Cyber insurance: terms
Effective from 11 August 2026 · Optional add-on, not included in plans · Version 1.1.
These terms describe the main features of the cyber insurance available as a ResaHost add-on. If Vahinkovakuutus Oyj is the insurer, and Resaco Oy, Finnish business ID 3259870-5, is the policyholder for the customer's benefit.
1. Insurance arrangement
The insurer is If Vahinkovakuutus Oyj, Finnish branch. The policyholder is Resaco Oy. The beneficiary is a ResaHost customer with an active cyber insurance add-on priced at €29 per month.
2. Limits and excess
| Item | Amount |
|---|---|
| Limit per insured event | €100,000 |
| Annual maximum per customer per policy period | €100,000 |
| Excess per insured event | €1,000 |
3. Covered costs
The insurance covers costs incurred by the add-on customer in the following situations:
- Security breach consequences: forensic work, system restoration, external expert assistance and communications to data subjects.
- Ransomware demands: advice, technical investigation and, within the policy's limits, ransom payments where payment is the only way to restore data and is not unlawful.
- Business interruption: lost operating profit caused by an interruption, for up to 30 days.
- Third-party damages: compensation payable to the customer's own customers or other third parties arising from a breach within ResaHost's responsibility.
- Legal costs: lawyers' fees and court costs arising from the breach, subject to the insurer's prior approval.
4. Activation
Cover starts 14 days after the add-on subscription begins. There is no cover during this initial waiting period. The add-on is not included in Basic, Pro or Premium.
Cover continues while the add-on is active and ends automatically if the customer cancels the add-on or the ResaHost service. The policy number is shown in the customer's account after activation.
5. Requirements
An active ResaHost agreement is required. As part of hosting, ResaHost maintains the safeguards required by the insurance: two-factor authentication on administrator accounts, up-to-date WordPress, PHP, operating systems and dependencies, daily backups retained for 30 days, server and application logs available for investigations, and an approved-plugin list.
The customer must report incidents promptly and within 24 hours of discovery, keep service and insurance payments up to date, obtain written approval before changing DNS settings or installing unapproved plugins, and give ResaHost and the insurer access to data necessary for the investigation.
6. Exclusions
The insurance does not cover deliberate acts or gross negligence by the customer; breaches occurring before cover starts or during the 14-day waiting period; losses resulting from overdue payments or a cancelled service; attacks on infrastructure outside the service, including customer devices and third-party integrations; unlawful or infringing customer content; war, terrorism, official orders and other exclusions in the general policy conditions; or fines and administrative penalties that cannot lawfully be insured.
7. Claims
The customer immediately reports an incident to [email protected] or +358 40 5611 411, the 24/7 emergency number when the add-on is active.
ResaHost starts the hack-fix process and submits a claim to the insurer. The insurer assesses coverage under the policy and pays the customer or ResaHost according to the type of loss.
8. Relationship with the hack-fix guarantee
ResaHost's own guarantee covers its repair work, including investigation, restoration and updates, without a separate charge. The insurance covers costs beyond that work, including interruption, third-party damages, legal costs and ransomware demands, subject to the insurance conditions.
9. Full policy conditions
Detailed conditions are made available to add-on customers when ordering. The policy and full conditions are supplied after the 14-day waiting period and are available in the customer portal.
This page is a summary. The insurer's official policy document and general conditions take precedence when interpreting cover.
10. End of cover
Cover ends when the add-on or the ResaHost service ends. Incidents occurring after that date are not covered, even if related costs arise later.
Resaco Oy may change insurance partners with at least 60 days' notice. The new policy's terms must provide at least the level described on this page.
Questions: [email protected] or +358 40 5611 411. Return to the service agreement documents.