Who Is Actually Covered Under a D&O Policy?

The Coverage Question Most Business Owners Get Wrong

When most business owners hear "Directors and Officers insurance," they picture a narrow shield protecting a handful of C-suite executives from shareholder lawsuits. That mental model is wrong in two important ways: it understates who is covered, and it can dangerously overstate the certainty of that protection.

A standard D&O policy is built around three distinct insuring agreements — commonly called Side A, Side B, and Side C. Each one answers a different version of the question "who or what is being protected." Get that structure wrong and you may buy a policy that leaves your most exposed people without a safety net.

This reference article maps the covered persons and entities precisely, with the distinctions that actually matter at claim time. For a broader orientation to the product, see D&O Insurance From the Ground Up.

Individual Insureds: Directors, Officers, and Beyond

The "individual insured" definition in a D&O policy determines which natural persons can access coverage directly. The standard definition is broader than the product name implies.

Named Directors and Officers

Any person serving as a director or officer of the named organization — whether elected, appointed, or designated — qualifies. That includes inside directors who are also employees, outside directors who serve part-time, and independent directors brought in for governance purposes. The title on a business card is less important than whether the person exercises a director or officer function. Courts and regulators look at actual authority, not just formal appointment.

Employees Acting in a Managerial Capacity

This is where many business owners are surprised. Most modern D&O policies extend individual coverage to employees — not just to executives — when those employees are named as co-defendants in a claim against a director or officer. Some policies go further and cover employees acting in a supervisory, managerial, or professional capacity regardless of co-defendant status. Read the definition of "insured person" in your specific policy, because this language varies significantly between carriers.

Committee Members

Employees who sit on formal committees — audit committees, compensation committees, risk committees — are typically covered in their committee capacity, even if they hold no formal officer title. If your organization has cross-functional governance structures, verify that committee participation is explicitly included in the insured person definition.

Shadow Directors and De Facto Officers

A growing number of carriers — and several courts — recognize that an individual who exercises control over a company's management without a formal title can still be a director or officer for coverage purposes. Private equity principals, venture capital partners, and controlling shareholders who direct management decisions should confirm their status with their broker. Silence in the policy on this point is not the same as coverage.

Entity Coverage: Side C and Its Limits

Side C — sometimes called "entity coverage" — insures the organization itself, not just the individuals who lead it. But Side C is not universal, and its scope is deliberately limited.

What Side C Actually Covers

For publicly traded companies, Side C coverage is almost always restricted to securities claims — lawsuits alleging violations of securities laws. This is intentional. Insurers learned, through painful experience, that unlimited entity coverage caused claims reserves to be dominated by company-level litigation, leaving the individual Side A coverage depleted precisely when executives needed it most.

For private companies and nonprofits, many carriers offer broader Side C coverage that extends to other types of claims — employment disputes, regulatory investigations, contract-related management liability claims. But "broader" does not mean unlimited. Check your policy's definition of "wrongful act" applied to entity claims versus individual claims; they are often different.

The Erosion Problem

Side B and Side C claims share the same aggregate policy limit as Side A. That means heavy entity-level litigation can erode the limit available to individual directors and officers. Savvy buyers purchase separate Side A-only excess towers specifically to protect individuals from limit depletion at the entity level. If your program does not include a standalone Side A excess policy, executives should understand they may be personally exposed if a large entity claim hits first.

Subsidiaries and Affiliated Entities

Coverage for subsidiaries is not automatic. The named organization's policy typically extends to subsidiaries in which the named organization owns a controlling interest — but the definition of "subsidiary" and the ownership threshold varies. Newly acquired subsidiaries may be covered for a short grace period (often 60–90 days) before requiring endorsement. Foreign subsidiaries may be carved out entirely depending on jurisdiction. For a comprehensive look at what your policy covers and what it excludes, see Directors & Officers Insurance: What It Actually Covers.

Who Is Explicitly Not Covered

Knowing who is excluded is at least as important as knowing who is included. D&O policies contain both person-level and conduct-level exclusions that can strip coverage from individuals who otherwise qualify as insured persons.

Independent Contractors and Consultants

Independent contractors, consultants, and advisors who do not hold a formal directorial or officer role are typically excluded from the definition of "insured person" — even if they perform functions indistinguishable from a senior employee. If your organization relies heavily on fractional executives or consulting firm representatives in management roles, this gap is real and worth addressing, either through contract indemnification from the consulting firm or through a policy endorsement.

The Conduct Exclusions That Strip Coverage From Individuals

Even a named director or officer will lose coverage if the conduct exclusions apply. Standard D&O policies exclude:

• Fraud and deliberate dishonesty — coverage falls away once fraud is established by a final, non-appealable adjudication, not merely alleged.
• Personal profit or advantage — illegal remuneration, improper gains, or financial benefits to which the insured was not legally entitled.
• Prior acts known at inception — wrongful acts that an insured knew, or reasonably should have known, could give rise to a claim before the policy was bound.

Note the timing: most conduct exclusions are triggered by adjudication, not allegation. That means defense costs are typically still covered during litigation, even in cases involving fraud allegations. The exclusion bites at the end of the proceeding, not the beginning. For a detailed map of these limitations, see Key Exclusions Buried in D&O Policies.

Insured vs. Insured Exclusion

The insured-versus-insured exclusion eliminates coverage for claims brought by one insured person against another insured person. Its purpose is to prevent collusive suits between company insiders designed to extract policy proceeds. In practice, this exclusion can create unexpected gaps in corporate derivative litigation and certain employment disputes. Most modern policies carve back coverage for derivative suits brought by shareholders, whistleblower claims, and bankruptcy-related proceedings — but those carve-backs must be explicit.

Special Categories: Nonprofits, Private Companies, and Financial Institutions

The "who is covered" question has different answers depending on your organization type. D&O policy forms are not one-size-fits-all.

Nonprofit Organizations

Nonprofit D&O policies — sometimes marketed as management liability policies — routinely extend coverage to volunteers serving in a directorial capacity, not just paid staff and board members. If your nonprofit relies on volunteer committee chairs or advisory board members who exercise real governance authority, confirm that volunteer coverage is included. Many nonprofit board members assume their personal liability is capped by state volunteer protection statutes; those statutes contain exceptions that a D&O policy is designed to address.

Private Companies

Private company D&O is often packaged with Employment Practices Liability (EPL) and Fiduciary Liability in a management liability bundle. The entity coverage under private company forms is typically broader than public company forms because there are no securities laws governing private company stock. That broader entity coverage is useful, but it accelerates limit erosion risk — making limit adequacy and the presence of a standalone Side A excess layer even more important.

Financial Institutions

Banks, credit unions, and investment advisers typically purchase specialized D&O forms — often called Financial Institution Bond + D&O or Financial Institution Professional Liability policies — that are tailored to regulatory and fiduciary obligations specific to that sector. Standard commercial D&O forms may not adequately cover regulatory investigations by the OCC, FDIC, or SEC. See Regulatory Investigations and D&O Coverage for how investigations interact with D&O coverage across organization types.

For an end-to-end view of how policy structure, pricing, and claim scenarios fit together across all organization types, The Full D&O Insurance Landscape: Coverage, Claims, and Cost is the right next stop.

Practical Checklist: Verifying Coverage Before a Claim Happens

The time to discover a coverage gap is not when a lawsuit has been served. Use the following checklist to pressure-test your D&O program against the people and entities you actually need to protect.

1. Pull the insured person definition. Confirm it captures directors, officers, employees acting in a managerial capacity, and any committee members your governance structure relies on. If the definition is narrower than your operational structure, request an endorsement.
2. Map your subsidiaries. List every entity in which your named organization holds an interest. Cross-reference against the policy's subsidiary definition and ownership threshold. Flag any entity that falls outside automatic coverage.
3. Check for a standalone Side A excess layer. If your program does not include one, model the scenario where a large entity claim exhausts the primary limit. Determine whether individual directors and officers are comfortable with that residual exposure.
4. Review the insured-versus-insured exclusion and its carve-backs. Confirm that derivative suits, whistleblower claims, and bankruptcy proceedings are carved back in, and that the exclusion language matches current case law in your jurisdiction.
5. Identify shadow directors and de facto officers. If your investors, lenders, or consultants exercise management authority, confirm their status with your broker. Request a named insured endorsement if appropriate.
6. Verify retroactive date coverage. Claims-made policies cover only claims made during the policy period — but coverage for the underlying wrongful act depends on the retroactive date. Gaps in prior coverage or retroactive date restrictions can wipe out coverage for acts that occurred before the current policy incepts.

Many executives assume D&O coverage is a formality — something that protects "the company" in a vague, general sense. The assumptions business leaders make about this coverage are often the costliest ones. Myths About D&O Insurance That Can Leave Leaders Underprotected addresses the most common misconceptions directly so you can close those gaps before they matter.