Reviewed by Tom Moore, Agency Partner, CA Agency Insurance License 6003355
Last reviewed: 4/01/2026
Key takeaway: Outsourced bookkeeping insurance risk for Spokane small businesses is a coverage gap most owners don't discover until they're already dealing with the fallout. When you hire an outside bookkeeper or finance provider, you hand over access to your most sensitive business data — payroll, bank accounts, vendor payments, tax filings. If they make an error, miss a deadline, or get breached, your business can face financial losses, regulatory penalties, and lawsuits. A standard Business Owner's Policy won't cover most of those scenarios. The right protection involves general liability, professional liability (errors and omissions), and cyber liability — and knowing which ones apply to your situation before something goes wrong.
You hired someone to handle your books so you could stop thinking about your books. That made sense. Running a restaurant, a contracting shop, or a retail operation in Spokane already takes everything you've got. Handing payroll and reconciliations off to a specialist seemed like a smart move.
It usually is. But there's a piece of this arrangement most business owners never think about: what happens when something goes wrong on their end, and the bill lands on yours?
Outline
What Does "Outsourced Bookkeeping" Actually Mean for Your Liability?
Outsourcing your bookkeeping means a third party — an individual contractor, a small firm, or an online accounting service — handles your financial records. They record transactions, reconcile accounts, run payroll, produce financial statements, and sometimes manage tax prep or vendor payments.
What they don't take with them when they leave is your legal exposure.
When a client, a bank, or the IRS looks at your financial records and something is wrong, they're not calling your bookkeeper. They're calling you. You're the business of record. You signed the loan application. Your tax return carries your EIN. The contract with that vendor has your name on it. The relationship your bookkeeper has with you is a service arrangement. The relationship everyone else has is with your business.
That's a meaningful distinction. And it's the one that most small business owners miss when they assume that outsourcing a function outsources the risk that comes with it.
Your Bookkeeper's Mistake Can Still Become Your Problem
The most common claims that arise from outsourced bookkeeping aren't dramatic. They're quiet errors that don't surface until the damage is already done.
The Error That Costs You a Loan
You're applying for a small business line of credit. Your bookkeeper has been managing your books for two years. Somewhere in the process, income got misclassified, or expenses were overstated. The bank pulls your financial statements and turns you down — or approves a lower limit than you needed. You go back and find the error. It's fixable, but the loan opportunity is gone.
That scenario doesn't always end in a lawsuit. But when it does, the claim runs through your business, not your bookkeeper's. Unless your bookkeeper carries their own professional liability coverage — and you've confirmed it — you may be absorbing that loss yourself.
The Missed Deadline That Triggers a Penalty
Payroll tax deposits, quarterly estimated payments, annual filings — these are deadline-driven obligations. A missed payroll deposit with the IRS triggers penalties that start at 2% and can reach 15% of the unpaid amount. If your bookkeeper was responsible for scheduling those deposits and dropped the ball, you still owe the IRS. Not them. You.
Some business owners have recourse against the bookkeeper if there's a written service agreement that outlines responsibilities. Many don't, because they never got one in writing. A handshake arrangement with a neighborhood bookkeeper or a month-to-month online service doesn't give you much to stand on when you're trying to recover a penalty you didn't cause.
Does Your Bookkeeper Carry Their Own Insurance?
Ask. That's the first practical step, and most business owners never take it.
A bookkeeper carrying professional liability insurance — also called errors and omissions (E&O) insurance — has coverage that can respond when a client claims their mistake caused a financial loss. That coverage can pay for legal defense costs and settlements. Without it, the bookkeeper is personally liable for whatever a judgment or settlement costs, which may mean collecting nothing.
The same applies to cyber liability. A bookkeeper who stores your financial records in a cloud accounting platform, emails payroll data back and forth, or has remote access to your bank accounts is a potential entry point for a breach. If their system gets compromised and your data gets exposed, you have notification obligations under Washington state law — not them. You.
Asking for a certificate of insurance before you hand someone access to your accounts is not paranoid. It's basic due diligence. The certificate should show active professional liability and cyber liability coverage. If they can't produce it, that tells you something about how seriously they're running their operation.
What Coverage Do You Need on Your Side?
Even if your bookkeeper carries their own insurance, you shouldn't assume that coverage will fully respond to a claim that affects your business. Their policy protects them. Yours protects you. The two don't always overlap the way you'd expect.
General Liability: The Starting Point, Not the Finish Line
Every Spokane small business should carry general liability coverage. It covers third-party bodily injury, property damage, and personal and advertising injury claims. It's the foundation.
What it doesn't cover is financial harm caused by a professional error — yours or your bookkeeper's. General liability was built for physical risks. A slip-and-fall at your location. A broken window during a delivery. Not a miscategorized expense or a missed tax deadline.
If you're running your business with only general liability and a standard property policy, you have a real gap in your coverage for anything that touches financial data or professional services.
Professional Liability (E&O): When You're the One Giving Financial Advice
Professional liability coverage — errors and omissions insurance — matters most to businesses that give advice or provide a professional service as their core product. Consultants, accountants, financial planners, tax preparers: all of these need it. But so do businesses in other industries when they provide any kind of financial guidance to clients, even informally.
If your business prepares reports, makes financial recommendations to customers, or produces documents that others rely on for decisions, E&O is worth a conversation. The Insurance Information Institute defines professional liability as coverage for claims arising from services performed for a fee — a definition that's broader than most people expect.
Cyber Liability: Because Your Books Live in the Cloud
This is the coverage most small businesses are missing, and it's directly connected to the outsourced bookkeeping question.
Your bookkeeper almost certainly uses cloud-based accounting software. They may have remote access to your bank or payroll accounts. They're sending financial data by email. Every one of those touchpoints is a potential entry point for a breach — and if client data, payroll data, or financial account information gets exposed, Washington state law gives you 30 days to notify affected individuals after discovery of the breach. If the breach affects more than 500 Washington residents, you also have to notify the Attorney General's office.
The notification process alone — identifying everyone affected, drafting compliant language, sending notices, offering credit monitoring where required — can run tens of thousands of dollars before any legal fees are involved. A standard Business Owner's Policy doesn't cover that. Cyber liability does.
Washington State Has Strict Data Breach Rules — And They Apply to You
Washington has some of the toughest data breach notification requirements in the country. Under RCW 19.255, any business — not just tech companies, not just large employers — must notify affected Washington residents when their personal information is acquired without authorization. The deadline is 30 days from discovery. No exceptions for small businesses. No "we didn't know it was that serious" grace period.
The definition of personal information under Washington's law covers a lot of ground: Social Security numbers, driver's license numbers, financial account numbers with security codes, health insurance information, student ID numbers, biometric data, and login credentials for online accounts. Your bookkeeper has access to most of these for your employees and possibly for your clients.
If their system gets hit, your obligation kicks in. Not theirs — yours. That's the liability exposure that most Spokane small business owners haven't factored into their relationship with an outsourced finance provider. The Washington State Attorney General's office maintains a public directory of breach notifications. Spokane businesses appear in it every year.
What to Ask Before You Hire an Outsourced Finance Provider
Before you hand over your QuickBooks login or payroll access, get answers to these questions in writing:
- Do you carry professional liability (E&O) insurance? Can you provide a current certificate?
- Do you carry cyber liability insurance that covers client data?
- Do you have a written service agreement that defines your responsibilities and liability?
- What accounting software and platforms do you use, and how is client data stored and secured?
- Who else on your team has access to my accounts?
- What is your process if there's a data breach or error that affects my business?
The answers matter less than whether they can answer at all. A legitimate bookkeeping operation that's been doing this for years has thought through these questions. Someone who hesitates or says "I don't think I need that" is telling you something about their risk profile — and by extension, yours.
If you're not sure what coverage your business actually carries — or whether a standard policy is leaving you exposed on the financial services side — we're happy to take a look. One conversation, no pressure. Get a quote at All Lines Insurance and we'll dig into what your operation actually needs.
Frequently Asked Questions
Does my general liability insurance cover me if my bookkeeper makes an error?
No. General liability covers bodily injury, property damage, and personal injury claims — not financial losses caused by professional errors. A bookkeeper mistake that costs you a loan, a tax penalty, or a client dispute would not be covered under a standard general liability policy.
What kind of insurance should my outsourced bookkeeper carry?
At minimum, a professional liability (errors and omissions) policy and cyber liability coverage. Professional liability responds if they make an error that causes you financial harm. Cyber liability responds if their systems are compromised and your data is exposed. Ask for a current certificate of insurance before you give them access to your accounts.
Does Washington state law apply to my small business in a data breach?
Yes. Washington's data breach notification law under RCW 19.255 applies to any individual or business that holds personal information on Washington residents. The 30-day notification requirement applies regardless of your business size. If more than 500 residents are affected, you must also notify the Washington Attorney General's office.
What is errors and omissions insurance, and do I need it?
Errors and omissions (E&O) insurance is professional liability coverage for claims that a mistake in your professional services caused someone financial harm. It's most relevant for businesses that give advice, prepare reports, or provide services that others make decisions based on. If any of that describes part of what your business does, it's worth discussing with an agent.
Can a standard Business Owner's Policy cover a data breach involving my bookkeeper?
Usually not. A standard BOP was built for physical risks — property damage, liability from accidents on your premises. Data breaches and the costs that follow — notification expenses, legal fees, regulatory fines — are typically excluded or have very limited sublimits. Cyber liability insurance is designed specifically for those costs.
What happens if my bookkeeper doesn't have insurance and makes a costly mistake?
If your bookkeeper has no professional liability coverage, any recovery comes out of their personal assets. If they're a sole proprietor without much to collect, you may absorb the loss entirely. This is why confirming coverage before the engagement starts matters — and why having your own coverage in place is the backstop.
Does the type of financial data my bookkeeper accesses affect my risk?
Yes, meaningfully. A bookkeeper who only reconciles your bank statements carries less risk than one who manages payroll, has access to employee Social Security numbers, handles ACH transfers, or produces financial statements used in loan applications. The more sensitive the data and the more downstream decisions it affects, the more important it is that both your coverage and theirs are in order.
Do I need to review my insurance if I switch from an in-house bookkeeper to an outsourced one?
Yes. The risk profile changes. An in-house employee is covered under your workers' compensation and may be covered under your general liability for work they do on your behalf. An outsourced contractor operates independently, with their own (or no) insurance. The transition is a good trigger to review your existing policies and confirm there are no gaps in how your coverage is structured.
