Everyday Business Habits That Quietly Increase Your Liability
Most liability is not created by accidents. It is created by habits: work started without a contract, a sub paid without a certificate, an operation the insurer never heard about.
- Working without a written contract is the single largest self-inflicted exposure in small business.
- Paying subcontractors without certificates of insurance shifts their liability and their premium onto you.
- Worker misclassification creates back taxes, penalties and uninsured injury claims simultaneously.
- Undisclosed operations give your carrier grounds to contest the claim that arises from them.
- Not documenting — incidents, changes, conditions, decisions — turns defensible claims into settlements.
Handshake work and vague scopes
Starting work without a signed contract, or with a one-paragraph description, is the most common and most expensive habit on this list. It creates disputes over scope, price, timeline and responsibility, and it means the record is whatever the customer remembers.
In several states it is worse than that: unlicensed or unwritten contracts can be unenforceable, meaning you cannot sue to collect.
The fix is a template with a scope, an exclusions list, a change-order process, payment terms and a termination clause. One document, used every time, including for the small jobs and the friends.
Paying subcontractors without certificates
This one habit generates three exposures: their claims can land on your policy, their payments get charged to you as payroll at audit at your class rate, and any subcontractor warranty condition on your policy is breached.
The rule that works is mechanical: no current certificate on file, no payment released. Anything softer collapses in a busy month.
Worker misclassification
Treating a worker as a 1099 subcontractor when they function as an employee — your schedule, your tools, your direction, no other clients — creates simultaneous exposure to the IRS, the state labor department, and your comp carrier.
The consequences stack: back payroll taxes with penalties, unpaid comp premium, and an uninsured claim if they are injured. In several states the owner is personally liable for the injury cost.
When the answer is ambiguous, make it unambiguous. Hire them properly, or restructure so the independence is real and documented.
Not telling your insurer what you actually do
Your policies were underwritten on the operations you described. Adding a service line, taking work in a new state, going above a height you never mentioned, or starting to use subcontractors all change the risk.
A claim arising from operations you never disclosed can be contested, and in the worst case a policy issued on a materially inaccurate application can be rescinded.
This is a five-minute email to your broker whenever anything changes. It is the cheapest risk management available and the most skipped.
Not documenting anything
No incident reports. No photographs before, during and after. No confirming email after a verbal instruction. No maintenance log. No signed change orders.
Carriers pay defense costs, and defense is only as good as the record. A claim with photographs, a dated incident report and a signed change order is defensible; the same claim with nothing gets settled.
None of it takes more than ten minutes a day, and it is the highest-return habit in this article.
The premises habits
Deferred maintenance on walkways, lighting, stairs and parking areas. No documented inspection routine. Ignored complaints in writing — a customer email about a loose step that goes unanswered is the best evidence a plaintiff will get.
Also: no written employee handbook, inconsistent discipline and termination, unaddressed harassment complaints, and inaccurate exempt/non-exempt classification. All four are employment practices exposures that general liability does not touch.
The digital habits
No multi-factor authentication. No offline backups. No call-back verification for changes to payment instructions. Client data in consumer AI tools. Reused passwords across the business.
These are now underwriting questions, not just IT questions — carriers decline cyber coverage over them. And business email compromise, the most common serious loss for small businesses, is prevented almost entirely by MFA plus a call-back rule.
The fix list, ranked
Written contract on every job. Certificates before payment on every sub. MFA and a payment-change call-back rule. Ten minutes of documentation a day. And an email to your broker whenever the business changes.
None of these cost money. All of them are what separates a business that survives a claim from one that is defined by it.