Company: Frix Labs LLC (“Frix”)
Product: Frix Law (https://frixlaw.com · https://app.frixlaw.com)
Document type: Customer-facing insurance and security posture summary
Effective date: August 1, 2026
Last updated: August 10, 2026
Security / COI contact: security@frixlaw.com
This document describes Frix Labs LLC’s cyber and technology liability insurance posture and how customers may request evidence of coverage. It is not the insurance policy itself, does not amend policy terms, and does not create coverage for customers as additional named insureds unless expressly endorsed by the insurer.
1. Why this matters for law firms
Frix Law processes sensitive Customer Data (intake calls, medical and accident facts, matter documents). Customers reasonably expect that Frix Labs LLC maintains:
- Security controls appropriate to that risk (see DPA Section 6);
- Financial capacity via insurance to respond to covered cyber incidents; and
- A process to notify and cooperate under the DPA if a Personal Data Breach occurs.
2. Coverage Frix maintains
Frix Labs LLC maintains insurance with reputable carriers at not less than the following minimum limits during the term of paid Service:
| Coverage type | Minimum limit (each occurrence / aggregate) | Notes |
|---|---|---|
| Cyber liability / Technology Errors & Omissions | USD $1,000,000 / USD $1,000,000 | Privacy liability, network security, tech E&O |
| Privacy and network security | Included in the cyber form | Unauthorized access and related coverages subject to policy terms |
| Commercial general liability (CGL) | USD $1,000,000 / USD $2,000,000 | Standard third-party bodily injury and property damage |
| Workers’ compensation | Statutory | Where required by law |
Limits, retentions, exclusions, and territorial scope are governed solely by the policy issued by the carrier. Coverage may change at renewal; this page will be updated when material changes occur. Current Certificates of Insurance are available on request as described below—we do not publish full policy numbers on this public summary.
3. What cyber policies typically respond to
Subject to terms and exclusions, tech E&O and cyber forms commonly address:
- Claims alleging negligent failure of security controls leading to unauthorized disclosure of Customer Data;
- Claims alleging errors in provision of professional technology services;
- Certain regulatory defense costs and fines where insurable by law;
- Incident response, forensics, and notification costs (first-party coverages), if included in the purchased form.
They typically do not cover: Customer’s own professional malpractice, Customer’s failure to obtain call-recording consent, contractual fees owed to Frix, or losses excluded by the policy.
4. Certificates of Insurance (COI)
Enterprise customers may request a Certificate of Insurance by emailing security@frixlaw.com with:
- Firm legal name and address to show as certificate holder;
- Whether an additional insured or waiver of subrogation endorsement is required (subject to carrier approval and may require underwriting);
- Bid or MSA deadline;
- Contact for delivery.
Standard COIs are issued for certificate holders as evidence of coverage only. Additional insured status for customers is not automatic and, if available, will be stated on the endorsement.
We aim to respond within five (5) business days.
5. Security controls (complementary to insurance)
Insurance is not a substitute for security. Frix Labs LLC’s control environment includes, among other measures:
- Cloud hosting with Amazon Web Services (encryption in transit; encryption at rest for primary stores);
- Access control and least-privilege production access;
- Secrets management and separation of environments;
- Logging and monitoring of critical services;
- Vendor diligence for material subprocessors;
- Incident response aligned with DPA notification timelines.
Detailed questionnaires (SIG, CAIQ, or custom) are available to enterprise prospects under NDA.
6. Incident notification
If Frix becomes aware of a Personal Data Breach affecting Customer Data, Frix will notify Customer as required by the DPA (without undue delay and within 72 hours where feasible) via the admin email on file and security@frixlaw.com workflows.
Customers should also maintain their own cyber insurance and incident plans covering their endpoints, email, and professional liability (legal malpractice), which Frix’s policy does not replace.
7. Relationship to contracts
- The Terms of Service and MSA set liability caps independent of insurance recoveries, except where an Order Form expressly ties a higher cap to maintained limits.
- Failure of an insurer to pay does not by itself create uncapped liability for Frix.
- Maintaining insurance is a contractual covenant in the MSA; lapse without replacement that reduces coverage below agreed minima is a material issue Customer may escalate under the MSA.
8. Disclaimer
This summary is for informational purposes. It does not modify any insurance policy. Only the policy issued by the carrier governs coverage. Frix Labs LLC makes no warranty that any particular claim will be covered. Customers should consult their own counsel and insurance advisors.
9. Contact
security@frixlaw.com — COIs, security reviews, incident reports
legal@frixlaw.com — contractual insurance requirements
Operator: Frix Labs LLC, United States