Director and Officer Indemnification: Bylaws, Advancement, Insurance

Director and officer indemnification is the mechanism corporations use to shift the cost of lawsuits, including legal fees, settlements, and judgments, away from individual board members and executives and onto the company. It works through a layered system: state statutes set the baseline, the corporate charter can eliminate certain liabilities outright, the bylaws convert discretionary protection into a binding commitment, individual agreements lock those rights into a contract, and D&O insurance backstops the whole structure when the company cannot or will not pay. The gaps between those layers are exactly where personal liability lands, so understanding what each one does, and does not do, is the entire point.

What State Law Requires and What It Merely Permits

Delaware’s Section 145 is the most influential indemnification statute in the country, and because more than half of publicly traded U.S. companies are incorporated in Delaware, it effectively sets the national baseline. The statute draws a sharp line between coverage a corporation must provide and coverage it may choose to provide.

Mandatory indemnification is narrow. When a director or officer is “successful on the merits or otherwise” in defending a proceeding, the corporation must reimburse their legal expenses.¹ That phrase includes outright victories, dismissals, and settlements that end the matter in the individual’s favor. No board vote is required, no discretion applies, and the corporation cannot refuse.

Permissive indemnification is broader but discretionary. Section 145(a) covers third-party lawsuits, such as claims brought by regulators, customers, or business partners, and allows the corporation to reimburse expenses, judgments, fines, and settlement payments. Section 145(b) covers derivative suits, where shareholders sue on the corporation’s behalf, and limits reimbursement to expenses only. The reasoning behind the derivative restriction is straightforward: it would be circular for a corporation to reimburse a director for a judgment the director owes back to the corporation. Even in derivative cases, a court can override that limit and approve indemnification for expenses if it finds the individual “fairly and reasonably entitled” to coverage.¹

Under both provisions, the individual must have acted in good faith and reasonably believed their conduct served the corporation’s best interests. For criminal proceedings, the person must also have had no reasonable cause to believe their conduct was unlawful. A conviction, guilty plea, or plea of no contest does not automatically prove bad faith; the statute expressly rejects that presumption.¹

States that follow the Revised Model Business Corporation Act use a nearly identical framework, with mandatory indemnification for those “wholly successful” in their defense and permissive indemnification for good-faith actors. Some RMBCA states impose stricter limits on what the articles of incorporation can authorize beyond the statutory floor.

Exculpation: Stopping Liability Before It Starts

Indemnification reimburses you after you’ve been held liable. Exculpation prevents liability from existing in the first place. That distinction matters, because exculpation lets a director or officer get a lawsuit dismissed at the front end, before discovery and trial preparation costs mount.

Delaware’s Section 102(b)(7) allows a corporation to include a charter provision that eliminates personal liability for monetary damages arising from a breach of the duty of care. Since August 2022, this protection extends beyond directors to certain senior officers, including the CEO, CFO, COO, chief legal officer, controller, treasurer, chief accounting officer, and anyone identified in SEC filings as a most highly compensated executive.²

Exculpation has hard limits. It cannot cover:

Duty of loyalty breaches, such as self-dealing or putting personal interests ahead of the corporation’s.
Bad faith or intentional misconduct, including knowing violations of law.
Improper personal benefit, meaning transactions where the director or officer profited at the corporation’s expense.
Officer liability in derivative suits. Officers, unlike directors, cannot invoke exculpation in claims brought by or on behalf of the corporation.²

That last carve-out is significant. The 2022 amendment gave officers exculpation for the first time, but only in direct (non-derivative) claims. Shareholders can still bring derivative duty-of-care claims against officers, and officers cannot get those dismissed on exculpation grounds. Indemnification picks up the slack in exactly that gap.

How Bylaws Turn “May” Into “Shall”

The gap between what a statute permits and what a corporation actually delivers usually gets bridged in the bylaws. Well-counseled companies include provisions that convert Delaware’s permissive “may indemnify” language into a mandatory “shall indemnify” obligation, committing the corporation to reimburse directors and officers to the fullest extent the law allows. That conversion gives recruits and sitting board members confidence that the company will not leave them exposed after a lawsuit hits.

Bylaw protections have a structural weakness. A board or shareholder vote can amend or repeal bylaw provisions. A change in control, a hostile takeover, or a shift in board sentiment can strip protection from former officers still facing litigation tied to their tenure. Delaware addresses part of this risk in Section 145(f), which provides that a right to indemnification or advancement created by a bylaw cannot be eliminated retroactively after the act giving rise to the claim has already occurred, unless the original provision explicitly allowed retroactive elimination.¹ That protection is meaningful, but it only applies in states that have adopted a similar rule.

Section 145(f) also establishes that statutory indemnification rights are non-exclusive. Bylaws, charter provisions, shareholder votes, and individual agreements can all supplement the statutory framework, as long as they do not indemnify conduct that public policy flatly prohibits.¹

Why an Individual Indemnification Agreement Matters

Bylaws are a promise the corporation makes to itself. An indemnification agreement is a promise the corporation makes to you personally. That difference carries real legal weight, because a signed bilateral contract cannot be changed without both parties’ consent. If the board later amends the bylaws, or the company gets acquired, or new management arrives with different priorities, a standalone agreement survives.

These contracts typically spell out response procedures: how to submit a claim, how quickly the company must respond (commonly 30 days), and what happens if the company fails to act. Many include a most-favored-nation clause guaranteeing that if the corporation later signs a more generous agreement with another director, your terms automatically improve to match. The procedural specificity is the point. Vague bylaw language leaves room for corporate foot-dragging during a crisis; a detailed contract does not.

Surviving a Merger or Acquisition

One of the most valuable features of an indemnification agreement is its ability to bind successor entities. Well-drafted agreements state that the obligations run to any direct or indirect successor resulting from a merger, acquisition, or sale of substantially all the corporation’s assets.³ Without that language, a merger could extinguish your rights along with the original corporate entity. Many agreements also include a tail period, typically six years, during which coverage continues after you leave the board, because lawsuits tied to your tenure can surface long after departure.

Partial Success

Litigation rarely ends in a clean win on every count. A director might prevail on three claims but lose on a fourth. Indemnification agreements commonly address this by requiring the company to reimburse expenses tied to each claim or issue resolved in the individual’s favor, even if the overall case produced mixed results. That claim-by-claim approach prevents the corporation from treating a single adverse ruling as grounds to deny reimbursement for everything.

Conduct That Is Never Covered

Indemnification is not blanket protection. It covers people who made reasonable decisions that turned out badly. It does not cover people who acted dishonestly or helped themselves at the company’s expense. Certain categories of conduct are off-limits as a matter of public policy, regardless of what the bylaws or an agreement say:

Intentional fraud or deliberate criminal acts. Knowingly breaking the law removes you from the protective framework entirely.
Self-dealing, meaning transactions where you had a material conflict of interest and failed to deal fairly with the corporation or its shareholders.
Improper personal profit, meaning financial benefits you were not legally entitled to receive.
Willful misconduct, meaning deliberate actions you knew were harmful to the corporation, distinct from honest errors in judgment.

Courts enforce these limits aggressively. An agreement that purported to cover outright fraud would almost certainly be unenforceable.

How a Claim Actually Gets Approved

Before permissive indemnification gets paid, someone has to determine that the individual actually met the good-faith standard. Section 145(d) lays out four methods:

A majority vote of disinterested directors, even if they constitute less than a quorum.
A committee of disinterested directors, selected by majority vote of those directors.
Independent legal counsel, retained when no disinterested directors are available or when the disinterested directors delegate. The firm issues a written opinion on whether the standard was met.
A stockholder vote.¹

In contested situations, independent counsel is the most common fallback. Well-drafted agreements define what “independent” means: a firm experienced in corporate law that has not represented either the company or the individual in any material matter within the past five years, with no conflict of interest. They also give the individual a window, often 10 days, to object to the selected firm. If the company fails to select counsel within a set timeframe, either party can petition a court to appoint one. If the corporation ultimately denies a claim, the individual’s recourse is to sue; in Delaware, courts generally place the burden on the corporation to prove the standard was not met.

Advancement of Legal Fees

A favorable ruling does you no good if you’ve already run out of money to fund your defense. Advancement addresses this timing problem by requiring the corporation to pay legal fees as they come in, rather than waiting for the case to end. Complex corporate litigation can run for years, and defense costs of hundreds of thousands of dollars per month are not unusual. Without advancement, an officer might settle a defensible case simply because they cannot afford to keep fighting.

Section 145(e) authorizes corporations to advance expenses to current officers and directors upon receiving an undertaking to repay if the individual is ultimately found not entitled to indemnification.¹ The undertaking is a written promise, not a secured loan. The statute does not require collateral and does not condition advancement on the individual’s ability to repay. That is intentional; if the standard were financial capacity, advancement would be unavailable to the people who need it most.

Advancement under the statute is permissive, not mandatory, which is why bylaws and indemnification agreements typically convert it into an obligation. The difference between a bylaw that says the company “may” advance and one that says it “shall” advance can determine whether you actually get funded.

The Repayment Obligation

The undertaking creates real financial risk. If a court ultimately determines you acted in bad faith or engaged in prohibited conduct, you owe back every dollar spent on your defense. In a fraud finding, for example, the company has a legal right to recover the full amount advanced. That repayment mechanism is the trade-off that makes advancement viable: the company funds your defense upfront, but it is not permanently on the hook for someone who turns out to be undeserving.

What Happens in Bankruptcy

Advancement becomes uncertain when the corporation files for bankruptcy. The automatic stay in Chapter 11 generally freezes payment obligations, and courts have wrestled with whether advancement duties fall within that freeze. In practice, the individual’s best protection during a bankruptcy is Side A D&O insurance, which pays officers and directors directly without flowing through the company. Bankruptcy courts have held that Side A policy proceeds are not property of the bankruptcy estate, since they exist exclusively for the individual insureds. Standard policies that mix company and individual coverage present a harder problem, because those proceeds may be treated as estate property and remain frozen.

D&O Liability Insurance

Indemnification is only as reliable as the corporation’s willingness and ability to pay. D&O insurance fills the gaps, and Delaware expressly authorizes corporations to purchase it even for conduct the corporation could not legally indemnify under Section 145.¹

A standard D&O policy has three layers:

Side A pays directors and officers directly when the corporation cannot indemnify them, whether because of legal restrictions, financial distress, or insolvency. No deductible or retention applies. This is the personal safety net.
Side B reimburses the corporation after it has indemnified an individual, effectively insuring the company’s indemnification obligation. A corporate retention typically applies.
Side C covers the corporation itself as an entity for claims made directly against it, most commonly securities class actions. This coverage is typically limited to publicly traded companies.

The hierarchy is consistent: corporate indemnification comes first, D&O insurance fills gaps where indemnification is unavailable or the company lacks resources to pay. Side A is the layer that matters most from the individual director’s perspective, because it responds precisely when corporate indemnification fails. In bankruptcy, Side A proceeds stay accessible to the individual even when Side B and C proceeds are frozen as potential estate assets.

The Federal Securities Law Limit

There is one area where corporate indemnification hits a wall no bylaw or contract can breach. The SEC has maintained for decades that indemnifying directors and officers for liabilities under the Securities Act of 1933 violates public policy and is unenforceable.⁴

The position is baked into the registration process. Any company registering securities that maintains indemnification provisions for directors, officers, or controlling persons must include a disclosure statement in its prospectus acknowledging the SEC’s view. If a director later asserts an indemnification claim for Securities Act liabilities, the company must submit the question to a court, unless controlling precedent has already settled the issue.⁵

The required undertaking language carves out one important exception: “the payment by the registrant of expenses incurred or paid by a director, officer or controlling person of the registrant in the successful defense of any action.” If you win a Securities Act case, the corporation can still cover your legal bills. The restriction targets indemnification of settlement payments and judgments for Securities Act violations, not the cost of mounting a defense. No court has issued a definitive ruling resolving the enforceability question in all contexts, which leaves a persistent zone of uncertainty around settlements.

Tax Treatment

Corporate indemnification payments are generally deductible as ordinary business expenses under Section 162 of the Internal Revenue Code, which allows a deduction for expenses that are ordinary and necessary for carrying on a trade or business.⁶ The reasoning is that protecting the individuals who run the business is a routine cost of operating it. A corporation cannot deduct indemnification payments tied to penalties or fines imposed for violations of law, because federal tax law disallows deductions for amounts paid as penalties to a government.

On the individual side, D&O insurance premiums paid by the corporation do not count as taxable income to the director or officer. The IRS has ruled that D&O coverage qualifies as a working condition fringe benefit, because the insurance primarily serves the corporation’s interest in fulfilling its indemnification obligations rather than providing a personal benefit.⁷ Indemnification payments received by the individual for legal expenses are generally not taxable income either, since they reimburse costs the individual was obligated to pay rather than creating a net financial gain. If the payment covers a settlement or judgment rather than expenses, tax treatment depends on the nature of the underlying claim.

Putting the Layers Together

No single layer is sufficient on its own. An exculpation provision in the charter can get certain claims dismissed early, but it cannot reach loyalty breaches or derivative suits against officers. Bylaw indemnification creates a company-wide commitment, but it can be amended and depends on the corporation’s continued solvency. An individual agreement locks in specific rights that survive board changes and mergers, but it still depends on the company’s ability to pay. D&O insurance provides the backstop for insolvency, but policies have limits, exclusions, and annual renewal risk.

The directors and officers who end up most exposed are typically those who assumed one layer covered everything. The ones who fare best negotiate all four: a charter with exculpation, bylaws with mandatory indemnification and advancement, a standalone indemnification agreement with successor-binding and most-favored-nation provisions, and confirmation that the company maintains adequate D&O insurance with a robust Side A component. Each layer covers a gap the others leave open, and the cost of putting them in place is trivial compared to the cost of discovering, mid-lawsuit, that the protection has a hole in it.

1
Justia Law. Delaware Code Title 8 – Section 145 – Indemnification of Officers, Directors, Employees and Agents
2
Delaware Code Online. Delaware Code Title 8, Chapter 1, Subchapter I – Section 102
3
U.S. Securities and Exchange Commission. Form of Pre-Merger Indemnification Agreement
4
eCFR. 17 CFR 229.510 – Disclosure of Commission Position on Indemnification for Securities Act Liabilities
5
eCFR. 17 CFR 229.512 – Undertakings
6
Office of the Law Revision Counsel. 26 U.S. Code 162 – Trade or Business Expenses
7
Internal Revenue Service. Private Letter Ruling 202335005