Claims

When something breaks, speed is the coverage.

A cyber policy is only as good as the first 24 hours of its claims response. Report early — a suspicious event that turns out to be nothing costs you nothing to report.

The process

What happens when you report.

Report

Email claims@balispecialty.com with what you know so far. Policyholders also receive a 24/7 incident hotline with their policy documents — use whichever is faster.

Acknowledge & triage — within hours

A claims professional acknowledges receipt, confirms next steps, and — where the event is live — connects you with breach counsel and forensics from our response panel.

Contain & respond

Forensics, legal, notification, and recovery work under a coordinated plan. For AI-involved incidents, our panel includes specialists who can read model and agent logs — so attribution doesn't stall the response.

Resolve

Covered costs are handled against clear policy triggers. We communicate coverage positions early and plainly — no surprises in month three.

Reporting

What to include in a first report.

Don't wait for complete information — early beats complete.