D&O insurance for Cyprus based technology companies: what founders and boards should know

Sep 25, 2026 | BUSINESS & ENTERPRISE, CYBER RISK INSURANCE, D&O LIABILITY INSURANCE

Share this article

D&O insurance for Cyprus based technology companies: what founders and boards should know

 

Most D&O claims do not begin with a dramatic corporate scandal.

They begin with an ordinary business decision that someone later challenges.

A forecast shared during a funding round. A senior employee who is asked to leave. A security warning that was not treated as urgent. A disagreement between founders. A difficult decision taken when cash flow was tight.

For the people running a technology company, these are part of everyday business. But if an investor, employee, creditor or regulator alleges that a decision was handled improperly, the directors themselves may need legal representation.

Directors and officers insurance, usually called D&O insurance, is designed for that situation.

Request a D&O insurance review | Explore business insurance

D&O insurance in plain English

D&O insurance helps protect directors, founders and other eligible senior managers when a claim alleges that they did something wrong while managing the company.

The allegation might concern a misleading statement, a failure to supervise, a conflict of interest or a decision that allegedly caused someone a financial loss.

Importantly, an allegation does not have to be correct before it becomes expensive. A director may still need a lawyer, documents may need to be reviewed and a formal response may need to be prepared.

Depending on the policy, D&O insurance may cover:

  • Legal defence costs
  • Covered investigations
  • Settlements
  • Court awards
  • Certain costs associated with responding to a claim

Every policy is different. The definitions, exclusions and notification conditions determine how the cover actually works.

Why technology companies have a distinctive D&O exposure

Technology businesses often develop faster than their internal processes.

That is not necessarily poor management. It is part of operating in a sector where products, markets, teams and funding structures can change within months.

It does mean that directors regularly make important decisions with incomplete information.

Several moments deserve particular attention.

Raising capital

Funding discussions involve projections, product plans, customer figures, development milestones and statements about the company’s market.

Nobody expects every forecast to be perfect. The concern arises when an investor later alleges that information was misleading, incomplete or withheld.

D&O insurance may respond to covered claims concerning statements or omissions made during a funding round. It does not insure the company against missing its commercial targets.

The distinction is important: D&O covers certain allegations about how the company was managed or presented, not the ordinary risk of running a business.

Managing cybersecurity

A cyber policy is designed to respond to a security incident. It may provide forensic support, system restoration, privacy assistance and business-interruption cover.

D&O insurance performs a different role.

After a serious incident, investors, customers or other stakeholders may ask whether management knew about weaknesses, funded appropriate controls or communicated the risk accurately.

A cyber incident can therefore produce two separate insurance questions:

  1. Who responds to the incident?
  2. Who responds if the board’s oversight is challenged?

Technology companies should review D&O and cyber insurance together rather than assume that either policy covers both exposures.

Using artificial intelligence

AI can improve products, customer service and internal efficiency. It can also create questions about data quality, transparency, intellectual property, security and human oversight.

The EU AI Act is applying through a staged timetable, while expectations around responsible AI continue to develop.

D&O insurance does not replace a suitable AI-governance process. It may become relevant if directors face a covered allegation concerning how the company supervised, described or deployed its AI systems.

For founders, the practical lesson is simple: decisions about AI should be documented as business decisions, not left entirely to a technical team.

Making difficult people decisions

A fast-growing company may recruit internationally, create employee share schemes and promote technical specialists into management roles.

It may also need to restructure, make redundancies or dismiss a senior employee.

Some employment claims are handled under employment-practices cover rather than D&O insurance. The distinction depends on who is named, what is alleged and how the policies are written.

Founder and shareholder disputes require particular attention. A policy may restrict claims brought by one insured person against another, although important exceptions may apply.

Handling financial pressure

When money is tight, directors face difficult choices.

Should the company continue trading? Seek emergency funding? Reduce staff? Renegotiate contracts? Delay a product launch? Pursue a sale?

If the business later becomes insolvent, earlier decisions may be examined by creditors, shareholders or an insolvency practitioner.

D&O insurance cannot cover deliberate fraud or dishonesty. Subject to its wording, it may provide defence-cost protection while allegations about management decisions are examined.

Buying, selling or restructuring the company

An acquisition can change a D&O policy immediately.

The existing policy may continue to protect directors against claims arising from decisions made before the transaction, while new decisions fall under the buyer’s insurance programme.

Run-off cover can preserve protection for the company’s former directors if a claim emerges after the transaction.

This should be discussed before completion, not when the first complaint arrives.

Who may be covered?

A D&O policy commonly covers current directors and officers. Depending on its definitions, it may also cover:

  • Former directors
  • Future directors
  • Employees acting in a managerial capacity
  • Directors of subsidiaries
  • Executives named alongside a director
  • Spouses, estates or legal representatives in certain circumstances

Do not assume that every influential person is automatically insured.

Founders who are not formally appointed, board observers, consultants, chief information security officers and investor representatives may require closer consideration.

Understanding Side A, Side B and Side C

D&O policies are often structured in three parts.

Side A: protecting the individual

Side A responds when the company cannot reimburse a director for a covered claim. This might happen because the company is insolvent or unable to provide indemnification.

It is the part of the policy most directly associated with protecting a director’s personal assets.

Side B: reimbursing the company

Side B reimburses the company after it has paid covered costs on behalf of a director or officer.

Side C: protecting the company

Side C provides cover for certain claims made directly against the company.

The scope of Side C varies. It can be valuable when the company and its directors are named in the same proceeding, but it can also mean that they share the same policy limit.

What D&O insurance does not replace

D&O is not an all-purpose technology policy.

Exposure Cover normally considered
Decisions made by directors and officers D&O insurance
Data breach or cyberattack Cyber insurance
Defective software, advice or professional service Professional indemnity
Employee theft or social-engineering fraud Crime insurance
Employment-related allegations Employment-practices cover
Injury or physical property damage Public liability
Premises, equipment and physical assets Property insurance

 

A company may need several of these policies. The aim is to make sure they work together without leaving an unintended gap.

The claims-made point founders should understand

D&O insurance is generally written on a claims-made basis.

In simple terms, the policy in force when a claim is first made and properly reported is normally the policy that matters, not necessarily the policy in place when the original decision was taken.

That makes continuity and timely notification important.

If a written complaint, investor threat, regulator’s enquiry or other potential claim arrives, the company should check its notification requirements promptly. Waiting for court proceedings to begin may be too late.

What to check before choosing D&O insurance

Price matters, but the wording determines how the policy will respond when a claim is made.

Before choosing cover, ask:

  1. Who is insured, including founders, former directors and investor-appointed directors?
  2. Are the company’s subsidiaries included?
  3. What counts as a claim or regulatory investigation?
  4. Do defence costs reduce the policy limit, and what excess applies?
  5. How do the cyber, professional-services and insured-versus-insured exclusions work?
  6. What happens if the company expands internationally or is acquired?

These questions often reveal more about a policy than the premium and headline limit alone.

When to review your D&O cover

Review the policy whenever the company’s ownership, board, markets or risk profile changes.

Common review points include:

  • A funding round or new investor
  • The appointment of a director or board observer
  • International expansion or a new subsidiary
  • A significant new product or use of AI
  • A serious cyber incident
  • Financial pressure, restructuring or redundancies
  • An acquisition or company sale

The policy should also be checked at renewal, even if the business appears unchanged.

Frequently asked questions

 

Is D&O insurance only for large or listed companies?

No. Private companies and startups can also face claims from investors, employees, customers, creditors and regulators.

Does D&O insurance cover founders?

It may, provided the founder meets the policy’s definition of an insured person. Share ownership alone does not necessarily create cover.

Does D&O insurance cover a cyberattack?

Cyber insurance responds to the incident itself. D&O insurance may become relevant if directors later face a covered allegation concerning their oversight or disclosure of the risk.

How much D&O cover does a technology company need?

There is no standard amount. The appropriate limit depends on factors such as funding, board structure, investor profile, international activity and the potential cost of defending a claim.

D&O cover that keeps pace with your company

Your board, investors, products and markets can change quickly. Your insurance should develop with them.

We compare available D&O options and help you understand who is covered, how defence costs work and where the wording may leave important gaps.

Request a D&O insurance review

This article provides general insurance information. It is not legal, tax or regulatory advice. Cover is subject to the terms, conditions, limits and exclusions of the selected policy.

RECENT NEWS & INSIGHTS