01Software and web businesses
Software and web businesses may build a product, host a service or maintain systems that clients use every day. A coding error, failed deployment or service interruption can create a client dispute even when no physical property is damaged. Hosting, third-party tools and data access help define the exposure.
Describe development, hosting and support responsibilities, customer sectors and contractual service levels. Professional indemnity and cyber insurance address different issues and need to be considered together without assuming either fills every gap. Identify who controls backups and recovery, and review performance promises, security obligations and the consequences of an outage against the proposed wording.
02IT consultants and support providers
IT support providers often have privileged access to client systems. Installation, migration, configuration and ongoing support can affect both information and day-to-day operations. Remote access does not remove the need to define exactly what the business has agreed to manage and what remains the client’s responsibility.
Provide a service list, access arrangements, client types and use of subcontractors. Review professional-service errors, cyber incidents and any on-site liability as separate exposures. Written change approvals, access controls and recovery procedures help clarify responsibilities. Hardware supply, security consulting and managed services should be declared explicitly rather than folded into a vague description of computer support.
03Technology-enabled service businesses
A technology-enabled service may combine a digital platform with human advice, administration or practical work. The important question is what customers are buying and relying on, not simply whether the business uses an app. Payments, sensitive information and dependence on other platforms may add further points of failure.
Explain the underlying service, the technology used and the division of responsibility with providers and customers. Consider professional liability, cyber and ordinary operational exposures according to the real activity. A technology label should not obscure a regulated or specialist service. Bring customer terms, service workflows and outage arrangements so the discussion can follow how the business actually delivers its work.
