One relationship. One dedicated limit.
27th October 2026Introducing True Transfer, cyber insurance built around the vendors your business depends on most.
A certificate, a shared limit and a hope that it holds. For years, that has been the protection behind the vendors enterprises depend on most. Today, Trium Cyber is launching True Transfer, and it puts protection exactly where the risk sits: in the relationship.
True Transfer is supplemental cyber insurance that gives an enterprise its own dedicated limit for the harm a specific vendor can cause. Not a share of the vendor's policy or a limit other clients are drawing on at the same time. Yours.
What it means for enterprises
- A limit that is yours. Every vendor contract you choose to cover carries its own dedicated limit, so no other client's claim can erode it.
- Terms you set once. Cover sits under one master policy, with each vendor contract added by endorsement.
- Paid directly to you. Covered claims are paid directly to the enterprise under its own policy, so recovery doesn’t depend on first pursuing the vendor.
- Less strain on your own policy. Can help keep vendor-related losses away from your own cyber cover, protecting its limits.
What it means for vendors
Vendors get recognized for what they have built. Premium reflects how well a vendor is secured, so stronger controls count, and a vendor can show its enterprise customers dedicated protection without carrying every customer's exposure inside one shared policy.
How it works
HITRUST has developed IRIDX, which enables a standardized measurement of third-party information risk and exposure for precise management and governance. It turns the assurance evidence a vendor already holds into a comparable measure of modelled residual risk, so every vendor can be assessed the same way. Trium Cyber is partnering with IRIDX to extend the impact of those scores. An enterprise starts with an IRIDX assessment of its vendors, and where a score and its risk tolerance call for cover, the enterprise requests a True Transfer quote from Trium for that vendor contract.
Why now
Attackers increasingly reach well-defended enterprises through the suppliers and platforms they share. Third-party involvement in breaches doubled in a year to 30%, according to Verizon's 2025 Data Breach Investigations Report, and AI is speeding it up. Google's Threat Intelligence Group has documented one attacker using an AI assistant to compromise thousands of third-party credentials in under six hours. The losses this points to have not yet arrived at scale, and the insurance in place was built for a time when vendor exposure was marginal.
That makes the moment for True Transfer now.
"Risk managers have spent years verifying that their vendors carry insurance," says Amie Watson, Chief Underwriting Officer at Trium Cyber. "True Transfer gives them a limit dedicated to the relationships that matter most, priced on how well each vendor is actually secured. It fits into the third-party risk process their teams already run, so using it doesn't mean building something new. And for vendors with strong controls, it is a way to be recognized for them."
"The question is shifting from whether a vendor has insurance to what that insurance will do for the enterprise relying on it," says Josh Ladeau, Managing Director – Special Initiatives at Trium Cyber. "That shift has been building as third party exposure has grown, and instruments designed around the relationship are a natural result. The standard enterprises ask for is going to rise."
Get started
True Transfer launches today.
To discuss how it could apply to your vendor portfolio, contact the Trium Cyber True Transfer team at truetransfer@triumcyber.com or visit True Transfer for more product information.
Sources
- Verizon's 2025 Data Breach Investigations Report
- Google Threat Intelligence Group The Hacker News
Disclaimer
True Transfer is underwritten by Trium Cyber on behalf of Syndicate 1322 at Lloyd’s. Cover is subject to underwriting and the terms of the policy.
This content is intended for general informational purposes only and does not constitute legal, regulatory, financial, or insurance advice. It should not be relied upon as a substitute for professional counsel. While efforts have been made to ensure the accuracy of the information presented, no representation or warranty is made as to its completeness or applicability to any specific situation. Readers should consult their own advisors regarding their particular circumstances.