What Your IP Insurance Policy Actually Excludes: A Risk Audit Every Mid-Market Company Needs to Conduct

For many mid-market executives, the purchase of an intellectual property insurance policy represents a moment of genuine relief. The reasoning is intuitive: a threat exists, a product exists to address it, and the transaction feels like a responsible transfer of risk. The policy sits in a filing cabinet or a compliance folder, and the subject moves off the agenda.

That confidence, however, is frequently misplaced.

The intellectual property insurance market in the United States has matured considerably over the past two decades, but it has done so in ways that favor complexity over clarity. Standard policies — particularly those sold to mid-market companies without dedicated in-house IP counsel — are riddled with exclusions, sublimits, and definitional constraints that fundamentally alter what coverage actually means in practice. The gap between what businesses believe they have purchased and what insurers are obligated to pay is, in many cases, enormous.

This article examines the most consequential of those gaps and offers a practical framework for auditing your current coverage before a dispute forces the issue.

The Misconception at the Center of Patent Indemnity Coverage

Patent indemnity insurance is often the first product mid-market companies acquire, typically prompted by a vendor contract that requires it or by a general awareness of patent assertion entity activity. The assumption underlying most purchases is straightforward: if a third party claims that your product or process infringes their patent, the insurer will cover your defense costs and any resulting damages.

In practice, the coverage is considerably narrower.

Most patent indemnity policies contain what are known as "prior knowledge" exclusions, which void coverage for any infringement claim arising from a patent that the insured was aware of — or reasonably should have been aware of — before the policy's inception date. For technology companies that have conducted freedom-to-operate analyses, the irony is significant: the very due diligence that demonstrates professional competence can be used by an insurer to argue that you had constructive knowledge of a patent, thereby triggering the exclusion.

Additionally, many policies distinguish sharply between "defense" coverage and "indemnity" coverage. A policy that covers litigation defense costs may impose a sublimit — sometimes as low as $500,000 — on actual damages paid to a prevailing plaintiff. In an era when patent damages awards routinely exceed eight figures, that sublimit is not a safety net; it is a floor with a very large hole in it.

Trade Secret Coverage: Where the Language Gets Dangerous

Trade secret protection provisions within IP insurance policies present a different but equally serious set of concerns. The passage of the Defend Trade Secrets Act in 2016 created a federal civil cause of action for trade secret misappropriation, which significantly expanded the litigation landscape. What the law expanded, however, insurance policy language has not always kept pace with.

The central definitional problem involves what qualifies as a "trade secret" under the policy. Many standard forms rely on definitions that are more restrictive than those found in the DTSA or the Uniform Trade Secrets Act as adopted in most states. Customer lists, pricing algorithms, proprietary manufacturing processes, and certain categories of software architecture may fall outside the policy's operative definition even when they would qualify for legal protection under applicable statute.

Equally problematic is the treatment of insider threats. The majority of trade secret misappropriation incidents in the United States involve current or former employees, contractors, or business partners — not external hackers. Yet a substantial number of trade secret provisions within IP policies exclude or severely limit coverage for misappropriation by individuals who had authorized access to the information at any point. Given that most corporate espionage is perpetrated by insiders, this exclusion effectively eliminates coverage for the most common and most damaging threat vector.

Litigation Coverage and the Settlement Trap

For businesses that have secured what appears to be robust IP litigation coverage, the settlement dynamics of intellectual property disputes introduce another layer of risk that policies frequently fail to address adequately.

IP litigation in the United States is extraordinarily expensive. According to data from the American Intellectual Property Law Association, the median cost of litigating a patent dispute through trial exceeds $3 million per side. Most mid-market companies cannot sustain that expenditure regardless of insurance coverage, which creates intense pressure to settle early — often before the insurer's duty to defend has been fully triggered, and sometimes on terms that the insurer has not approved.

Here, the policy language governing "consent to settle" provisions becomes critical. Many IP insurance policies require the insurer's explicit consent before the insured can enter into any settlement agreement. Failure to obtain that consent can void coverage retroactively, leaving the business responsible for both the settlement amount and the defense costs already incurred. Companies that settle quickly to avoid reputational damage or operational disruption may inadvertently forfeit the very coverage they were relying upon.

The Audit Framework: Four Questions Every Business Should Answer

Conducting a meaningful audit of your current IP insurance portfolio does not require specialized actuarial expertise, but it does require disciplined attention to the policy language itself. The following framework identifies the four most consequential areas of inquiry.

First, map your actual IP assets against your policy's defined terms. Pull the operative definitions from your policy and compare them against an inventory of your company's intellectual property. If your most valuable assets — proprietary data sets, customer relationship frameworks, internally developed software — do not fall cleanly within the policy's definitions, you have an exposure that needs to be addressed.

Second, identify every exclusion and test it against your specific risk profile. Prior knowledge exclusions, insider threat carve-outs, and geographic limitations (many US-issued policies provide limited or no coverage for infringement claims arising in foreign jurisdictions) each need to be evaluated in the context of how your business actually operates.

Third, stress-test your sublimits against realistic loss scenarios. Work with your legal counsel to identify the three most plausible IP disputes your company could face in the next 24 months. For each scenario, model the likely defense costs and potential damages exposure, then compare those figures against your actual sublimits. The difference between those numbers is your uninsured risk.

Fourth, review your consent-to-settle obligations and build a response protocol around them. Ensure that your legal, finance, and executive teams understand precisely what the policy requires before any settlement discussion can begin. The absence of a clear internal protocol is itself a coverage risk.

Closing the Gap Before the Crisis Arrives

Intellectual property disputes do not announce themselves in advance. A cease-and-desist letter, a complaint filed in the Eastern District of Texas, or the discovery that a former employee has taken proprietary source code to a competitor can materialize with little warning and demand immediate, expensive responses. The time to understand what your insurance policy actually covers is not the morning you receive that letter.

Mid-market companies that approach IP insurance as a strategic instrument — rather than a compliance checkbox — consistently demonstrate greater resilience when disputes arise. That approach begins with rigorous policy review, continues with honest gap analysis, and culminates in coverage structures that reflect the actual risk profile of the business rather than a standardized product designed for the broadest possible market.

Protecting innovation means more than securing patents and registering trademarks. It means ensuring that the financial architecture surrounding those assets is as carefully constructed as the assets themselves. The liability gap in most IP insurance portfolios is real, it is significant, and it is entirely addressable — but only for companies willing to look at the fine print before the fine print is all that matters.