Start with the actual policy
Collect the issued policy, endorsements, declarations, definitions, exclusions, conditions, notice provisions, other-insurance language and cyber coverage. Public insurer guidance can identify questions; it does not replace the operative policy or a coverage opinion.
Build the workflow fact file
Describe who used which product and model, for what professional service, with what authority, data, tools, supervision, client interaction and incident history. Include the account or route, reviewers, retention and logs where relevant. Avoid sending confidential matter content when a controlled reference is enough.
Ask the coverage questions by stage
| Stage | Question | Record |
|---|---|---|
| Service | Is the activity within the insured professional service? | Engagement and workflow facts |
| Authority | Was the tool and action authorized? | Policy, client and access record |
| Exclusions | Do beta, cyber, intentional or unauthorized-act terms apply? | Exact wording and facts |
| Notice | What event and timing trigger notice? | Policy condition and incident record |
| Overlap | Does another policy respond first or share the loss? | Other-insurance and cyber analysis |
Separate capability from coverage
OpenAI’s Astra materials describe critical cyber capability, safeguards and a rollout path. Those facts can affect a firm’s risk and control review; they do not decide insurance coverage. A vendor benchmark, access program or model label is not an insurance position.
Close with a written position
Ask the broker, carrier or coverage counsel to state the conclusion, assumptions, exclusions, notice conditions, unresolved facts and next trigger in writing. Keep the response scoped to the policy, jurisdiction and workflow. Until that review occurs, the coverage decision remains Unknown.
Prior canonical context retained for continuity
This archived context is preserved from the prior canonical and should be revalidated against the current source record. The current decision path above controls the present recommendation.
The ABA Journal asked the question every managing partner should be losing sleep over: "Does your professional liability insurance cover AI mistakes? Don't be so sure." The answer, for most firms, is that nobody knows — including the insurers.
ALPS, one of the largest legal malpractice insurers in the US, confirmed what risk managers suspected: most professional liability policies have no explicit AI coverage provision. They weren't written for a world where software generates legal analysis. Some policies may cover AI errors under existing professional services language. Others may exclude them under technology, unauthorized practice, or supervisory failure clauses. Your firm is operating in a coverage gray zone, and the only way to know where you stand is to ask questions your insurer probably can't answer yet.
The Coverage Gap Nobody's Talking About
Professional liability insurance for lawyers was designed around a simple model: a lawyer exercises professional judgment, makes an error, and a client suffers harm. AI breaks that model. When an AI tool generates a hallucinated citation that makes it into a filing, who made the "error"? The lawyer who relied on the tool? The tool vendor? The firm that approved the tool without adequate evaluation?
Most professional liability policies cover "wrongful acts" in the performance of "professional services." The question is whether AI-assisted work qualifies as professional services performed by the insured. If the insurer argues the AI performed the research (not the lawyer), they could deny coverage. If the insurer argues the lawyer failed to supervise the AI (a supervisory failure), coverage may apply but the claim analysis changes. ALPS has publicly stated that coverage for AI-related claims is "uncertain" under current policy language. That uncertainty benefits the insurer, not you.
How Insurers Could Deny Your AI Claim
Insurance companies deny claims by finding exclusions. Here are the exclusions that could kill an AI-related malpractice claim:
Unauthorized practice exclusion: Some policies exclude claims arising from services performed by non-lawyers under the insured's direction. If an insurer characterizes AI as a "non-lawyer" performing legal research, this exclusion could apply. It's a stretch — but insurers stretch exclusions when claims are large.
Technology/cyber exclusion: Many professional liability policies exclude claims arising from technology failures, cyber incidents, or data breaches. An insurer could argue that an AI hallucination is a "technology failure" rather than a "professional error" and route the claim to a cyber policy (which may not cover professional services).
Knowledge/competence exclusion: Some policies have conditions requiring the insured to use reasonable care. If the insurer can show the firm adopted AI without adequate evaluation, training, or verification protocols, they could argue the firm failed the reasonable care condition. This is where not having an AI governance framework becomes an insurance problem, not just an ethics problem.
What ALPS and Other Insurers Are Saying
ALPS has been the most transparent about the AI coverage gap. Their public statements acknowledge that current policy language doesn't explicitly address AI-assisted legal work and that coverage determinations will be made on a case-by-case basis. That's insurer language for "we'll decide after the claim is filed, when we know how big it is."
Other major legal malpractice insurers are taking different positions. Some have begun adding AI-specific endorsements — coverage add-ons that explicitly address AI-assisted work for an additional premium. Others are adding AI-related questions to their underwriting applications, which means your answers become part of the policy and any misrepresentation could void coverage entirely.
The market is moving toward three tiers: policies that explicitly exclude AI claims, policies that explicitly include them (at higher premiums), and policies that remain silent (the worst position for policyholders). If your policy is silent on AI, you're in the third tier — and you're betting that your insurer will interpret silence in your favor when you need coverage most.
The Questions You Must Ask Your Insurer Today
Don't wait for a claim to discover your coverage position. Contact your professional liability insurer and ask these questions in writing (so you have a record of their responses):
1. Does our current policy cover claims arising from AI-assisted legal work product? 2. Are there any exclusions that could apply to claims involving AI-generated errors (technology exclusion, unauthorized practice exclusion, supervision exclusion)? 3. Does the policy cover claims where AI hallucinated a citation or legal proposition that the insured attorney relied upon? 4. If we implement AI governance policies, verification protocols, and documentation procedures, does that affect our coverage position or premium? 5. Do you offer an AI-specific endorsement or rider that explicitly covers AI-related professional liability claims? 6. Are there AI-related questions on our next renewal application, and how will our answers affect coverage? 7. If an AI vendor has a data breach that exposes client privileged information, does our professional liability policy or our cyber policy respond?
Get the answers in writing. Verbal assurances from agents mean nothing when the claims adjuster reviews the policy language.
What Managing Partners Should Do Right Now
The coverage gap is real, but it's manageable if you act before a claim forces the issue.
Step 1: Request a coverage opinion from your broker specifically addressing AI-assisted legal services. Not a phone call — a written analysis of your policy language.
Step 2: Implement an AI governance framework (NIST AI RMF is free and comprehensive). Documented governance demonstrates reasonable care, which strengthens your coverage position regardless of policy language.
Step 3: Evaluate whether your firm needs an AI-specific endorsement. The additional premium is typically 5-15% of your base professional liability premium — meaningful but manageable compared to an uncovered claim.
Step 4: Review your cyber liability policy alongside your professional liability policy. AI creates risks that span both policies. Ensure there's no gap between what each policy excludes.
Step 5: Document your AI vendor due diligence, training programs, and verification procedures. This documentation is your evidence of reasonable care — the standard that determines both coverage eligibility and malpractice defense.
The Bottom Line: Most law firms are using AI with professional liability insurance that was never designed to cover it. The coverage gap isn't theoretical — ALPS confirmed it publicly. Don't wait for a claim to find out whether your insurer will pay. Ask the questions now, get answers in writing, and build the governance framework that strengthens your coverage position.
AI-Assisted Research. This piece was researched and written with AI assistance, reviewed and edited by Manu Ayala. For deeper takes and the perspective behind the research, follow me on LinkedIn or email me directly.
FAQ
Does AI use automatically fall within malpractice coverage?
No conclusion follows without the issued policy, facts, jurisdiction and review by the broker, carrier or coverage counsel.
Can an insurer blog answer a coverage question?
It can frame issues, but the operative policy and written position control the review.
Does a cyber-capable model create a coverage exclusion?
Not automatically. Capability, authorized use, policy wording and actual facts must be analyzed together.
Sources checked
- Insurance Coverage Issues for Lawyers in the Era of Generative AI, checked 2026-09-03.
- CNA Professional Counsel Risk Alert: AI, checked 2026-09-03.
- CNA Lawyers Professional Liability Policy Highlights, checked 2026-09-03.
- Path to Astra: critical capabilities and frontier safeguards, checked 2026-09-03.
- ABA Formal Opinion 512, checked 2026-09-03.
Operational information, not legal advice. Verify current terms, account configuration and applicable professional duties before use.