111 New GCCs in Eight Months, 40 in Hyderabad: The First-Year Insurance Programme for a Greenfield Capability Centre

India opened 111 greenfield Global Capability Centres between January and August 2026, against roughly 100 for the whole of 2025, according to Whalesbook's 18 September 2026 report. The same report puts the new jobs at an estimated 70,000 to 75,000 and the annualised economic impact at $2.5 to 2.8 billion. Hyderabad led with 40 new centres, Bengaluru added 30 and Pune 18. Technology firms set up 28 of the new centres, and Nestle, Rockwell Automation and Edwards Lifesciences were among the companies named.

Policy is pushing in the same direction. Whalesbook reported on 4 August 2026 that India is finalising a national GCC policy to streamline approvals, with a target of 5,000 centres by 2030, and PwC noted in May 2026 that Haryana notified its GCC Policy 2026 on 27 May 2026. More centres, opened faster, means more Indian subsidiaries going from incorporation to several hundred employees inside twelve months.

A common insurance pattern in these openings runs as follows. The parent assumes its global programme already covers the new entity. Group risk management adds the Indian subsidiary to the schedule of named insureds, and the local finance lead is told the centre is covered. The gaps surface later, usually at the first claim, the first statutory audit, or the first landlord or client contract review. By then the centre has a signed lease, a fitted-out floor plate, hundreds of employees and live client data, and every gap is more expensive to close.

This post is a sequenced checklist for that first year, organised around the three events that drive a GCC's risk profile: lease signing and fit-out, the hiring ramp, and go-live. It is written for the India finance controller, the parent's risk manager and the broker placing the local programme. For the demand picture behind these numbers, see our analysis of GCC commercial insurance demand; for the building-level exposure, see the GCC office campus property risk profile.

The first decision is structural, and it has to be settled before any policy is bound: which risks of the Indian subsidiary will sit on locally admitted Indian policies, and how those policies connect to the parent's global master programme.

Section 2CB of the Insurance Act, 1938 requires that insurance of property in India (and of ships and aircraft registered in India) be placed with an insurer registered in India unless IRDAI permits otherwise. A foreign master policy that simply lists the Indian subsidiary as an insured does not satisfy this for Indian-situs property and statutory covers. In practice the parent's programme reaches India through a local admitted policy issued by an Indian insurer, usually fronted for the global carrier and reinsured back, with the master policy sitting above it on a difference-in-conditions and difference-in-limits basis.

The checklist for month 0 to 1:

1. Confirm with the parent's broker which lines the global programme expects to front locally (property, general liability, employers liability, cyber, D&O) and which it expects the subsidiary to buy standalone (group health, employee compensation, motor if any).
2. Get the fronting insurer, the local policy wording and the premium allocation in writing. The Indian entity pays the local premium and books the expense, so transfer pricing and GST on premium need to be agreed with the finance team now, not at year-end.
3. Check how the master policy responds above the local policy. A DIC/DIL clause that excludes India, or that only responds where local law permits, can leave the subsidiary with nothing above the local limit.
4. Register the subsidiary on any D&O programme as a named subsidiary and confirm the Indian directors (often secondees plus one resident director) are insured persons.

Our detailed note on local admitted policies and fronting for inbound MNCs covers the mechanics of fronting and reinsurance back to the global carrier.

Most GCCs start in leased Grade A space in an IT park or SEZ, and the lease is usually the first contract that forces an insurance conversation. Landlord leases in Hyderabad, Bengaluru and Pune typically require the tenant to insure its own fit-out, contents and equipment, to carry public liability at a stated limit, and to waive subrogation against the landlord or name the landlord as an additional insured.

The fit-out phase is a period of concentrated value and concentrated hazard. Interior contractors, hot work, temporary electrical connections and incomplete fire detection all coexist on a floor plate that will soon hold several crore of IT equipment.

What to place before the fit-out contractor mobilises

• Contractors all risks for the fit-out works, either bought by the tenant or required from the fit-out contractor with the tenant named as principal. Check who carries the cover for free-issue materials and tenant-supplied equipment.
• A fire and special perils policy (standard fire wording or a property all risks wording if the master programme allows it) on fit-out, furniture, IT hardware and stock, declared on a reinstatement value basis. Fit-out values rise every month during the build, so either use a declaration basis or set the sum insured at the completed value from day one.
• Electronic equipment insurance for servers, network gear and end-user devices, which a fire policy does not cover for breakdown or accidental damage.
• Business interruption cover sized on the cost to the parent of a delayed or interrupted centre, which for a cost centre is usually increased cost of working and contractual penalties rather than lost profit.

The business interruption point is where GCCs most often get the structure wrong. A captive centre does not earn revenue in the conventional sense; it charges the parent on a cost-plus basis. A loss of profits wording built for a revenue-earning business can respond poorly. Agree with the insurer up front that the basis of indemnity is the additional expenditure to maintain service from an alternative site, plus any service-level penalties payable to the parent or external clients.

Ask the landlord for the building's fire NOC, sprinkler and detection details at lease signing. Insurers will ask for them at proposal stage, and a tenant that cannot produce them often faces a higher rate or a survey requirement that delays binding.

A greenfield GCC can go from a founding team of 20 to several hundred employees within the first year. Every hire changes the employee benefits programme, and the statutory baseline changed in 2025.

The four labour codes were brought into force together on 21 November 2025, and the statutory wage definition puts basic wages at no less than half of total remuneration. That re-bases gratuity, provident fund, ESI and the employees' compensation quantum. A new GCC has the advantage of designing its compensation structure and its benefits programme on the new basis from the start, rather than correcting an old one. Our post on the four labour codes and employer liability insurance sets out the changes in detail.

The employee benefits stack to put in place before the first cohort joins

1. Group health insurance with a clear policy on parents, spouse and children, maternity, and a corporate buffer. Global parents often benchmark against home-country plans; set the Indian plan against Indian market norms and your competitor GCCs in the same city instead.
2. Group personal accident and group term life, declared on the same salary basis the HR system uses, so claims are not disputed over which wage definition applies.
3. Employees' compensation and employers liability for all staff, including facilities, security and housekeeping personnel engaged through contractors. Statutory liability for contract labour can fall back on the principal employer if the contractor's cover lapses.
4. A gratuity funding decision: unfunded provision, a gratuity trust with an insurer-managed fund, or deferral until headcount stabilises. Fixed-term employees now become eligible after one year, which matters for GCCs that hire a large contract-to-hire cohort.

Group health is the line where a fast hiring ramp causes the most friction. The policy is often placed at the founding headcount with a premium based on a small, young group. When headcount triples, mid-term additions are charged pro rata, and the renewal is priced on a claims experience that reflects a much larger population. Agree an addition and deletion mechanism, a premium deposit, and a rate-holding clause for mid-term joiners in the first contract.

By go-live the centre is processing parent data, often customer data, and sometimes client data under contracts the parent has signed with third parties. The cyber and professional indemnity exposure is real from the first production access.

The Digital Personal Data Protection Act, 2023 applies to personal data processed in India, and a GCC processing data on behalf of the parent will typically be a data processor to the parent's data fiduciary. That contractual position needs to be reflected in the insurance. The question to resolve is whether the parent's global cyber tower covers an incident originating at the Indian subsidiary, including Indian regulatory proceedings, Indian forensic and legal costs, and notification costs in India.

Points to check in the parent's cyber and PI programme

• Whether the Indian subsidiary is a named insured, and whether its systems are within the definition of insured computer systems.
• Whether a local admitted cyber policy is required and, if so, how its limit sits beneath the global tower. A small local primary with the global tower attaching above is common.
• Whether the retention applies per insured entity or per claim. A global retention sized for the parent may be larger than the Indian subsidiary's entire annual IT budget, which effectively makes the subsidiary self-insured.
• Whether professional indemnity responds to claims from the parent itself, since an insured-versus-insured exclusion can remove cover for the most likely claimant against a captive centre.

Shared-services centres carry a specific liability profile, and our post on GCC shared-services liability insurance covers the professional indemnity and contractual liability angle in more depth.

Go-live changes the risk profile again. The centre now has client-facing service levels, production system access, and in many cases transport for night-shift employees. The last quarter of the first year is the time to close remaining gaps and prepare the evidence the first statutory audit and the first renewal will need.

The go-live checklist:

1. Commercial general and public liability at the limit the lease and any client contracts require, with additional insured and waiver of subrogation endorsements issued and filed.
2. Employee transport liability, where the centre contracts cab operators for night shifts. Confirm the operator's motor cover and the subsidiary's own contingent liability.
3. Fidelity guarantee or crime cover if the centre runs finance, payments or procurement processes for the parent. A finance shared-services GCC handling vendor payments carries social-engineering and payment-fraud exposure that a property or cyber policy may not respond to.
4. An insurance register for the subsidiary: every policy, its insurer, limit, deductible, expiry date, and the contract or statute that requires it. Auditors ask for it, and it is the single document that makes the first renewal efficient.
5. A claims protocol: who notifies which insurer, within what time, and how the local and master policies are notified together so the global layer is not prejudiced by late notice.

The first renewal is where the year's growth gets priced. Headcount, floor area, equipment values and data volumes will all be several times what was declared at inception. Declare them accurately; an under-declared sum insured on a fire policy invites the average clause at the first material loss, and an under-declared headcount distorts group health pricing for the following year.

Location choices now carry policy differences. Haryana notified its GCC Policy 2026 on 27 May 2026, according to PwC, and India is finalising a national GCC policy aimed at streamlining approvals, with a 5,000-centre target by 2030, as Whalesbook reported in August 2026. These policies are primarily about incentives and approvals, not insurance, but they influence the risk profile in three ways a risk manager should note.

First, incentive-linked location decisions sometimes favour newer campuses or tier-2 locations where fire protection, flood history and emergency response differ from established IT corridors. The property underwriting and the business continuity plan should reflect the actual site, not the parent's assumption of a Grade A metro campus.

Second, faster approvals compress the timeline between incorporation and operations. A centre that once had six months between entity setup and first hire may now have six weeks. The insurance sequence in this post should start the day the entity is incorporated, not the day facilities signs the lease.

Third, incentive schemes often attach conditions on employment levels and capital investment. Where incentives are tied to asset values or headcount, keep insurance declarations consistent with the figures submitted to the state, because a mismatch between declared sum insured and claimed investment is an avoidable question at the first claim or audit.