The Insurance Gap in India's D2C Boom
India's direct-to-consumer sector has grown at an extraordinary pace. By 2025, the number of D2C brands operating online in India crossed 800, spanning categories from skincare and nutraceuticals to packaged snacks, pet food, athleisure, and personal care devices. Collectively, these brands serve tens of millions of customers through their own websites, marketplace listings on Amazon and Flipkart, quick-commerce platforms like Blinkit and Zepto, and increasingly through offline retail partnerships. The capital flowing into this sector has been substantial: Indian D2C brands raised over USD 2 billion in venture funding between 2021 and 2024, and several have crossed INR 500 crore in annual revenue.
Yet for all the sophistication that D2C founders bring to product development, brand building, and performance marketing, insurance remains a consistent blind spot. The typical early-stage D2C brand carries, at best, a fire policy on its warehouse and perhaps a group health plan for employees. Product liability insurance is rarely purchased before the first legal notice arrives. Recall coverage is almost unheard of. The contractual risks embedded in influencer agreements, co-branding deals, and marketplace terms of service are seldom analysed through an insurance lens.
This gap is not simply a matter of founders being careless. The D2C insurance problem is structural. Traditional insurance brokers in India are geared toward manufacturing, real estate, and large corporate accounts. They do not naturally understand the risk profile of a brand that manufactures through contract manufacturers, stores inventory in third-party fulfilment centres, sells through a patchwork of online and offline channels, and relies on a network of freelance content creators for marketing. The standard insurance products available in the Indian market were designed for an era when the manufacturer, distributor, and retailer were separate entities with clear contractual boundaries. In the D2C model, the brand is all three simultaneously, and the liability exposure at each stage accumulates rather than being distributed.
The consequences of this insurance gap are becoming visible. In 2023 and 2024, several Indian D2C brands in the beauty and wellness space received legal notices under the Consumer Protection Act, 2019, alleging adverse reactions from skincare products, misleading claims about supplement efficacy, and failure to disclose ingredient risks. At least two prominent brands faced product recall demands from FSSAI for food products that failed laboratory testing. In each case, the founders discovered that their existing insurance provided no meaningful protection against these specific exposures.
The cost of being uninsured in these situations is not limited to the legal defence expenses or the settlement amounts. A product liability crisis for a D2C brand triggers a cascade of secondary costs: marketplace delisting (with lost revenue during the suspension period), negative press coverage that permanently damages brand equity, influencer disassociation as content creators distance themselves from controversy, and investor anxiety that can freeze the next funding round. None of these consequential losses are recoverable through insurance, but the primary liability costs, legal defence, settlements, and recall expenses, can and should be transferred.
This article maps the specific insurance blind spots that Indian D2C brands face across their operations, from the products they sell to the data they collect, and provides a practical framework for what to buy, in what order, and at what stage of growth. The analysis is grounded in the Indian regulatory environment, including the Consumer Protection Act 2019, the Food Safety and Standards Act, the Drugs and Cosmetics Act, and the Digital Personal Data Protection Act 2023, because the liability exposure for each category of D2C brand is shaped by which regulator has jurisdiction over its products.
A note on scope: this article addresses D2C brands that sell physical products directly to consumers in India. Pure-play D2C software or SaaS companies face a different risk profile (primarily professional indemnity and cyber liability) that is covered in separate analyses. Similarly, marketplace operators like Amazon or Flipkart have their own distinct insurance requirements as intermediaries rather than product sellers.
Product Liability for Cosmetics, Supplements, and Ingestibles: What the Consumer Protection Act Means for D2C Founders
The Consumer Protection Act, 2019 (CPA 2019) fundamentally changed the product liability exposure for every business that places consumer products into the Indian market. For D2C brands, this change is especially significant because the CPA 2019 imposes liability on three categories of parties: the product manufacturer, the product seller, and the product service provider. A D2C brand that designs a product, has it manufactured by a contract manufacturer, and sells it through its own website occupies at least two of these three categories simultaneously.
Under Section 84 of the CPA 2019, a product manufacturer is liable for harm caused by a defective product regardless of whether the manufacturer was negligent. This is strict liability: the consumer does not need to prove that the brand was careless, only that the product was defective and that the defect caused harm. A 'defect' includes manufacturing defects (the product deviated from its intended design), design defects (the product's design itself was unreasonably dangerous), and warning defects (the product lacked adequate instructions or warnings about risks of use).
For D2C brands in beauty and personal care, this creates acute exposure. A skincare product that causes contact dermatitis, a hair treatment that causes hair loss, or a cosmetic product that contains an undisclosed allergen can trigger strict product liability claims. The defence that the contract manufacturer was responsible for the formulation does not insulate the D2C brand, because the brand is the 'product seller' under Section 86 and bears independent liability for selling a defective product. The brand can seek indemnity from the contract manufacturer, but only if the manufacturing agreement contains an appropriate indemnification clause backed by the manufacturer's own insurance, which in India is frequently absent.
The exposure is even more acute for D2C brands selling ingestible products: dietary supplements, nutraceuticals, functional foods, protein powders, herbal formulations, and similar products that consumers put into their bodies. These products are regulated under either the Food Safety and Standards Act, 2006 (for food products and supplements) or the Drugs and Cosmetics Act, 1940 (for products making therapeutic claims). The regulatory classification determines which labelling requirements apply, which ingredients are permitted, and what product claims are lawful. A D2C brand that sells a turmeric supplement claiming it 'boosts immunity' or a collagen powder claiming it 'reverses skin aging' is making product claims that may cross the line from food claims (regulated by FSSAI) into drug claims (regulated by CDSCO), exposing the brand to both regulatory penalties and product liability claims based on misleading advertising.
Product liability insurance in the Indian market is available as a standalone policy or as an extension to a Commercial General Liability (CGL) policy. The policy typically covers legal defence costs, settlement amounts, and court-awarded damages arising from bodily injury or property damage caused by the insured's products. The key coverage elements that D2C brands should evaluate include the territorial scope (does the policy cover claims arising from products sold in India only, or also products shipped internationally?), the retroactive date (are claims arising from products sold before the policy inception covered?), the defence cost treatment (are legal defence costs included within the policy limit or payable in addition to it?), and the definition of 'insured product' (does it include all products sold under the brand, or only those specifically scheduled?).
The most common coverage gap in product liability policies purchased by Indian D2C brands is the exclusion for claims arising from products that fail to comply with applicable regulations. If a cosmetic product does not carry the labelling required under the Drugs and Cosmetics Rules, or a food product does not meet the standards prescribed under FSSAI regulations, the product liability insurer may deny coverage on the basis that the product was sold in violation of law. This exclusion effectively makes regulatory compliance a precondition for insurance coverage, meaning that the brands most likely to face product liability claims (those with compliance gaps) are also the ones most likely to have their claims denied.
D2C founders should take three specific actions regarding product liability insurance. First, purchase a standalone product liability policy with a sum insured of at least INR 1 crore at the Series A stage, scaling to INR 5-10 crore as revenue crosses INR 50 crore. Second, ensure that the policy's definition of 'insured product' is broad enough to cover all SKUs, including new product launches during the policy period. Third, engage a regulatory compliance consultant to audit product labelling, ingredient declarations, and marketing claims before purchasing the policy, because compliance gaps that exist at inception will be treated as pre-existing conditions that the insurer can use to deny future claims.
Product Recall Costs: The Risk No D2C Brand Budgets For
A product recall is among the most financially devastating events a D2C brand can experience, and it is one that very few Indian founders plan for. The recall exposure for D2C brands is real and growing. FSSAI issued over 200 recall or withdrawal orders for food products in India during 2023-2024, many of them targeting brands that sell directly to consumers through e-commerce channels. The Central Drugs Standard Control Organisation (CDSCO) similarly directed recalls of cosmetic and personal care products found to contain prohibited ingredients or exceeding permitted levels of heavy metals.
The costs of a product recall extend far beyond the cost of retrieving the defective product from customers. A recall involves multiple cost categories, most of which are not covered by a standard product liability policy. These include notification costs (communicating the recall to customers through email, SMS, social media, and potentially newspaper advertisements), logistics costs (arranging for the return or collection of the defective product from customers, retail partners, and fulfilment centres across the country), replacement or refund costs (providing customers with a replacement product or full refund), testing and investigation costs (engaging laboratories to test retained samples and determine the scope and cause of the defect), storage and destruction costs (warehousing recalled inventory and arranging for safe disposal in compliance with environmental regulations), and third-party consultant fees (crisis communications advisors, regulatory consultants, and legal counsel).
For a D2C brand with national distribution, even a modest recall affecting a single SKU can cost INR 25-50 lakh in direct expenses, with larger recalls easily exceeding INR 1-2 crore. These figures exclude the indirect costs of lost sales during the recall period, marketplace penalties, damaged brand reputation, and potential regulatory fines.
Product recall insurance is a separate policy from product liability insurance, and the two serve different functions. Product liability insurance covers third-party claims for bodily injury or property damage caused by the product. Product recall insurance covers the first-party costs incurred by the brand in conducting the recall itself. The distinction matters because a recall can be triggered even when no consumer has been injured: FSSAI can mandate a recall based on laboratory testing that reveals a contaminant, without any reported consumer harm. In that scenario, the product liability policy provides no coverage (no third-party claim exists), but the recall costs are substantial and real.
The Indian market for product recall insurance is relatively undeveloped compared to the US and European markets, but coverage is available from several global insurers operating in India, typically through their Indian subsidiaries or as cross-border placements. The policies are generally written on a claims-made basis with limits ranging from INR 50 lakh to INR 10 crore. Key policy features to evaluate include the trigger definition (does the policy respond only to government-mandated recalls, or also to voluntary recalls initiated by the brand?), the scope of covered costs (does it include notification, logistics, replacement, testing, storage, and destruction, or only some of these?), the waiting period (many recall policies include a 24-72 hour waiting period before coverage activates), and the coverage for accidental contamination versus intentional adulteration.
A specific gap that D2C food and supplement brands should be aware of: most product recall policies exclude recalls triggered by mislabelling or incorrect ingredient declarations, treating these as foreseeable errors rather than insurable accidents. Since mislabelling is one of the most common reasons FSSAI initiates recall actions against D2C food brands, this exclusion can render the recall policy significantly less useful than the brand anticipated.
The practical reality is that most Indian D2C brands at the early and growth stage cannot justify the premium cost of a standalone product recall policy, which typically ranges from INR 2-5 lakh annually for INR 50 lakh to INR 1 crore of coverage. The better approach for brands in the INR 10-100 crore revenue range is to negotiate a product recall extension on their product liability policy, which provides a modest recall cost limit (typically INR 10-25 lakh) at a fraction of the standalone policy premium. This extension will not cover a large-scale recall, but it provides a meaningful buffer for the targeted, single-SKU recalls that are most common for growing D2C brands. As the brand scales beyond INR 100 crore in revenue and the product portfolio diversifies, transitioning to a standalone recall policy becomes both more affordable (as the premium scales with volume) and more necessary (as the recall exposure increases with SKU count and geographic reach).
Contractual Liability from Influencer and Affiliate Agreements
D2C brands in India spend between 15% and 40% of their marketing budgets on influencer partnerships, affiliate marketing, and content creator collaborations. This expenditure creates a category of liability that sits entirely outside the coverage of standard commercial insurance policies: contractual liability arising from the representations, commitments, and indemnification obligations embedded in influencer and affiliate agreements.
The liability flows in two directions. First, the brand faces exposure from claims by consumers who relied on an influencer's endorsement of the product. Under the Consumer Protection Act 2019 and the ASCI (Advertising Standards Council of India) guidelines on influencer advertising, the brand is responsible for the accuracy of claims made by influencers in paid partnerships. If an influencer claims that a D2C skincare product 'cures acne in 7 days' or that a supplement 'guarantees weight loss,' the brand can be held liable for misleading advertising even if the brand's own marketing materials made no such claim. The ASCI guidelines, updated in 2021 and further tightened in 2023, require influencers to disclose paid partnerships and prohibit them from making claims that the brand itself could not legally make. However, enforcement is inconsistent, and many D2C brands exercise minimal control over the specific language influencers use in their content.
Second, the brand faces contractual liability from the terms of its agreements with influencers and affiliate networks. A poorly drafted influencer agreement can create obligations that the brand did not intend. Common problematic clauses include broad indemnification provisions (where the brand agrees to indemnify the influencer against all claims arising from the collaboration, including claims caused by the influencer's own misconduct), exclusivity penalties (where terminating the relationship triggers significant financial penalties), intellectual property assignments (where the agreement grants the influencer perpetual rights to use the brand's name and trademarks), and performance guarantees (where the brand guarantees minimum engagement or sales metrics that it cannot control).
The insurance implications are specific. A standard CGL policy covers third-party claims for bodily injury and property damage, but it typically excludes contractual liability unless the liability would have existed even without the contract. As a result, if a consumer sues the brand for injuries caused by a product that an influencer endorsed, the product liability policy responds (because the liability arises from the product defect, not the influencer contract). But if an influencer sues the brand for breach of contract, or if the brand incurs costs because an influencer's unauthorized claims triggered a regulatory action, neither the CGL nor the product liability policy provides coverage.
There is no off-the-shelf 'influencer liability' insurance product in the Indian market. The closest available coverage is a media liability or advertising injury policy, which covers claims arising from defamation, invasion of privacy, copyright infringement, and misleading advertising in the brand's own marketing materials. Some media liability policies can be endorsed to extend coverage to claims arising from advertising conducted by authorised representatives, which could potentially cover influencer content if the policy wording is carefully negotiated. However, this is a non-standard extension that requires specific underwriting approval.
The more practical approach for D2C brands is to manage influencer liability through contract design rather than insurance transfer. Every influencer agreement should include a clear scope of authorised claims (specifying exactly what the influencer may and may not say about the product), a requirement that all content be submitted to the brand for approval before publication, an indemnification clause that runs from the influencer to the brand (not the reverse) for claims arising from the influencer's deviation from approved content, and a representation from the influencer that they will comply with ASCI disclosure guidelines. The brand should maintain a documented approval process for influencer content, retaining screenshots and written approvals, because this documentation becomes critical evidence if a consumer or regulator later challenges the claims made in influencer content.
For affiliate marketing conducted through networks like Amazon Associates, Cuelinks, or vCommission, the liability profile is different but equally uninsured. Affiliate networks typically require the brand (as the advertiser) to indemnify the network against all claims arising from the brand's products or marketing materials. This indemnification obligation is a contractual liability that falls outside standard insurance coverage. The brand's exposure is amplified because it has no control over how affiliate publishers present its products: an affiliate website might make exaggerated claims, use misleading comparison charts, or promote the product alongside unsuitable content, all of which could generate consumer complaints or regulatory scrutiny that flows back to the brand through the network's indemnification clause.
Warehousing, Fulfilment, and Last-Mile Delivery Gaps
The physical supply chain of a D2C brand creates insurance exposures at every stage, from inventory storage to last-mile delivery, and the typical D2C insurance programme leaves significant gaps at each point.
Most D2C brands do not operate their own warehouses. They store inventory in third-party fulfilment centres operated by logistics companies such as Delhivery, Shiprocket, or Amazon's Fulfilment by Amazon (FBA) programme. The terms of service of these fulfilment providers include limitations on liability for damage to or loss of stored inventory that are far more restrictive than most brand founders realise. Amazon FBA, for instance, provides reimbursement for lost or damaged inventory, but the reimbursement is based on Amazon's assessment of the product's selling price minus fees, not the brand's cost of goods or the retail price. Third-party logistics (3PL) providers typically cap their liability at INR 50,000 per consignment or a fixed amount per kilogramme, whichever is lower, unless the brand purchases additional cargo insurance through the logistics provider.
The insurance gap arises because the brand's own fire or property policy covers inventory stored at the brand's own premises (the address declared in the policy schedule) but does not automatically extend to inventory stored at third-party locations. An extension for 'stock stored at locations other than the insured premises' can be added to the property policy, but only if the brand specifically declares the third-party warehouse locations and the maximum value of stock stored at each. Many D2C brands store inventory across multiple fulfilment centres and frequently shift stock between them based on demand patterns; the stock declaration in the insurance policy often does not keep pace with these movements, creating an underinsurance exposure.
Stock in transit is another gap. The standard SFSP policy does not cover goods in transit. An Inland Transit (Marine Cargo) policy is required to cover inventory while it is being transported between the manufacturer, the brand's warehouse, third-party fulfilment centres, and ultimately the customer. The Marine Cargo policy should be structured on an open cover basis (covering all shipments during the policy period without requiring individual declaration for each consignment) with 'warehouse to warehouse' transit coverage.
Last-mile delivery creates a specific and often overlooked liability exposure. When a D2C brand ships a product to a customer's home, the delivery agent enters the customer's premises to hand over the package. If the delivery agent causes property damage (drops a heavy package on the customer's floor, damages a gate or door) or, in rare cases, causes bodily injury, the brand may face a third-party liability claim. When the brand uses its own delivery fleet, this exposure is covered under the brand's CGL policy. When the brand uses a third-party courier service, the courier's liability insurance should respond, but the brand remains the party the customer looks to for resolution, and a gap in the courier's coverage becomes the brand's problem.
Product damage during transit and delivery is a cost that D2C brands routinely absorb without recognising it as an insurable risk. Industry data suggests that 2-5% of D2C shipments in India arrive damaged, with higher rates for fragile products (glassware, electronics, cosmetics in glass packaging). Most brands treat this as a cost of doing business and simply reship or refund. For a brand doing INR 50 crore in annual revenue with a 3% transit damage rate and an average order value of INR 1,200, the annual cost of transit damage and reshipment is approximately INR 18 lakh. A Marine Cargo policy with an appropriate deductible can transfer a significant portion of this cost to the insurer.
Cold chain products (frozen foods, dairy-based supplements, probiotics, and certain cosmetics that require temperature-controlled storage and transport) face an additional gap. Standard inland transit policies do not cover spoilage due to temperature excursion unless a specific 'temperature variation' or 'reefer breakdown' clause is included. D2C brands shipping cold chain products should verify that their transit policy explicitly covers loss or damage arising from failure of the refrigeration unit or deviation from the required temperature range during transit.
The warehousing and fulfilment insurance checklist for D2C brands should include four elements. First, a property policy with a 'stock at other locations' extension covering all third-party fulfilment centres where inventory is stored. Second, an open cover Marine Cargo policy for all inland transit movements on a warehouse-to-warehouse basis. Third, a CGL policy covering third-party bodily injury and property damage arising from delivery operations. Fourth, a contract review of all 3PL and fulfilment provider agreements to identify gaps between the provider's liability cap and the actual value of inventory at risk.
DPDP Act Exposure: Why Your Customer Data Is an Uninsured Liability
The Digital Personal Data Protection Act, 2023 (DPDP Act) introduces a new category of financial liability for every D2C brand operating in India. While the Act's rules and enforcement mechanisms are still being finalised as of early 2026, the legislation itself is in force, and D2C brands that collect, store, and process customer personal data are already subject to its obligations.
D2C brands are among the most data-intensive consumer businesses in India. A typical D2C brand collects customer names, email addresses, phone numbers, delivery addresses, and payment information through its own website and app. It tracks browsing behaviour, purchase history, and product preferences through cookies and analytics tools. It stores customer communication records across email, WhatsApp, and customer service chat. It shares customer data with third-party service providers including payment gateways, logistics companies, CRM platforms, email marketing tools, and analytics services. For brands in the health and wellness category, the data collected may include health-related information (skin type assessments, allergy declarations, dietary preferences, supplement usage history) that, while not classified as 'sensitive personal data' under the DPDP Act's current framework, carries heightened reputational risk if breached.
The DPDP Act imposes obligations on 'Data Fiduciaries' (the entities that determine the purpose and means of processing personal data, which in the D2C context is the brand itself). These obligations include obtaining valid consent before collecting personal data, providing clear notice about the purposes of data collection, implementing reasonable security safeguards to protect stored data, providing consumers with the right to access, correct, and erase their data, and ensuring that data processors (third-party service providers who process data on the brand's behalf) comply with equivalent security standards.
The financial exposure from DPDP Act non-compliance operates at three levels. The first is regulatory penalties. The Act empowers the Data Protection Board of India to impose penalties of up to INR 250 crore for significant breaches of data protection obligations. While the actual penalties imposed are expected to be calibrated to the size and nature of the breach, even a modest penalty of INR 10-50 lakh represents a material financial hit for a D2C brand in the INR 20-100 crore revenue range. The second level is the cost of breach response. When a data breach occurs, the brand must notify the Data Protection Board, investigate the breach, remediate the vulnerability, and in many cases notify affected customers. The cost of a breach response, including forensic investigation by a cybersecurity firm, legal counsel, customer notification, credit monitoring services (if payment data was compromised), and public relations management, typically runs INR 15-50 lakh for a breach affecting 10,000-100,000 customer records. The third level is the business impact. Customers who learn that their personal data has been compromised lose trust in the brand. For D2C brands, where repeat purchases and customer lifetime value are the core business metrics, a data breach that erodes customer trust can permanently impair the brand's revenue trajectory.
Cyber insurance is the primary mechanism for transferring DPDP Act exposure to an insurer. A cyber insurance policy (also called a cyber liability or data breach policy) typically covers first-party costs (forensic investigation, breach notification, credit monitoring, business interruption from system downtime, data restoration, and crisis management) and third-party liability (legal defence costs and settlements arising from claims by affected individuals, regulatory investigation costs, and in some policies, regulatory fines and penalties to the extent insurable by law).
The Indian cyber insurance market has grown rapidly, with several domestic insurers (ICICI Lombard, HDFC Ergo, Bajaj Allianz) and global insurers (AIG, Chubb, Zurich) offering cyber policies tailored for Indian businesses. Premiums for D2C brands typically range from INR 50,000 to INR 3 lakh annually for coverage limits of INR 25 lakh to INR 2 crore, depending on the volume of customer data processed, the security posture of the brand's technology infrastructure, and the brand's claims history.
However, D2C brands should be aware of three critical limitations of cyber insurance as currently available in India. First, most policies exclude losses arising from the brand's failure to comply with data protection laws at the time of the breach. If the brand was not obtaining valid consent under the DPDP Act, or was not implementing reasonable security safeguards, the insurer may deny coverage on the basis that the breach resulted from the brand's own non-compliance rather than an external attack. Second, regulatory penalties may not be insurable as a matter of public policy. While some cyber policies purport to cover regulatory fines, the enforceability of such coverage under Indian law is untested, and insurers may ultimately be unable to indemnify policyholders for penalties that are intended to be punitive. Third, the policy's retroactive date determines whether breaches that occurred before the policy inception are covered. A brand that discovers a breach that has been ongoing for months (a common scenario in data breaches) may find that the actual breach event predates the policy, rendering the coverage inapplicable.
D2C brands should purchase cyber insurance as soon as their customer database exceeds 10,000 records, which for most brands occurs within the first 6-12 months of operations. Before purchasing, the brand should conduct a data mapping exercise to identify all personal data collected, where it is stored, who has access, and which third parties it is shared with. This mapping serves dual purposes: it is required for DPDP Act compliance, and it provides the underwriter with the information needed to quote accurate coverage.
What to Buy First and What Can Wait: A Priority Framework for D2C Insurance
D2C founders operate under capital constraints, and insurance spending must be prioritised like any other expenditure. The following framework, based on the risk profile of Indian D2C brands across beauty, food, wellness, and apparel categories, ranks insurance products by urgency and provides guidance on when each becomes relevant.
Tier 1: Buy immediately, regardless of stage. Every D2C brand, from pre-revenue to scaled, needs three baseline coverages. The first is a Commercial General Liability (CGL) policy. This covers third-party bodily injury and property damage claims arising from the brand's operations, including injuries at the brand's premises, damage caused by delivery operations, and general operational liability. A CGL policy with a limit of INR 50 lakh to INR 1 crore costs INR 15,000-40,000 annually and is the foundation of any commercial insurance programme. The second is a fire and property policy covering the brand's own assets: office equipment, warehouse inventory (at declared locations), and machinery. The sum insured should reflect the current replacement value of all physical assets. The third is Directors and Officers (D&O) liability insurance if the brand has raised institutional capital. Investors increasingly require D&O coverage as a condition of investment, and the policy protects founders and board members against personal liability arising from management decisions, regulatory investigations, and shareholder disputes. D&O premiums for early-stage D2C brands typically range from INR 1-3 lakh annually for limits of INR 1-5 crore.
Tier 2: Buy at Series A or when annual revenue crosses INR 10 crore. At this stage, the brand has meaningful revenue, a growing customer base, and enough operational complexity to warrant additional coverage. Product liability insurance is the single most important addition at this stage. For brands in the beauty, wellness, food, and supplement categories, the exposure to product liability claims grows in direct proportion to sales volume and SKU count. A product liability policy with a limit of INR 1-3 crore, costing INR 40,000-1.5 lakh annually depending on the product category and claims history, provides essential protection against consumer injury claims. Cyber insurance also becomes a priority at this stage, as the customer database has grown to a size where a data breach would have material financial and reputational consequences. An inland transit (Marine Cargo) policy on an open cover basis should be purchased to cover inventory in transit between manufacturers, warehouses, fulfilment centres, and customers.
Tier 3: Buy when annual revenue crosses INR 50 crore or the brand operates in a high-risk category. This tier includes product recall insurance (or a recall extension on the product liability policy), which becomes cost-effective and risk-proportionate at scale. A media liability policy covering advertising injury claims, including claims arising from influencer content, should be evaluated at this stage, particularly for brands that spend heavily on influencer marketing. Employer practices liability (EPL) insurance, covering claims by employees alleging wrongful termination, discrimination, or harassment, becomes relevant as headcount crosses 50-100 employees and the brand's exposure to employment disputes increases. A stock-at-other-locations extension to the fire policy, or a separate stock throughput policy, should be purchased if the brand stores inventory across more than three fulfilment centres.
Tier 4: Buy when annual revenue crosses INR 200 crore or the brand expands internationally. At this scale, the brand should carry a wide-ranging insurance programme that includes all of the above plus export product liability (covering claims arising from products sold outside India, which is essential for D2C brands selling through international e-commerce channels), key person insurance (protecting the business against the loss of the founder or critical leadership), and trade credit insurance (if the brand has extended credit terms to offline retail partners).
Cost benchmarking: the total insurance spend for an Indian D2C brand in the INR 50-200 crore revenue range, covering all Tier 1 through Tier 3 products, typically falls between INR 8-15 lakh annually. This represents 0.01-0.03% of revenue, a fraction that most founders would consider negligible relative to the risk transferred. The challenge is not cost but awareness: most D2C founders simply do not know what they are exposed to until a claim materialises.
A final practical note on broker selection. D2C brands should work with insurance brokers who have specific experience with consumer product companies, e-commerce businesses, and startup risk profiles. The traditional large-enterprise broker may offer competitive premiums but will not identify the category-specific exposures (contract manufacturer risk, influencer liability, marketplace terms of service gaps, DPDP Act exposure) that define the D2C insurance need. Several specialist insurance advisory firms in India now focus specifically on D2C and e-commerce brands, and their domain expertise translates into more appropriate coverage recommendations.
The insurance buying process should be integrated into the brand's quarterly business review, not treated as a one-time annual renewal exercise. As D2C brands launch new product categories, enter new sales channels, expand geographically, or change fulfilment partners, the insurance programme must be updated to reflect the evolving risk profile. The cost of updating coverage mid-term is minimal compared to the cost of discovering a gap after a loss has occurred.