Blog - Dattak | Cybersécurité, Assurance & Risques Tech

Waiting period vs. waiting period: a difference that makes all the difference in the event of a claim

Written by Maxime Vioulac | Apr 23, 2026 1:41:24 PM

Understanding time deductibles in cyber insurance

When we talk about deductibles in an insurance contract, we often think of the amount in euros that the insured remains liable to pay.

But in cyber insurance, another form of deductible plays a key role: the time deductible, also known as the duration deductible.

Two options are possible, with very different consequences:

  • The waiting period
  • The waiting period

And a simple word can change... hundreds of thousands of euros.

Waiting period: mechanically reduced compensation

The waiting period is a time deductible. When a cyber loss occurs, the losses of the first few hours are never compensated.

These hours are converted into euros, then added to the policy's standard monetary deductible.

> Result: even if losses are massive from the outset, the insurer pays nothing for this period.

Example:

  • A company suffers a ransomware attack on January 1 at 9 a.m.
  • Business is halted for 48 hours
  • The policy provides for : - 12-hour waiting period - €10,000 monetary deductible
  • Business interruption estimated at 2 M€.
  • The first 12 hours correspond to losses of €700,000

> Amount not compensated: €700,000 (waiting period) + €10,000 (deductible) > Outstanding balance: €710,000 > Amount compensated: €1,290,000

Waiting period: fairer coverage

The waiting period does not affect the calculation of losses.

It simply sets a condition for activating cover: if the loss lasts less than the specified time (e.g. 12 hours), cover is not activated.

But as soon as the threshold is exceeded, all losses are compensated, after application of the monetary deductible only.

Same example with a waiting period:

  • The company is at a standstill for 48 hours.
  • The 12-hour waiting period is exceeded
  • Only the monetary deductible of €10,000 applies.

> Amount not indemnified: €10,000 > Amount indemnified: €1,990,000 > i.e. +€700,000 compared with the policy with waiting period.

Why this nuance is crucial in cyber insurance

Cyber attacks are brutal. In most cases, most losses are concentrated in the first few hours:

  • Business at a complete standstill
  • Sites, ERP or CRM inaccessible
  • Disorganized teams
  • Sales in free fall

It is precisely this critical period that the waiting period excludes. The waiting period, on the other hand, protects the company from the moment the impact becomes significant.

The Dattak choice: protect what really matters

At Dattak, we chose the waiting period for two simple reasons:

  1. It's more transparent for the insured
  2. It's economically fairer

> We believe that a company should not be penalized when it suffers the most losses.

An insurance policy should be there for you when you need it most, not add complexity.

In a nutshell

| Criteria | Waiting period (Dattak) | |--------------|----------------------|-------------------------------| | Initial losses | ❌ Not compensated | ✅ Covered if threshold exceeded | | Deductible type | ❌ Temporal + monetary | ✅ One clear deductible | | Compensation | ❌ Reduced from the outset | ✅ Complete from activation | Readability | ❌ Comprehensive | ✅ Simple and transparent |

Dattak's advice

Take the time to read your insurance contract.

In the Business interruption section, look for the words:

  • "Délai de carence" ❌
  • or "Délai d'attente ✅

This detail, often buried in the contractual wording, changes everything in the event of a claim.

💡 Want to go further? Find out how Dattak better protects businesses with a clear, useful approach to cyber insurance that can be activated on the day it counts. Cyber risk is the number 1 risk for any business, whatever its size.