What types of insurance does a small life sciences company need?

There is no single "life sciences insurance policy." A small operator buys a program - a stack of distinct lines, each answering a specific exposure - and the right stack depends on the sub-vertical (biotech, CRO, CDMO, medical device, diagnostic lab, compounding pharmacy) and the company's stage.

The most useful way to think about it is by trigger: each line gets added when a specific event happens (first employee, first raise, first product, first trial, first contract that dictates limits), not at an arbitrary revenue threshold. A pre-clinical biotech with three employees and a CDMO doing $8M in contract revenue need very different programs even though both are "small."

General liability (CGL): third-party bodily injury and property damage - the baseline policy nearly every landlord, contract, and credentialing platform requires. Usually written at $1M per occurrence / $2M aggregate.

Property / business personal property: covers lab equipment, instruments, inventory, and tenant improvements. For operators with specialized equipment or temperature-sensitive inventory, generic business property is often inadequate - equipment breakdown and spoilage/cold-chain extensions matter.

Workers compensation: required by statute in nearly every state the moment you have employees (Texas is the notable non-subscriber exception, which is its own decision). Class codes for lab and research staff differ from manufacturing or field staff, and miscoding is a common premium error.

Directors & officers (D&O): protects the company and its board/officers against management-liability claims. The trigger is outside capital - the moment you take institutional or angel money, investors typically require D&O, and it becomes load-bearing again at financing rounds, M&A, and IPO readiness.

Products liability and/or professional liability: products liability covers harm caused by a finished product (a device, a compounded preparation, a manufactured drug); professional liability (E&O) covers harm caused by a service or advice (a CRO running a trial, a lab returning a result). Which is primary depends on whether you make a thing or perform a service - and contract manufacturers and outsourcing facilities need products as the primary line, often at $5M-$10M when hospital or sponsor contracts demand it.

Clinical trial liability: a distinct line covering subject injury in human studies, frequently required by the trial protocol, the IRB, and the sponsor MSA. The trigger is first-in-human - do not assume general liability responds to trial-subject injury, because it generally does not.

Cyber liability: covers breach response, notification, and liability for compromised data. The trigger is holding sensitive data - patient/PHI, clinical trial data, or proprietary research. A small company with a single laptop full of trial data has a real cyber exposure.

An umbrella or excess policy sits on top of the underlying general, products, and (sometimes) auto lines and raises the effective limit. Small operators rarely buy it for its own sake - they buy it because a sponsor MSA, a hospital purchase contract, or a commercial lease specifies a combined limit (commonly $5M, $10M, or more) that the primary policies alone do not reach.

Because the requirement is contract-driven, the right umbrella limit is whatever your largest contract requires, not a round number chosen in advance. This is one of the most common places a small company is found non-compliant at contract-signing - the umbrella was sized to last year's biggest contract, not this year's.

A practical order for most early-stage operators: (1) general liability + property + workers comp as the operating floor; (2) D&O when the first outside capital arrives; (3) products or professional liability before revenue from a product or service; (4) clinical trial liability before first-in-human; (5) cyber once you hold meaningful data; (6) umbrella when a contract requires a limit the primary lines can't reach.

The two most common small-company mistakes are buying a generic business-owner's policy that excludes the life-sciences exposures that actually matter (products, professional, clinical trial), and discovering a coverage or limit gap at contract-review time instead of before. Running a sponsor MSA, GPO supplier agreement, or hospital purchase contract against the current program before signing catches both.