D&O cover gap review in Delaware, USA: what the rules require

A board that has never tested its D&O cover gap review in Delaware, USA finds out where the gap sits at the worst possible moment: after a claim is filed, when the certificate of incorporation, the indemnification agreement and the insurance policy are read together for the first time. Delaware imposes no separate statutory requirement to run this review. It does set the outer limits within which the review has to operate, and those limits are narrower than most cross-border boards assume. This page sets out what changes when the entity under review is a Delaware corporation, what the review has to test, and where the advisory work supporting it stops.

Consider a European holding group with a Delaware subsidiary used as its US operating vehicle. The board renews the group D&O policy annually at parent level, assuming it extends to every subsidiary director everywhere. A derivative claim is then filed in the Delaware Court of Chancery against a director who sits in Frankfurt, over conduct the group's exculpation clause does not reach and the policy's territorial wording does not clearly cover.

The sections below set out what the review actually tests in Delaware, where the record it produces becomes relevant, and where this firm's advisory work stops.

What changes in Delaware, USA

There is no statutory requirement in Delaware to conduct a formal D&O cover gap review, and no filing or registry entry is tied to the phrase. What Delaware law does is set the outer edges of two things any such review has to test: how far a certificate of incorporation can go in excusing a director from monetary liability, and how far the corporation can go in indemnifying one. The certificate, alongside the bylaws, forms the corporation's constitutional documents. It is the certificate, not the bylaws, that carries the exculpation clause the review turns on.

Groups that use a Delaware entity as a US holding or operating vehicle usually inherited the certificate of incorporation, the indemnification agreement and the group D&O policy from three separate drafting exercises. Each was done at a different time, by a different adviser. None was drafted with the other two open on the desk. The gap the review looks for sits in the space between them, and a cross-border structure widens that space rather than narrowing it, because the director whose exposure is at issue often sits outside Delaware, and outside the United States, for the whole of the appointment.

The underlying D&O cover gap review methodology that this jurisdiction page sits under applies the same three-layer test everywhere. What changes in Delaware is the content of layer one: the statutory boundary of what a certificate can excuse. A group running the same review against a Dubai International Financial Centre entity in the same structure will find a different boundary, drawn on a different logic; the method stays constant, the local content of the test does not.

The local requirement that drives the D&O cover gap review

The test starts from what the certificate of incorporation is permitted to exculpate, not from what the board would like it to cover. Delaware's corporate statute allows a certificate to eliminate a director's personal liability for monetary damages arising from a breach of the duty of care. It does not allow the certificate to reach three categories: breach of the duty of loyalty, conduct not in good faith, and a knowing violation of law. Whatever the certificate says, those three categories stay live. A D&O cover gap review has to check that the insurance layer picks up what the certificate cannot.

Delaware does not impose a residency requirement on a director of a Delaware corporation, and acting as a director is not itself a licensed activity under Delaware law. 01 That absence of a licensing barrier is a large part of why the gap opens on cross-border boards. Nothing in Delaware law stops a group from appointing a director who lives and is regulated somewhere else entirely, and nothing prompts anyone to check whether the policy travels with that person once appointed. This is a governance question, not a source of regulatory exposure for the individual under Delaware law itself; the exposure sits in the categories the certificate cannot excuse, not in where the director happens to live.

Personal liability attaches to a director individually once conduct is characterised as a breach of the duty of loyalty or as bad faith. That characterisation is fixed at the point the complaint is filed, and the certificate's exculpation clause cannot soften it once it has been made. The review that matters is the one run before that point, against the actual wording of the certificate, the indemnification agreement and the policy, not a general assurance that the group is covered.

A structure with directors resident across several jurisdictions should confirm how the group's approach compares elsewhere. The comparison of director liability exposure between Malta and the Dubai International Financial Centre shows how differently two jurisdictions draw the same boundary, which is the point a Delaware-only review misses if it stops at the certificate.

The filing, register and forum consequence

Delaware attaches no filing consequence to the review itself. It does attach a forum consequence to what happens if the gap is real and a claim follows. Breach of fiduciary duty claims against directors of a Delaware corporation are heard in the Delaware Court of Chancery, a forum that decides largely on the papers and the board record. What ends up in that record, principally the minutes, the D&O questionnaire responses and the indemnification agreement itself, is mostly fixed by the time a claim is filed, because minutes are not rewritten after the fact.

Once a derivative demand is filed in the Court of Chancery, personal liability for a director with no contemporaneous minutes documenting the decision under challenge becomes far harder to rebut. The informal explanation that might have worked before the filing ceases to be available once the record is closed. For a group structure spanning several time zones, the record is what closes the gap between what actually happened and what can later be proven to have happened, and that record is written before the claim, not after it.

Groups facing the same underlying question in a governance dispute rather than an insurance one should read the jurisdiction brief covering deadlock and separation mechanics under Delaware law, since the same certificate and often the same directors sit at the centre of both. Where the certificate, the indemnification agreement or the policy has not been checked against each other within the last board cycle, the honest position to record is that the gap is currently unconfirmed, not that it does not exist.

A group with a Delaware entity in the structure and directors sitting elsewhere is exactly the profile where the certificate, the indemnification agreement and the policy have usually drifted apart without anyone deciding that they should. The cost of finding that out after a claim is filed is not the review itself. It is the personal liability a director carries for the months or years the gap went unchecked.

Assess your director exposure. Write to info@hreithlaw.com with the jurisdiction and the structure.

What this service does not include in Delaware, USA

The review this firm carries out on a Delaware corporation does not include acting as a director, secretary, nominee shareholder or trustee of the entity under review, and it does not include supplying, sourcing or arranging for another person to take on any of those roles. It also does not include negotiating with an insurer, placing a policy, or acting as the corporation's broker of record. This is not a matter of preference. Arranging for a person to act as a director for a fee is a regulated activity in a number of the jurisdictions this firm advises across, and the boundary is drawn to hold everywhere the practice operates, including in a structure where the Delaware leg itself carries no equivalent licensing requirement. The review sits inside ordinary corporate governance practice rather than inside a licensed regulatory regime, which is exactly why the boundary has to be stated rather than assumed.

What the engagement produces instead is the map the board needs to close the gap itself:

• the certificate's exculpation clause tested against the three categories it cannot reach
• the indemnification agreement checked against what the corporation is permitted to indemnify
• the D&O policy's wording read against both, with the mismatch stated in writing
• a record of what the board should keep on file before, not after, a claim is filed

A board that wants the gap closed with a new policy, a revised certificate provision or a restructured indemnification agreement takes that document to its insurer or its Delaware counsel of record. The review identifies where the work is needed, and stops there. Further background on why groups tend to under-invest in this review until a claim forces the question is set out in the analysis of what drives the effort behind a D&O cover gap review.

Where the boundary above leaves the board short of what it needs, the next step is not a new policy quote. It is a clear statement of where the current one falls short and why, which is what turns a general renewal conversation into a specific instruction to the insurer or the charter drafter.

Assess your director exposure. Write to info@hreithlaw.com with the jurisdiction and the structure.

Frequently asked questions

What does a D&O cover gap review in Delaware, USA require in practice?

It requires three documents read together, not one at a time: the certificate of incorporation's exculpation clause, the indemnification agreement, and the D&O policy's wording on covered persons and territory. Delaware imposes no separate procedural requirement of its own; the review is a governance exercise the board runs, not a filing it makes.

Who inside the company is responsible for the D&O cover gap review in Delaware, USA?

The board carries the responsibility, because the gap concerns the board's own exposure. General counsel or the company secretary function typically coordinates gathering the documents, but the decision to accept or close a gap rests with the directors who bear it. Delegating the review entirely to an outside adviser without board sign-off leaves the gap open in substance even where the paperwork is complete.

What evidence should the board keep on file?

Contemporaneous minutes recording that the review took place, the certificate and indemnification agreement provisions in force at that date, and the policy wording examined, dated and attributed to a named board decision. Evidence produced after a claim is filed carries far less weight in the Court of Chancery than a dated record kept as a matter of course.

What happens if the D&O cover gap review in Delaware, USA is not addressed?

Nothing happens at the level of a filing or a fine, because Delaware attaches no such consequence directly. What happens instead is that the gap stays open until a claim tests it, at which point the categories the certificate cannot excuse and the wording the policy does not clearly cover are exactly where personal liability lands. The absence of an immediate consequence is why the review is routinely deferred, not a sign that deferring it is safe.

How often should the review be repeated?

At minimum whenever the certificate, the indemnification agreement or the group policy is amended, and otherwise on the same cycle as the board's annual governance review, since the three documents are amended independently and drift apart between checks. A group adding a new Delaware entity to an existing structure should run the review before that entity's first board meeting, not after.