance. That single qualifier, “under specified conditions,” is where most coverage disputes live.

• Exclusion fires first. Coverage A removes assumed liability by default.
• Insured-contract exception reopens it. Six categories restore coverage.
• Everything else stays out. Non-qualifying contracts leave you exposed.

The six insured contracts that reopen the gate, in plain English

The “insured contract” definition inside the standard CGL form restores coverage for exactly six enumerated categories of agreements. Five are narrow and specific. The sixth is the workhorse that carries almost all real-world exposure. Knowing which bucket your contract falls into tells you immediately whether the assumed liability is insured or orphaned. Business owners routinely assume the sixth catch-all covers any promise they make, and that misreading is the single most expensive mistake in this corner of insurance.

Here are the six, translated out of policy language:

• A lease of premises. Your promise to hold a landlord harmless for injuries on leased space.
• A sidetrack agreement. A deal between a business and a railroad over the use of a rail spur, one of the six specifically named insured contracts covered automatically.
• An easement or license agreement. Rights to cross or use another party’s land, excluding certain railroad crossings.
• An obligation to indemnify a municipality where required by ordinance, tied to work you perform for that municipality.
• An elevator maintenance agreement. Your promise to answer for a service company’s exposure.
• The catch-all, any business contract where you assume another party’s tort liability for bodily injury or property damage.

That sixth category is why the coverage matters at all. A general contractor who signs a subcontract agreeing to defend the project owner, a caterer who indemnifies a venue, a software vendor who holds a client harmless for on-site injuries, each triggers the catch-all. IRMI’s entry on the standard form confirms the sidetrack agreement sits among the six named contracts, an odd relic from an era when rail spurs were common commercial infrastructure. Most modern policyholders will never touch five of the six and will lean entirely on the last one.

Why “breach of contract” is the exposure this coverage refuses to touch

Contractual liability insurance does not cover damages arising purely from a failure to perform a contract, and this is the misconception that sinks the most claims. Coverage is limited to assumed tort liability for bodily injury or property damage. If you promised to deliver a finished warehouse by March and you delivered in June, the resulting lawsuit is a breach-of-contract claim, and no contractual liability provision inside a CGL policy will pay a dime. The insurer never agreed to guarantee your performance. It agreed to stand behind the third-party bodily injury and property damage liability you assumed.

The distinction sounds academic until a claim lands. IRMI draws the line cleanly in its treatment of breach of contract: the standard policy responds to assumed tort liability, not to your own failure to hold up your end of a deal. That means liquidated-damages clauses, service-level penalties, warranty obligations, and financial performance guarantees all fall outside the coverage.

Small-business owners weighing what a policy will and will not pay often find the same trap explained in the context of specific trades. Our breakdown of business insurance for consultants and what actually pays a claim walks through the same performance-versus-tort divide from the professional-services side, where the gap between a broken promise and a covered injury is even wider.

The assumption of liability that triggers coverage is typically created through a hold-harmless or indemnification agreement, in which one party contractually agrees to answer for the liability of another. That language, not the label on the contract, is what the insurer reads.

State anti-indemnity statutes: when the clause you insured is legally void

Here is the wrinkle that almost no consumer-facing explanation covers, and it can invert the entire analysis. Many U.S. states, especially in construction, have enacted anti-indemnity statutes that void or limit broad-form indemnity clauses. A broad-form clause is one that requires you to indemnify another party even for that party’s own sole negligence. In a state with a strong anti-indemnity statute, that clause may be unenforceable as a matter of contract law, which means the underlying obligation your insurance was meant to back may not legally exist in the first place. The insurance can be perfectly valid while the contract term it covers collapses.

This creates a two-layer question every risk manager should ask before signing. First, is the indemnity clause enforceable under the governing state’s law? Second, if it is enforceable, does it fit an insured contract so the CGL policy responds? A clause can fail either test independently. Broad-form indemnity gets struck down most often; intermediate-form and limited-form clauses, which stop short of covering the indemnitee’s sole fault, tend to survive.

The legal foundation here is old and well-documented. Cornell Law School’s Legal Information Institute defines indemnity as an arrangement where “one party commits to compensate another party” for specified losses, and you can read the authoritative entry in the Cornell Law School LII definition of indemnity. Whether a given indemnity survives depends on statute, and construction is where the litigation concentrates. The U.S. Occupational Safety and Health Administration governs the workplace safety standards that generate most of those construction injury claims in the first place; its OSHA construction industry safety portal is the reference point for the exposures these clauses try to shift.

The duty to defend often survives even where indemnity is limited. An insurer’s obligation to fund the defense of a claim is broader than its obligation to pay the final judgment, so a policyholder can win defense coverage on a claim the insurer ultimately does not have to indemnify. That asymmetry is worth real money, because defense costs on a serious injury suit can rival the settlement.

Where standard CGL contractual liability leaves technology and SaaS companies exposed

Almost every explanation of this coverage fixates on construction and real estate and ignores the fastest-growing source of indemnity exposure: technology and software contracts. Modern SaaS and professional-services agreements routinely include indemnification clauses for intellectual property infringement and data breaches. A standard CGL policy’s contractual liability coverage does not address those exposures, because they are neither bodily injury nor property damage in the policy’s sense. A vendor who promises to indemnify a client against a patent-infringement claim has assumed a liability the CGL simply does not touch, and many discover that only after a demand letter arrives.

Closing that gap requires other instruments. Technology errors-and-omissions coverage, cyber liability policies, and sometimes a manuscript endorsement negotiated specifically for the contract are the tools that respond to IP and data-breach indemnity. A software company relying on its general liability policy to backstop a client indemnity clause is often uninsured for the exact risk it agreed to carry.

The lesson generalizes beyond software. Vendors of every kind sign supply-chain agreements that pull in indemnity language, and the coverage question turns on whether the assumed liability is tort-based bodily injury or property damage. Businesses managing these agreements will find the certificate and endorsement mechanics laid out in our guide to vendor liability insurance for suppliers and contractors, which is the practical companion to the coverage theory here.

Certificates, additional insured endorsements, and what underwriters actually check

Contractual liability coverage rarely travels alone in a real contract. The party demanding the indemnity almost always also demands proof of insurance and status as an additional insured, and those are separate mechanisms with their own forms. A certificate of insurance documents that coverage exists; it does not by itself grant anyone rights under the policy. Additional insured status, granted by endorsement, is what actually extends the policy’s protection to the party you are indemnifying. Confusing the two is a frequent and costly error in vendor and subcontractor management.

The two most commonly required endorsements in construction and vendor contracts are the ISO additional insured forms CG 20 10, which covers ongoing operations, and CG 20 37, which covers completed operations. These are industry-standard, numbered endorsement forms used to satisfy contractual insurance requirements, and a contract that names one without the other can leave a gap once the work is finished. A subcontractor who carries CG 20 10 but not CG 20 37 may be an additional insured while the job is active and lose that status the day the project closes out, precisely when latent-defect claims tend to surface.

Underwriters evaluate contractual liability exposure by reading the actual contracts, checking loss history, and pricing by industry type. A construction firm signing broad-form indemnities in a high-litigation state prices very differently from a consultant who signs limited-form clauses. Insurance Services Office, through its parent Verisk, drafts the forms that structure all of this; the Verisk ISO forms, rules, and loss costs overview describes the product line used by the large majority of U.S. property-casualty insurers. The National Association of Insurance Commissioners publishes consumer education explaining how those state-regulated policies work, and the Insurance Information Institute produces the plain-language explainers most buyers encounter first.

Related coverage-cost topics are covered in our business insurance cost price breakdown, and firms operating in high-indemnity states may also want the state-specific view in our guide to Texas liability insurance requirements and costs.

How to read an indemnity clause before you sign it

Reviewing an indemnity clause is a repeatable discipline, and doing it before signing is cheaper than litigating afterward. The goal is to answer two questions in order: is the clause enforceable where the contract is governed, and does the liability it creates fit an insured contract so your CGL responds. Most owners sign first and read never, which is how a routine subcontract quietly converts into a personal guarantee of someone else’s negligence. A ten-minute read against a fixed checklist catches the worst of it.

Work through these before you sign:

• Identify the form. Is it broad, intermediate, or limited indemnity? Broad-form invites anti-indemnity statute problems.
• Check the governing law. A construction contract in an anti-indemnity state may void the clause you are worried about.
• Match it to an insured contract. If the assumed liability is not tort-based bodily injury or property damage, your CGL will not respond.
• Separate performance from tort. Strike or narrow any language that pulls breach, warranty, or financial guarantees into the indemnity.
• Confirm the endorsements. If additional insured status is required, name CG 20 10 and CG 20 37 explicitly, not just “additional insured.”

Different sectors carry different flavors of this problem. Nonprofits signing venue and event indemnities, food businesses managing supplier agreements, and veterinary practices with boarding and referral contracts each face the same tort-versus-performance line drawn in their own vocabulary. The core review discipline does not change; only the contracts do.

The numbers and named bodies every buyer should recognize

Contractual liability coverage sits inside a lattice of named forms and regulators, and recognizing them is how a buyer separates real coverage from marketing. The standard policy is CG 00 01. The exception that restores coverage names six insured contracts. The endorsements most contracts demand are CG 20 10 and CG 20 37. Those five designations do more to define your actual protection than any brochure headline. When a broker or a counterparty references them, you should know exactly which lever they are pulling.

The institutions matter as much as the forms. Insurance Services Office, operating under Verisk, drafts the policy language used across the U.S. property-casualty market. The International Risk Management Institute maintains the definitional glossary that courts and underwriters lean on. Cornell Law School’s Legal Information Institute anchors the underlying indemnity concepts in accessible legal terms. The Occupational Safety and Health Administration governs the construction-site safety standards behind most injury claims. The National Association of Insurance Commissioners supports the state regulators who approve these forms, the U.S. Small Business Administration publishes government guidance on business insurance types, and the Insurance Information Institute translates all of it for the general public.

A practical throughline connects them. OSHA-governed job sites generate bodily injury claims; contracts on those sites shift the liability through indemnity clauses; ISO forms decide whether the shifted liability is insured; state anti-indemnity statutes decide whether the shift is even legal; and IRMI, the SBA, the NAIC, and the Insurance Information Institute document the whole chain for buyers. A business owner who can name those six categories of insured contracts and those two endorsement forms is already reading a contract more carefully than most brokers assume their clients ever will.

The coverage exists precisely because tort liability is transferable by contract and worth transferring. What it will not do is bail you out of your own promises to perform. Keep that boundary in view and the rest of the machinery becomes legible.

Frequently asked questions about contractual liability insurance