What Does a Business Owner's Policy (BOP) Cover — and When Is It Not Enough?
A Business Owner's Policy bundles commercial property, general liability, and business interruption into one policy. It's a solid foundation — but it doesn't cover cyber attacks, professional errors, employee injuries, or leadership liability. Here's exactly what a BOP covers and where it stops.

Your office floods. A customer slips on your front step. A fire destroys your inventory. Three separate events, three separate claims — and if you have a Business Owner's Policy, one policy responds to all three.
A Business Owner's Policy, or BOP, bundles commercial property insurance and general liability insurance into a single policy built for small to mid-size businesses. It covers physical damage to your business property and legal liability for third-party bodily injury or property damage. Most BOPs also include business interruption coverage, which replaces lost income when a covered event forces you to pause operations.
That is a solid foundation. But a BOP is not a complete commercial insurance program. Knowing exactly what it covers — and where it stops — is the difference between a claim that gets paid and one that doesn't.
What a BOP Actually Covers
Commercial Property Coverage
The property component covers your physical assets: the building you own or lease, your equipment, furniture, inventory, and other business personal property. If a fire, windstorm, theft, or vandalism damages those assets, the policy pays to repair or replace them up to your policy limit.
One term worth understanding: replacement cost versus actual cash value. Replacement cost pays what it costs to buy a new equivalent item today. Actual cash value deducts depreciation — so a five-year-old server rack worth $12,000 new might only pay out $4,000. Which basis your BOP uses matters significantly when a claim arrives.
General Liability Coverage
General liability insurance — often called GL — covers your legal obligation to pay damages when your business causes bodily injury or property damage to a third party. A client trips on a loose cable in your office. A contractor accidentally breaks a customer's equipment. Your product causes property damage at a client's site. GL responds to those claims and covers both the settlement and defense costs — meaning the legal fees to defend you even if the claim is ultimately dismissed.
GL also typically includes personal and advertising injury coverage, which protects against claims of libel, slander, copyright infringement, or defamation arising from your advertising.
Business Interruption Coverage
When a covered property loss forces you to close temporarily, business interruption coverage — sometimes called business income coverage — replaces your lost net income and pays continuing operating expenses like rent, payroll, and utilities during the restoration period.
The key phrase is "covered property loss." Business interruption only responds if the underlying cause is something your property coverage covers. A flood that isn't covered by your property policy won't trigger business interruption either.
What a BOP Does Not Cover
This is where most businesses get surprised. A BOP was built for straightforward physical and liability risks. It was not built for the complexity of a modern mid-market company.
Cyber Liability
A BOP does not cover a data breach, ransomware attack, or network intrusion. If your systems are compromised and you owe notification costs, regulatory fines, or third-party damages to affected clients, your BOP will not respond. Cyber liability requires a standalone cyber insurance policy. For any business that stores customer data, processes payments, or runs on cloud infrastructure, a BOP without cyber coverage is a meaningful gap.
Professional Liability (Errors and Omissions)
If a client claims your work caused them financial harm — a missed deadline, a software bug, a flawed consulting recommendation — your BOP won't cover it. General liability covers physical damage. Professional liability, also called errors and omissions or E&O, covers financial harm caused by your professional services. These are two distinct coverage lines. A services business carrying only a BOP has no protection against its most likely category of claim.
Directors and Officers Liability
A BOP does not cover claims against your company's leadership for decisions made in their capacity as directors or officers. Investor disputes, regulatory investigations, and shareholder actions fall under D&O insurance — directors and officers liability coverage. If you've raised outside capital or have a formal board, a BOP leaves that exposure entirely unaddressed. D&O insurance is a separate policy line and one of the most commonly overlooked gaps at growing companies.
Workers' Compensation
A BOP does not cover employee injuries on the job. Workers' compensation is a legally required, separate coverage line in almost every state. If an employee is injured while working, your BOP will not respond. Workers' comp covers medical expenses and lost wages for injured employees and protects the business from related lawsuits.
Commercial Auto
Vehicles used for business purposes require commercial auto insurance. A BOP does not extend to business vehicles, and a personal auto policy will not respond to an accident that occurs during commercial use. This gap catches businesses off guard — particularly when employees use personal vehicles for deliveries or client visits.
Flood and Earthquake
Standard commercial property coverage, including the property component of a BOP, excludes flood and earthquake damage. Both require separate policies or endorsements. If your building sits in a flood zone or a seismically active region, you need to address this explicitly.
Who Qualifies for a BOP
Not every business is eligible. Carriers typically offer BOPs to businesses that meet certain size and risk thresholds: generally fewer than 100 employees, annual revenue under a carrier-defined ceiling, and operations in lower-hazard industries. Retail, professional services, small offices, and light service businesses are common candidates.
Higher-risk industries — construction, manufacturing, wholesale distribution — often don't qualify and need standalone commercial property and general liability policies instead.
What Most Businesses Get Wrong About BOPs
- Treating a BOP as a complete insurance program. A BOP handles a narrow slice of commercial risk. It does not touch cyber, professional liability, D&O, employment practices, workers' compensation, or commercial auto. A company with $20 million in revenue, a SaaS product, and a four-person board that carries only a BOP has significant uninsured exposure across multiple lines.
- Underinsuring property. Businesses frequently set property limits based on what they paid for assets years ago — not what it would cost to replace them today. After years of inflation in equipment and construction costs, that gap can be substantial.
- Missing the business interruption waiting period. Most business interruption coverage includes a waiting period — typically 48 to 72 hours — before coverage begins. A short closure might not trigger coverage at all.
- Overlooking exclusions for specific perils. Water damage from a burst pipe is typically covered. Flood damage from external water is typically excluded. The distinction seems minor until you're filing a claim.
A BOP Compared to Standalone Policies
| Coverage | BOP | Standalone Policy Required |
|---|---|---|
| Commercial property | Included | Not needed if BOP qualifies |
| General liability | Included | Not needed if BOP qualifies |
| Business interruption | Usually included | Endorsement if not in BOP |
| Cyber liability | Not covered | Yes |
| Professional liability (E&O) | Not covered | Yes |
| D&O liability | Not covered | Yes |
| Workers' compensation | Not covered | Yes (legally required) |
| Commercial auto | Not covered | Yes |
| Flood / earthquake | Not covered | Yes |
When a BOP Is Not Enough
A BOP makes sense as a starting point for smaller businesses with straightforward operations. The moment your business handles sensitive data, delivers professional services, employs people, operates vehicles, or has leadership accountable to outside investors, a BOP alone is insufficient.
The businesses most at risk are the ones that have grown past a BOP's coverage scope without updating their program to match. Revenue crosses $10 million. Headcount grows. A funding round closes. The risk profile changes. The policy doesn't. That mismatch is where coverage gaps form quietly and only surface when a claim arrives.
A complete commercial insurance program for a mid-market company typically includes a BOP or standalone GL and property, plus cyber, E&O, D&O, workers' comp, and commercial auto at minimum. The right combination depends on your industry, revenue, headcount, and specific exposures.
The Bottom Line
A BOP covers commercial property damage, general liability, and business interruption in one policy. It is a useful starting point and genuinely efficient for businesses that qualify. But it does not cover cyber incidents, professional errors, leadership liability, employee injuries, business vehicles, or natural disasters like flood and earthquake.
If your business has grown, added employees, raised capital, or expanded its digital footprint, your insurance program needs to reflect that. A BOP is not a proxy for a complete commercial program. It is one component of one.
Aiden builds a full risk profile for your business in minutes, analyzes 140+ signals across your actual exposure, and places coverage across 100+ carriers.
Frequently Asked Questions
What does a BOP cover?
A Business Owner's Policy combines commercial property insurance, general liability insurance, and usually business interruption coverage into one policy. It covers physical damage to your business property, third-party bodily injury and property damage claims, and lost income when a covered event forces you to pause operations.
Does a BOP cover cyber attacks?
No. A BOP does not cover data breaches, ransomware, or other cyber incidents. Cyber liability requires a separate standalone policy. Any business that stores customer data or operates on networked systems should treat cyber coverage as a distinct and necessary line.
Does a BOP cover employees?
No. A BOP does not include workers' compensation, which covers employee injuries on the job. Workers' compensation is a legally required, separate coverage line in nearly every state and must be purchased independently.
Who qualifies for a BOP?
BOPs are generally available to small to mid-size businesses in lower-hazard industries with fewer than 100 employees and revenue below a carrier-defined threshold. Higher-risk industries like construction and manufacturing often don't qualify and need standalone commercial property and general liability policies instead.
Is a BOP enough for a growing business?
Usually not. Once a business handles sensitive data, delivers professional services, employs people, operates vehicles, or has outside investors, a BOP alone leaves significant gaps. A complete commercial program typically adds cyber, E&O, D&O, workers' comp, and commercial auto on top of the BOP foundation.
What is the difference between a BOP and general liability insurance?
General liability is one component of a BOP. A BOP bundles general liability with commercial property coverage and business interruption. Buying standalone general liability gives you only the liability protection — without the property or income coverage a BOP includes.
Does a BOP cover professional mistakes?
No. A BOP's general liability component covers physical injury and property damage to third parties. It does not cover financial harm caused by professional errors, bad advice, or service failures. That exposure falls under professional liability insurance — also called errors and omissions, or E&O — which requires a separate policy.
Want a risk assessment for your business?
Aiden's AI risk engine analyzes 140+ data vectors to surface coverage gaps before a claim forces the question.
Analyze Your Risk →

