Insurance Essentials for Indian Startups: What Founders Must Know Before Series A

Most Indian startup founders treat insurance as a post-revenue concern: something to address once the company has grown large enough to attract regulatory scrutiny. This is a costly mistake. Investors conducting due diligence before a Series A round routinely examine the risk management posture of the company, and the absence of basic insurance coverage signals operational immaturity. In fact, several prominent venture capital firms in India now include insurance compliance as a line item in their due diligence checklists, alongside financial audits and legal reviews.

Under the Companies Act, 2013, directors of private limited companies carry personal liability for statutory defaults including non-compliance with labour laws, environmental regulations, and tax obligations. Section 166 imposes a duty of care, and Section 447 introduces criminal liability for fraud. A single enforcement action or regulatory penalty during the fundraising process can derail a round entirely. The Serious Fraud Investigation Office has also stepped up its scrutiny of startups involved in financial irregularities.

Beyond regulatory exposure, startups face operational risks disproportionate to their size. A two-person founding team with no key-man cover exposes the business to existential risk if a co-founder becomes incapacitated. A data breach at a seed-stage SaaS company can generate liabilities that exceed total capitalisation. Insurance is not overhead: it is a structural prerequisite for investability. The most sophisticated founders in India's ecosystem have recognised this, and leading accelerators like Surge and Lightspeed's programmes now include insurance advisory as part of their portfolio support.

Directors and Officers (D&O) liability insurance is the single most important policy for any startup that has taken or plans to take external capital. Once a company has institutional investors on its cap table, the directors (including independent directors mandated by SEBI for listed entities or the Companies Act for certain private companies) face personal exposure to shareholder suits, regulatory investigations, and employee claims.

In India, D&O claims are on the rise. SEBI's enforcement activity against directors of listed companies has intensified under the SEBI (Prohibition of Insider Trading) Regulations and SEBI (Listing Obligations and Disclosure Requirements) Regulations. While most startups are private, the National Company Law Tribunal (NCLT) handles oppression and mismanagement petitions under Sections 241-242 of the Companies Act that can target founders and board members of private companies. Investor-shareholder disputes, particularly around dilution, related-party transactions, and information rights, frequently result in legal proceedings where defence costs alone can run into crores.

D&O policies in India typically cover defence costs, settlements, and regulatory investigation expenses. The coverage extends to past, present, and future directors. Key exclusions to watch include fraud (typically excluded only after a final adjudication), bodily injury claims, and prior known circumstances. For a seed-to-Series A stage startup, a D&O policy with a limit of INR 5-10 crore is a reasonable starting point, with annual premiums ranging from INR 3-8 lakh depending on sector, revenue, and claims history.

Indian startups are disproportionately dependent on one or two founders for product vision, investor relationships, and customer acquisition. Key-man insurance (a life insurance policy taken by the company on the life of a critical individual) provides a financial cushion if that person dies or becomes permanently disabled. The payout helps the company cover recruitment costs, bridge revenue gaps, and meet contractual obligations during the transition period.

From an investor's perspective, key-man insurance is a governance signal. Many venture capital term sheets in India now include a key-man clause requiring the company to maintain a policy on the lead founder with a specified minimum sum assured. Typically one to three times the funding round size. IRDAI permits corporates to purchase term life policies on key employees under the standard group term assurance framework, and several Indian life insurers offer specialised key-man products.

The tax treatment is straightforward. Premiums paid by the company on key-man policies are deductible as a business expense under Section 37(1) of the Income Tax Act, 1961, provided the policy is taken in the name of the company as the beneficiary and the key person is an employee or director. The proceeds received on a claim are taxable as business income in the hands of the company. Founders should ensure the sum assured is adequate. A common benchmark for early-stage companies is three to five times the key individual's annual compensation plus an estimate of revenue disruption cost. For a Series A startup, this typically translates to a sum assured of INR 3-10 crore, with annual premiums of INR 50,000-2 lakh.

The Digital Personal Data Protection Act, 2023 has fundamentally altered the liability space for Indian technology startups. Any company that processes personal data, which includes virtually every SaaS, fintech, healthtech, and e-commerce startup, is now a data fiduciary with statutory obligations around consent, data minimisation, breach notification, and cross-border transfer. The penalties for non-compliance can reach INR 250 crore, a sum that would exceed the total funding of most pre-Series B companies.

Cyber insurance covers first-party losses (business interruption from a cyber attack, data recovery costs, ransomware payments where legally permissible) and third-party liabilities (regulatory fines and penalties to the extent insurable, defence costs for lawsuits from affected data principals, and notification costs mandated under the DPDP Act). For startups handling payment data, compliance with PCI DSS is typically a policy prerequisite, and RBI's guidelines on digital payment security apply to fintech companies.

Indian cyber insurance is still a maturing market, but several non-life insurers, including ICICI Lombard, HDFC ERGO, and Bajaj Allianz, offer SME-specific cyber policies with limits starting at INR 50 lakh. Startups should look for policies that cover social engineering fraud, which is the leading cause of cyber losses for small companies in India, and regulatory defence costs under the DPDP Act and the Information Technology Act, 2000. Annual premiums for a technology startup with revenue under INR 10 crore typically range from INR 1-4 lakh for a limit of INR 1-5 crore.

Group health insurance is not a regulatory requirement for most private limited companies, but it has become a de facto expectation in India's competitive talent market. Startups competing with established IT services firms and MNCs for engineering talent cannot afford to skip health coverage. Under the Employees' State Insurance Act, 1948, companies with 10 or more employees in notified establishments must register with ESIC, but the benefits are perceived as basic. Offering a top-up group health policy demonstrates that the company values employee welfare and is building a sustainable workplace.

The cost is modest. Group mediclaim policies for startups with 10-50 employees typically cost INR 8,000-15,000 per employee per annum for a sum insured of INR 3-5 lakh, with options for parental cover and maternity benefits at additional premiums. For startups with fewer than 20 employees, several Indian insurers now offer group health plans with a minimum enrollment of as few as seven lives, making coverage accessible even at the earliest stages.

Fire and allied perils insurance covers the physical assets of the business, including office equipment, servers, inventory, and leasehold improvements. While many startups operate from co-working spaces, those with dedicated offices, warehouses, or manufacturing facilities need standard fire and special perils coverage. The policy covers fire, lightning, explosion, riot, storm, flood, earthquake, and impact damage. For a startup with office assets worth INR 50 lakh, annual premiums typically range from INR 5,000-15,000 depending on occupancy classification and location. Landlords often require tenants to carry this coverage as a lease condition.

With limited capital, Indian startups must prioritise insurance spend strategically. The following framework ranks coverage by urgency and impact, calibrated for a pre-Series A company with 10-30 employees and revenue under INR 5 crore.

Tier one; purchase immediately: D&O liability insurance and group health insurance. D&O protects the founders and board members who are making high-stakes decisions with investor capital, and group health is essential for talent retention. Together, these two policies typically cost INR 5-12 lakh per year for an early-stage startup.

Tier two. Purchase before Series A close: key-man insurance on lead founders and cyber insurance if the company handles any personal or financial data. Many VCs will require these as conditions precedent to disbursement. Budget an additional INR 2-6 lakh per year.

Tier three, purchase as the business scales: fire and allied perils insurance (if the company has physical assets), professional indemnity insurance (if the company provides advisory or consulting services), and commercial general liability (once the company has a physical premises visited by clients or the public). These add INR 1-3 lakh per year depending on asset values and revenue.

The total insurance budget for a well-covered pre-Series A startup ranges from INR 8-21 lakh per year: a fraction of a single senior hire's cost and an immaterial percentage of a typical seed or pre-Series A round. Founders should engage an insurance broker with startup experience rather than purchasing directly from insurers, as brokers can negotiate coverage terms, bundle policies, and manage the claims process. Several India-focused insurtech platforms now specialise in startup insurance and offer end-to-end digital procurement.