What a Business Owners Policy Doesn't Cover: BOP Exclusions Explained

A business owners policy, or BOP, bundles commercial property coverage, general liability, and business income protection into one contract, but it deliberately leaves out several major exposures. A standard BOP does not cover workers compensation, business vehicles, professional mistakes, or most flood and earthquake damage, and any cyber coverage it includes is usually thin. The exclusions list matters as much as the coverage list, because the gaps are where uncovered losses live.

This guide walks through what a BOP actually includes, the exposures it never touches, the property losses it excludes, and how to close each gap before it becomes a claim.

What does a business owners policy actually include?

A BOP typically combines three coverages: property insurance for your building and business personal property, general liability for injuries or property damage your operations cause to others, and business income coverage that replaces lost income when a covered property loss interrupts operations. Carriers built the BOP for small and mid-size businesses with relatively predictable risks, which is why it is efficient to quote and price.

That efficiency comes from standardization. Because the BOP is a packaged product, carriers manage their exposure by excluding entire categories of risk and capping others with a sublimit, a smaller internal limit that applies only to a specific type of loss. Those boundaries are where owners get surprised, usually after a loss.

Which coverages does a BOP leave out?

Workers compensation, commercial auto, professional liability, and employment-related claims all sit outside a standard BOP, and each generally needs its own policy or endorsement.

• Workers compensation. Employee injuries are excluded from standard BOPs. Nearly every state requires a separate workers compensation policy once you have employees; Texas is the notable exception, though many Texas employers carry it anyway.
• Commercial auto. Vehicles owned or leased by the business are excluded, and personal auto policies typically exclude business use as well. Owned vehicles need a commercial auto policy, and businesses whose employees drive personal cars for work should ask about hired and non-owned auto coverage.
• Professional liability. The liability section of a BOP responds to bodily injury and property damage, not to claims that your advice, design, or service caused a client financial harm. Firms that sell expertise need professional liability coverage, often called errors and omissions insurance.
• Employment and management claims. Wrongful termination, discrimination, and harassment allegations are usually excluded from the base form, though some carriers offer a limited employment practices endorsement. Claims against your leadership team over management decisions sit outside the BOP as well; standalone employment practices liability and directors and officers policies are built for both.

What property losses does a BOP exclude?

Flood, earthquake, wear and tear, equipment breakdown, and most theft-of-money losses are excluded or tightly capped on a standard BOP. Most BOPs are written on a special form basis, meaning they cover any cause of loss that is not specifically excluded, so the exclusions section is where the policy's real boundaries sit.

• Flood. Rising water and surface water are excluded from nearly every BOP. Flood protection comes from the National Flood Insurance Program or the private flood market as a separate purchase.
• Earthquake and earth movement. Shake damage, landslide, and sinkhole losses are typically excluded, though some carriers offer the coverage back by endorsement in lower-risk regions.
• Wear, tear, and maintenance. Gradual deterioration, rust, corrosion, and losses caused by deferred maintenance are not covered on standard property forms.
• Equipment breakdown. Mechanical and electrical failure is excluded on many base forms. Carriers commonly sell it back as an endorsement, which matters for restaurants, medical practices, and any business dependent on specialized machinery.
• Money, securities, and employee theft. Cash and employee dishonesty losses are either excluded or subject to small sublimits. Businesses handling meaningful cash volume usually need separate crime coverage.

Many of these gaps close through an endorsement, a policy amendment that adds back or broadens coverage for additional premium. The catch is that endorsements have to be requested before the loss, which is why reading the exclusions at purchase matters more than reading them at claim time.

Does a BOP cover cyber incidents?

Usually not in any meaningful way. Some BOPs exclude cyber losses entirely, while others include a data breach sublimit that is small relative to the actual cost of forensics, customer notification, and lost income after an attack. Ransomware, funds transfer fraud, and social engineering losses generally fall outside the base form altogether.

Businesses that store customer data, take payments online, or depend on their systems to operate should price a standalone cyber liability policy rather than relying on whatever the BOP includes. The application process also tends to sharpen security practices, because carriers ask hard questions about multifactor authentication and backups.

How do you fill the gaps a BOP leaves?

Start by mapping each exclusion against how your business actually operates, then close the gaps in order of severity.

1. Read the declarations and exclusions pages together. The declarations show what you bought; the exclusions show what you did not. Ask your broker to walk through both, line by line.
2. Add endorsements where your carrier offers them. Equipment breakdown, hired and non-owned auto, and crime coverage are commonly available add-ons that cost far less than the losses they absorb.
3. Buy standalone policies for the always-excluded lines. Workers compensation, commercial auto, professional liability, and cyber each need their own placement when the exposure exists.
4. Reassess annually. A BOP that fit at startup often lags the business within a few years. If you have outgrown the bundle, compare it against an unbundled program; our guide to BOPs versus package policies covers when to make that move.

Where a broker fits in

Exclusions are not a flaw in the BOP; they are the design. The policy works well when the excluded exposures are covered somewhere else, and it becomes a problem only when everyone assumes the bundle covers more than it does. A broker's job is to read the form, map the exclusions against your operations, and structure the additional coverages so nothing important falls in between. If you want a second set of eyes on what your BOP actually excludes, talk to Velora Risk Partners.

Frequently asked questions

Does a business owners policy cover workers compensation?

No. Workers compensation is excluded from standard business owners policies. It is a separate line of coverage, and most states require employers to carry it once they have employees. If your business has staff, plan on a standalone workers compensation policy alongside the BOP, priced on payroll and job classifications.

Does a BOP cover flood or earthquake damage?

Generally no. Flood and earth movement are standard exclusions on business owners policies. Flood coverage is purchased separately through the National Flood Insurance Program or private flood insurers, and earthquake coverage is available by endorsement or standalone policy depending on the carrier and region. Check both if your property sits in an exposed area.

Can cyber coverage be added to a BOP?

Sometimes. Many carriers offer a data breach endorsement, but the limits are usually small compared with the real cost of a cyber incident, which can include forensics, customer notification, ransomware response, and lost income. Businesses that depend on their systems or store customer data are typically better served by a standalone cyber policy.

Does a BOP cover employees driving their own cars for work?

Not automatically. A business owners policy excludes auto liability, and an employee's personal policy may not fully protect the business if the employee causes an accident while running a work errand. Hired and non-owned auto coverage, available as an endorsement or within a commercial auto policy, is the usual fix.

What is the difference between an exclusion and a sublimit?

An exclusion removes a type of loss from coverage entirely, so the policy pays nothing for it. A sublimit keeps the loss covered but caps payment at a smaller amount than the overall policy limit. Both appear throughout business owners policies, and both deserve attention when you review a quote or renewal.