Marketing, Advertising and PR Agency Insurance
An agency's biggest exposure is not advice that was wrong. It is publication: material that went out into the world with somebody else's property in it, or that caused somebody harm.
The Claim Comes From Somebody You Never Met
A stock image used beyond its licence. A font embedded where the licence did not allow it. Music on a social video. A strapline too close to a competitor's trade mark. A claim in an advertisement that cannot be substantiated. A post that defames a named individual. In each case the work was delivered and approved, the client is happy, and the demand arrives from a third party nobody at the agency has ever spoken to.
The second exposure is handling. Agencies hold client data, run media accounts with real money in them, and have access to client systems and social channels, which makes a compromised inbox a financial event rather than an IT inconvenience.
What Marketing Agency Insurance Covers
Intellectual property infringement
The section agencies most need and most often lack. Images, fonts, music, stock assets, library code and anything close enough to a trade mark to attract a letter, used inadvertently and actionable anyway.
Professional indemnity
Advice, strategy and execution that cost a client money: a campaign that failed on a measurable promise, a media buy placed wrongly, a rebrand that could not be used. How the cover works is on our professional indemnity page.
Defamation and content liability
Material you wrote or published causing harm to a person or business. PR work and reactive social content carry this more than campaign work does.
Cyber and data
Client lists, customer data on campaigns, access to client systems and social accounts, and media accounts with budget in them. Business email compromise during an invoice run is the realistic incident.
Media spend and funds transfer
Where you hold or direct client budget, a diverted payment is a financial loss rather than a data breach. Ask for the funds transfer sub-limit as its own figure.
Public liability and contents
An office with visiting clients, shoots on location, and equipment. Modest beside the rest and frequently a condition of appointment with larger clients.
Employers' liability
Compulsory from the first employee at a £5 million statutory minimum, which catches agencies the moment they take on a second person. Freelancers you direct may count.
Where The Cover Stops
Wordings differ between insurers, so treat these as the usual position rather than as universal fact. Where one of them matters to you, it is worth checking on your own schedule before you need to.
Client-supplied assets
A client assuring you they hold the rights to an image or a logo is not a defence against the rights holder. Get the warranty in writing and keep what they sent you.
Guaranteed results
A contract promising a ranking, a conversion rate, a reach figure or a return is a warranty rather than a professional standard, and warranties sit outside cover. Agencies write these into pitches more often than they realise.
Fines and regulatory penalties
Where a campaign breaches an advertising code or a data rule, a regulatory sanction against your client is frequently uninsurable. Your exposure is their loss rather than their penalty.
Third party platforms
An ad account suspended, a platform policy change or an algorithm update is not an insured event even where it wrecks a campaign and the client blames you.
Open source and library code
On build work, copyleft licensed code inside a client's proprietary product creates an obligation nobody intended. It is a licensing failure rather than a defect.
Work produced by freelancers
You are responsible to the client for what a freelancer delivered, including the rights position on anything they sourced.
Rights Claims Are Mundane And Constant
Nobody in an agency expects the claim to come from a stock photo library, and a surprising proportion do.
The failure modes are ordinary. An image used in a mock-up and never swapped before launch. A font licensed for desktop use embedded in a web page or a PDF. Music on a social edit, licensed for one platform and posted to three. A strapline that nobody checked against the trade mark register. Competitor copy pasted in as placeholder and left. And client-supplied assets the client did not actually own, which is more common than any of the above.
What makes it worse is who pursues it. Rights enforcement businesses operate at volume, find infringements automatically, and write to whoever is identifiable, which is usually the agency rather than an overseas contractor. So the practical controls are administrative: keep licences with the project files rather than in an inbox, record the licence terms for anything with a platform or territory restriction, get written confirmation that client-supplied assets are cleared, and audit live work before launch rather than after a letter.
Promises In Pitches Become Warranties
Agencies win work by being confident, and the language of a pitch has a habit of ending up in a contract.
A promised position in search results, a guaranteed cost per acquisition, a reach commitment, a conversion uplift or a return on ad spend converts professional judgement into a measurable promise. Professional indemnity answers negligence, meaning a failure to exercise reasonable skill and care. It does not answer a warranty that a number would be achieved, and the client will reasonably point at the deck.
The fix is wording rather than caution. Projections based on stated assumptions are a professional opinion; targets described as objectives are a shared intention; guarantees are a liability you are carrying personally. Where a client asks for a guarantee, the honest answer is what you will do and what you cannot promise. And where a performance figure is in a contract, have it read, because a cap and a carve-out are both normal and both negotiable before signature.
You Are Holding Their Money And Their Access
This is the part of agency risk that has grown fastest and that most policies written for creative businesses have not caught up with.
Agencies hold client media budgets or direct spend on accounts they control, hold customer data for campaigns and CRM work, and keep logins to client websites, ad platforms and social channels. That combination makes an agency a high value target: compromise one inbox and a fraudster can redirect an invoice, change payment details on a media account or post from a client's channel.
So two things are worth separating. Cyber cover for your own breach and for client data you hold. And funds transfer or social engineering cover for a diverted payment, which is a different sub-limit and frequently much lower than the headline cyber figure. Alongside them the controls that actually work: verbal verification on any change of bank details, separation between who can change details and who authorises payment, multi-factor authentication on every client account, and removing access when a contract ends rather than when somebody remembers.
PR And Reactive Content Carry Different Risk
An agency doing campaign work and an agency doing reactive communications are running different exposures, and the second is less insured than the first.
PR work means writing about named people and organisations, issuing statements under time pressure, and sometimes commenting on a dispute. Social community management means publishing in a client's voice, in real time, often by a junior with a scheduling tool. The risk there is defamation, a disclosure that should not have been made, or a post that causes harm, and the window between a mistake and it being screenshotted is measured in minutes.
Practically that means two things worth having: content liability that reaches defamation rather than only intellectual property, and an approval process that matches the speed of the work. A sign-off chain designed for a quarterly campaign does not survive a Friday evening crisis, and the absence of any chain is what turns a bad post into a claim.
How To Choose A Broker As An Agency
Most policies sold to agencies are office cover with professional indemnity attached, which misses the exposure. We are an FCA regulated broker and will not tell you we are the best choice. These are the questions that decide it.
Is intellectual property infringement actually included?
The commonest claim in the sector and frequently absent from a policy sold as professional indemnity. Ask directly rather than assuming it falls inside the headline cover.
Does content liability reach defamation?
If you do PR, reactive social or anything written about named parties, a policy covering only intellectual property leaves that uncovered.
What is the funds transfer sub-limit?
You hold or direct client media budget. A diverted payment is a financial loss with its own sub-limit, usually well below the headline cyber figure.
Does cyber reach client data as well as your own systems?
You hold customer data for campaigns and access to client platforms. A policy written for your office may not reach a breach of what you hold for others.
Has anybody read your pitch and contract language?
Guaranteed rankings, conversion rates and returns convert judgement into warranties that sit outside cover. The fix is wording and it has to happen before signature.
Does the limit meet your largest client's contract?
Enterprise and public sector clients specify limits well above a small studio's default, and they ask before appointing rather than after.
Factually, here is what we do against those questions. We confirm intellectual property infringement is genuinely included rather than assumed, we check content liability reaches defamation where you do PR or reactive social, we quote the funds transfer sub-limit as its own figure because you hold client budget, and we will read a client contract or pitch wording and tell you where a guarantee has crept in. We are a broker, so it goes to several insurers rather than one.
If your work is building rather than promoting, meaning websites, software and integrations, our web designers page is the better fit and we will say so rather than quoting the wrong product.
What Moves The Price
Every policy is priced on the business behind it. These are the things that move the premium:
- Whether intellectual property infringement is included
- Whether you do PR or reactive content as well as campaigns
- Annual fee income and your largest client by fee
- Whether you hold or direct client media spend, and how much
- The volume and sensitivity of client data you hold
- Whether contracts contain performance guarantees
- Whether you use freelancers, and whether they hold their own cover
- Claims, complaints and notified circumstances
We are a broker, so we take it to several insurers rather than quoting one. Call 02382 000820 for a quote.
What We Need To Quote
- The services you provide, and the campaign against PR split
- Annual fee income and your largest client
- Whether you hold or direct client media budget, and typical monthly spend
- What client data you hold and for how many end customers
- Whether you retain access to client websites and social accounts
- Whether any contract contains a performance guarantee
- The limit of indemnity required, and who requires it
- Any claims or rights demands, however small
Cover that often goes with this
The gaps we most often find sitting next to this policy.
- Web and software developersIf you build rather than promote, that is the better fit.
- Cyber insuranceClient data, platform access and diverted payments.
- Professional indemnityHow claims made and retroactive dates work.
- Insurance for professionalsThe wider hub, including run-off at the end.
- Management consultantsWhere the advice is strategic rather than promotional.
- Talk to a brokerAsk us whether IP infringement is actually in your policy.
Common questions
What insurance do marketing agencies need?+
Intellectual property infringement cover first, because the commonest claim in this sector is an image, font, piece of music or strapline used beyond its licence, and it is frequently absent from policies sold as professional indemnity. Then professional indemnity for advice and execution, content liability reaching defamation if you do PR or reactive social, and cyber covering both your own breach and client data you hold. Add funds transfer cover where you direct media spend, employers' liability at a £5 million statutory minimum, and public liability and contents for the office and shoots.
Am I liable for an image a client gave me?+
Potentially yes, and this is more common than agencies expect. A client assuring you they hold the rights is not a defence against the rights holder, who will write to whoever is identifiable, and that is usually the agency rather than an overseas contractor. Rights enforcement businesses operate at volume and find infringements automatically. So get the warranty in writing rather than verbally, keep exactly what the client sent you, and audit live work before launch. The mundane failures are the ones that bite: a mock-up image never swapped, a desktop font embedded in a PDF, music licensed for one platform posted to three.
Does my insurance cover a campaign that did not deliver?+
It depends entirely on what was promised. Professional indemnity answers negligence, meaning a failure to exercise reasonable skill and care, so a campaign executed competently that simply underperformed is usually not a claim. What creates uninsured exposure is a promise: a guaranteed ranking, cost per acquisition, reach figure or return on ad spend is a warranty rather than a professional standard, and warranties sit outside cover. Agencies write these into pitches more often than they realise, and the client will reasonably point at the deck. The fix is wording, before signature.
What happens if a payment is diverted from a client's media budget?+
That is a funds transfer loss and it needs its own cover, with its own sub-limit which is usually well below the headline cyber figure, so ask for the number. Agencies are high value targets precisely because they hold or direct client budget and keep logins to ad platforms: compromise one inbox and a fraudster can redirect an invoice or change payment details. The controls matter as much as the cover: verbal verification on any change of bank details, separation between who can change details and who authorises payment, multi-factor authentication on every client account, and removing access when a contract ends.
Do I need different cover for PR work?+
You need content liability that reaches defamation, which campaign-focused policies sometimes do not. PR and reactive communications mean writing about named people and organisations, issuing statements under time pressure and sometimes commenting on a dispute, and community management means publishing in a client's voice in real time, often by a junior with a scheduling tool. The risk is defamation, an improper disclosure or a post that causes harm, and the window between a mistake and a screenshot is minutes. Worth pairing the cover with an approval process that matches the speed of the work.
Who insures marketing and advertising agencies in the UK?+
It is widely available and widely misunderstood: much of what is sold to agencies is office cover with a professional indemnity section attached, which leaves the real exposures uncovered. Several insurers write creative and media risks properly, mostly reached through brokers. What separates placements is whether intellectual property infringement is genuinely included, whether content liability reaches defamation, what the funds transfer sub-limit is, and whether cyber reaches client data you hold rather than only your own systems.
More food, drink and leisure we cover
What our customers say on Google
5.0average from 169 Google reviews