Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)
Helvetia
Policy terms: Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV)
CHF 300–3'100 per year
-
Immediate help in an emergency covered
Emergency assistance, loss analysis/forensics, crisis and PR consulting; emergency assistance without deductible and without being counted towards the sum insured.
-
Restore data and systems covered
Restoration of data and software, clean-up, additional costs to continue data processing.
-
Replace unusable devices limited
Only as an alternative, if replacement is cheaper than clean-up, by agreement.
-
Loss of income after an attack covered
Loss of profit (EBITDA), waiting period 24 hours, benefit period 12 months; within the first-party sum insured. Deductible = the higher of CHF 1'000 and the loss during the waiting period.
-
Outage at the IT provider limited
Systems operated by an external service provider count as part of the IT system; not insured are purely technical failures at the service provider, outage of external networks and access blocks from the third week.
-
Outage due to operating error limited
Negligent operation by the policyholder’s own staff insured (exhaustive list); technical failure, software updates, overload not.
-
Cyber extortion limited
Limit CHF 30'000. Ransom is paid where insurable; sub-limit ECO 30'000, SMART 50'000, TOP 100'000; reporting to the police is mandatory.
-
Third-party claims after a data breach covered
Pure financial losses including non-material damage, defence against unfounded claims; liability sum insured CHF 500'000 or 1 million.
-
Proceedings before authorities limited
Costs of disciplinary, supervisory, administrative and criminal proceedings covered; fines excluded (3.3.1.9 let. e).
-
Inform affected people covered
Notification, call centre, monitoring in the event of credit card or identity theft; prior consent.
-
Fraud with fake instructions limited
Limit CHF 30'000. Included in KMU-Spezial (BEC, man-in-the-middle, manipulated invoice). The GTC exclude payments made after a phone call, voice message or video (deepfake) (3.3.1.8); the sample policy KMU-Spezial reinstates them via Special Condition 3.7.6, with proof of basic security measures; only covered if the policy names 3.7.6 (the sample document is marked «DRAFT»). Sub-limit 30'000/50'000/100'000; verify orders from CHF 30'000 securely; criminal complaint.
-
Hacked e-banking limited
Limit CHF 30'000. Hacked online banking in the same module and with the same sub-limit.
-
Phone hacking and extra costs covered
Misuse of the telephone system and cryptojacking within the first-party sum insured; criminal complaint.
-
Property damage caused by an attack not covered
Losses arising from property damage are not insured; the module «Defective production» is not part of KMU-Spezial.
-
Reputational damage not covered
PR costs covered, loss of revenue due to poor reputation expressly not.
-
Card industry penalties covered
Fines and penalties of the PCI Security Standards Council, where insurable, plus recertification.
-
Media liability limited
Copyright, trademark and unfair competition law only if based on a criminal attack.
Key facts and terms
- Price
- CHF 300–3'100 per year
- For whom
- Companies with CHF 0–10 million revenue, e-commerce share max. 30%; excluded are, among others, energy, finance, hospitals, IT service providers, telecoms
- Sums insured
- CHF 50'000, CHF 100'000, CHF 200'000, CHF 500'000, CHF 1'000'000
- Deductible
- CHF 1'000, CHF 500
- Waiting period for loss of income
- 24 hours
- Indemnity period
- 12 months
- Territorial scope
- worldwide; liability claims USA/Canada excluded (sections 1.2, 3.4.1)
Sums insured: first-party loss 50k–500k depending on band and variant, liability 500k or 1 million, legal protection 50k (Coop Rechtsschutz). Deductible 500 for start-ups and Holzbau Schweiz members. Since 01.07.2026, new contracts are issued in the name of Helvetia; Baloise customers receive an offer with the Helvetia product.
Price: No calculator; fixed premium table in the public application form. Individual Light/Standard/Premium packages only on quotation.
Gross negligence: Helvetia waives the reduction under Art. 14 ICA for gross negligence. Caution: the product page states that grossly negligent conduct by a representative is not insured; the policy is decisive. Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 4.6.4, S. 18 Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026Where does it say so? (gross negligence)
«Helvetia verzichtet auf ihr Recht, ihre Leistungen gemäss Art. 14 VVG zu kürzen, wenn das Ereignis … grobfahrlässig herbeigeführt worden ist.»
Exclusions and Duties before and after a loss (9)
Exclusions
- War; state attacks if critical infrastructure fails.
Where does it say so? (exclusion)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.2.3 lit. c, S. 9
«staatliche Angriffe …, wenn dadurch kritische Infrastrukturen … ausgefallen oder beeinträchtigt sind»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Outage of external networks, regardless of the cause (cloud services do not count as external networks).
Where does it say so? (exclusion)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.2.3 lit. h, S. 9
«durch einen Ausfall externer Netze, unabhängig von der Ursache»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Contractually agreed penalties; contractual penalties and fines in liability.
Where does it say so? (exclusion)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.9 lit. g, S. 12
«vertraglich vereinbarte Konventionalstrafen»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Sanctions (UN, Switzerland, EU, UK, USA).
Where does it say so? (exclusion)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.4.2, S. 14
«Sanktionsverletzung … der UN …, der Schweiz, der EU, UK, USA»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Bodily injury and property damage.
Where does it say so? (exclusion)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.2.2 lit. b, S. 13
«aus Personen- und Sachschäden»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
Duties before and after a loss
- Daily backup with function check, separate from the original (e.g. offline or immutable), test every six months.
Where does it say so? (obligation)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.6.1.1, S. 14
«tägliche Datensicherung (Back-up) inkl. automatischem Funktionscheck»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Patches after 30 days at the latest; isolate systems that are no longer patched.
Where does it say so? (obligation)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.6.1.1, S. 15
«spätestens nach 30 Tagen»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Firewalls, virus scanners, spam filters, authenticated remote access (e.g. VPN). MFA only as an example in the definition «Access Policy», not a strict obligation.
Where does it say so? (obligation)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.6.1.1, S. 14
«Firewalls, Virenscanner, Spam-Filter, authentisierte Remote-Zugänge (z.B. VPN)»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
- Consequence: reduction to the extent of the influence on the occurrence or extent of the loss.
Where does it say so? (obligation)
Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 4.6.2, S. 18
«in dem Ausmass …, als Eintritt oder Umfang des Schadens dadurch beeinflusst wurden»
Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026
All values as a table
| Module | Status | Limit | What applies | Source |
|---|---|---|---|---|
| Immediate help in an emergency | covered | not stated | Emergency assistance, loss analysis/forensics, crisis and PR consulting; emergency assistance without deductible and without being counted towards the sum insured. | Where does it say so? (Immediate help in an emergency)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.4, S. 10 «Hinsichtlich der Kosten für die Notfallhilfe fällt weder ein Selbstbehalt an noch werden diese Kosten auf die Versicherungssumme angerechnet» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Restore data and systems | covered | not stated | Restoration of data and software, clean-up, additional costs to continue data processing. | Where does it say so? (Restore data and systems)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.1, S. 9 «ersetzt die Kosten für das Wiederherstellen von digitalen Daten oder Software auf Datenträger des IT-Systems» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Replace unusable devices | limited | not stated | Only as an alternative, if replacement is cheaper than clean-up, by agreement. | Where does it say so? (Replace unusable devices)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.1, S. 10 «Falls eine Ersatzanschaffung … von Software- und Hardware-Komponenten … kostengünstiger kommen sollte, als die Bereinigung, ersetzt Helvetia alternativ» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Loss of income after an attack | covered | not stated | Loss of profit (EBITDA), waiting period 24 hours, benefit period 12 months; within the first-party sum insured. Deductible = the higher of CHF 1'000 and the loss during the waiting period. | Where does it say so? (Loss of income after an attack)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.3, S. 10 «ersetzt den Gewinnausfall, der entsteht, wenn der Betrieb … ganz oder teilweise unterbrochen … ist» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Outage at the IT provider | limited | not stated | Systems operated by an external service provider count as part of the IT system; not insured are purely technical failures at the service provider, outage of external networks and access blocks from the third week. | Where does it say so? (Outage at the IT provider)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.2.3 lit. j, S. 9 «Blockierung des Zugriffs durch einen externen Dienstleister … ausgenommen sind die ersten zwei Wochen» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Outage due to operating error | limited | not stated | Negligent operation by the policyholder’s own staff insured (exhaustive list); technical failure, software updates, overload not. | Where does it say so? (Outage due to operating error)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.2.1 Ziff. 2, S. 9 «nicht-kriminellen Ursachen (Aufzählung ist abschliessend): a) autorisierter Zugriff und fahrlässige Bedienung» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Cyber extortion | limited | CHF 30'000 | Ransom is paid where insurable; sub-limit ECO 30'000, SMART 50'000, TOP 100'000; reporting to the police is mandatory. | Where does it say so? (Cyber extortion)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.7 lit. c, S. 11 «Ausgleichszahlung des effektiv … gezahlten Lösegelds, soweit dies unter dem anwendbaren Recht versicherbar ist» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Third-party claims after a data breach | covered | not stated | Pure financial losses including non-material damage, defence against unfounded claims; liability sum insured CHF 500'000 or 1 million. | Where does it say so? (Third-party claims after a data breach)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.2.1, S. 12 «entschädigt begründete Ansprüche Dritter … wehrt unbegründete Ansprüche Dritter ab» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Proceedings before authorities | limited | not stated | Costs of disciplinary, supervisory, administrative and criminal proceedings covered; fines excluded (3.3.1.9 let. e). | Where does it say so? (Proceedings before authorities)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.5 lit. d, S. 11 «Disziplinar-, Aufsichts-, Verwaltungs- oder Strafverfahren (dazu gehören Anwaltshonorare, Gerichts- und Expertisekosten» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Inform affected people | covered | not stated | Notification, call centre, monitoring in the event of credit card or identity theft; prior consent. | Where does it say so? (Inform affected people)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.5, S. 11 «Call-Center-Services; … Überwachungsdienstleistungen bei Kreditkartendaten- oder Identitätsdiebstahl» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Fraud with fake instructions | limited | CHF 30'000 | Included in KMU-Spezial (BEC, man-in-the-middle, manipulated invoice). The GTC exclude payments made after a phone call, voice message or video (deepfake) (3.3.1.8); the sample policy KMU-Spezial reinstates them via Special Condition 3.7.6, with proof of basic security measures; only covered if the policy names 3.7.6 (the sample document is marked «DRAFT»). Sub-limit 30'000/50'000/100'000; verify orders from CHF 30'000 securely; criminal complaint. | Where does it say so? (Fraud with fake instructions)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.8 lit. b, S. 12 «z.B. BEC (Business Email Compromise), Man-in-the-Middle-Angriffe, manipulierte Rechnung eines Dritten» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Hacked e-banking | limited | CHF 30'000 | Hacked online banking in the same module and with the same sub-limit. | Where does it say so? (Hacked e-banking)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.8 lit. b, S. 12 «gehacktes Online-Banking oder Zahlungssystem» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Phone hacking and extra costs | covered | not stated | Misuse of the telephone system and cryptojacking within the first-party sum insured; criminal complaint. | Where does it say so? (Phone hacking and extra costs)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.8 lit. a, S. 12 «der Telefonanlage, eines Smartphones … (z.B. Phreaking); … Crypto Mining oder Cryptojacking» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Property damage caused by an attack | not covered | not stated | Losses arising from property damage are not insured; the module «Defective production» is not part of KMU-Spezial. | Where does it say so? (Property damage caused by an attack)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.2.3 lit. b, S. 9 «Nicht versichert sind Schäden, … die durch einen Sachschaden entstehen» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Reputational damage | not covered | not stated | PR costs covered, loss of revenue due to poor reputation expressly not. | Where does it say so? (Reputational damage)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.6, S. 11 «Nicht ersetzt werden Kosten für: Umsatz- / Betriebsertragseinbussen aus schlechter Reputation» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Card industry penalties | covered | not stated | Fines and penalties of the PCI Security Standards Council, where insurable, plus recertification. | Where does it say so? (Card industry penalties)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.4 lit. e, S. 11 «Bussen und Strafen, welche durch das PCI Security Standards Council auferlegt wurden, sofern … versicherbar» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
| Media liability | limited | not stated | Copyright, trademark and unfair competition law only if based on a criminal attack. | Where does it say so? (Media liability)Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.2.1, S. 12 «leistet Helvetia jedoch nur, wenn die Ansprüche Dritter auf einem kriminell verursachten versicherten Schadenereignis (Cybercrime) beruhen» Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026 |
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.