Direct Billing, Guarantees of Payment and the Roles of Insurer-appointed Assistance Providers, TPAs and Client-appointed Responders
A Practical Guide for Employers, HR Leaders and Risk Managers
International medical and security incidents involve several distinct, but simple functions:
insurance coverage, case administration, and operational response. These roles are often misunderstood or blurred, which can cause unnecessary: delays, duplicated effort, unclear authority, and cost.
This guide explains how Direct Billing Agreements (DBAs) and Guarantees of Payment (GOPs) work, and clarifies the responsibilities of:
- Insurer-appointed assistance providers
- Third-Party Claims Administrators (TPAs)
- Client-appointed responders
- Hospitals and clinics, which frequently deliver most case management themselves
The aim is to provide clear, factual guidance so that organisations can structure incident response efficiently, avoid unnecessary duplication, and maintain safe, reliable support for their people.
Direct Billing Agreements in International Healthcare
What a DBA Is… A Direct Billing Agreement (DBA) is a contract between:
- the insurer, or
- a Third-Party Claims
- Administrator (TPA) acting on their behalf, and
- a hospital or clinic
The DBA allows the provider to bill the insurer directly for covered services, enabling cashless treatment for the insured member (subject to co-payments or deductibles).
DBAs are financial and administrative instruments. They are not owned by assistance providers or responders.
Coverage Control and the Role of the Insurer/TPA
The insurer or TPA controls:
- eligibility and benefits
- coverage decisions
- pre-authorisation
- GOP issuance
- DBA management
- claims processing and payment
These functions cannot be delegated to client-appointed responders or insurer-appointed assistance providers.
Insurer authority is always required for:
- inpatient admissions
- surgery
- high-cost treatment
- international medical evacuation
- repatriation of mortal remains
Guarantees of Payment (GOPs)
A GOP is a written commitment from the insurer or TPA confirming that they will pay a medical provider for a defined episode of care.
Key points:
- Only the insurer or TPA can issue a GOP.
- Hospitals often request GOPs directly.
- Assistance providers may request GOPs but cannot authorise or approve them.
- Client-appointed responders may support the documentation, but the decision remains with the insurer/TPA.
GOPs exist to protect providers and ensure insured members receive timely care.
The Role of Insurer-appointed Assistance Providers
Insurers appoint assistance providers to deliver services they do not perform themselves, typically on a global, 24/7 basis.
Who they work for
Insurer-appointed assistance providers are contracted and paid by the insurer.
Their mandate is aligned to the insurer’s interests, not the client’s.
Primary functions
- identifying in-network medical facilities
- coordinating eligibility checks
- requesting pre-authorisations and GOPs
- monitoring the case for medical appropriateness
- ensuring policy compliance
- providing clinical oversight
- coordinating transfers within policy limits
- supporting cost containment
- delivering updates to employers when appropriate
What they are not
They are not operational responders. They do not act as the client’s agent for risk decisions, duty of care or broader incident management.
Their value lies in clinical administration, documentation, cost oversight and network coordination on behalf of the insurer.
The Role of Third-Party Claims Administrators (TPAs)
A TPA may be appointed to manage the insurer’s administrative and financial responsibilities.
Typical TPA responsibilities:
- verifying insurance eligibility
- adjudicating claims
- managing DBAs and provider networks
- issuing GOPs
- processing payments
- managing the digital claims platform
TPAs do not manage operational incidents and are not assistance providers.
They form the backbone of the commercial and contractual relationship between insurer and provider.
The Hospital as Case Handler: What Clinics Already Do
Hospitals and clinics play a central and often underappreciated role in managing insured medical incidents.
In many countries, hospitals directly:
- arrange or receive patient transfers
- confirm coverage with the insurer/TPA
- request GOPs
- admit and treat the patient
- provide clinical updates
- manage diagnostics and treatment plans
- coordinate discharge
- bill the insurer directly under the DBA
This is routine and efficient because:
- hospitals have established relationships with insurers/TPAs
- they have internal insurance desks
- they benefit commercially from smooth DBA operations
In a large proportion of medical incidents, the hospital is the primary case handler, not the assistance provider.
Client-appointed responders monitor, support and communicate — but do not interfere with established clinical and billing processes.
The Role of the Client-appointed Responder
Who they work for
Client-appointed responders are contracted and paid by the organisation. Their priority is duty of care, operational continuity, welfare and life safety.Primary functions
- triage and manage all incidents (medical, security, cyber, natural disaster, kidnap, detention, missing persons, and more…)
- determine whether the incident is insured
- coordinate with local facilities
- manage safety, movement and logistics
- liaise with authorities
- communicate with employers and families
- coordinate repatriation and travel adjustments
- support insured and uninsured events
- interface with the insurer/TPA for medical cases
What they cannot do
- issue GOPs
- approve treatment on behalf of the insurer
- override insurer medical review
- guarantee payment
- on-the-ground coordination
- operational decision-making
- risk management
- cross-incident integration
Replacing or Unbundling the Insurer-appointed Assistance Provider
You are not mandated, or forced to use the insurers’ default responder… it is your choice. Corporate clients typically have three legitimate options:
Option 1 — Use the insurer-appointed assistance provider
This is the default model for many group policies.
Option 2 — Replace the insurer-appointed assistance provider with a client-appointed responder
Clients may request that the insurer remove the bundled assistance provider and use their own preferred responder instead. In this case, the responder still works for the insurer.
Coverage flows through the insurer/TPA as normal.
Option 3 — Use a client-appointed responder as the primary coordinator, and involve the insurer’s provider only when required
The client-appointed responder handles all incidents, works for, and is paid by the client – often in the form of a membership or subscription; the insurer’s provider might be used for insured cases where a specialist support layer is insisted on and paid for by the insurer for a rare, or complex case.
All three options are contractually viable and widely used in industry practice.
How Client-appointed Responders and Insurer Systems Work Together
The relationship is cooperative when roles are clear:
Client-appointed responder leads:
- incident triage
- logistics and safety
- operational decision-making
- communications
- insured and uninsured incident management
Hospital/clinic leads:
- clinical care
- insurance verification
- GOP requests
- DBAs
- discharge and billing
Insurer-appointed assistance provider leads (if involved):
- policy administration
- medical review
- cost oversight
- insurer’s preferred network utilisation
TPA leads:
- coverage confirmation
- GOP issuance
- claims settlement
A coordinated response model understands these boundaries and limitations.
Avoiding Duplication and Confusion
Incidents become inefficient or unsafe when:
- multiple parties contact the hospital
- case leadership is unclear
- operational and insurance roles overlap
- communication runs in parallel channels
To prevent this:
- The organisation should designate one voice to the hospital at any time
- Incident roles should be defined in advance.
- Both responders (client-appointed and insurer-appointed) should be able to collaborate without duplication.
- All parties should operate through a single shared communication channel.
Clear structure avoids delays, cost duplication and conflicting instructions.
Practical Guidance for Organisations
To ensure an effective and safe response model:
- Request written clarification from insurers/TPAs on DBAs, GOP processes and assistance provider roles.
- Decide whether to use, replace or unbundle the insurer-appointed assistance provider.
- Appoint a client responder if comprehensive, multi-risk incident management is required.
- Document clear boundaries between the insurer-appointed provider, TPA, hospital and client-appointed responder.
- Establish a single communication channel and a defined case lead for all incidents.
- Train internal teams to understand the difference between insurance processes and operational response.
Clear structure avoids delays, cost duplication and conflicting instructions.
Case Examples
Example 1: Simple Medical Case with DBA in Place (Dubai)
- 1. An employee reports a fractured ankle in Dubai.
- 2. The client-appointed responder triages the incident and confirms it is insured.
- 3. The responder contacts an in-network hospital holding a DBA with the insurer.
- 4. The hospital handles the transfer, verifies coverage, requests the GOP, treats the patient and manages discharge.
- 5. The responder tracks progress, updates HR, ensures welfare and manages travel adjustments.
- 6. The hospital and insurer/TPA complete the claim directly.
This model is fast, efficient and requires no operational input from the insurer-appointed assistance provider.
Example 2: Repatriation of Multiple Mortal Remains from Africa
- 1. The client-appointed responder receives notification of multiple fatalities overseas.
- 2. The responder manages local coordination: authorities, facility, employer and family.
- 3. The incident is insured; however, the insurer requests that their insurer-appointed assistance provider select the specialist repatriation vendor.
- 4. The client-appointed responder provides ground truth and recommendations but aligns with the insurer’s requirement.
- 5. The insurer-appointed provider manages cost, contracts and GOP compliance.
- 6. The client-appointed responder manages operational realities: documentation, communication, local permissions, safety and movement.
- 7. The client approves the combined plan.
This example demonstrates collaborative operation: insurer systems manage financial obligations, while the client-appointed responder ensures the wider duty-of-care and operational process function smoothly.
Summary
To ensure an effective and safe response model:
- DBAs and GOPs are controlled by the insurer or TPA, not responders or assistance providers.
- Hospitals often deliver much of the case handling themselves through established DBAs.
- Insurer-appointed assistance providers support insurance workflows, not operational response.
- Client-appointed responders manage the real-world incident and duty-of-care responsibilities.
- Clients may replace or unbundle the insurer-appointed assistance provider if preferred.
- Complex cases may require collaboration between the client responder and insurer systems.
- Clear role separation ensures efficient, safe incident management with no duplication.
A well-structured model recognises that coverage, clinical administration and operational response are distinct… and must be coordinated, not conflated.
Assess your organization's travel risk management program, duty of care readiness, and business travel safety posture against ISO 31030:2021 — the international standard for corporate travel security and traveler safety.
- 7 Core Domains
- 35 Requirements
- 15 Minutes
Speak with our team to review your current model and close any gaps.