UK startups selling into enterprise often hit an MSA insurance schedule or a security / vendor questionnaire that asks for proof of cover — certificates of insurance, policy schedules, and sometimes wording excerpts. The job on this page is the evidence pack: what to send, how it maps to the questionnaire, and how that differs from fundraising data-room COIs. It is not “when do I need cyber” and not a second cyber product hub.

The timing question — first enterprise MSA as a cyber trigger — lives on When UK startups need cyber insurance. Fundraising / investor data-room certificates live on Fundraising Insurance Certificates for UK Startups. Product depth for cyber sits on Cyber Insurance UK. The wider pack map is Startup Insurance UK. Use those pages for when and what product; use this page when the question is “what evidence do we attach to the MSA / security questionnaire?”

Meshed is an FCA-regulated UK broker. Mesh'd Limited trading as Meshed is authorised and regulated by the Financial Conduct Authority under firm reference number 1033248. We place commercial covers for UK limited companies, partnerships, and sole traders, from a panel of insurers. Broker fee is a flat 10%, with no admin add-ons. We do not invent “from £X a month” questionnaire packs. Named customer quotes are off.

What procurement usually means by “insurance evidence”

On a UK enterprise vendor pack, “insurance” and “security” often sit side by side. Security questions cover controls (MFA, backups, incident response, Cyber Essentials). Insurance questions ask you to show cover exists at stated types and limits. Typical asks:

• Certificate of insurance (COI) or broker evidence letter

• Policy schedule (or schedule extract) showing limits, period, named insured

• Confirmation of cover types: professional indemnity / tech E&O, cyber, public liability, employers’ liability where you have staff

• Sometimes: additional insured / noted interest wording, cancellation notice, or a short extract proving a clause exists

Procurement compares your PDF line by line against the MSA schedule. A vague “we have cyber” email usually fails. Certificates and schedules usually pass the first gate.

This page vs cyber-timing / fundraising / cyber hub

If you are still deciding whether you need cyber at all, start with When UK startups need cyber insurance. If investors want COIs for a raise, use Fundraising Insurance Certificates for UK Startups. Come back here when the buyer’s questionnaire is waiting on PDFs.

Typical documents in the evidence pack

Exact asks vary by buyer. Common UK SaaS / tech patterns for MSA / vendor security packs:

1. Professional indemnity (PI / tech E&O) — certificate + schedule showing limit (often £1m–£5m+ in MSAs)

2. Cyber — certificate + schedule; sometimes a note that incident response / privacy liability sits on the policy

3. Public liability — where the MSA names it (physical injury / property damage to third parties)

4. Employers’ liability — once you employ anyone in Great Britain (legal duty); schedule as evidence

5. Broker covering letter (optional) — maps each MSA line to a policy reference so procurement does not hunt

Do not assume one “startup certificate” answers every row. Each product has its own schedule. Name files clearly: Company_Cyber_Certificate_2026.pdf, not scan003.pdf.

What “good” looks like in the questionnaire upload

1. Current certificates that cover the contract start date and a sensible runway after

2. Schedules that show named insured, limit, and period matching the MSA minimums — or an honest gap note if you are negotiating limits down

3. If the MSA asks for additional insured or cancellation notice, confirm the endorsement exists before you upload; a certificate that does not show it will bounce

4. Do not dump full wordings into the portal unless asked — certificates and schedules usually suffice first; wording extracts only for specific clause proof

5. Keep security-control answers (Cyber Essentials, MFA, backups) separate from insurance PDFs — different rows, different evidence

Founders, sole traders, and early Ltds

Sole traders and early limited companies still face MSA and questionnaire asks when they sell into enterprise. The evidence job follows the buyer’s schedule, not Companies House form. If you are a founder, sole trader, or small partnership preparing a vendor pack, speak to us with the insurance clause and the questionnaire insurance section — we will say what we can place and what evidence we can produce.

What to send a broker when the questionnaire is waiting

1. MSA insurance schedule / exhibit (exact wording and limits)

2. Security / vendor questionnaire insurance questions (screenshot or extract)

3. Current schedules and certificates (even if incomplete)

4. Target contract signature / go-live date

5. Headcount (employees vs contractors) and product one-pager

6. Any prior claims, incidents, or declined covers

7. Whether the buyer wants additional insured, cancellation notice, or wording extracts

Clean files move faster. Vague “we need insurance for the MSA” without the schedule slows underwriting exactly when procurement is watching the clock.

How Meshed helps

We place commercial covers for UK startups and produce certificates / evidence of cover once policies are bound — including PI, cyber, public liability, and employers’ liability where the risk fits. Mesh'd Limited trading as Meshed is authorised and regulated by the Financial Conduct Authority under firm reference number 1033248. Broker fee is a flat 10%, with no admin add-ons. We do not invent monthly “from £” questionnaire prices. Named customer quotes are off.

What to send: MSA insurance clause, questionnaire insurance rows, current schedules, signature date.

Timing (when cyber becomes non-optional): When UK startups need cyber insurance. Fundraising COIs: Fundraising Insurance Certificates for UK Startups. Cyber product: Cyber Insurance UK. Pack map: Startup Insurance UK. Then speak to us with the clause and the questionnaire.

Mesh'd Limited t/a Meshed / Meshed Cover · FCA FRN 1033248 · flat 10% broker fee · Ltd, partnerships, and sole traders · no fake prices · Speak to us

FAQs

What insurance evidence do UK startups need for an MSA security questionnaire?

Usually certificates and schedules for the covers named in the MSA — commonly PI/tech E&O, cyber, public liability, and employers’ liability if you have staff — plus any endorsements the schedule requires. Security-control answers (Cyber Essentials, MFA) are separate from insurance PDFs.

Is this the same as “when do I need cyber insurance”?

No. When UK startups need cyber insurance owns the timing / trigger job. This page owns the evidence pack you upload once cover is in place (or while you place it).

Is this the same as fundraising insurance certificates?

No. Fundraising COIs for data rooms and closing live on Fundraising Insurance Certificates for UK Startups. This page is buyer / MSA / vendor questionnaire evidence.

Do I need to upload the full policy wording?

Usually not on day one. Certificates and schedules answer most insurance rows. Provide wording extracts only when the questionnaire asks for a specific clause or endorsement.

Can Meshed issue certificates for a questionnaire?

Once cover is bound through Meshed, we can request certificates / evidence letters that match what procurement asked for. We cannot invent a certificate for unbound cover.

Are sole traders and founders in scope?

Yes for the process. We place for Ltd, partnerships, and sole traders — speak to us about placement and evidence for your structure and buyer schedule.

Will you quote a “from £X a month” MSA insurance price?

No. Premium depends on the risk and the covers required. We place from a panel at a flat 10% broker fee and will not invent a marketing price. Named customer quotes are off.

Are you an insurer?

No. Meshed is a broker. Mesh'd Limited trading as Meshed is authorised and regulated by the Financial Conduct Authority under firm reference number 1033248.