Umbrella vs Excess Liability: What's the Difference?

Umbrella and excess liability are the two terms most frequently confused in insurance compliance. They both provide additional limits above primary policies. They both appear in the same section of an ACORD 25 certificate. And in many conversations, people use the terms interchangeably.

But they are different products with different scopes — and the difference matters when you are evaluating whether a vendor's coverage actually protects your organization.

---

The Core Difference

An umbrella liability policy does two things: it provides excess limits above underlying primary policies (CGL, Auto, Employers' Liability), and it provides broader coverage than the underlying policies, subject to its own terms and a self-insured retention. An umbrella can respond to claims that the primary policies exclude.

An excess liability policy does one thing: it provides additional limits above underlying primary policies, following the same terms and conditions as those underlying policies. If the primary policy excludes a claim, the excess policy excludes it too. It does not broaden coverage.

Think of it this way:

• Umbrella = higher limits + broader coverage
• Excess = higher limits only

Drop-Down Coverage

The distinguishing feature of an umbrella policy is its drop-down capability. When a claim falls within the umbrella's coverage but is excluded by the underlying primary policy, the umbrella "drops down" and responds as if it were a primary policy — subject to the self-insured retention (SIR).

Example: A vendor's employee is traveling internationally and causes bodily injury to a third party. The vendor's domestic CGL policy excludes international claims. But the vendor's umbrella policy, which has broader territorial coverage, drops down to cover the claim. The vendor pays the SIR out of pocket, and the umbrella pays the rest up to its limit.

An excess policy would not respond in this scenario because it follows the terms of the underlying CGL, which excludes international claims.

When the Distinction Matters for Compliance

For most routine vendor relationships, the practical difference between umbrella and excess is minimal. The claims that trigger drop-down coverage are relatively uncommon, and the primary policies cover the majority of exposures.

The distinction becomes important when:

• Vendors operate internationally and their primary policies have territorial limitations.
• Vendors have unusual exposures not fully covered by standard primary forms.
• Your requirement set demands specific coverage breadth — some programs explicitly require umbrella (not excess) for high-risk vendors.
• A claim arises in a coverage gap between primary policies — an umbrella may cover it, while an excess policy will not.

---

Self-Insured Retention (SIR) Explained

Most umbrella policies — and some excess policies — include a Self-Insured Retention. The SIR is a dollar amount the insured must pay out of pocket before the umbrella or excess policy begins to pay. It functions similarly to a deductible, but with an important distinction: with a deductible, the insurer pays the claim and then bills the insured for the deductible amount. With an SIR, the insured must pay the retention amount first, and the insurer's obligation to pay does not begin until the SIR is satisfied.

Common SIR Amounts

Why SIR Matters for Compliance

The SIR creates a coverage gap at the start of the umbrella's drop-down coverage. If a claim falls within the umbrella's broader coverage but outside the primary policy's coverage, the insured must pay the SIR before the umbrella responds. If the insured cannot afford to pay the SIR, the umbrella insurer has no obligation to pay — and the claim goes unpaid.

For compliance purposes:

• Always check the SIR amount on the ACORD 25. It appears in the Umbrella/Excess Liability section.
• Set a maximum acceptable SIR in your requirements. $10,000 is a common threshold for standard vendor relationships. For small vendors, consider requiring a $0 SIR.
• If the SIR is blank on the certificate, it is likely $0, but verify with the vendor or their broker.
• A high SIR from a financially strong vendor is less concerning than a high SIR from a small, thinly capitalized vendor.

---

How Umbrella and Excess Policies Stack on Primary Coverage

Both umbrella and excess policies sit above ("excess of") primary liability policies. The standard underlying policies are:

1. Commercial General Liability (CGL)
2. Commercial Auto Liability
3. Employers' Liability (Part B of Workers' Compensation)

When a claim exhausts the primary policy's per-occurrence limit, the umbrella or excess policy begins to pay, up to its own limit.

Example: A vendor has $1M CGL each occurrence and a $5M umbrella. A third-party bodily injury claim results in a $3.5M judgment. The CGL pays $1M. The umbrella pays $2.5M. The vendor's effective coverage for this claim is $6M.

When the umbrella sits excess of multiple primary policies, it applies to whichever underlying policy responds to the claim. An auto accident triggers the auto policy first, then the umbrella. A workplace injury triggers employers' liability first, then the umbrella. A slip-and-fall triggers CGL first, then the umbrella.

---

Supplementation: When Lower Primary + Umbrella Meets the Requirement

One of the most practical questions in COI compliance is whether a vendor can satisfy a primary limit requirement by combining a lower primary limit with an umbrella or excess policy. This is called supplementation.

The Scenario

Your requirement: CGL each occurrence of $1,000,000. Vendor's coverage: CGL each occurrence of $500,000, plus a $5,000,000 umbrella excess of the CGL.

Does this vendor meet your requirement?

The Arguments

For accepting supplementation: The vendor has $5.5M in effective CGL coverage ($500K primary + $5M umbrella). This exceeds the $1M requirement by a wide margin. The umbrella is specifically designed to supplement primary limits. Rejecting this vendor makes no practical risk management sense — you would be turning away $5.5M in coverage to hold out for $1M from a single primary policy.

Against accepting supplementation: The umbrella may have a different insurer than the primary. Coordination between two insurers can slow claims response. The umbrella may have an SIR that creates a gap. And if the umbrella is cancelled or non-renewed, the vendor drops to $500K primary — well below the requirement.

Best Practice

Most modern compliance programs accept supplementation, with conditions:

1. The umbrella or excess must sit directly above the deficient primary policy. The umbrella schedule of underlying insurance should list the specific primary policy.
2. The combined limits must meet or exceed the requirement. $500K primary + $5M umbrella = $5.5M effective, which satisfies a $1M requirement.
3. The umbrella or excess must include additional insured status if required on the underlying primary.
4. The SIR must be within your acceptable threshold.
5. Document your supplementation policy in writing so that decisions are consistent across all vendors.

When Not to Accept Supplementation

Some situations warrant stricter primary limit requirements:

• Contractual requirements from your clients or lenders that specifically mandate primary policy limits (not combined limits).
• Tier 1 / critical risk vendors where you want the certainty of a high primary limit without relying on the umbrella.
• Vendors with umbrella policies from low-rated carriers (below AM Best A- VII).

---

Verifying Umbrella and Excess on a Certificate

The ACORD 25 certificate has a dedicated section for Umbrella/Excess Liability. Here is what to check:

Type

The form includes checkboxes for Umbrella and Excess. Verify which one the vendor has. If your requirements specify umbrella, an excess policy does not satisfy the requirement (though many programs accept either).

Each Occurrence and Aggregate

Like CGL, umbrella and excess policies have an each occurrence limit and an aggregate limit. Verify that both meet your requirements. A $5M umbrella with a $5M aggregate means that once $5M in total claims are paid during the policy period, the umbrella is exhausted.

SIR / Retention

Check the self-insured retention amount. If it exceeds your threshold, flag it as a gap.

Underlying Policies

The umbrella/excess section on the ACORD 25 does not always identify the specific underlying policies. If supplementation is in play (the vendor is relying on the umbrella to meet a primary limit requirement), request a copy of the umbrella's schedule of underlying insurance to confirm that the specific deficient primary policy is listed.

Additional Insured

If your requirements call for additional insured status on the umbrella, verify that it is noted on the certificate. Additional insured status on the CGL alone does not automatically extend to the umbrella — it must be specifically endorsed on the umbrella policy or the umbrella must follow form to the CGL's additional insured endorsement.

---

Practical Scenarios

Scenario 1: The Adequate Vendor

Requirement: CGL $1M/$2M, Umbrella $5M. Vendor provides: CGL $1M/$2M (occurrence), Umbrella $5M/$5M, SIR $0, Additional Insured on both CGL and Umbrella. Result: Compliant. This is the clean, straightforward case.

Scenario 2: The Supplementation Case

Requirement: CGL $1M/$2M. Vendor provides: CGL $500K/$1M, Excess $10M/$10M (follow-form), SIR $0. Result: Compliant if your program accepts supplementation. The combined coverage is $10.5M/$11M, far exceeding the requirement.

Scenario 3: The High-SIR Risk

Requirement: Umbrella $5M, SIR maximum $10K. Vendor provides: Umbrella $5M/$5M, SIR $50,000. Result: Non-compliant. The $50K SIR exceeds the maximum. The vendor must either reduce the SIR or obtain a policy with a lower retention.

Scenario 4: The Missing AI Status

Requirement: Additional insured on CGL and Umbrella. Vendor provides: Additional insured on CGL. Umbrella does not note additional insured status. Result: Non-compliant on umbrella AI. The vendor needs to have their broker endorse the umbrella to include additional insured status or confirm that the umbrella follows form to the CGL's AI endorsement.

---

The Bottom Line

Umbrella policies provide higher limits and broader coverage. Excess policies provide higher limits only. Both serve a critical function in the risk transfer chain, and both appear on nearly every COI for vendors performing medium-to-high-risk work.

For compliance purposes, the key verification points are: the type (umbrella vs. excess), the limits (each occurrence and aggregate), the SIR (within your threshold), additional insured status (if required), and whether the policy properly sits excess of the underlying primary policies.

Get these right, and the umbrella/excess layer does its job — providing the financial buffer that protects your organization when a claim exceeds primary limits.

---

Automate Umbrella and Excess Verification

Inori automatically detects whether a policy is umbrella or excess, verifies limits against your requirements, checks the SIR against your threshold, and confirms additional insured status — across every vendor in your portfolio.

See how Inori handles umbrella and excess verification