Drilling and well servicing contracts contain some of the most carefully negotiated risk allocation in commercial practice. Knock-for-knock indemnities assign personnel and property risk to whichever party employs or owns, pollution liability is split by origin, and the whole structure assumes that each party’s indemnity is backed by insurance that will actually respond.
Control of well exposure sits slightly outside that neat structure. The cost of regaining control of a well, redrilling it, and cleaning up what escaped is typically the operator’s to carry, under a specialist policy. The drilling contractor’s certificate will show general liability, auto, workers compensation and excess layers, and none of those is the coverage that responds to a blowout.
This article covers how well control risk is allocated in drilling agreements, what verification of the insurance side actually requires, and why certificate review as usually practised misses the provisions that matter most. The risk being managed is low frequency and very high severity, which is the profile where process discipline pays for itself many times over in a single avoided event.
What the contract allocates and what the policy covers
Reading the indemnity article and the insurance article together is the only way to see whether the allocation is actually funded. Five elements do most of the work.
- Well control cost responsibility, which party bears the cost of regaining control, and whether that responsibility shifts if the incident results from the other party’s gross negligence.
- Redrill and restoration, whether the cost of redrilling or restoring the well is included in the allocation, since this is frequently a larger number than the control operation itself.
- Pollution origin split, the common division between pollution originating above the surface, usually the contractor’s equipment, and pollution from the reservoir, usually the operator’s.
- Insurance to support the indemnity, the requirement that each party carries specified coverage in support of the risks it has assumed, with limits stated per occurrence.
- Endorsement requirements, additional insured status, waiver of subrogation and primary and non-contributory wording, specified per policy rather than generally.
The last point is where verification usually falls down. A certificate lists policies and limits. It does not reliably show whether the required endorsements were actually issued, and the endorsement is what determines whether your entity has any standing to claim under the contractor’s policy at all. It is also the part of verification that takes the most effort, which is why it is the part most often skipped.
When a counterparty indemnifies you for a risk it has not insured, you have not transferred the risk, you have accepted that counterparty’s balance sheet as security for it. That may be acceptable for a large integrated contractor and unacceptable for a small regional operator. The point is that it should be a conscious decision recorded on the contract record, not an assumption nobody tested.
Where verification breaks down
The failures are procedural rather than technical, and they repeat across operators of very different sizes.
- Certificates are filed, not compared. The certificate is collected and stored without anyone checking the limits against the contract-specific requirement, which frequently differs from the standard.
- Endorsements are never requested. Additional insured and waiver of subrogation are required by the contract and evidenced only by the endorsement, which is rarely attached to the certificate.
- Well control coverage is assumed to be somewhere. Because the operator normally carries it, nobody confirms that it is in force, at what limit, or whether the current well is within scope.
- Limits are set by template. Required limits are inherited from a master template and never tested against realistic well control and redrill cost for the specific well and basin.
- Expiry is tracked by relationship, not by well. A contractor working across several wells under different agreements can be compliant on one and lapsed on another, and relationship-level tracking hides that.
Five steps to insurance you can rely on
Step 1, Extract the insurance and indemnity articles together
Pull required coverages, limits, endorsement requirements and the corresponding indemnity allocation from each drilling and service agreement into linked fields. Reading them as a pair reveals the mismatches, typically an indemnity assumed by a party whose required insurance does not cover that exposure.
Step 2, Set limits from exposure, not from the template
Test the required limit against a realistic estimate of well control, redrill and cleanup cost for the well type, depth and location. Template minimums set years ago for shallow onshore work are commonly carried into deeper or more complex programs without revision.
Step 3, Demand endorsements, not just certificates
Require the actual additional insured and waiver of subrogation endorsements as a condition of mobilization, and record which policies each endorsement attaches to. A certificate box ticked by a broker is not evidence that the endorsement exists in the policy.
Step 4, Confirm the operator side too
Verify that control of well coverage is in force, that its limit is adequate, and that the well in question falls within the policy schedule. Operators with well-run contractor verification programs sometimes have no equivalent control over their own specialist coverage.
Step 5, Track expiry at the agreement and well level
Drive alerts from certificate expiry dates linked to each active agreement and each well where the contractor is working, with a named owner and an escalation that can actually stop work. Coverage that lapses mid-program is the scenario every verification process exists to prevent.
See insurance obligations tracked per agreement
Watch how required coverages, limits and endorsements become monitored fields with dated evidence.
Making verification continuous rather than episodic
Insurance verification tends to be treated as an onboarding gate: check once at mobilization, file the certificate, move on. That works for a single-well program and fails across a contractor base with rolling renewals. The durable approach ties qualification status, certificates and contract requirements to the agreement record so that expiry has consequences, which is the model described in Contractor prequalification and MSA control for operators. Indemnity and insurance provisions across the master service agreement portfolio behave the same way, as covered in The operator’s guide to oilfield MSA indemnity control, and the same register serves both. A single register covering coverages, limits, endorsements and expiry across the contractor base removes the duplication of maintaining several partial ones.
Coverage type, who carries it and what to verify
Verification means different things for different coverages, and lumping them together is what lets the important one slip through.
| Coverage | Usually carried by | What to verify | Evidence |
|---|---|---|---|
| Control of well | Operator | In force, limit, well within schedule | Policy schedule and confirmation |
| General liability | Both parties | Limit, additional insured endorsement | Certificate and endorsement |
| Workers compensation | Employer of record | Statutory limits, waiver of subrogation | Certificate and endorsement |
| Excess or umbrella | Both parties | Attachment point and following form | Certificate and policy summary |
| Pollution liability | Per contract split | Scope matches the indemnity split | Policy wording extract |
Well control incidents are rare and expensive, which is exactly the profile where verification discipline pays. The mechanics are not complicated: read the indemnity and insurance articles together, set limits from real exposure, insist on endorsements rather than certificate summaries, and track expiry against the agreement and the well rather than the relationship. Most operators already collect the documents. The gap is between collecting them and being able to show, on the day of an incident, that the coverage the contract required was actually in force. The difference between a program that works and one that does not is rarely the quality of the drafting; it is whether anyone checked.
For related guidance, see The operator’s guide to oilfield master service agreements, The land manager’s guide to mining royalty obligations and Decommissioning and abandonment obligation tracking.
