Are the Applicant's (and any Subsidiary's) facilities licensed in accordance with all relevant federal, state, local and foreign requirements?
Insurance does not sit comfortably behind an operation that is not lawfully permitted to operate.
What the carrier is actually asking
The carrier is asking whether your facilities and those of your subsidiaries hold the licences, permits, and registrations required by federal, state, local, and foreign regulators. It matters most in healthcare, financial services, education, childcare, food, and any regulated physical operation.
Why it is underwritten
An unlicensed operation carries regulatory exposure that no insurance addresses, and many policies exclude losses arising from unlawful operation. The question also functions as a general compliance indicator, since organisations that let licences lapse tend to let other obligations lapse too.
Where the answer lives in Microsoft 365, Entra ID, and Azure
Licensing records are held by the business and by the regulator, so this is attested and independently checkable.
| Platform | Where the setting lives | What has to be true |
|---|---|---|
| Licence records | Current licences and permits per facility and per jurisdiction | In force, with expiry dates tracked. Attested |
| Renewals | Renewal tracking with owners and lead times | A process, since lapses usually result from nobody owning the renewal rather than from a decision |
| Subsidiaries | Licensing for subsidiary and acquired operations | Included, since acquisitions arrive with their own licensing that may not have transferred |
| Professional | Individual professional licences where the service requires them | Practitioner licensing where applicable, which is a separate obligation from facility licensing |
| Regulator | Any enforcement action, conditions, or restrictions | Disclosed, since regulator action is material and discoverable |
Licences frequently do not transfer automatically on a change of control. An acquired facility can be operating on a licence that technically lapsed at completion, which nobody notices until a renewal or an inspection. Reviewing this during integration is cheap; discovering it later is not.
What a defensible yes requires
- All required licences are current across every facility and jurisdiction.
- Renewals are tracked with named owners and adequate lead time.
- Subsidiary and acquired operations are included.
- Professional licensing is current where the service requires it.
- Any regulator conditions or enforcement history is disclosed.
How this answer goes wrong
A facility acquired eighteen months ago is operating on a licence that did not transfer with the change of control. The answer given is yes because the original licence exists on file, and nobody checked whether it still applies to the current entity.
Frequently asked
Does this apply to a software company?
Often not, and answer not applicable rather than leaving it blank. If you serve regulated sectors, check whether any registration attaches to you.
What if a licence is pending renewal?
Say so with the status and date. A pending renewal is a normal situation and an undisclosed lapse is not.
Does an unlicensed facility void the policy?
It can, where the wording excludes unlawful operations, and it varies by policy. It is a coverage question worth resolving in advance.
Who should own this?
Someone with a calendar and authority, usually in compliance or operations. Licence lapses are almost always ownership failures rather than deliberate decisions.
Related questions
Stop answering this from memory
Connect Microsoft 365, Entra ID, and Azure read-only. Insurance Posture reads the live configuration behind each application answer and shows you which ones you can prove before you sign.
Assess your posture