Your fifth employee is about to start on Monday. She lives in California, while the rest of your team is spread across Texas, Colorado, and New York. Payroll is set up through your PEO, laptops have been shipped, and onboarding is ready to go. Then your broker asks a simple question: "Have you updated your insurance for your new states?"
It's easy to assume remote work doesn't really change your insurance needs. In reality, the biggest changes aren't caused by employees working from home, but by hiring people in new states, growing headcount, and relying on different devices and employment arrangements. Those milestones can affect everything from Workers' Compensation and Employment Practices Liability Insurance (EPLI) to Cyber Insurance.
This guide explains what actually changes as your remote team grows, which coverages deserve another look, and the milestones that should prompt a conversation with your broker.
Key Takeaways
- Coverage needs track headcount and geography, not whether your team is remote. A small, single-state remote team and a large, multi-state remote team face genuinely different exposures.
- Workers' Compensation follows the employee's location, not your company's headquarters. A distributed team can require coverage across several states instead of one policy.
- A PEO's EPLI is often a real benefit, but the limit is frequently shared across every client in that PEO's program, not dedicated to your company alone.
- Cyber Insurance is typically vector-agnostic (meaning it doesn't care where an attack started), but exclusions tied to device ownership or encryption can quietly cut coverage exactly where remote teams are most exposed.
- The right time to recheck your coverage is a hiring or geography milestone: your first out-of-state hire, your first California employee, or crossing five or ten employees.
Does Remote Work Itself Change What Insurance You Need?
Remote work doesn’t directly change what insurance you need. What changes your insurance needs is how your business grows: how many people you employ, where they're located, and how your operations evolve. A fully remote team of two employees working from the same state presents a very different risk profile than a twenty-person company with employees spread across six states, even though both businesses would describe themselves as "remote."
As your workforce expands geographically, your insurance program has to keep pace. Workers' Compensation follows the employee's location, Employment Practices Liability Insurance (EPLI) exposure grows with headcount, and a Business Owners Policy (BOP) originally written for a single-location company may no longer reflect the way the business actually operates. The insurance that worked at formation isn't always the insurance that supports the company a few years later.
Does Workers' Compensation Cover Remote Employees?
Generally yes, but the coverage follows the employee's location instead of your company's headquarters. That single fact is the source of most of the complexity founders run into as a team spreads across states.
Workers' Compensation Follows the Employee
Workers' Comp is required in nearly every state for companies with employees, including remote ones, and it typically applies as long as the injury or illness happens in the course of doing the job.
The complication is that each state sets its own rules for coverage, and four states, Ohio, North Dakota, Washington, and Wyoming, require employers to buy Workers' Compensation Insurance exclusively through a state fund rather than a private carrier. Hire someone in one of those states and the standard "add a state to your policy" approach doesn't apply.
Small Teams Often Start With a PEO
For a very small team, dedicated Workers' Comp coverage can also be impractical for a different reason: most carriers set premium minimums that make a standalone policy expensive relative to the size of the team it's covering.
Many early-stage companies handle this by routing Workers' Compensation through a payroll provider or PEO instead, since the PEO already has real-time payroll data and can manage state-specific compliance as part of that relationship. As the team grows past that early stage, it's worth revisiting whether a standalone policy makes more sense.
Contractors and State Requirements Can Create Gaps
Workers' Com only covers W-2 employees, not independent contractors. Companies that rely on 1099 contractors instead of employees, common among hardware companies using subcontractors or agencies with a large freelance bench, don't get Workers' Compensation protection for that group by default. The standard approach is to require contractors to carry their own General Liability and Workers' Comp, with your company listed as an additional insured.
State-specific requirements can also stack on top of standard Workers' Compensation in ways that are easy to miss. New York, for example, requires employers to secure Disability Benefits and Paid Family Leave coverage for New York-based employees once that employee has worked 30 days in a calendar year, with coverage due within four weeks of that 30th day, in addition to standard Workers' Compensation. It's a small requirement that's easy to miss if nobody flags it.
Does Your PEO Already Cover EPLI?
Sometimes, but often only partially. That gap is one of the most common and least understood coverage assumptions among founders with distributed teams.
What EPLI Covers
Employment Practices Liability Insurance (EPLI) covers claims tied to the employment relationship itself: wrongful termination, discrimination, harassment, and wage and hour disputes. It's a different coverage than Workers' Compensation, which covers physical injury, and different from the General Liability endorsements some carriers bundle in.
Founders regularly assume their PEO's Workers' Comp also includes EPLI, or that a small EPLI endorsement tucked into a Business Owner's Policy is enough, and both assumptions can leave a real gap.
When Does It Make Sense to Add EPLI?
There's no single headcount at which EPLI becomes necessary. In practice, the right moment depends on the company's specific risk profile, but a few patterns hold up across a lot of distributed teams.
Some companies benefit from adding it as early as their third full-time hire. By five employees, it's worth taking seriously enough to look at how EPLI limits typically scale with headcount. EPLI is consistently one of the most active claim categories for companies once they cross that size, and the case for coverage gets stronger again as headcount approaches ten.
PEO Coverage vs. Standalone EPLI
When a PEO offers EPLI, it's important to understand exactly what you're getting. PEO-provided coverage is often less expensive than a standalone policy, but it's typically designed for a broad client base rather than your specific workforce. Just as importantly, the coverage limit is often shared across every company in the PEO's program rather than dedicated exclusively to yours.
A standalone policy costs more, but it provides a dedicated limit, greater control over how claims are handled, and policy terms tailored to your business. Neither approach is automatically better; understanding the tradeoffs before a claim arises is what matters.
Geography Can Change Your Exposure
Employment law isn't consistent across the country, and California is one of the clearest examples. Some carriers have increased EPLI retentions specifically for California-based companies regardless of their individual claims history. Even when employees are hired through a PEO or employer of record, companies that direct hiring, performance management, and termination decisions generally still retain meaningful EPLI exposure.
At a national level, the scale of employment claims has kept growing. The EEOC secured $660M for workers in fiscal year 2025 alone, its third-highest annual recovery total in recent history. That volume is one reason the coverage question is worth taking seriously well before a company feels "big enough" to need it.
Review Your Coverage When Your HR Structure Changes
One easily overlooked issue is duplicate coverage. Companies that move from a standalone policy to a PEO, or from a PEO back to managing HR internally, sometimes end up paying for both without realizing it. Any major change in your HR or payroll structure is a good opportunity to confirm exactly what coverage you have and eliminate unnecessary overlap.
Does Cyber Insurance Cover a Home Network or Personal Device?
Usually yes in principle, but the exclusions buried in some policies can undercut that coverage in exactly the situation a distributed team creates most often.
Cyber Insurance Generally Doesn't Care Where an Attack Starts
Cyber Insurance is typically vector-agnostic. Unlike a property policy, which only responds to something that happens at a specific physical location, a well-written cyber policy generally doesn't ask where an attack originated. A phishing email opened on a company laptop and one opened on a personal laptop at home are usually treated the same way.
Learn more about what Cyber Insurance covers.
The Exclusions Matter More Than the Location
The exclusions worth watching for are more specific. Some policies limit coverage to infrastructure that's owned or leased by the company, which can create real ambiguity when an incident starts on an employee's personal device rather than company-issued hardware.
Others exclude losses tied to unencrypted devices. A distributed team using a mix of personal and company devices is exactly the environment where these exclusions get tested.
The risk these exclusions are meant to guard against is real and growing. Verizon's 2025 Data Breach Investigations Report found that 46% of the compromised systems with corporate logins found in infostealer credential logs were non-managed devices, most likely personal computers used under BYOD arrangements, compared to 30% that were enterprise-licensed devices. It also found a sharp rise in attacks against remote access infrastructure like VPNs and edge devices, which jumped to 22% of vulnerability-exploitation incidents, up from just 3% the year before.
When deciding between issuing company laptops and allowing employees to use their own devices, it's worth reading the exclusion language in a Cyber policy rather than assuming "we have Cyber Insurance" settles it.
Do General Liability and Business Property Insurance Cover a Home Office?
Not automatically. Business Property and General Liability work differently, and both, along with an employee's own Homeowners policy, tend to leave gaps around remote work worth knowing before you need to rely on any of them.
- Business Property Insurance is generally written around a company's physical premises. When company-owned equipment, laptops, monitors, specialized hardware, is used at an employee's home instead, that equipment isn't always automatically covered unless the policy specifically extends to property used offsite. It's worth confirming this explicitly rather than assuming it's included.
- General Liability Insurance still matters for a fully remote company, even one with no physical office at all. If a client or vendor visits an employee's home office and is injured, or if the business is accused of something like advertising injury, General Liability responds the same way it would for a company with a traditional office. Being remote doesn't remove this exposure. It just changes where it can show up.
When Should You Recheck Your Coverage as Your Remote Team Grows?
A few moments are worth treating as automatic checkpoints:
- Your first out-of-state hire is a good time to confirm Workers' Compensation is set up correctly for that state, including any state-specific add-ons like New York's disability insurance requirement.
- Your fifth employee is a reasonable point to revisit Employment Practices Liability Insurance, and your first California-based hire is worth a second look at EPLI specifically, given how differently that state is underwritten.
- Crossing into a genuinely multi-state footprint of six or more states with real headcount in each is a good trigger to confirm your Business Owner's Policy still fits the business, since a policy that worked at formation can struggle to survive underwriting at renewal once the company has outgrown it.
None of this requires an annual insurance audit ritual. It requires noticing when the business itself has changed shape, and treating that as the signal to look again.
Keep Your Coverage Aligned With Your Team
Remote work doesn't fundamentally change the insurance your business needs. Growth does. Every new state, new employee, and new way of working changes your exposure a little, and over time those changes add up. Reviewing your coverage at the same milestones you use to scale the business helps ensure your insurance grows alongside the company, instead of falling behind it.
Frequently Asked Questions
Do you need Workers' Compensation Insurance for an employee who lives in a different state than your company's headquarters?
Generally yes. Workers' Compensation Insurance is tied to the state where the employee actually works, not where your company is headquartered. Depending on the state, you may need to add that state to an existing policy, obtain coverage through a state fund, or route it through a PEO or payroll provider that already handles multi-state compliance.
Does your PEO's EPLI coverage protect your company the same way a standalone policy would?
Often it provides real coverage, but frequently at a limit shared across every other client in that PEO's program rather than a dedicated limit for your company, and with terms that are generic rather than tailored to your specific workforce. A standalone policy costs more but gives you a dedicated limit and more control over how a claim is handled.
At what headcount should you add Employment Practices Liability Insurance?
There's no single universal number. Some companies benefit from adding it as early as their third full-time employee. It becomes a stronger consideration by five, and the case builds further as headcount approaches ten. Employees based in California specifically tend to lower that threshold given how that state is underwritten.
Does Cyber Insurance cover an incident that starts on an employee's personal laptop or home Wi-Fi?
Usually yes in principle, since Cyber Insurance is typically vector-agnostic. Watch for two exclusions specifically: policies that limit coverage to company-owned infrastructure, and exclusions for unencrypted devices, both of which can matter more once personal devices are part of the mix.
Do independent contractors need to be covered under your Workers' Compensation policy?
No. Workers' Compensation Insurance covers W-2 employees only. Companies that rely on 1099 contractors should require those contractors to carry their own General Liability and Workers' Compensation coverage, with the company listed as an additional insured.
Do you need General Liability coverage if your company has no physical office?
Yes. General Liability Insurance protects against bodily injury, property damage, and advertising injury claims regardless of whether your company has a physical office. A fully remote company still faces these exposures through client interactions, marketing, and situations like a client visiting an employee's home office.
Vouch Specialty Insurance Services, LLC (CA License #6004944) is a licensed insurance producer in states where it conducts business. A complete list of state licenses is available at vouch.us/legal/licenses. Insurance products are underwritten by various insurance carriers, not by Vouch. This material is for informational purposes only and does not create a binding contract or alter policy terms. Coverage availability, terms, and conditions vary by state and are subject to underwriting review and approval.
.png)
