Limit of Indemnity: "Any One Claim" vs "In the Aggregate", and Why Forty Clients Can Share One Limit
One error in a payroll module. Forty client companies running it. Forty finance directors who now want their money back, arriving over about six weeks.
Your policy says RM1,000,000. That is not RM1,000,000 each. In Malaysia the aggregation clause decides that, and it says so in terms.
This page explains how a limit of indemnity is really structured on Malaysian liability policies: any one claim against in the aggregate, what aggregation does to a multi-client loss, whether defence costs come out of the limit, and what reinstatement is actually worth.
Key Facts: Limits of Indemnity in Malaysia
What is a limit of indemnity? The most the insurer will pay, stated on your schedule. The wording next to the number decides whether that maximum applies once per claim, or once for the entire policy year.
What does "in the aggregate" mean? It means the figure is the ceiling for everything the policy pays during the period of insurance. Once it is used up, it is gone, whether that took one claim or nine.
Who needs to look at this? Any Malaysian business whose work touches many customers at once. Software vendors, payroll and accounting firms, agencies running campaigns for multiple brands, and anyone whose single deliverable is used by more than one client.
Is a minimum limit required in Malaysia? No statute sets one for professional indemnity, cyber or public liability. The figure in your contract came from your client, which is why the number so often bears no relation to your fee.
What does the structure cost you? Nothing extra in tax. Every liability policy attracts the same RM10.00 stamp duty under Item 6(a) of the First Schedule to the Stamp Act 1949 (Act 378). What differs is how much of the limit is left when the second claim arrives.
Last verified: August 2026. Checked against the First Schedule to the Stamp Act 1949 (Act 378) and Malaysian technology professional indemnity and cyber wordings currently in the market, 2025 editions.
Serving a lot of clients off one product or one process?
That is the profile where an aggregate limit runs out. Send us your schedule and we will tell you what a realistic worst case looks like against it, alongside your professional indemnity insurance.
One error, forty clients, one limit
Take the payroll example and follow the money. The vendor holds RM1,000,000, and the total of the forty complaints comes to RM2,400,000.
The instinct is that forty separate customers means forty separate claims, and that a per-claim limit therefore gives forty chances at RM1,000,000. A technology professional indemnity wording currently bound in the Malaysian market, 2025 edition, closes that reading at clause 3.1.3:
"a series of occurrences, acts errors or omissions arising out of or attributable to the same originating cause, source or event ... deemed to be one claim or one occurrence regardless of the number of claimants involved"
Source: clause 3.1.3 of a technology professional indemnity wording currently bound in the Malaysian market, 2025 edition. The insurer is not named, as is standard practice when quoting a bound wording.
So the sequence runs like this:
- Forty demands arrive from forty different companies over six weeks.
- All forty trace to one defect in one module, which is one originating cause.
- The policy treats them as one claim, expressly regardless of how many claimants there are.
- One claim draws on one limit of RM1,000,000.
- The remaining RM1,400,000, plus the deductible, belongs to the vendor.
Read the other way round, the same clause can help you. Forty claims would otherwise mean forty deductibles. Treated as one claim, there is one deductible to pay. Aggregation is not a trick played on the buyer, it is a definition that cuts both ways, and the point is to know which way it cuts for your business.
The businesses most exposed to the unhelpful side share one trait: many customers depending on a single thing you built or ran. That is the profile of most Malaysian software vendors, payroll bureaus, outsourced accounting firms and managed service providers.
Any one claim or in the aggregate: what the words on your schedule mean
Malaysian schedules use a small number of phrases and they are not interchangeable. This table shows what each one does to the money.
| Phrase on the schedule | What the insurer will pay | Where it usually appears |
|---|---|---|
| Any one claim | The full limit for each claim, with claims from one originating cause counted as one | Public liability, and some professional indemnity placements |
| Any one claim and in the aggregate | The full limit for a claim, but also a ceiling on everything paid in the policy year | Most Malaysian professional indemnity and technology errors and omissions wordings |
| In the aggregate | One pot for the year. The second claim shares whatever the first left behind | Cyber wordings, and products liability sections |
| Inclusive of defence costs | Lawyers, experts and investigation come out of the same figure as the settlement | Common on Malaysian cyber and professional indemnity wordings |
| Sub-limit | A smaller cap on one head of cover, carved out of the main limit rather than added to it | Cyber extensions, court attendance costs, breach response heads |
The wording referenced above is explicit on the last row: a sub-limit is deemed to be part of, and not in addition to, the limit of indemnity, at clause 3.1.5. A schedule listing eight sub-limited extensions is not eight extra pots of money.
Defence costs: inside the limit, or on top of it?
Ask this before you ask anything else about the number, because it can halve the answer.
Foreign content, particularly American content, tends to assume defence costs sit outside the limit and are paid in addition to it. Malaysian cyber wordings frequently do the opposite. One Malaysian cyber and data security wording currently in the market, 2025 edition, states its limits as inclusive of defence costs and as the maximum payable any one claim and in the aggregate during the period of insurance.
The arithmetic is unforgiving. If defending a disputed claim costs RM350,000 and the settlement is RM800,000, an RM1,000,000 limit inclusive of costs does not cover it. The same limit with costs in addition would.
| Structure | Settlement RM800,000, defence RM350,000 | You pay |
|---|---|---|
| RM1,000,000 inclusive of defence costs | Insurer pays up to RM1,000,000 across both | RM150,000, plus the deductible |
| RM1,000,000 with costs in addition | Insurer pays the settlement and the costs separately | The deductible only |
This is an illustrative calculation, not a claims prediction. It is here because the two structures look identical on a certificate of insurance, and a client checking your evidence will not see the difference either.
Does your schedule say "inclusive of defence costs"?
If it does, your usable limit is smaller than the headline. We can show you what the same money buys structured differently, including on cyber insurance.
Reinstatement is not a second limit
Some wordings put the limit back after it has been exhausted. That sounds like a spare tyre, and it is narrower than it sounds.
In the technology professional indemnity wording referenced above, the professional indemnity section carries one reinstatement of the limit, while the liability section carries unlimited reinstatements except for products claims. Reinstatement applies only once the limit has actually been exhausted and any excess policy sitting above it has been exhausted too, and it never applies to a sub-limit.
Two consequences worth holding on to. Reinstatement does not help with the aggregation problem, because forty claims from one cause are one claim drawing once on one limit. And an endorsement can delete the reinstatement clause entirely, which is exactly the kind of change that never shows up on a certificate.
| Question to ask your insurer | Why it changes the answer |
|---|---|
| Is the limit any one claim, aggregate, or both? | Decides whether a second claim in the same year has anything to draw on |
| Are defence costs inside the limit? | Can reduce the money available for settlement by a large fraction |
| Which extensions are sub-limited, and at what? | Sub-limits are carved out of the main limit, not added to it |
| Is the reinstatement clause still in the policy? | Endorsements delete it, and the schedule alone will not tell you |
| How does the wording define one claim? | The originating cause test is what merges a multi-client loss into a single limit |
Choosing a limit when your contract has already chosen one
Most Malaysian buyers are not picking a number. A client contract has named one, commonly somewhere between RM500,000 and RM5,000,000 for services and technology suppliers, and the job is to decide whether that figure is enough for your own protection as well as for the contract.
Two tests answer it quickly. First, what is the largest single thing you make or run, measured by how many customers depend on it? That is your realistic aggregation scenario, and it is the number the contract limit should be compared against. Second, does your schedule pay defence costs from inside the limit? If so, treat the usable figure as materially lower than the headline.
Where the contract limit is lower than your own exposure, the contract is not protecting you, it is protecting your client. Buying to the contract figure and stopping there is the most common mistake in this whole area.
FAQ
Does an RM1 million limit mean RM1 million per client?
No. Claims arising from the same originating cause are treated as a single claim under Malaysian professional indemnity and technology wordings, expressly regardless of how many claimants there are. Forty customers affected by one defect share one limit between them. The per-client reading is the most common and most expensive misunderstanding of a liability schedule.
What is the difference between "any one claim" and "in the aggregate"?
"Any one claim" means the stated figure is available for each claim. "In the aggregate" means it is the ceiling for everything the policy pays in the policy year. Many Malaysian professional indemnity schedules carry both, so each claim is capped and the year is capped as well.
Are defence costs paid on top of my limit?
Often not in Malaysia. Cyber and professional indemnity wordings here frequently state the limit as inclusive of defence costs, meaning legal and investigation spending reduces what is left for a settlement. Foreign material commonly assumes the opposite structure, so check your own schedule rather than a general article.
What is a sub-limit?
A smaller cap applied to one part of the cover, such as a breach response or court attendance extension. Under the wording referenced in this article a sub-limit is part of the main limit and not in addition to it. A long list of sub-limited extensions therefore does not increase the total money available.
If my limit is used up, does reinstatement give me a fresh one?
Sometimes, and with conditions. Reinstatement typically applies only after the limit has genuinely been exhausted, does not apply to sub-limits, and may be restricted to one occasion on the professional indemnity section. It can also be removed by endorsement, so confirm it is still in your policy rather than assuming.
My client contract sets the limit. Should I just buy that figure?
Buy at least that figure, then check it against your own worst realistic loss. The contract limit reflects what your client wants protected, not what you would need if one mistake reached every customer you have. Where the two differ, the higher number is the one that protects the business.
Does a higher limit change how much stamp duty I pay?
No. Stamp duty on a third party liability policy is RM10.00 under Item 6(a) of the First Schedule to the Stamp Act 1949 (Act 378), regardless of the sum insured or the term. Premium is a separate matter and depends on your risk profile, revenue, claims history and the scope of cover.
Contingent Conclusion
A limit of indemnity is three questions wearing one number: how many claims can draw on it, what else comes out of it, and what counts as one claim. The aggregation clause answers the third, and it is the one that surprises people, because it merges a room full of angry customers into a single draw on a single limit.
If your business serves many clients from one product, one platform or one process, that clause is the most important sentence in your policy. Read it before you renew, and compare the figure your contract asked for against the loss your own operation could actually produce.
Contingent helps Malaysian businesses get the cover their contracts and landlords require. Whether you're comparing options or checking whether your existing policy actually does what the contract asks, we can help.
Get a quote · or WhatsApp us directly
Related reading: our guide to professional indemnity insurance in Malaysia, PI for IT consultants and software companies, cyber insurance in Malaysia, directors and officers liability insurance, and insurance for tech and SaaS startups.
Primary source: the Laws of Malaysia portal of the Attorney General's Chambers for the First Schedule to the Stamp Act 1949 (Act 378). Wording references are to Malaysian technology professional indemnity and cyber wordings currently bound in the market, 2025 editions, cited by clause number without naming the insurer. Dispute resolution scope for small businesses is published by the Financial Markets Ombudsman Service.
Published by Contingent, the commercial insurance brand of Emerge Insurtech (Malaysia) Sdn. Bhd.
Disclaimer: This article describes how these policy terms commonly operate in the Malaysian market as of August 2026, with clause references drawn from wordings currently in use. Wordings differ between insurers and between policy years, and endorsements can delete or amend any clause described here. Always read your own schedule and endorsement pages, and consult a qualified insurance professional before relying on any of it.
