When a structural, mechanical, or geotechnical error surfaces on a project, the owner rarely sues the firm that made it first. The owner sues the firm that signed the prime agreement — the architect or engineer of record. That is the quiet architecture of vicarious liability, and in the 2026 market it is one of the most under-managed exposures sitting on a design firm's balance sheet.

The prime design professional holds the contract with the owner. Under that contract, the prime owes a single coordinated deliverable and owns responsibility for the whole of it — including the portions produced by subconsultants it never directly controlled. A subconsultant's negligent calculation becomes the prime's claim. The prime's policy responds first, the prime's deductible erodes first, and the prime's loss history absorbs the record. Recovery from the subconsultant comes later, if it comes at all.

The market backdrop sharpens the point rather than softening it. The Ames & Gough 2026 A/E Professional Liability Survey found that 60 percent of carriers reported higher claim severity in 2025 — with none reporting lower — and 82 percent paid claims exceeding one million dollars. Structural engineering was ranked the highest-severity discipline by 80 percent of respondents, civil engineering by 73 percent. Those are precisely the disciplines a prime architect routinely subcontracts. The firm of record is carrying the severity of work performed on someone else's desk.

Three places the exposure hides

First, the subconsultant's limits do not match the prime's exposure. A subconsultant carrying one million dollars in professional liability, engaged on a project where the prime faces five million in exposure, leaves a four-million gap — and the gap does not sit with the subconsultant. It sits with the prime that agreed to deliver the coordinated whole. Verifying that a subconsultant's limits are intentional rather than incidental is not administrative housekeeping. It is the difference between a recovery and a shortfall.

Second, the flow-down runs in the wrong direction, or it does not run at all. Owners push obligations down onto the prime — broad indemnity, elevated standard of care, duty-to-defend language. The disciplined prime flows those same obligations to the subconsultant that actually performs the work, no more and no less. AIA's C401 agreement is built for exactly this, tying the subconsultant to the same duties the architect owes the owner under the prime agreement, so the chain of responsibility stays intact rather than snapping at the weakest link. When the prime signs an elevated duty upstream but flows only an ordinary duty downstream, the prime has quietly agreed to absorb the difference — and the professional liability policy, written against the ordinary standard of care, was never built to fund it.

Third, the subconsultant was never vetted. The lowest-friction way to build a design team is to reach for the same names, cycle after cycle, and assume the coverage is where it needs to be. Prequalification is the discipline that replaces that assumption with control — license verification, confirmation of active professional liability coverage, a look at claims history, and limits sized to the exposure. It surfaces the weak link before the contract is signed, not after the claim is filed.

The indemnity trap runs both directions

The prime can be over-obligated to the owner and over-generous to the subconsultant in the same transaction. Agreeing to indemnify an owner for more than the prime's own negligence pulls liability outside what any professional liability policy will fund, because policies answer for negligent acts, not for liability assumed by contract beyond the standard of care. AIA's own best-practice guidance cautions design firms to keep indemnification tied to negligence in both directions — the obligation owed up to the owner and the obligation demanded down from a subconsultant. The intentional firm reads both clauses against the policy form before signing, and treats a mismatch as a claim waiting for a trigger.

None of this argues against subconsultants. Specialized work belongs with specialists, and a well-built team is a firm's leverage, not its liability. The exposure is not the subconsultant — it is the ungoverned relationship with the subconsultant.

PFTN's 4-Step Strategic Process was built to govern it. Strategic Discovery maps the disciplines a firm routinely subcontracts and the subconsultants it relies on. Risk Assessment pulls the prime agreements and reads the flow-down, indemnity, and standard-of-care language against the actual policy form. Solution Design aligns subconsultant limits, certificate requirements, and contract language so the coverage downstream matches the exposure upstream. Ongoing Optimization re-checks the roster and the certificates every cycle, because a team assembled last year is not the team on file this year.

The firm of record is the firm of exposure. That is fixed by the contract structure and will not change. What a firm controls is whether the subconsultants behind that record are governed with the same discipline the firm applies to its own work — and that control is built long before a claim ever tests it.

The shift starts with one conversation, and the conversation is more valuable before the next contract is signed than after the next error is found.

— Ryan Mefford, President & Risk Advisor