D&O Liability Insurance for Indian SMEs: Not Just for Listed Companies

The popular image of D&O claims is a SEBI enforcement action against a listed company's independent directors, or a shareholder derivative suit against a Nifty 500 boardroom. That image is outdated and misleading. The regulatory and litigation environment in India since 2019 has expanded personal liability for company directors in ways that affect every private limited company with more than a handful of employees, meaningful revenues, or any form of institutional capital.

An SME director in India faces personal financial exposure from at least six independent directions. Tax authorities, whether under the Income Tax Act or the GST regime, routinely invoke provisions that create joint and several personal liability on directors for a company's unpaid dues. Employees can file complaints with the Employees' Provident Fund Organisation or the ESIC that name directors personally for non-remittance of PF and ESI contributions. Suppliers, especially MSME vendors, can now pursue buyer-company directors in MSME Samadhaan proceedings or through the MSME facilitation councils for delayed payments beyond 45 days, with the MSMED Act 2006 creating quasi-criminal exposure for persistent defaulters. Environmental violations under National Green Tribunal orders extend personal liability to directors responsible for operations. And when a bank guarantee is invoked after a project fails, lenders sometimes pursue directors under indemnity clauses signed in their personal capacity alongside the corporate guarantee.

None of this is hypothetical. D&O claims in the unlisted segment are rising, driven partly by the proliferation of regulatory forums and partly by creditors and counterparties who have learned that naming directors personally accelerates settlements. A D&O policy does not prevent these claims from being filed. It funds the legal defence and, where covered, pays the settlement or judgment.

The Companies Act 2013 replaced its 1956 predecessor with a significantly more aggressive personal liability framework for directors. Three sections are particularly relevant for SME owners.

Section 166 codifies the duties of directors: to act in good faith in the best interests of the company, not to act in conflict of interest, and not to acquire undue gain or advantage. A breach of Section 166 allows the company itself, or a member acting derivatively, to recover the gain from the director personally. For family-owned SMEs where the promoter also occupies the role of director and occasionally benefits from related-party transactions, Section 166 claims are a realistic exposure.

Section 447 defines fraud in the broadest terms and makes it a criminal offence attracting imprisonment between six months and ten years and unlimited fines. The definition covers any act, omission, concealment of fact, or abuse of position committed with intent to deceive, in connection with any matter relating to the company. This is not limited to financial fraud in the accounting sense. A director who provides inflated projections to a prospective investor, or who misrepresents the company's order book to a lender, is potentially within Section 447's scope.

Section 149(12) creates a specific carve-out for independent directors and non-executive directors, limiting their liability to acts of omission or commission where they had knowledge through board processes and failed to act. But for executive directors and managing directors of SMEs, who are typically involved in all significant business decisions, this protection does not apply.

The Insolvency and Bankruptcy Code 2016, operating through the NCLT, adds another dimension. When a company enters Corporate Insolvency Resolution Process, the resolution professional and the Committee of Creditors can initiate avoidance transactions proceedings under Sections 43 to 51, challenging preferential payments, undervalued transactions, and extortionate credit transactions made in the run-up to insolvency. Directors who authorised those transactions face claims for the amounts returned to the estate. The SFIO (Serious Fraud Investigation Office) can investigate and prosecute directors of any company, listed or not, where fraud is alleged in connection with insolvency.

A common misconception is that SEBI's enforcement jurisdiction is confined to listed entities and their officers. SEBI's powers extend to any person or entity that interacts with securities markets, including unlisted companies that have issued securities privately, raised funds through private placements, or are involved in transactions that affect listed entities. An unlisted subsidiary of a listed company, an SME that has raised funds through private debentures, or an NBFC classified as a listed entity for SEBI purposes can all face SEBI orders naming directors.

The SFIO's jurisdiction is broader still. Under Section 212 of the Companies Act 2013, the government can order an SFIO investigation into any company where fraud is suspected, regardless of listing status. SFIO investigations can result in arrest, prosecution, and attachment of personal assets of directors. The pace of SFIO investigations accelerated after the IL&FS collapse in 2018 and has remained elevated since. SME directors whose companies are connected to a supply chain or financing arrangement that involves a company under SFIO scrutiny can find themselves drawn into the investigation.

The NCLT's commercial litigation jurisdiction extends to all registered companies. Oppression and mismanagement petitions under Sections 241 and 242 of the Companies Act 2013 are filed against directors of private limited companies with roughly the same frequency as against listed-company directors, with minority shareholder disputes in family businesses being a particularly common trigger. Minority shareholders who allege that promoter-directors have siphoned value through related-party transactions, or that the company has been mismanaged for personal benefit, can seek NCLT orders requiring directors to compensate the company.

For VC and PE-backed SMEs, this regulatory environment translates directly into investor requirements. Institutional investors, both domestic and foreign, have been requiring D&O insurance as a condition of funding for companies at Series A and above since approximately 2020, and increasingly for seed-stage companies. The investor's concern is twofold: protecting the portfolio company's directors (including their own nominee directors) from personal liability, and preserving management team stability by ensuring that a frivolous regulatory action does not drain the founders' personal finances.

D&O insurance is structured in two or three parts depending on the insurer and the policy form. Understanding this structure is essential for SME owners because the coverage that matters most in a privately held company scenario is different from what matters in a listed company context.

Side A coverage pays on behalf of individual directors and officers when the company cannot or will not indemnify them. This arises when the company is insolvent (common in NCLT insolvency proceedings), when local law prohibits the company from paying the director's defence costs, or when the company itself is the adverse party. Side A is the core protection for individual directors. In an SME context, where the company may not have the liquidity to advance legal fees during an ongoing investigation, Side A fills a critical gap. Side A coverage is personal to the director: creditors of the company typically cannot attach it even in insolvency.

Side B coverage reimburses the company when it has indemnified its directors. When a solvent SME pays its director's legal fees or settlement, Side B recovers those costs from the insurer. This is the coverage used most frequently in practice, because most SMEs will advance defence costs for directors even when the legal outcome is uncertain.

Side C coverage, also called entity coverage, protects the company itself for securities claims. In listed-company D&O, entity coverage is central because shareholder class actions are filed against the company as well as its directors. For unlisted SMEs, entity coverage is less relevant because the company is not exposed to public securities claims. Most SME D&O policies are purchased without Side C, which reduces premium.

The policy is written on a claims-made basis: coverage is triggered when the claim is first made during the policy period, not when the alleged wrongful act occurred. This means continuity of coverage matters. An SME that lets its D&O policy lapse creates a gap: claims arising from acts committed during the lapsed period that are first made after the lapse are not covered. For companies that have had regulatory notices or investigations initiated, a retroactive date clause must be carefully reviewed.

Standard exclusions relevant to SME owners include:

• Fraud, dishonesty, or wilful misconduct (established by final adjudication, not merely alleged)
• Personal profit or advantage gained without the knowledge of the company
• Bodily injury and property damage (covered under other liability policies)
• Prior and pending litigation (claims already filed before the policy inception)
• Pollution (requires a separate environmental liability policy)

The fraud exclusion warrants particular attention. Because many GST and income tax claims against directors are framed as fraud allegations, SME owners sometimes assume their D&O policy will not respond. In practice, the exclusion applies only once fraud is established by a final adjudication. Defence costs are covered even for claims alleging fraud, up to the point of a court or tribunal finding the director guilty.

D&O insurance is available only for incorporated companies: private limited companies, public limited companies, and one-person companies registered under the Companies Act 2013. It is not available for sole proprietorships, partnership firms, or Limited Liability Partnerships.

This distinction matters because a large segment of the Indian MSME sector operates as proprietorships or partnerships. A proprietor's personal liability for business acts is total and unlimited by definition; there is no corporate shield separating personal and business assets. For proprietorships, the relevant liability products are Professional Indemnity insurance (for errors and omissions in professional services) and Commercial General Liability insurance (for third-party bodily injury and property damage), not D&O.

For partnership firms, partners are jointly and severally liable for the firm's debts under the Indian Partnership Act 1932. D&O insurance does not apply because partners are not officers of a company in the statutory sense. However, if the partnership is operated through a corporate vehicle - for example, a private limited company in which the partners are directors - D&O applies to their directorial roles.

Limited Liability Partnerships registered under the LLP Act 2008 occupy an intermediate position. Partners of an LLP have limited liability for the LLP's debts, similar to shareholders of a company. However, partners who have acted fraudulently or improperly lose their limited liability shield. Some insurers offer management liability products adapted for LLPs, but standardised D&O coverage for LLPs is not yet widely available in the Indian market as of 2026.

The practical implication for SME owners running significant businesses through non-corporate structures is that conversion to a private limited company is a prerequisite for accessing D&O insurance. This is one of the less-discussed benefits of incorporation.

D&O insurance is one component of a broader management protection and business continuity framework. SME owners often ask how it interacts with other policies they carry, particularly Key Man Insurance.

Key Man Insurance is a life and disability policy taken by the company on the life of a critical individual - founder, CEO, key technical expert - with the company as beneficiary. Its purpose is to compensate the company for the financial loss arising from the death or permanent disability of that individual: recruitment cost, revenue disruption, loan repayment obligations triggered by the key person's departure. Key Man insurance is a property of the company, not the individual. It pays the company, not the director personally.

D&O insurance protects the individual director against third-party claims arising from alleged wrongful acts in their managerial capacity. It does not pay the company for the loss of a key person; it pays the director's legal fees and liability settlements. The two policies serve entirely different purposes and are not substitutes for each other.

The interaction between D&O and Professional Indemnity insurance is subtler. PI covers errors and omissions in the delivery of professional services: a consultant giving wrong advice, a software company delivering defective code. D&O covers wrongful acts in the management of the company: a director authorising a transaction without board approval, failing to file returns, or misrepresenting the company's financial position to a lender. For companies that provide professional services (IT services, consulting, healthcare), both policies are relevant and their scopes do not overlap. A PI claim arises from a service delivery failure; a D&O claim arises from a management decision. A single event can sometimes give rise to both.

For VC-backed SMEs with nominee directors from the investor, the investor's own fund-level D&O or investment manager liability policy may provide some coverage for the nominee director. However, relying solely on the fund's policy creates coordination complexity and potential coverage gaps. Most institutional investors require the portfolio company to maintain its own D&O policy with the nominee director named as an insured.

D&O premium for an unlisted private limited company in India is determined by the sum insured (policy limit), the company's revenue and balance sheet size, its industry, the number of directors and officers covered, and any prior litigation or regulatory history.

For an SME with annual revenues between INR 10 crore and INR 100 crore, standard D&O policy limits range from INR 2 crore to INR 10 crore. Annual premiums for this segment typically fall between INR 50,000 and INR 5 lakh, with the range reflecting the spread in company size, industry risk, and limit chosen. A manufacturing company with 20 employees, a clean compliance record, and an INR 2 crore limit might pay INR 55,000 to INR 75,000 per annum. An IT services company with INR 80 crore in revenue, three institutional investors, two nominee directors, and an INR 10 crore limit might pay INR 3.5 to 5 lakh per annum.

Industry affects pricing materially. Real estate and construction companies attract loadings of 25 to 40% over base rates because of the elevated incidence of regulatory disputes, project delays, and lender litigation. Financial services companies and NBFCs attract similar loadings. Manufacturing companies with export revenues are priced more favourably than those selling purely in the domestic market, because export-oriented manufacturers tend to have stronger compliance practices.

The underwriting questionnaire for SME D&O typically covers: the company's articles of association and indemnification provisions for directors; any ongoing litigation, regulatory inquiries, or show-cause notices against the company or its directors; whether the company is current on all statutory filings (ROC, GST, income tax, PF/ESI); revenue and profit for the past three financial years; details of external investors and any investor rights agreements; and the number of jurisdictions in which the company operates.

Disclosure is material. A company that fails to disclose an ongoing GST notice or an NCLT petition at the time of application may find that the insurer avoids the policy when a claim is made. The principle of utmost good faith under the Insurance Act 1938 and Section 45 obligations apply with full force.

For companies seeking their first D&O policy, renewal pricing in subsequent years is typically 5 to 15% lower than inception premium if the policy has been claim-free, because the insurer has accumulated data on the company's actual risk profile. Building a claims-free track record is the most reliable route to competitive long-term D&O pricing for an unlisted SME.

The process of buying D&O for an unlisted SME involves choices that materially affect the coverage actually available when a claim arises. Several practical points deserve attention before binding.

First, confirm that the policy schedule lists all directors, officers, and key managers by name or by reference to their positions. Some insurers issue SME D&O on a blanket basis covering all persons in managerial positions past, present, and future, which avoids mid-term endorsements when directors are added. Others require explicit listing, and an unnamed director may not be covered.

Second, review the retroactive date. D&O is claims-made, and the retroactive date defines how far back in time the insurer will cover alleged wrongful acts. Ideally the retroactive date is set to the company's incorporation date or the director's appointment date. Restricting the retroactive date to the policy's inception date leaves all prior acts uncovered.

Third, confirm the defence costs structure. Most Indian D&O policies pay defence costs within the limit of indemnity, which means that legal fees paid during a long-running investigation reduce the amount available for any eventual settlement or judgment. For SMEs facing regulatory investigations that may run for several years, the erosion of limits by defence costs is a material concern. Some policies offer defence costs outside the limit as an extension, though this increases premium.

Fourth, check the territorial scope. An IT services company or a manufacturing exporter may have directors who travel internationally or whose decisions affect overseas operations. If the policy covers only India-domiciled claims, a foreign regulatory or court action against the director may not be covered.

Fifth, understand the notification obligations. D&O policies require prompt notification of claims and circumstances that might give rise to claims. A director who receives a regulatory notice but does not inform the insurer because the matter seems minor may later find that the insurer denies coverage on late-notification grounds. Err on the side of early notification.