GENERATIVE AI INSURANCE DEVELOPER vs DEPLOYER
COVERAGE PART 06 · WHERE LIABILITY ATTACHES

AI DEVELOPER vs. DEPLOYER INSURANCE

"We just use a vendor's AI" is not the shield people think it is. Liability attaches at every link of the chain — building, fine-tuning, deploying, or simply using — and the standard exclusions don't care which one you are. Your role shapes the exposure; it doesn't erase it.

ELIGIBILITY · $10M+ ANNUAL REVENUE · PREMIUMS FROM $15K
VALUE-CHAIN LIABILITY Dark-mode terminal AI coding screen with streaming green code lines BUILD IT, TUNE IT, OR JUST USE IT — YOU'RE STILL IN THE CHAIN
THE AI VALUE CHAIN

FOUR ROLES, FOUR DIFFERENT EXPOSURES

Generative AI passes through several hands before it touches a customer. Liability can attach at any of them — and most businesses occupy more than one role without realizing it.

INTERACTIVE · FIND YOUR ROLE

WHERE DOES YOUR BUSINESS SIT?

Answer a couple of quick questions. We'll place you on the value chain and show what liability attaches to your position — and why none of them is a free pass.

THE LINE UNDERWRITERS CARE ABOUT

"SUBSTANTIAL MODIFICATION" CHANGES YOUR RISK

One question reshapes how a model's behavior is attributed to you: have you substantially modified it? Fine-tuning or retraining moves you from "using someone's tool" toward "owning how it behaves" — and underwriters ask about it directly.

UNMODIFIED USE

YOU USE IT AS SHIPPED

You run a vendor's model with its built-in behavior and guardrails intact. You still own the outputs you act on — but you have not changed how the model itself works.

SUBSTANTIAL MODIFICATION

YOU FINE-TUNED OR RETRAINED IT

You trained the model on your own data, altered its behavior, or changed its guardrails. Now the model's outputs reflect your choices — and more of the responsibility for what it produces moves to you.

INTERACTIVE · VENDOR TERMS REALITY CHECK

THE VENDOR CONTRACT IS NOT YOUR SHIELD

People assume the AI vendor absorbs the risk. The terms usually say the opposite. Highlight what a typical agreement actually does to your liability.

vendor_terms_of_service — excerpt

The Service and all outputs are provided "as is," without warranties of any kind, including accuracy or fitness for a particular purpose. You are solely responsible for your use of the outputs and any decisions or actions based on them.

You agree to indemnify and hold the provider harmless from any third-party claims arising out of your use of the Service. The provider's total liability is limited to the fees you paid in the preceding twelve months.

"AS IS"No promise the output is accurate. The vendor does not stand behind what the model produces.
YOU'RE RESPONSIBLEResponsibility for outputs and the decisions made on them is assigned squarely to you.
YOU INDEMNIFY THEMIf a third party sues over your use, you may have to cover the vendor — not the other way around.
CAPPED RECOVERYEven where the vendor is liable, your recovery may be limited to the fees you paid.
Read together, the contract pushes the liability for AI output back onto you — which is exactly the gap affirmative coverage is built to fill.
WHY "JUST A USER" ISN'T A SAFE HARBOR

THE EXCLUSIONS DON'T CARE WHICH ROLE YOU ARE

The hopeful reading — "we only use a vendor tool, so the exposure isn't ours" — runs into both the courts and the new policy forms.

ISO CG 40 47 / CG 40 48

USER OR BUILDER, SAME CARVE-OUT

The standard exclusion language, effective January 1, 2026, does not distinguish between a company that built its own AI and one that simply uses a vendor's product. Both can be excluded.

THE COURTS AGREE

YOU OWN THE OUTPUT

Decisions to date have placed responsibility on the business that deployed or relied on the AI — not the model's maker. Using someone else's tool did not transfer the liability.

SILENT vs AFFIRMATIVE

COVER FOR YOUR ROLE

Affirmative coverage is structured to your actual position in the chain — developer, modifier, deployer, or user — instead of leaving the question to a form that excludes AI regardless.

FROM YOUR INTERNAL AUDIT

WHERE EACH ROLE GETS EXPOSED

Map which roles your business actually plays. Most established companies are users and deployers at once — and a growing number quietly became modifiers the day they fine-tuned a model.

AS A USER

Every output your team relies on — emails, code, analysis, customer answers — carries error, IP, and disclosure exposure, even on an unmodified vendor tool.

AS A DEPLOYER

Embedding AI in a product or customer-facing service makes you responsible for how it behaves in your customers' hands.

AS A MODIFIER

Fine-tuning on your own data ties the model's behavior — and any sensitive data it absorbed — directly back to your choices.

AS AN AUTONOMOUS OPERATOR

If your deployment also acts on its own, the role exposure compounds with autonomy — the highest-severity combination in this market.

⚡ AGENTIC = INSTANT YES
WHO WE PLACE THIS FOR

BUILT FOR ESTABLISHED BUSINESSES AT EVERY LINK

This affirmative market is designed for companies at scale — whether you build, fine-tune, deploy, or simply run your business on AI. We structure the submission to your actual role.

ELIGIBILITY AT A GLANCE

MINIMUM SIZE FOR THIS MARKET

$10M+Minimum annual revenue
$15KMinimum premium
THE FULL COVERAGE MAP

PART OF THE GENERATIVE AI INSURANCE STACK

Developer-versus-deployer positioning runs through every trigger. Explore how it connects to the rest of the cluster.

FREQUENTLY ASKED

DEVELOPER vs DEPLOYER QUESTIONS

WE JUST USE A VENDOR'S AI. ARE WE REALLY LIABLE?
Using a vendor's product does not move the liability to the vendor. You remain responsible for the outputs you rely on and the decisions made on them, courts have placed responsibility on the deploying business, and the vendor's own terms typically push the risk back to you. "Just a user" is a real role, but it is not a safe harbor.
WHAT IS "SUBSTANTIAL MODIFICATION" AND WHY DOES IT MATTER?
It means fine-tuning, retraining, or otherwise meaningfully changing how a model behaves — including altering its guardrails or training it on your own data. It matters because the more you change the model, the more its behavior reflects your choices, which shifts responsibility toward you. Underwriters ask about it directly.
DOESN'T OUR VENDOR'S CONTRACT PROTECT US?
Usually the reverse. Typical AI vendor terms provide the service "as is," assign responsibility for outputs to you, ask you to indemnify the vendor against third-party claims, and cap the vendor's own liability. Read together, the contract tends to push AI-output liability back onto your business.
WE FINE-TUNE A MODEL ON OUR OWN DATA. WHAT CHANGES?
You move into the modifier role. The model's behavior now reflects your training choices, and any sensitive data it absorbed becomes part of your exposure. Underwriters will want to understand what you trained on, how, and what controls you kept in place. We document that for the submission.
IS THERE A MINIMUM COMPANY SIZE FOR THIS COVERAGE?
Yes. This market is built for established businesses, with a minimum of $10 million in annual revenue and premiums starting at $15,000. If you are below that threshold but build, modify, or deploy AI, reach out anyway and we will talk through your exposure and other options.
HOW DO I GET A QUOTE FROM KELLY INSURANCE GROUP?
Book an appointment or start an intake form and tell us whether you build, fine-tune, deploy, or use AI, and how. We place you on the value chain, map the exposure to your role, review your vendor contracts and controls, and take a structured submission to the specialty markets writing affirmative AI coverage. Call or text (412) 212-2800.
Kelly Insurance Group is a specialty commercial insurance brokerage. This page is general information about AI value-chain liability and is not legal advice, a coverage opinion, or a guarantee that any policy will respond to a particular loss. Coverage triggers, terms, exclusions, and availability vary by carrier and by deployment; the ISO endorsements referenced (CG 40 47 and CG 40 48, effective January 1, 2026) are optional forms individual carriers may or may not adopt. The vendor-terms excerpt shown is an illustrative composite, not any specific provider's contract. Always review your actual vendor agreements and the policy wording for terms, conditions, and exclusions.