Category: Claims Handling

Reimbursement Basis

Also known as: on a reimbursement basis, reimbursement model, reimbursement basis clause

Simply put

Reimbursement basis is a payment arrangement in which the insured pays covered costs out of its own pocket first and then applies to the insurer to be paid back. This differs from an arrangement where the insurer pays expenses directly, and it can create cash-flow strain because the insured must fund the losses up front before recovering them.

Formal definition

A reimbursement basis is a contractual method under which one party repays another for specific expenses actually incurred, subject to the conditions defined in the governing clause. In an insurance context, it contrasts with a 'pay on behalf of' structure: under a reimbursement model the insured incurs and pays all costs up front and subsequently seeks recovery from the insurer, whereas under a pay-on-behalf-of model the insurer settles covered amounts directly. The distinction affects the insured's working-capital exposure during an incident and does not by itself alter what is covered; whether and to what extent expenses are ultimately recoverable remains subject to the specific policy wording, applicable retentions, sublimits, exclusions, and conditions precedent. The term also appears outside insurance, for example, in commercial leasing, where it describes how a landlord recovers certain operating expenses from tenants, so its precise meaning depends on the contract in which it is used.

Why it matters

The reimbursement basis is one of the most consequential yet under-examined mechanics in a cyber or specialty insurance program because it determines who fronts the money during an incident. Under a reimbursement model, the insured must pay covered costs, incident response, forensics, data restoration, legal fees, and similar expenses, out of its own funds first and then apply to the insurer to be paid back. This creates a working-capital exposure that is entirely separate from the question of whether a loss is covered. A policy can respond fully to a claim and still leave an organization scrambling for cash in the critical days after an incident, when vendor invoices arrive faster than any recovery can be processed.

The strain falls hardest on smaller organizations. As industry training material notes, requiring the insured to pay all costs up front and then seek reimbursement can be very costly for a small company that lacks the liquidity to absorb large, sudden expenses. This is a distinct issue from mitigation or resilience: insurance transfers financial risk, but a reimbursement structure delays the arrival of that transferred money, so an otherwise well-insured firm may face a liquidity crunch precisely when it can least afford one. The distinction between reimbursement and a pay-on-behalf-of arrangement therefore matters at the point of purchase, not just at the point of claim.

Importantly, the reimbursement basis does not by itself change what is covered. Whether and to what extent expenses are ultimately recoverable remains subject to the specific policy wording, applicable retentions, sublimits, exclusions, and conditions precedent. Buyers should not assume that a reimbursement structure narrows coverage, nor that a pay-on-behalf-of structure broadens it; the two describe the timing and mechanics of payment rather than the scope of the insuring agreement.

Who it's relevant to

Risk managers and finance teams

Because a reimbursement basis requires the insured to fund covered losses up front, risk and finance functions need to plan for the liquidity gap between paying vendors and receiving recovery. This is a cash-flow question rather than a coverage question, and it may influence decisions about credit facilities, reserves, or negotiating a pay-on-behalf-of structure where available.

Insurance brokers and buyers

Brokers should identify whether a program responds on a reimbursement or pay-on-behalf-of basis and explain the difference to clients, particularly smaller organizations for whom fronting large incident costs can be very difficult. The distinction is a placement consideration that sits alongside retentions, sublimits, and exclusions, and it does not by itself determine what is covered.

Incident response and continuity planners

Teams coordinating response should understand that even a well-insured organization may need to pay forensics, restoration, and legal costs before any recovery arrives under a reimbursement model. Recognizing this timing gap helps planners build realistic assumptions about how quickly external resources can be engaged and paid during an incident.

Legal and compliance professionals

Counsel reviewing policy or commercial contracts should read the specific reimbursement basis clause, since it defines the method and conditions for repayment and since the term carries different meanings across contexts, for example, insurance versus commercial leasing. Recovery remains subject to the governing wording, including documentation requirements and conditions precedent.

Inside Reimbursement Basis

Reimbursement (Indemnity) Mechanism

Under a reimbursement basis, the insured first incurs and pays the covered costs, then submits proof of payment to the insurer for repayment, rather than the insurer paying vendors or third parties directly. This distinguishes it from a 'pay on behalf of' basis where the insurer funds costs as they arise.

Proof of Loss and Documentation

Recovery on a reimbursement basis typically depends on the insured substantiating amounts actually paid through invoices, receipts, and other records, subject to the specific policy conditions and any conditions precedent to payment.

Application Across First-Party Coverages

This basis commonly appears in first-party cyber coverages such as business interruption loss, data restoration, cyber extortion, and incident response costs, where the insured absorbs expenses before being repaid. Whether a given cost qualifies remains subject to the policy wording, sublimits, retentions, and exclusions.

Interaction with Retention and Sublimits

Reimbursement is generally net of the applicable retention or deductible and capped by any relevant sublimit, meaning the insured recovers only amounts above the retention and within the limit, subject to the specific wording.

Cash-Flow and Timing Considerations

Because the insured funds costs upfront, there can be a gap between outlay and repayment. The reimbursement basis therefore places a temporary liquidity burden on the insured, in contrast to arrangements where the insurer advances or directly pays costs.

Common questions

Answers to the questions practitioners most commonly ask about Reimbursement Basis.

Does a reimbursement basis mean the insurer pays my vendors and responders directly?

Not typically. Under a reimbursement (or indemnity) basis, the insured generally pays covered costs first and then seeks repayment from the insurer, subject to the policy wording, retentions, and proof-of-loss requirements. This is often contrasted with a pay-on-behalf-of arrangement, where the insurer may settle costs directly with third parties. Which mechanism applies depends on the specific form, and some policies blend the two across different coverage sections.

If my policy is written on a reimbursement basis, does that mean I have to wait until a claim is fully resolved before I see any money?

Not necessarily. Reimbursement describes the direction of payment (the insured pays and is repaid), not a single lump-sum timing at the end. Depending on the wording, some policies allow periodic or interim reimbursement as costs are incurred and documented, while others may require costs to be settled before reimbursement. The timing is governed by the policy's conditions, proof-of-loss provisions, and claims-handling terms rather than by the reimbursement label alone.

What documentation should we keep to support a reimbursement claim?

Because reimbursement generally depends on demonstrating that covered costs were actually incurred and paid, insureds typically need to retain invoices, proof of payment, engagement letters or statements of work, and records tying expenses to the covered event. Requirements vary by policy, so reviewing the proof-of-loss and cooperation conditions in your specific wording, and confirming expectations with the insurer or broker early, helps avoid disputes over whether costs are substantiated.

How does a reimbursement basis interact with the retention or deductible?

In many policies the insured absorbs the retention before reimbursement applies, so costs up to the retention are borne by the insured and amounts above it may be reimbursed, subject to sublimits and the specific wording. The interaction between retention, any waiting period for business interruption, and the reimbursement mechanism should be confirmed against the actual policy terms, as forms differ in how these provisions stack.

Do we need insurer consent before incurring costs we intend to have reimbursed?

Frequently, yes. Many cyber policies contain conditions precedent requiring the insurer's prior consent to certain expenses, or requiring use of panel or pre-approved vendors, and costs incurred without required consent may be challenged. Whether consent is required, and for which costs, is set by the specific policy conditions, so it is prudent to confirm the notification and consent requirements before engaging responders or vendors.

How can cash flow be managed when coverage responds on a reimbursement basis?

Because the insured typically funds covered costs upfront and is repaid later, some organizations plan for the working-capital gap between paying responders and receiving reimbursement. Options discussed in practice include confirming whether the policy permits interim payments, clarifying documentation and consent steps in advance to speed processing, and understanding whether any coverage sections are written on a pay-on-behalf-of basis instead. The available options depend on the specific wording and the insurer's claims practices.

Common misconceptions

A reimbursement basis means the insurer pays vendors and responders directly during an incident.

On a reimbursement basis the insured typically pays covered costs first and is repaid afterward, subject to documentation and policy conditions. Direct payment to third parties is characteristic of a 'pay on behalf of' arrangement, which is a different mechanism.

Everything the insured pays during an incident will be reimbursed.

Reimbursement is conditional. Recovery depends on the specific policy wording, applicable exclusions, sublimits, retentions, and conditions precedent, and typically requires adequate proof of the amounts actually incurred and paid. Costs outside the coverage grant or below the retention are generally not recoverable.

The basis of payment affects the resilience or recovery capability of the organization.

Reimbursement basis is an insurance settlement mechanism (risk transfer) and does not reduce the likelihood or impact of an incident. It does not by itself improve RTO, RPO, or continuity outcomes, which depend on the organization's own controls and recovery planning.

Best practices

Confirm at binding whether each first-party coverage operates on a reimbursement or a 'pay on behalf of' basis, since this affects who funds costs during an incident.

Assess the organization's liquidity and access to working capital to cover incident expenses upfront, given the timing gap inherent in a reimbursement basis.

Maintain clear documentation practices for incident-related spending, including invoices and proof of payment, to support proof of loss and satisfy any conditions precedent.

Review how retentions and sublimits interact with reimbursement so expectations of net recovery are realistic and understood before an incident occurs.

Clarify with the broker or insurer whether advance payments or interim reimbursements are available for large or prolonged losses, and document any such agreement in the wording.

Coordinate the insurance settlement mechanism with the incident response and business continuity plans so that funding responsibilities are assigned and not assumed to fall on the insurer.