Cyber insurance Spain for small business: eligibility
Antonio Martínez Serrano
Agency Director | Wealth Protection & Expat Specialist
Cyber insurance for small businesses in Spain: who qualifies, what it covers and what to check (Allianz Cyber)
If you run a business in Spain, whether as an autónomo (self-employed) or a small company, one fake supplier email can lock your computers and put a ransom note on the screen. Before you ask what cyber insurance costs, there are two better questions: can my business actually get it, and what would it pay for? Here is what Allianz's own brochure (September 2026) says.
What is cyber insurance?
Cyber insurance protects a business against the damage of an IT incident: stolen data, locked systems, extortion or online fraud. It mixes technical and legal help, compensation to third parties if your incident harms them, and a share of your own losses.
Allianz Cyber is designed for small and medium businesses and autónomos (p. 2 of the brochure). The brochure quotes INCIBE (Spain's national cybersecurity institute): 97,348 cybersecurity incidents in 2024, with 31,540 Spanish companies affected.
Who can take out Allianz Cyber?
The brochure lists conditions (p. 2). Your business should:
Have annual turnover of no more than €25 million.
Be 100% physical, or have online sales of no more than 30% of annual turnover (the 30% limit does not apply if turnover is under €2 million).
Have been trading for more than 2 years.
Have its IT systems in Spain, with no data stored on servers outside the EU.
Have a maximum of 150 active devices.
Hold a customer database with personal data.
This matters for expats: a business with servers or cloud storage outside the EU, or a company that is under two years old, may not fit. Tell us your set-up and we will check before you spend time on quotes.
Four plans, different limits
The four plans are Básico, Óptimo, Extra and Ampliado (Basic, Optimal, Extra, Extended). They share the same services and differ in their limits (p. 3):
Cover | Básico | Óptimo | Extra | Ampliado |
|---|---|---|---|---|
Civil liability | €150,000 | €300,000 | €450,000 | €600,000 |
Claims from electronic service providers | €30,000 | €30,000 | €30,000 | €30,000 |
Loss of profits ¹ | €37,500 | €75,000 | €75,000 | €75,000 |
Computer theft ² | €37,500 | €75,000 | €125,500 | €150,000 |
Cyber-extortion losses refunded | €30,000 | €30,000 | €30,000 | €30,000 |
¹ Sub-limit of 25% of the contracted limit, maximum €75,000.
² Sub-limit of 25% of the sum insured, with a specific €3,000 excess per claim.
Responsabilidad civil (civil liability) pays a third party for damage your business causes, through your own acts or those of outside providers, after a personal-data or information breach (p. 3).
Help before and after an attack
IT, preventive: anti-hijack application, cloud back-up set-up, security measures.
Legal, preventive: specialist advice, legal-risk prevention, assessment tools.
IT, after an incident: IT expert, forensic certification, recovery of hacked accounts, cloud back-up restoration.
Legal, after an incident: claims handling, brand-monitoring online, deletion of digital footprint.
There is also a self-service online platform, an expert contact channel and 24-hour cover in case of a cyberattack (p. 4).
What to check before you sign
The brochure is informational and has no contractual value: the policy wording rules (p. 5). Ask to review:
The sub-limits on loss of profits and computer theft.
The €3,000 excess on computer theft.
The exclusions and definitions in the policy.
That your business meets the eligibility conditions above.
Insurance does not replace good habits: back-ups, two-step verification and a phone call to confirm any change of bank details.
FAQ
Does a freelancer in Spain need cyber insurance?
If you hold clients' personal data and rely on the internet to invoice or get paid, you are exposed. Allianz Cyber is aimed at small businesses and autónomos who meet the conditions.
What does business cyber insurance cover?
With Allianz Cyber: IT and legal assistance, civil liability for data breaches, loss of profits, computer theft and cyber-extortion refunds, within each plan's limits.
Can I get it if my servers are abroad?
The brochure requires systems in Spain and no data on servers outside the EU. Ask us about your case.
How we can help
Come to our office in central Murcia, or send us your situation by WhatsApp or video call. Everything can be arranged digitally and we speak English. See our small business insurance and self-employed pages. If you run an autónomo business, our guide to insurance for foreign autónomos is a good companion, and so is compulsory insurance in Spain for expats.
Check your protection before something happens
Get in touch and we will tell you whether your business fits Allianz Cyber and what it would cover.
Antonio Martínez Serrano
The second generation leading the agency’s innovation and its national and international growth. He specialises in business protection and investment strategies, and personally leads our advice for the expat community in Spain.
MiFID II certified financial adviser