The AI Coverage Cliff: What 2026 Renewals Will Reveal

What happened. Verisk’s Insurance Services Office released three optional endorsements effective January 1, 2026: CG 40 47, CG 40 48, and CG 35 08. CG 40 47 excludes any claim arising out of generative AI across both bodily injury and personal/advertising injury coverage. ISO forms underpin roughly 82% of U.S. P&C policies, so these are the standard language any carrier can attach at any 2026 renewal. W.R. Berkley filed Form PC 51380, an “absolute AI exclusion” for D&O, E&O, and fiduciary liability barring coverage “based upon, arising out of, or attributable to” AI. AIG and Great American sought clearance for similar language. Philadelphia Insurance and Hamilton Select have already excluded AI-related claims from E&O coverage, with Hamilton’s endorsement specifically naming ChatGPT, Bard, Midjourney, and DALL-E.

Why it matters. Until January, AI exposure was covered by default. The policy never mentioned AI, and when something went wrong the carrier paid. That silent-coverage era ended in a similar way to how silent cyber ended at Lloyd’s in 2019. A single field on a renewal form now eliminates AI-related coverage entirely, with trigger language broad enough that “arising out of” applies even when AI is one input among many. The April 2026 securities class action Dunn v. Upstart Holdings is a preview of what the coverage gaps look like in real litigation: investors allege Upstart’s executives misled them about calibration failures of the company’s “Model 22” AI underwriting system. Any company whose D&O carrier has attached the absolute AI exclusion is now exposed to that defense cost without coverage.

What happened. A February 2026 joint report from Lockton Re, Lockton International, and Armilla AI argued for AI as its own insurable class, separate from cyber, E&O, and D&O, on the grounds that AI failure modes (hallucination, model drift, agentic chain-of-action errors) do not map onto existing wordings. The same month, Armilla expanded its standalone AI Liability Policy to $25 million per organization, up from prior caps under $10 million, underwritten by Lloyd’s syndicates. Armilla remains the only Lloyd’s coverholder dedicated specifically to AI liability at this scale. Testudo, also Lloyd’s-backed, launched a parallel product covering hallucination, IP infringement, and regulatory penalties. No major admitted-market carrier has stepped in to fill the gap created by the ISO exclusions.

Why it matters. Specialty capacity is scaling at exactly the moment the primary market is excluding the risk, which is the structural fingerprint of a new insurable class forming. Affirmative AI coverage is becoming a standalone procurement decision with its own diligence cycle, the same path cyber took between 2014 and 2018. The absence of admitted-market competition tells you the pricing is not yet attractive enough for incumbents to compete, which is exactly when buyers can negotiate the cleanest terms.

What happened. The NAIC Model Bulletin on AI Systems has been adopted by 23 states plus DC as of April 1, 2026. It requires insurers to maintain a written AI Systems Program covering four pillars: governance accountability with named owners, risk management proportional to consumer harm, third-party vendor oversight that does not transfer responsibility, and lifecycle documentation retrievable on demand. In January 2026, the NAIC launched its AI Systems Evaluation Tool pilot across twelve states, giving market conduct examiners a structured framework for reviewing AI governance programs in real exams running through September 2026.

Why it matters. The same governance posture insurers must now document for their own regulators is the posture they are demanding from commercial customers seeking AI coverage. A buyer’s underwriting submission needs the four pillars in writing — model inventory mapped to risk tier, vendor diligence file for each foundation model provider, monitoring telemetry, and an incident response runbook with named escalation paths. Companies that produce this material on ten business days’ notice access affirmative coverage; companies that cannot are pushed into the exclusion column.