The real cost of insuring a bookkeeping firm

What to take away

This article gives general business information, not individualized insurance, tax or legal advice. Coverage terms, licensing and filing duties vary by jurisdiction and by engagement. Confirm current requirements with your state board of accountancy, the IRS and a licensed broker before you act.

The four policies, and what each one answers for

Professional liability (errors and omissions). This is the policy that pays when a client claims your work cost them money. Missed reconciliations, a misclassified transaction that inflated a tax bill, a month-end close that never happened, a sales tax return filed on the wrong nexus reading. E&O responds to the claim and to the cost of defending it.

Cyber liability. Client bank feeds, payroll files, W-9s and Social Security numbers all sit in your systems. A ransomware event or a business email compromise that redirects a client payment lands here. The FTC Safeguards Rule requires a written information-security program for firms within scope, and cyber underwriters now ask to see it.

Crime, or employee dishonesty. This covers theft by someone inside the firm: a bookkeeper who creates a vendor, approves the payment and reconciles the account. E&O excludes it. So does general liability.

General liability. Slip-and-fall, property damage, a client's laptop ruined on site. Cheap, and often required by a lease or a client contract.

Illustrative annual premiums

These are planning figures, not quotes. Rates move with your state, your carrier, your claims history and your revenue band. Treat them as the shape of the bill, then get three real quotes.

A solo bookkeeper working from home, no staff, no payment authority, can land near the bottom of every band. A five-person firm with payroll authority and 200 client bank feeds sits at the top, and often above it.

What actually drives the number

Revenue band is the first question on every E&O application. Carriers price against gross fees, because a firm billing $400,000 has more exposure than one billing $80,000.

Payment authority is the second. If your engagement letter says you never initiate transfers, say so on the application. That answer alone can cut the crime premium by half.

Controls are the third. Multi-factor authentication, a written incident response plan and documented reconciliation reviews are now underwriting questions, not just good practice. Firms that can produce them get better terms.

The arithmetic is worth running before renewal. Take your total annual premium, call it P. Divide by your average monthly fee per client, call it F. The result, P / F, is how many client-months of revenue the insurance block has to clear before the firm makes anything. The break-even work sits in a healthy bookkeeping firm margin.

Where coverage quietly fails

Three clauses decide most disputes.

The retroactive date is the earliest date a claim can arise from. Buy a policy today with a retroactive date of today, and last year's missed reconciliation is not covered.

The prior-acts clause does the same job for firms switching carriers. If the new policy excludes prior acts, the gap is permanent.

The professional services definition lists what the insurer thinks you do. If your engagement letter offers advisory or CFO services and the definition says "bookkeeping and data entry," the claim gets denied on a definition.

Read all three before you sign, and put the answers in the engagement letter. The registrations that sit beside your cover are set out in permits and licences for a bookkeeping firm, and the daily controls an underwriter wants to see belong in the bookkeeping firm SOPs your team actually follows.

A worked example: the claim that was not covered

A two-person firm held E&O with a $1M limit and paid $840 a year. A client's office manager emailed a change of bank details for a vendor. The bookkeeper updated the vendor record and released the next payment, $18,400, to the new account. The money was gone in a day.

E&O denied it. The loss came from a fraudulent instruction, not from a professional error, and the policy excluded funds transfer. The crime policy would have responded, but the firm had never bought one. The client sued for the $18,400, the firm settled, and the renewal premium rose.

The fix cost about $400 a year: a crime policy, plus a call-back rule on any bank detail change. That rule now sits in the firm's onboarding checklist.

Common questions

Does a bookkeeper who only enters data need a PTIN?

Generally no. The IRS says a bookkeeper who only gathers, organizes and records client information does not need one, while anyone paid to prepare or substantially assist in preparing a federal return does. Each preparer needs an individual PTIN. Check the current rule on the IRS PTIN page before you hire.

Is cyber insurance required?

Not by federal rule, but the FTC Safeguards Rule requires a written information-security program for firms in scope, and tax-preparation firms are named as covered financial institutions. Underwriters treat that program as the application. The FTC Safeguards Rule guidance sets out what the program has to contain.

What does a bookkeeper actually do, for insurance purposes?

The Bureau of Labor Statistics clerk profile describes the work as recording, classifying, checking and reconciling financial data, producing reports, and moving toward analytical tasks. That description is close to what an E&O application calls covered services. If your engagement letter promises more, tell the broker.

When should a firm buy cover?

Before the first client, not after the first mistake. A policy bought after an error usually excludes it through the retroactive date. Firms moving from employment to their own practice should ask about prior-acts cover in the first call. The wider filing picture sits in bookkeeping firm compliance.