Who We Insure
Pre-IPO Insurance: Building the D&O Tower Before the S-1
IPO insurance is mostly a D&O problem, and the D&O problem starts well before the first trading day. The main risk is the registration statement: under Section 11 of the Securities Act, the company, its directors, the officers who sign, and the underwriters can be liable for material misstatements or omissions in the prospectus, and a stock drop in the months after listing turns that exposure into a lawsuit. A private-company D&O policy is not built for that claim, and most exclude it outright.
Why pre-IPO companies carry specialized insurance
The program has to be rebuilt rather than extended. The private policy goes into run-off to cover pre-listing conduct. A public-company tower replaces it, with Side A layers on top for the directors. Some issuers add a public offering of securities policy that ring-fences the prospectus exposure on its own multi-year term. De-SPAC transactions add a further layer of complexity, with the SPAC's own D&O to tail and warrant and projection litigation to price. This guide covers how a company should sequence that work in the twelve months before a listing or de-SPAC, what underwriters, exchanges, and boards expect, how EPLI, fiduciary, and cyber change with public-company status, and what the roadshow and quiet period mean for the program.
Who this guide is for
Written for chief financial officers, general counsel, corporate secretaries, and board members at companies preparing for an initial public offering, a direct listing, or a de-SPAC merger, and for the sponsors and investors guiding them. Late-stage private companies that have engaged bankers or filed confidentially; Companies merging with a special purpose acquisition company; Recently listed companies reviewing a program that was placed under time pressure; Not a general D&O primer for earlier-stage companies — see the D&O for startups page linked below.
The risk profile of a pre-IPO company
Public-company exposure arrives all at once on the listing date, but the conduct that produces claims — forecasts, disclosures, and governance decisions — happens in the year before. Underwriters price both. Key exposures: Section 11 and 12 claims over the registration statement and prospectus after a post-listing stock decline; Section 10(b) securities class actions over guidance, risk-factor disclosure, and later announcements; Shareholder derivative suits and books-and-records demands aimed at the board; De-SPAC-specific litigation over projections, sponsor conflicts, and redemption disclosures; Expanded regulatory exposure: SEC comment letters and investigations, cybersecurity incident disclosure obligations, and exchange compliance; Executive compensation, 401(k) and employee stock plan claims, and employment claims that scale with headcount and scrutiny.
Public-Company D&O Tower for pre-IPO companies
The core of the program: a primary policy plus excess layers covering the company for securities claims (Side C), reimbursing it for indemnifying directors and officers (Side B), and paying directors directly when the company cannot (Side A). Total limits are set by reference to expected market capitalization, float, sector litigation frequency, and peer towers, and the primary form's securities-claim definitions and conduct exclusions carry most of the negotiation. Typically responds to: securities class actions and derivative suits after listing; regulatory investigations within the policy's terms; defense costs and settlements for the company and its directors and officers.
Side A Difference-in-Conditions Layers for pre-IPO companies
Dedicated limits for individual directors and officers that sit above the tower and drop down when the underlying policies are exhausted, rescinded, or unable to respond in insolvency. Boards expect it, and the amount is often a board-level decision made with the audit or nominating committee.
Public Offering of Securities Insurance (POSI) for pre-IPO companies
A standalone, multi-year policy covering prospectus liability for the issuer, directors, and sometimes selling shareholders and underwriters, bought for the offering itself. It keeps the IPO exposure from eroding the ongoing D&O tower's limits and can be priced as a one-time cost allocated to offering expenses.
Run-Off of the Private D&O Program for pre-IPO companies
The private policy is placed into run-off at listing, usually for six years, so claims made later over pre-listing conduct still have coverage. In a de-SPAC, the SPAC's own D&O is tailed the same way. Missing either step leaves a window of uncovered conduct that plaintiffs are adept at finding.
EPLI, Fiduciary Liability, and Cyber for pre-IPO companies
Public-company status raises the stakes on all three: EPLI for a larger, more visible workforce and executive departures; fiduciary liability as the 401(k) and employee stock purchase plan grow; cyber because incident disclosure rules now make a breach a securities-disclosure event. Each is renewed on public-company terms alongside the tower. Typically responds to: employment and executive-departure claims; retirement and stock-plan fiduciary claims; breach response, regulatory defense, and incident-disclosure support.
Contract and certificate requirements
Underwriting agreements require the issuer to maintain D&O coverage and to indemnify the underwriters; the underwriters' counsel will review the program during diligence. Exchange listing standards and the company's new governance documents require independent directors who will expect Side A coverage and indemnification agreements before they join. Director recruitment for audit and compensation committees routinely stalls on these points. For de-SPAC transactions, the merger agreement typically obligates the combined company to purchase a tail for the SPAC's directors and officers and to maintain coverage for the target's directors for a defined period. Lender and investor agreements that survive the listing keep their insurance covenants, and the company's own indemnification agreements should be refreshed to match the public-company tower.
What coverage costs
Public-company D&O is priced on expected market capitalization and float, sector and peer litigation frequency, the offering structure, financial condition and profitability, the quality of the disclosure controls and the finance team, and the limits and retentions chosen. The securities-claim retention for a newly public company is a significant number that should be set deliberately rather than accepted. Pricing moves with the securities-litigation cycle and the company's own story, so budgeting should begin a year out with indicative ranges updated as the filing approaches. Run-off of the private program is a one-time premium, and a public offering of securities policy, where used, is a one-time cost of the offering. Cyber severity feeds the D&O analysis now that incidents are disclosure events; IBM's Cost of a Data Breach Report 2026 put the global average breach cost at $4.99 million.
What underwriters will ask for
D&O underwriters for an IPO read the draft registration statement, meet management, and model the stock. Start assembling the file when bankers are engaged. Have ready: Draft registration statement or proxy, including risk factors and the use of proceeds; Audited financials, management's discussion and analysis, and material weaknesses or restatements; Capitalization, expected valuation and float, selling-shareholder participation, and lock-up terms; Board composition, committee charters, independence, and indemnification agreements; Litigation, regulatory, and whistleblower history; disclosure controls and procedures; For de-SPACs: the SPAC's D&O program, projections presented to investors, and sponsor economics.
Illustrative example: The stock drop after the first earnings call
A company lists, misses revenue guidance on its first public earnings call, and the stock falls sharply. Plaintiffs file a class action alleging the prospectus understated customer churn and that the risk factors were boilerplate. The public-company D&O tower, or the public offering of securities policy if one was bought, defends the Section 11 claim against the company, its directors, and signing officers. The private policy's run-off is not triggered because the conduct is the offering itself, which is why the public program must be in force at pricing.
Illustrative example: The de-SPAC projections
A company that merged with a SPAC falls well short of the five-year projections included in the proxy. Shareholders sue the combined company, its directors, and the SPAC's former sponsor, alleging the projections lacked a reasonable basis. The combined company's D&O tower responds for the company and current directors; the SPAC tail responds for the SPAC's former officers and directors. Whether projections fall within the securities-claim definition and outside any conduct exclusion is the wording question the placement should have settled.
Illustrative example: The incident in the quiet period
A ransomware event hits the company two months before its planned listing. Beyond the operational response, counsel must decide what to disclose in the registration statement and how the incident affects the risk factors and timing. Cyber funds the response and forensics, and the disclosure decisions become part of the D&O underwriting file. Handled transparently, the incident is a disclosed risk; handled poorly, it becomes the basis of a later securities claim.
How much does IPO insurance cost?
Public-company D&O is priced on expected market capitalization, sector litigation frequency, financial condition, disclosure controls, and the limits and retentions chosen, and it moves with the securities-litigation cycle. As of 2026, there is no standard figure; companies budget a year out and refine the estimate as the filing progresses.
When should a pre-IPO company start working on D&O?
About twelve months before the expected listing, and no later than the engagement of underwriters. Independent director recruitment, run-off of the private program, and the public tower all need to be in place before pricing, and underwriters need time to read the draft registration statement.
Does our private-company D&O policy cover an IPO?
Almost never. Private-company forms exclude public offerings and public securities claims. The private policy is placed into run-off at listing to cover pre-listing conduct, and a public-company tower replaces it for everything after.
What is Side A coverage and why do directors ask for it?
Side A pays directors and officers directly when the company cannot indemnify them, and difference-in-conditions layers drop down when the main tower is exhausted or fails. Independent directors ask for it because it is the part of the program that protects their personal assets.
How is a de-SPAC different from a traditional IPO for insurance?
There are two companies' histories to cover: the SPAC's directors need a tail, the target's private program goes into run-off, and the combined company needs a public tower. Projection and sponsor-conflict litigation is specific to de-SPACs, and the merger agreement usually dictates the coverage obligations.
Does cyber insurance change when a company goes public?
The policy itself is similar, but incidents become disclosure events under securities rules, so a breach can produce both a cyber claim and a securities claim. Public companies coordinate cyber and D&O placements and make sure incident-response plans include disclosure counsel.
Caveats and common gaps
Securities-claim definitions, conduct exclusions, and the treatment of projections and roadshow statements differ across public-company D&O forms. Retentions, limits, and the use of a public offering of securities policy are judgment calls made with counsel and the board. This guide describes the structure; the placement itself depends on your filing, your sector, and the market at the time.
Related guides
Startup insurance for Series A and later — the funded-startup program this guide assumes you are growing out of · Insurance for Startup Board Members — the individual director's view of Side A and indemnification · Insurance for Private Equity Firms — sponsor-led exits and portfolio-company run-off · Insurance for Venture Capital Firms · D&O insurance for startups · Fiduciary liability coverage · Cyber insurance for startups
Frequently asked questions
How much does IPO insurance cost?
Public-company D&O is priced on expected market capitalization, sector litigation frequency, financial condition, disclosure controls, and the limits and retentions chosen, and it moves with the securities-litigation cycle. As of 2026, there is no standard figure; companies budget a year out and refine the estimate as the filing progresses.
When should a pre-IPO company start working on D&O?
About twelve months before the expected listing, and no later than the engagement of underwriters. Independent director recruitment, run-off of the private program, and the public tower all need to be in place before pricing, and underwriters need time to read the draft registration statement.
Does our private-company D&O policy cover an IPO?
Almost never. Private-company forms exclude public offerings and public securities claims. The private policy is placed into run-off at listing to cover pre-listing conduct, and a public-company tower replaces it for everything after.
What is Side A coverage and why do directors ask for it?
Side A pays directors and officers directly when the company cannot indemnify them, and difference-in-conditions layers drop down when the main tower is exhausted or fails. Independent directors ask for it because it is the part of the program that protects their personal assets.
How is a de-SPAC different from a traditional IPO for insurance?
There are two companies' histories to cover: the SPAC's directors need a tail, the target's private program goes into run-off, and the combined company needs a public tower. Projection and sponsor-conflict litigation is specific to de-SPACs, and the merger agreement usually dictates the coverage obligations.
Does cyber insurance change when a company goes public?
The policy itself is similar, but incidents become disclosure events under securities rules, so a breach can produce both a cyber claim and a securities claim. Public companies coordinate cyber and D&O placements and make sure incident-response plans include disclosure counsel.
This material is general educational information, not legal, tax, or insurance advice. Coverage availability, policy terms, and regulatory requirements vary by state, carrier, and applicant.