Self-insurance is how most large US employers already handle at least one major risk, since self-funded health plans cover 67% of covered workers and 80% of those at firms with 200 or more employees.

Retaining liability or workers’ compensation risk works the same way, with losses coming out of reserves you funded instead of a carrier’s balance sheet. A vendor-caused loss inside that retained layer has no carrier to absorb it, which turns your vendor insurance requirements into your primary loss control.

Self-insured vendors create the opposite problem, handing you a state certificate of authority or a letter of self-insurance instead of an ACORD form. You verify them by checking the approval behind the document, since no policy exists to check.

What Self-Insurance Is

Self-insurance is the practice of retaining a risk yourself instead of transferring it to a carrier. You pay claims from your own funds, hold reserves against future losses, and take on the administrative work a carrier would otherwise handle.

Self-insurance looks like a binary choice from the outside, with a company either buying a policy or writing checks from cash on hand. Almost nobody operates at either extreme, though. Retention is more of a spectrum, and the structures in the middle account for nearly all of it:

Captives belong on that list for a reason. The National Association of Insurance Commissioners (NAIC) describes a captive as essentially a form of self-insurance where the insurer is owned wholly by the insured. That definition fits a single-parent captive exactly. Group captives and cell arrangements spread ownership among members or leave it with a facility operator, while participants still fund the losses themselves.

Every type of captive issues real policies backed by reserves its owners or participants funded, so the risk stays with the organizations that created it while a counterparty still receives a policy it can accept. Because the captive is a licensed insurer, it can buy reinsurance directly, even when you rent space in it instead of owning it.

Retention has a technical meaning here, which is the portion of any loss you pay before outside coverage responds. Every deductible on every policy you hold is a retained layer, so an organization carrying a $25,000 property deductible is self-insuring the first $25,000 of every property loss. Scale that concept up and you arrive at a self-insured retention, which applies the same logic to far larger amounts.

What Employers Are Actually Required to Carry

Federal law does not require employers to carry workers’ compensation, disability, or unemployment insurance. It’s the states that mandate workers’ compensation, each of which administers its own program with its own rules. Only a handful of states require disability coverage, while unemployment insurance operates as a federal-state program funded through employer payroll taxes instead of a policy that companies must purchase.

Texas is the exception on workers’ compensation, since private employers there can decline coverage entirely. The Texas Department of Insurance calls these employers non-subscribers. Coverage normally makes workers’ compensation an injured employee’s exclusive remedy, which bars a negligence lawsuit against the employer. Non-subscribers lose that protection. Texas law also bars a non-subscriber from blaming the injury on the employee’s own carelessness, on a risk the employee knowingly accepted, or on a coworker’s negligence. The employee still has to prove the employer was negligent.

State authority over workers’ compensation is what makes self-insuring it a regulated activity. Each state decides who qualifies, what they post as security, and what happens when an approved self-insurer stops meeting the standard, which the regulatory section below covers in detail.

Self-Insured Retention

A self-insured retention is an amount you pay on each claim before your excess policy responds. Organizations carrying a $250,000 SIR under a $10 million excess tower are self-insuring the first $250,000 of every loss, whether or not anyone at the company describes it that way.

Inside a retention, you handle the claim. You hire the adjuster, you direct the defense, you decide what to settle, and your excess carrier watches without participating until the loss reaches their attachment point. A deductible works the other way, since your carrier handles the claim from the start and bills you for the deductible portion afterward. That control is part of why organizations choose an SIR, and the administrative obligation attached to it is part of why others don’t.

Sizing the retention is where organizations can make an expensive mistake, because a number that looked right at renewal three years ago may not provide adequate protection today. General liability claim severity reached $101,000 in 2024, up 45% from $70,000 in 2020, based on carriers reporting through the ISO Statistical Plan. A retention set against 2020 loss experience caps your share of each claim at the same dollar amount it did then, while the average claim has grown 45%. Your company pays more on the typical claim inside that retention, often without anyone noticing the shift.

Your excess tower has the same problem from the other direction. Losses that would have stayed within the retained layer five years ago now reach the excess carrier more often, which affects your excess pricing at renewal and could eventually affect whether that carrier wants the account.

Above the retention, your excess or umbrella policy takes over. A retention typically applies per occurrence, so you pay up to the full retention amount on every claim. A year with several large losses costs you that amount several times over.

Some programs cap your total with an annual aggregate retention, after which excess coverage responds to further claims without another retained layer. Confirm which structure you hold before you set the retention amount, since your exposure under a per-occurrence retention has no annual ceiling.

Self-Funded Health Plans

A self-funded health plan pays employee medical claims from your organization’s own assets instead of transferring that risk to an insurer. You contract a third-party administrator to process claims and provide network access, you fund the claims as they come in, and you carry the year’s medical spend on your own books.

Employees rarely notice. The ID card carries a familiar insurer’s logo, because the large carriers administer self-funded plans alongside the policies they sell, and the network, the claims process, and the customer service line work the same way.

How ERISA Changes the Rules

The Employee Retirement Income Security Act preempts state insurance regulation for self-funded health plans. That preemption changes four things about how your plan operates:

• No state approval: No agency reviews your plan or authorizes you to operate it, unlike workers’ compensation self-insurance where a state grants or withholds permission.
• No state benefit mandates: You design coverage without following each state’s list of required benefits. Federal rules still apply, including preventive care without cost sharing, the ban on annual and lifetime dollar limits, mental health parity, and protection against surprise medical bills.
• No state premium tax: Fully insured employers pay that tax through their premium. You avoid it on the claims your plan pays directly, though the stop-loss policy above your plan is insurance and generally carries the tax.
• One plan design everywhere: Multi-state employers apply the same benefits and the same documents in every state, instead of managing separate arrangements shaped by fifty different mandate lists.

You take on fiduciary responsibility in exchange. ERISA makes your organization a plan fiduciary, obligating you to administer the plan in participants’ interest and exposing you to claims when you don’t.

Stop-Loss Insurance

Stop-loss coverage caps what a self-funded plan can cost you in a year, and no employer should run one without it. A single catastrophic claimant can generate seven figures in medical spend, which is the kind of loss that ends the argument for self-funding permanently.

Two forms cover two different failure modes:

• Specific stop-loss: Caps your exposure on any one claimant, attaching at a per-person threshold you select. A premature infant, a transplant, or a cancer course crosses that threshold and the stop-loss carrier funds everything above it.
• Aggregate stop-loss: Caps your total plan-year spend across all claimants. Nobody needs a catastrophic claim for this to matter, since a year where ordinary claims run 25% above projection produces the same budget problem through volume.

Carrying only specific coverage leaves the volume risk open, which is why most programs buy both. The attachment points you choose determine your premium and your retained exposure, and setting them too high to save premium defeats the purpose.

Level-funded plans package a small self-funded component with stop-loss attaching at low thresholds, which is how self-funding reaches employers too small to absorb real claims volatility. Those arrangements look like self-insurance on paper and behave much closer to an insured plan in practice.

What This Means When You Verify a Vendor

A vendor telling you they’re self-insured may be describing their health plan and nothing else. That statement carries no information about their general liability coverage, their auto coverage, or their workers’ compensation status.

Ask which risks they retain. A company self-funding health benefits while buying conventional liability coverage is entirely ordinary, and so is the reverse. The phrase covers too much ground to accept on its own.

Captive Insurance

A captive is an insurance company you own, formed to insure the risks of its own parent or members. You capitalize it, it issues policies, it holds reserves, and it answers to a regulator in whatever domicile licensed it. The structure keeps risk within your corporate family while giving you a licensed insurer that can issue policies and access reinsurance markets directly.

Four structures cover nearly every type of captive insurance arrangement:

Is a Captive Worth It?

A captive might be a good idea if your loss volume is predictable enough to fund internally and large enough to justify the overhead, which in practice means organizations with sustained premium spend and stable claims experience. Everyone else is usually better served by a cell, a group arrangement, or a conventional policy.

Marsh formed 118 new risk retention entities in 2025, up from 92 the prior year, with managed captive premium reaching $79.1 billion. Commercial rates softened by 4% that same year, which weakened the conventional financial argument for retention and makes the increase more interesting than it appears. Organizations already inside a captive increased their retentions by 4% while ceding less to reinsurance, dropping from $13.4 billion to $11.5 billion.

Fronting Arrangements

A fronting arrangement puts a licensed carrier’s name on the policy while your captive or your own program reinsures the risk back. The carrier issues the paper and handles the regulatory filings. You keep the economics and the risk.

Organizations front for reasons that have nothing to do with risk appetite:

• Counterparties demand admitted paper: A customer, landlord, general contractor, or lender requiring an ACORD certificate from a rated carrier gets one, since a fronting carrier issues certificates the way it would for any policyholder.
• States require admitted coverage: Auto liability and workers’ compensation coverage has to come from a carrier licensed in the state unless the organization holds that state’s self-insurance approval. A captive typically has neither, so a fronting carrier issues the policy in its place.
• Offshore captives need US access: A captive domiciled in Bermuda or Cayman can’t write US risks directly, so a fronting carrier writes the policy and cedes it back through reinsurance.

What Fronting Costs

The fronting carrier charges a fee, usually calculated as a percentage of premium, for lending its license and handling the filings.

The fronting carrier remains legally responsible for paying claims if your captive fails to fund the reinsurance, so they require security against that credit risk. That security typically costs you more than the fronting fee, and it stays committed for as long as claims from that policy year remain open.

Most fronting carriers accept a letter of credit, which uses up credit your bank would otherwise make available to you for other purposes. Cash in a trust account avoids the bank but earns you nothing while it waits, and a surety bond requires an annual payment to the surety company for as long as it stays in place. Some carriers instead withhold the premium they would have ceded back to your captive and hold it as security.

Why Fronting Matters When You Verify a Vendor

A self-insured vendor handing you a clean certificate from an A-rated carrier may be running a fronted program. The certificate is genuine, the carrier is real, and the vendor retains the risk behind it through reinsurance.

That arrangement creates no problem for you, since the fronting carrier owes the claim regardless of what happens to the vendor’s captive. It does change what the carrier’s rating tells you. An A rating describes the fronting carrier’s financial strength, not the financial condition of the entity actually funding the loss.

Ask whether reinsurance or a captive arrangement stands behind the policy when a vendor describes itself as self-insured while producing conventional certificates. Both things can be true at once.

Self-Insured Workers’ Compensation Requirements by State

You need a state agency’s approval before you can self-insure workers’ compensation, and that approval covers one state only. An employer operating in twelve states applies separately in each state that permits self-insurance, clearing a different set of financial thresholds and posting security every time.

North Dakota doesn’t permit self-insurance at all, since state law makes Workforce Safety and Insurance the only provider of workers’ compensation coverage there. Wyoming takes the same approach for industries it classifies as extrahazardous, which must carry coverage through the state fund.

Wyoming doesn’t require workers’ compensation from employers outside those industries, nor does it regulate self-insurance for them. A vendor claiming self-insured status for work in either state has no state approval behind the claim, since neither state grants one.

State Approval and What It Requires

Workers’ compensation approval is the demanding one, requiring audited financial statements covering several years, a claims administrator under contract, and a security deposit held against the possibility that you stop paying claims. Texas, Nevada, and New York also require excess coverage above your retention.

Organizations can easily underestimate the deposit as it’s committed capital that earns nothing for you. The state reviews it each year and raises it as your liabilities grow. For example, New York’s minimum for workers’ compensation self-insurers rose to $1,999,000 effective July 1, 2026, with every self-insurer adjusting to whatever level the Board determines from their annual reports.

Every entity must also file its own application in New York. Subsidiaries are not automatically covered when a parent company holds approval, which means a vendor claiming self-insured status under a corporate parent may hold no authorization for the entity signing your contract.

State Requirements for Self-Insured Workers’ Compensation

Thresholds vary enough that self-insured status tells you which states approved an organization instead of anything reliable about its balance sheet:

A company qualifying comfortably in Nevada at $2.5 million in tangible net worth would fail Texas outright. Texas requires either $500,000 in Texas workers’ compensation premium or $10 million nationwide before it considers the application, plus a $1,000 non-refundable fee and a signed contract with a qualified claims servicing contractor.

Texas won’t issue a certificate of authority to self-insure unless the applicant carries at least $5 million per occurrence in excess coverage. Nevada attaches a similar condition, requiring evidence of excess insurance against catastrophic loss, and New York imposes its own excess requirement by regulation. An approved workers’ compensation self-insurer in any of the three states has a carrier above its retention.

What Happens When You Leave the Program

Withdrawing from a self-insurance program ends your approval and none of your liability. California has 8,579 former self-insured employers still paying claims from periods that already closed, against 7,049 employers currently active. More organizations are funding old self-insured claims than are self-insuring today.

Workers’ compensation claims explain the imbalance. A back injury reported in 2014 can still be paying indemnity and medical benefits in 2026, and permanent disability awards run for decades. An employer who self-insured for six years and then bought a policy owns every claim from those six years until the last one closes.

Your security deposit stays posted the entire time, your annual reports keep coming due, and the agency continues verifying that reserves cover what’s left. Organizations modeling self-insurance as a year-by-year decision miss this entirely, because the exit takes longer than the participation did.

Self-Insured Auto Liability

Organizations with vehicle fleets can self-insure auto liability through a state agency, usually the motor vehicle department, which issues a certificate of self-insurance entirely separate from any workers’ compensation approval. A vendor holding one has satisfied a single state that it can pay judgments arising from its vehicles.

Who Qualifies to Self-Insure Auto Liability

Eligibility turns on fleet size in three of these four states, with financial tests layered on top:

Florida sets no fleet minimum at all, allowing a private individual with a single passenger vehicle to self-insure on $40,000 of net unencumbered worth. A Florida certificate therefore tells you nothing about the size of the operation behind it. In Texas, the statute assigns the program to the Department of Public Safety instead of the motor vehicle department, so that’s the agency to contact.

What an Auto Self-Insurance Certificate Proves

The certificate evidences the state’s minimum financial responsibility limits and nothing above them. Florida’s procedure manual shows the certificate printing limits of $10,000/20,000/10,000, matching the statutory minimum. Texas binds its self-insurers to the same judgments a minimum owner’s policy would pay, which works out to $30,000/60,000/25,000.

A vendor answering your $1 million auto requirement with a Florida or Texas certificate has proven coverage at a fraction of that amount, unless they also produce an excess policy. New York requires every self-insured fleet to carry an excess policy of at least $5 million, which puts a commercial carrier above the retained layer and gives the certificate far more behind it than the minimum limits alone would.

What to Confirm When a Vendor Self-Insures Its Fleet

None of these agencies offers a public lookup for approved auto self-insurers, so confirming a certificate means contacting the agency that issued it. Check these four points before you accept one:

• The issuing state: A certificate covers vehicles registered in the state that issued it, so ask where the vendor’s fleet is actually registered.
• The expiration date: Florida certificates expire after one year and New York renews on an annual cycle, so an older certificate may no longer be in force.
• The vehicles covered: Florida schedules each vehicle individually on the certificate, so a truck added after issuance may fall outside it.
• The excess policy: Request the certificate for any excess coverage above the retained limits, since that policy decides whether the vendor meets a contract requirement above the state minimum.

When Self-Insurance Makes Sense

Retention works for losses you can predict and absorb. High-frequency, low-severity claims fit that description, because enough of them happen each year to make the total reasonably forecastable. Catastrophic exposure fails it completely, since a single loss can exceed whatever you reserved.

Six factors decide which side of that line your exposure falls on:

Claims history misleads most dangerously when it looks stable. Three years of predictable losses tell you little about a fourth year that includes a fatality or a single claimant needing a transplant, and events like those don’t average out over time. An organization with thin loss data carries exactly that risk, because the pattern it relies on hasn’t existed long enough to include the outlier. You’re betting your reserves that the outlier stays away whenever you retain exposure capable of producing one.

Do Self-Insured Programs Actually Save Money?

Often, though less reliably than the usual figures suggest. AM Best-rated US captives posted a five-year average combined ratio of 88.0 against 97.0 for their commercial casualty peer composite, and that nine-point advantage is the number captive advocates quote.

The 2024 result was 98.5, a 9.6-point deterioration from 2023 that put the composite within striking distance of underwriting break-even. Net income fell 14% to $1.3 billion that year.

Retention moves volatility from a carrier’s balance sheet onto yours, so the savings arrive unevenly and you absorb a bad year in full. Across 2019 through 2024 the composite added $4.6 billion to surplus and returned $2.0 billion in dividends, representing $6.6 billion in retained cost savings over six years that included 2024.

Tax timing works against retention, since premiums you pay a carrier are deductible as an ordinary business expense in the year you pay them. Money you set aside in self-insurance reserves earns no deduction until you pay the claim, because federal tax rules treat workers’ compensation and tort liabilities as incurred only when payment reaches the injured party.

That timing difference gives organizations a tax reason to consider a captive, whose premiums are deductible only when the arrangement qualifies as insurance. The IRS tests that by asking whether risk actually shifted to the captive and whether the captive pools enough risk that the parent isn’t simply paying for its own losses.

The Costs That Erode the Savings

A self-insured program needs claims administration, handled in-house or by a contracted administrator, along with actuarial analysis establishing reserves, annual audits satisfying the state, and a security deposit held as committed capital. Those costs continue in years when your losses come in low, which is precisely when the program looks like it’s working.

Your security deposit carries a yearly cost on top of the capital it ties up. New York and Texas both accept a letter of credit, which uses up credit your bank would otherwise make available to you and charges an annual fee. A surety bond requires an annual payment to the surety company instead, while posting cash avoids both fees and earns you nothing for as long as the state holds it. Build that cost into any comparison against premium savings.

Excess coverage adds another line. Texas, Nevada, and New York require it. Your own risk tolerance should demand it in states that don’t, so the premium you avoided on the primary layer partially reappears above your retention. Organizations modeling retention against their full premium spend instead of against the primary layer alone tend to find the math tighter than expected.

How Self-Insured Organizations Evidence Their Own Coverage

A state agency issues self-insured organizations a certificate of authority confirming their approval to retain risk. The organizations themselves issue counterparties a letter of self-insurance describing which risks they retain and to what limits. Public entities that pool their risk add a third document, the memorandum of coverage.

The State Certificate of Authority

A certificate of authority confirms that a regulator examined an organization’s finances and authorized it to pay its own claims. Texas grants it after the applicant clears the financial thresholds, posts the security deposit, and contracts a qualified claims servicer, and other states run comparable processes under their own labels.

What it gives you is confidence in the organization’s approved standing. What it doesn’t give you is any information about limits, endorsements, or what happens when a loss involves you.

The Letter of Self-Insurance

Self-insured organizations produce this one themselves. The University of California partners with a broker to issue certificates evidencing its self-insured coverages, and public universities publish annual self-insured letters alongside conventional certificates for the lines they buy commercially.

A conventionally insured vendor who produces their own certificate has bypassed the only parties authorized to issue one, and several states make issuing a false certificate a criminal offense. A self-insured vendor producing their own letter is doing the only thing available to them, because no carrier exists to issue anything on their behalf.

What the Letter Should Contain

Only accept a letter that names the self-insured entity as it appears on your contract, states which risks the organization retains, identifies the states where it holds authorization, and gives the limits it self-insures to. Most also name the claims administrator and the excess carrier above the retention.

Compare that against what an ACORD certificate delivers and the difference in verification burden becomes obvious. One comes from a licensed third party with standardized fields, while the other comes from the party you’re evaluating.

Memoranda of Coverage From Public Entities

Cities, counties, school districts, and special districts that pool their risk evidence coverage with documents the pool issues itself, usually a memorandum of coverage backed by a certificate of participation. Neither document is an insurance policy, so the reading habits you apply to an ACORD certificate won’t transfer.

Special districts alone account for 40,199 of the country’s 91,438 local governments, which puts memoranda of coverage in front of anyone contracting with a transit authority or water district.

California law states that pooling self-insured losses among public entities shall not be considered insurance or regulated under the Insurance Code. The California Joint Powers Insurance Authority repeats the point in its own memorandum, which states that the document “is not an insurance policy.” Colorado exempts pools from its insurance laws apart from narrow reporting duties, while Washington subjects them to oversight by a state risk manager.

Here’s how a pool’s coverage documents compare with a conventional policy:

The protected party letter behaves like a blanket additional insured endorsement without the standardized language. CJPIA grants the status only where a written agreement requires it, limited to whatever activity and time period the letter names. No ISO form number exists to confirm what it covers.

Ask the pool for the letter itself and read it alongside the memorandum, because certificates of participation point back to the pool’s bylaws and intergovernmental agreement as the documents that govern coverage.

Verifying a Self-Insured Vendor

You verify a self-insured vendor by checking the approval behind its retention instead of a policy. No carrier issues coverage for the retained layer, so you won’t find an AM Best rating or an ACORD form for it. Every question you’d normally ask about a certificate becomes a question about the vendor’s authorization.

What to Confirm

Check their authorization, confirm its scope, and verify the coverage above their retention:

• The state certificate of authority: Get the document itself and the name of the issuing agency. Most state workers’ compensation authorities publish lists of approved self-insurers, so you can confirm current status directly.
• Which states approved them: Authorization is state by state. A vendor approved in Nevada performing work for you in Texas is not self-insured for that work.
• The entity holding the approval: Match it against the entity on your contract. New York and other states require each entity to apply separately, so a subsidiary doesn’t inherit a parent’s authorization.
• The excess coverage above their retention: Texas, Nevada, and New York require it, which means a real carrier stands above the retention. Request that certificate the way you would for any vendor.
• The claims administrator: Find out who handles losses and how you reach them, because the vendor’s own staff may not be the answer.

When “Self-Insured” Means Uninsured

Some vendors call themselves self-insured when they hold no approval and carry no coverage, using the phrase to describe going without insurance entirely. Retaining general liability requires nobody’s permission, so the claim sounds plausible until you ask how the vendor would actually pay for a loss.

An organization that actually retains its own risk can show you how it pays for that retention, while a company going bare has nothing to show. Ask for these four things:

• A state certificate of authority: Approved self-insurers for workers’ compensation or auto liability hold one and can name the agency that issued it. A vendor with employees that holds neither a policy nor an approval is out of compliance in any state that requires coverage.
• A claims administrator: Somebody handles the vendor’s losses, whether in-house staff or a contracted administrator, and the vendor can tell you who.
• An excess policy: Organizations that retain risk carry coverage above their retained layer, and that policy produces an ordinary certificate you can verify like any other.
• Financial statements: A vendor retaining risk can document the reserves or net worth funding it when the size of the contract justifies asking, though reading what those statements actually show is a vendor prequalification exercise rather than an insurance one.

Treat a vendor that produces none of these as uninsured, since no funded retention stands behind the phrase. Whatever their work damages then comes out of your own policy or your own retention, the same exposure that comes with any uninsured subcontractor.

When Additional Insured Language Breaks

An additional insured endorsement adds a party to an insurance policy. A vendor retaining risk directly, without a captive or a pool behind it, has no policy in that layer, so nothing exists to add you to.

Captive-backed vendors are different, since the captive issues an actual policy that can carry additional insured endorsement. A public entity pool can grant protected party status by letter instead. Ask which structure stands behind a vendor’s retention before you decide which requirements it can meet.

A waiver of subrogation still works against a self-insured vendor, because the vendor holds the underlying right itself. A vendor that pays its own loss can pursue whoever caused it. Approved workers’ compensation self-insurers typically hold the same statutory reimbursement rights against a negligent third party that a carrier would. No policy exists to endorse, so write the waiver into the contract itself, covering the recovery rights the vendor holds directly.

When you require additional insured status on a primary and noncontributory basis, you’re asking for something a vendor retaining risk directly can’t deliver for that layer, since no policy exists to carry the endorsement. You’ll also need to redraft the waiver of subrogation as a contract term instead of an endorsement reference.

What to Require Instead

Contractual indemnification carries the weight here, since it obligates the vendor directly instead of routing through an insurance mechanism that doesn’t exist. Draft it to reach the exposures an additional insured endorsement would have covered, and expect the negotiation to be real.

Request the excess policy certificate separately, because the additional insured requirement does work above the retention, where a carrier writes the coverage. Add a notice obligation covering any lapse, suspension, or revocation of the state authorization, with a defined number of days and a consequence attached. Drafting around the absence of those endorsements gets easier once you know what additional insured and named insured status actually accomplish when a policy exists.

Why Self-Insured Organizations Need Tighter Vendor Compliance

Retention makes vendor insurance more important to you, not less. A vendor causes a loss on your site, and where you carry a policy, your carrier absorbs it and the premium you already paid covered that possibility. Where you retain the risk, the money comes out of reserves you posted against your own claims.

California’s private self-insured employers hold $4.4 billion in estimated claims reserves against 89,079 open workers’ compensation cases. Every dollar a vendor-caused loss pulls from a program like that is a dollar reserved for something else, with no carrier standing behind it and no premium already committed to absorb it.

Risk transfer to vendors stops being a backstop under those conditions. It becomes the primary loss control instrument, and the compliance program enforcing it carries weight that a conventionally insured organization can afford to treat more casually.

A missing certificate costs a self-insured company more than it costs a conventionally insured one. At the insured company, the carrier handles the resulting claim and the damage shows up as a difficult conversation at renewal. At the self-insured company, the claim comes out of its own reserves, which can prompt the state to raise its security deposit.

CertFocus by Vertikal RMS handles that verification at the depth retention demands. Vendors upload their own documents, Hawk-I AI processes each certificate, and a licensed insurance professional decides whether the coverage satisfies your requirements. Expiration tracking continues across the full vendor population, which matters because a certificate confirms coverage at the time somebody issued it and nothing beyond that.

What Self-Insurance Changes About Vendor Verification

Self-insurance covers every arrangement where your organization pays a loss instead of a carrier, including deductible, self-insured retentions, self-funded health plans, and captives. Each structure answers to its own rules. Self-insuring workers’ compensation or auto liability requires approval from each state where you operate. Texas is the exception for workers’ compensation, since private employers there can opt out of the system as non-subscribers and give up the liability limits that coverage provides.

Verifying a self-insured vendor starts with identifying the structure behind the phrase. A captive-backed vendor can produce a real policy, and a public entity produces a memorandum of coverage. A vendor retaining risk directly can show you a state certificate of authority and an excess policy, while an employer self-funding its health plan has told you nothing about its liability coverage. A vendor who can produce none of those documents is describing an uninsured operation.

CertFocus by Vertikal RMS pairs Hawk-I AI document processing with a trained insurance professional who decides whether each vendor’s documentation satisfies your requirements. The platform also tracks expiration dates across your full vendor population. Request a demo to walk through how it could handle your own vendor file.

An uninsured contractor waiver is what you reach for when the work starts Monday and the certificate never arrives. The contractor can’t produce coverage, somebody drafted a release, and signing it feels like the responsible middle ground between delaying the job and accepting the risk blindly.

A properly drafted waiver gives your carrier a defense when that contractor gets hurt and sues you over their injury. Nothing else about the document does as much work as that one function.

What the waiver doesn’t touch is everyone else. A tenant injured by the work, a neighbor whose property gets damaged, another vendor’s employee on the same site, none of them signed anything and none of them are bound by it. Your own policy answers those claims, and they’re the ones that cost the most.

This guide covers what a waiver protects, what it leaves open, when accepting one is defensible, and what to require instead. Homeowners face a version of the same question with less coverage behind them, and there’s a section further down written for that situation specifically.

What an Uninsured Contractor Waiver Is

An uninsured contractor waiver is a signed agreement where a contractor without insurance releases you from claims arising out of their work, usually paired with an indemnification clause and sometimes an assumption of risk provision. You present it when the contractor can’t produce a certificate, and it exists to give you something in place of the coverage you wanted.

There is no standard version of this document. An ACORD 25 certificate is a standard form the entire industry recognizes, while a waiver is whatever your counsel drafted or whatever template somebody downloaded, and enforceability turns on how it’s written and which state’s law applies.

Most versions combine several clauses that do different jobs:

Small businesses operating without coverage are common enough that this document has become routine. Hiscox found that 35% of US small businesses carry no general liability insurance at all, a figure covering every kind of small business and not only the contractors you might hire.

You should be clear about what you’re doing when you sign one, which matters more than the document’s wording. A waiver is what you reach for after accepting a risk you probably shouldn’t have accepted, and it performs one narrow job well while doing almost nothing about the exposure that should worry you most. No signature protects you the way general liability coverage confirmed before work starts does.

What a Properly Drafted Waiver Should Contain

A waiver that survives a challenge in court identifies both parties precisely, describes the actual work, names the specific risks the contractor accepts, and states what they receive in exchange. Anything vaguer than that gives opposing counsel room to argue the contractor never understood what they signed away.

Check any document you’re handed against these eight elements:

• Party identification: Legal entity names matching your contract exactly, since a release naming a trade name while the contract names an LLC creates an argument nobody needs to have.
• Work description: The specific scope the contractor performs. A release covering “work at the property” fails against an argument that the injury arose from something neither party contemplated.
• Assumed risks: Named hazards particular to this job instead of a general release of any and all claims, which courts in several states decline to enforce.
• Express negligence language: A plain statement that the release covers claims arising from your own negligence, written into the release itself.
• Uninsured status acknowledgment: The contractor stating in writing that they carry no coverage, so they can’t later argue they believed your insurance covered them and relied on that belief.
• Indemnification language: In states whose anti-indemnity statutes prohibit it, courts may void the entire provision if the clause covers your own negligence, so draft it for the state where the work happens. Those statutes mostly cover construction contracts, so a maintenance or homeowner agreement may fall under your state’s common-law rules instead.
• Consideration: What the contractor receives in exchange, usually the contract itself, stated explicitly instead of assumed.
• Signature and date before work begins: With the date recorded independently where you can manage it, because a contractor’s own entry proves less than a countersignature or a dated transmittal. You gain nothing from a release signed after an injury. A release signed the morning of the accident also invites an argument over duress and timing.

Limits No Drafting Can Fix

You can’t draft around three limits, however carefully your counsel writes the document. Each one comes from a rule outside the agreement itself, so no clause you add can change it:

• It binds only the signer: Only the person who signs gives up their right to sue, so a helper or anyone else who shows up later keeps theirs. Anyone else who works on your site needs to sign their own waiver before starting. If the contractor brings help without telling you, that helper can sue you as though no waiver existed. In some states, a wrongful death claim belongs to the worker’s family instead of the worker, so the family can sue even after the worker signed a release.
• It can’t eliminate workers’ compensation: A private agreement can’t override a duty your state imposes by statute. If state law treats the contractor as your employee, the contractor can claim workers’ compensation benefits from you regardless of what they signed. Your carrier can’t raise the waiver as a defense to that claim.
• It can’t cover gross negligence or intentional misconduct: Almost no state enforces a release for either, so a contractor injured because someone on your side knowingly ignored a serious hazard can usually sue despite the waiver. A few states go further and refuse to enforce any personal injury release signed before the injury. In those states, the waiver gives you no protection against the contractor’s own injury claim, which is the one job it otherwise does well.

Template sites promise broader protection than any of these limits allows. When you read one offering complete release from all liability arising from the work, you’re reading a claim the document has no power to deliver.

What a Waiver Protects You From

A waiver protects you from claims the contractor brings against you personally, and that job is worth having. Everything the next section takes apart concerns other people’s claims, so understand this one properly first.

Consider a contractor replacing light fixtures in a building you manage. He falls off a ladder, breaks his wrist, and discovers his health plan won’t cover a work injury. He has no workers’ compensation because he works alone, no general liability, and medical bills he can’t absorb. His attorney sends you a demand letter arguing you controlled the premises and failed to maintain safe conditions.

The National Safety Council prices the average medically consulted work injury at $48,000, and a wrist that needs surgery lands well above that once lost income enters the calculation. A signed release gives your carrier a defense that starts before the negligence argument does, because the contractor accepted the risk in writing before he touched the ladder.

Courts weigh the same elements in the drafting checklist when a contractor challenges a release, along with how conspicuously the release appears. They uphold a standalone document with clear headings more readily than a paragraph buried on page four of a master agreement.

State law governs whether any of this survives a challenge, and the variation is wide enough that a template written for one state may fail entirely in another. Have your counsel review the document once before you first use it, then reuse the version they approved.

What a Waiver Doesn’t Protect You From

You keep four exposures after the contractor signs, and the first one accounts for most of what actually costs hiring parties money.

Third-Party Claims

Nobody who didn’t sign the waiver is bound by it. A tenant, a customer, a visitor, a neighbor, or an employee of another vendor on-site can all bring claims against you, and none of them agreed to anything.

For example, imagine the same contractor replacing light fixtures in a building you manage. He wires a fixture incorrectly, and three weeks later a tenant reaches up to change a bulb and takes a shock serious enough to require hospitalization. The tenant sues you as the property manager who controlled the premises and selected the contractor. When the contractor signed your waiver, they gave up only their own right to sue you, so a tenant who never saw it keeps every right to sue.

Your own general liability insurer pays the tenant’s claim instead, at a time when the cost of that kind of claim keeps climbing. General liability annual claim severity reached $101,000 in 2024, up 45% from $70,000 four years earlier, and premises and operations claims account for 75% of all general liability losses. That’s the exact category the tenant’s claim falls into, and it’s the category your waiver leaves untouched.

Descriptions of these documents frequently blur this point, telling readers a waiver covers situations where the contractor is injured or causes damage. Those are two separate exposures with two different answers. The contractor’s injury is the claim a waiver defeats. When the contractor injures somebody else or damages their property, that person can bring a third-party liability claim against you regardless of what you and the contractor agreed.

You can shift the cost back to the contractor through an indemnification clause, but only as far as your state’s anti-indemnity statute allows. An uninsured contractor also has no contractual liability coverage behind that promise, so the cost usually stays with you.

Workers’ Compensation Obligations

Most states prohibit contracting out of workers’ compensation obligations, which means a waiver signed by an uninsured contractor doesn’t extinguish a statutory duty you may owe them.

If you’re a contractor and state law treats your uninsured subcontractor’s workers as your statutory employees, an injured worker can claim benefits from the next party up the contract chain that carries coverage. When that party is you, your workers’ compensation carrier pays the claim.

Owners and property managers who hire contractors directly usually fall outside that chain, though the rules vary by state. Your state can still classify the worker as your own employee through its misclassification test or a licensing rule like California’s, which treats an unlicensed contractor doing licensed work as the hiring party’s employee.

Your carrier also charges you for hiring an uninsured subcontractor whether or not anyone gets hurt, since the auditor typically counts what you paid that subcontractor as your own payroll and bills premium on it.

Construction is where workers’ compensation costs are heaviest and rising fastest. Construction represents 27% of all workers’ compensation premiums nationally, and lost-time medical severity in the sector grew 13% in accident year 2024 against 6% growth across the system. Your waiver has no effect on any of it, because the obligation comes from a statute instead of from the agreement you signed.

Your Own Negligence in Most States

Between 43 and 45 states restrict how far a construction contract can shift liability from one party to another. Roughly 28 of them prohibit an agreement indemnifying the hiring party for any fault of its own, whether sole or partial.

That range covers the exposure you most wanted the document to handle. Your indemnification clause asks the contractor to cover losses arising from their work, and where your conduct contributed to the loss, most states void the clause for that portion or void it entirely.

The variation between states is significant enough to matter to your drafting. Some states void only broad-form indemnity, where the hiring party bears sole fault. Others reach intermediate-form agreements covering partial fault. Our explanation of hold harmless agreements covers how these provisions operate, and our guide to indemnity coverage covers what insurance responds when they hold.

Anything the Contractor Can’t Pay

An enforceable indemnification obligation is worth whatever the contractor can fund, which for a one-person operation with no insurance is usually very little.

US commercial liability tort costs reached $367 billion in 2022 and have grown 8.7% annually since 2016. Your indemnification clause is a claim against one contractor’s assets inside a liability system operating at that scale. A judgment you can’t collect protects you exactly as much as no judgment at all.

Waivers, Releases, and Hold Harmless Agreements

Contracts use these terms interchangeably, usually because the drafting attorney preferred one. You can tell what protection you actually hold from what each one asks the contractor to give up.

A waiver is the contractor surrendering their right to bring a claim against you. A hold harmless agreement is the contractor accepting responsibility for claims other people bring against you. When the contractor signs a release before work begins, they give up the same right a waiver covers, their right to sue you over injuries the work might cause. A contractor who signs a release to settle a dispute gives up claims that already exist instead.

Here’s how they compare:

Most uninsured contractor waivers combine several of these in one document, which is why the label on the top of the page tells you less than the clauses underneath it. A document titled “waiver of liability” frequently contains indemnification language, and the indemnification portion carries every limitation the previous section covered while the waiver portion works as intended.

Read the clauses instead of the title when you evaluate what you’re holding. The practical question is which of your exposures each provision addresses, and a document doing one job well while claiming to do four is common enough that counsel should tell you which is which.

Waiver of Liability for Construction Work

On a construction site, workers from several trades share the same space while working at height and around heavy equipment, so third-party exposure exists on every project whether or not anyone signed a waiver. Another sub’s employee injured by your uninsured contractor’s work has the same claim against you as any stranger would.

Your contract usually settles the question before you get to weigh it. Prime contracts and subcontracts flow insurance requirements downstream, obligating you to confirm coverage from everyone performing work under your agreement, and a waiver satisfies none of it. Accepting one from an uninsured sub creates three problems at once:

• The uninsured exposure: No insurer pays when that sub injures a person or damages property, so your own insurer pays every claim the waiver doesn’t bar.
• A contract breach independent of any injury: You’ve violated your obligation to the owner the moment that contractor sets foot on site. An owner who discovers the breach can stop the work or withhold payment whether or not anybody gets hurt, and depending on the prime contract, may also be able to declare a default.
• An audit finding you can’t explain away: Lenders and owners request certificates for every entity on site, and a waiver in place of a certificate answers a question nobody asked.

Where a project carries certificate requirements, treat the waiver option as closed and confirm what the insurance requirements on construction certificates actually demand before the sub arrives on site.

When Hiring an Uninsured Contractor Is a Reasonable Call

Narrow circumstances exist where accepting a waiver makes defensible sense, and every one of them works by removing third-party exposure from the situation. Once nobody else can plausibly get hurt, the waiver’s single function covers most of what’s left.

Six conditions should hold before you consider it:

• Nobody else is present during the work: No tenants, no customers, no other trades, no members of the public in the space while the contractor works.
• The duration is short and defined: A half-day job with a clear end differs from an open engagement where the contractor returns whenever something needs attention.
• The work stays on the ground: No ladders, no scaffolding, no roofs, no elevated platforms of any kind.
• No vehicles or powered equipment: Nothing the contractor drives, tows, or operates that could injure someone outside the immediate work area.
• You could pay the worst case out of pocket: The contract value and the most plausible loss are both small enough to fall within your deductible or your operating funds.
• Coverage is pending instead of absent: A contractor whose renewal processes on Thursday differs entirely from one who has never carried a policy.

Every item on that list subtracts exposure from an environment that produces serious injuries at rates worth respecting. Construction workers account for 46.2% of all fatal falls across the entire US workforce, with more than 20,000 nonfatal fall injuries per year since 2013. If the work involves any fall exposure at all, you can’t defend accepting a waiver for it.

When It Isn’t

A waiver only releases claims between you and the contractor who signs it. That protection falls apart on any job that puts other people at risk. More jobs carry that risk than most companies assume. Anyone who could plausibly be injured by the contractor’s work, or by the condition it leaves behind, has a claim the waiver doesn’t touch.

These circumstances take the option off the table:

• Work at height: Fall protection has been the most cited OSHA standard in the country for fourteen consecutive years, with 6,307 violations in fiscal year 2024. If you accept a waiver for work at height, you create a record that you knowingly took on the hazard behind the most frequently cited OSHA standard in the country.
• Vehicles and powered equipment: A contractor driving, towing, or operating equipment on your property creates exposure that reaches pedestrians, other vehicles, and adjacent property, none of whom signed anything.
• Electrical, hot work, and anything structural: These leave conditions behind that injure people weeks after the contractor’s last day, and completed operations exposure survives the engagement entirely.
• Spaces tenants or customers enter: Occupied buildings put third parties in the work environment by default, which makes premises liability the likely path any claim takes.
• Projects with certificate requirements: If your prime contract or a lender requires verified coverage from everyone performing work, accepting a waiver puts you in breach whether or not anybody gets hurt.

Two of those categories catch companies by surprise. Completed operations exposure means the work outlives the working relationship, so a contractor who finished in March can still produce a claim against you in September through a condition they created. And the flow-down obligation exists in writing whether anyone at your company has read that section of the prime contract recently.

Where any item on that list applies, the honest answer is that you’re not choosing between a waiver and a certificate. You’re deciding between delaying the work and accepting an uninsured loss.

What to Require Instead

You have two options that protect you better than a waiver, with the second worth using only when the first isn’t possible.

1. Coverage confirmed before work starts: Request the certificate along with the endorsement forms your contract requires, then confirm the named insured matches the entity you’re contracting with and the policy period covers the engagement. A contractor who can produce coverage in three days is worth waiting three days for. Base your requirements on the insurance a subcontractor in that trade needs.
2. Short-term coverage the contractor buys: A contractor without a policy can often buy general liability for a single job the same day, with policy periods as short as one day. Require the same certificate and endorsements you’d ask of any vendor. Confirm the policy period covers every day the contractor works on your site, since a contractor whose short policy expires mid-job is uninsured for the rest of it.

A surety bond adds protection against a different risk: the contractor abandoning the job before the work is finished. Bonds guarantee performance. An EY analysis prepared for the Surety and Fidelity Association found bonded projects five times more likely to finish on schedule than unbonded ones, with completion costs 85% lower when a default occurs. The surety pays nothing when a tenant gets injured, so add a bond alongside one of the options above, never in place of them.

The option that solves this outright is moving the start date. Schedule pressure driving a waiver decision usually turns out softer than it feels at 4pm on a Friday, and a contractor motivated to keep the job will call their agent Monday morning. Ask what their renewal timeline actually looks like before you accept that coverage isn’t coming.

Managing the Engagement After the Waiver Is Signed

Signing the waiver starts the exposure instead of closing it. Four things you do during the engagement determine how much of that exposure you actually carry, and the first one accounts for the largest hole in any waiver ever drafted.

The Helper Problem

Your contractor signs the waiver Monday and shows up Tuesday with somebody else. That second person signed nothing and carries no coverage, so they bring every exposure the waiver was supposed to address.

The helper also brings one exposure the original contractor didn’t, since they may count as the contractor’s employee. If you’re a general contractor, state law may make you that helper’s statutory employer. An owner or property manager usually falls outside that rule, but a state’s classification test can still treat the helper as working for you.

Your document covers one person by name. No clause extends it to somebody who arrived later, and the person who let them onto the site almost certainly didn’t check.

Three controls close most of it:

• Written consent provision: Prohibit additional personnel without your approval, with a stated consequence for violating it.
• Signature requirement for anyone on site: Require every person performing work to sign before they start, which means keeping blank copies where your site supervisor can reach them.
• Stop-work authority at the access point: Give whoever controls entry the standing to halt work when an unfamiliar person shows up, because a project manager who feels awkward asking is how this hole stays open.

Documenting the Decision

A waiver decision made verbally on a Friday afternoon looks considerably worse in litigation than the same decision documented with its reasoning attached.

Keep four things in the file:

1. The signed waiver itself, with the date it was executed.
2. A record of what coverage you requested and when you requested it.
3. The contractor’s response explaining why they couldn’t produce it.
4. A short note naming who authorized the exception and on what basis.

That last item matters most, since a decision with an owner is a decision somebody evaluated, while a decision nobody signed is one that happened by default.

Limiting Scope and Access

Write a scope stating exactly what the contractor touches and enforce it. A plumber who decides to help with an electrical problem has created exposure outside everything you evaluated when you accepted the waiver.

Keep the work away from occupied and public areas wherever the schedule allows, and move it outside business hours where tenants or customers are involved. The conditions that made the waiver defensible assumed no third parties were present, and these controls are how you maintain that assumption once work actually begins.

Ending It on Schedule

Set a hard stop date and enforce that too. A two-day job that quietly becomes a standing relationship is the failure mode nobody watches, because the waiver gets signed once while the engagement continues for months with the coverage question never reopening.

Uninsured Contractor Waivers for Homeowners

Homeowners hiring an uninsured contractor face the same structural limits covered above, with less protection standing behind them. No commercial general liability policy absorbs what the waiver misses, and a homeowners policy handles far less of this than most people assume.

The document itself works the same way. A release signed before work begins gives you a defense if the contractor sues you over their own injury. However, it won’t do anything about a neighbor whose property gets damaged, a guest injured by the work, or the contractor’s helper who shows up on day two.

Does Homeowners Insurance Cover an Uninsured Contractor’s Injury?

Usually not in the way people expect. Some published guidance tells homeowners their policy generally covers any injuries on the property, including those a handyman sustains, which overstates what these policies do considerably.

Two provisions in a standard homeowners policy could apply, and both come with limits worth knowing before you need them:

The insurer applies that exclusion only where state law requires you to provide workers’ compensation for someone working on your home. In those states, you pay the worker’s benefits yourself unless you carry a separate workers’ compensation policy or your homeowners policy includes that coverage.

Everywhere else, the insurer generally pays an injured worker’s claim under personal liability when you’re legally responsible for the injury, subject to your policy’s other exclusions. The insurer also pays medical expenses up to your medical payments limit regardless of fault.

California treats an unlicensed contractor doing work that requires a license as the homeowner’s employee for workers’ compensation purposes. The state also requires every homeowners liability policy to include workers’ compensation coverage for household employees, so the homeowner’s own insurer generally pays those benefits.

Casual work incidental to maintaining the home falls outside that obligation, since California covers only a worker who put in at least 52 hours and earned at least $100 in the 90 days before the injury. A remodel or addition may not count as maintenance at all, however short the job, so a homeowner hiring an unlicensed contractor for that kind of work shouldn’t assume the exemption applies.

What Homeowners Should Ask Their Carrier

Call your own carrier before you sign anything and ask them these three questions:

• Does my policy respond to an injury sustained by a contractor working on my property? The answer depends on your state and your policy form. The person who sold you the policy can tell you in a few minutes.
• Do I carry any workers’ compensation endorsement? Some homeowners policies offer one, and some states effectively require it for anyone hiring domestic or contract labor.
• What is my medical payments limit? Knowing whether it’s $1,000 or $5,000 tells you how much of a minor injury you’d absorb before the liability question even opens.

Contractors face a version of the same question, since insurers writing contractors’ general liability in the excess and surplus lines market often exclude injury arising from work by uninsured subcontractors. Get your broker’s answer in writing before the question becomes urgent.

How to Verify Coverage So the Question Never Arises

The waiver conversation happens because verification failed earlier. Somebody hired a contractor without asking for a certificate or asked and never followed up, and the question only became urgent when work was scheduled to start.

Programs break in predictable places. Verification belongs to whoever hired the vendor instead of to a system, so a project manager in one business unit onboards a contractor while nobody in compliance knows the relationship exists. Expiration dates go untracked, which turns a compliant vendor into an uninsured one without anybody noticing. And the person who collected the original certificate moves to another role, taking the only institutional memory of that vendor’s status with them.

The result arrives as a Friday afternoon decision nobody wanted to make. A contractor shows up ready to work, the certificate request went out three days ago and came back empty, and somebody has to choose between delaying the job and signing a waiver.

CertFocus by Vertikal RMS moves that decision earlier. Vendors upload their own certificates through a self-service portal, where Hawk-I AI processes each document while a trained reviewer decides whether it satisfies your requirements. CertFocus tracks expiration dates for your entire vendor population, so your team stops checking them one file at a time.

Understand what a certificate does and doesn’t tell you. It confirms coverage existed when somebody issued it, which is why the monitoring matters more than the collection. When an insurer cancels a vendor’s policy for nonpayment in March, the certificate in your file still shows the original expiration date, so expiration tracking alone won’t flag the problem. You catch a mid-term cancellation only through a notice of cancellation endorsement naming you or by periodically confirming the policy with the vendor’s agent.

Where This Leaves You

A waiver gives you a defense when the contractor who signed it sues you over their own injury. That single function has real value when the alternative is nothing at all.

Everything else that could go wrong stays exactly where it was. The tenant, the neighbor, the customer, and the helper who showed up Tuesday all keep claims your document never touched, and your own policy answers for every one of them. A contractor with no coverage and no assets can’t fund an indemnification clause that most states would narrow anyway.

Most waiver conversations happen because somebody asked for a certificate too late. CertFocus by Vertikal RMS collects them before work is scheduled, with vendors uploading their own documents and a trained reviewer confirming the coverage meets your requirements. Schedule a demo to see how it handles your vendor population.

Two COI tracking platforms, two opposite answers to the same question. CertFocus by Vertikal RMS runs Hawk-I AI first, then has a licensed insurance professional decide whether the certificate satisfies the contract. Illumend, the platform myCOI rebuilt and relaunched in May 2025, hands that decision to an AI engine called Lumie and brings people in only for the exceptions.

myCOI has tracked certificates since 2009 and carries 16 years of compliance work behind the rebrand. Their platform now positions directly against the managed service model, describing outsourced review as handing a broken process to somebody else’s team. CertFocus has tracked certificates since 2003 and became a part of Vertikal RMS through a 2019 merger with PreQual. It pairs Hawk-I AI document processing with professional review, plus PreQual for subcontractor prequalification that illumend doesn’t offer at all.

Programs collecting standardized coverage at volume will find illumend faster and easier to run without insurance expertise on staff. Programs where endorsement language routinely requires a judgment call, or where subcontractor evaluation starts before the certificate arrives, will find more in CertFocus.

This comparison covers where each platform wins, what each costs, and which questions your own certificates should answer before you choose.

Quick Comparison

Both platforms collect certificates, check them against your requirements, chase renewals, and tell you who’s out of compliance. The daily experience of using them diverges on one question, which is whether a person reviews the document before your program treats it as compliant. That answer shapes your cost, your turnaround time, and what happens when an endorsement doesn’t clearly satisfy your contract.

Here’s how the two platforms compare on the points that decide most evaluations:

Where CertFocus Wins

Five differences separate CertFocus from illumend, and each one matters to a specific kind of buyer. Weigh them against your own certificate volume, the kind of requirements your contracts carry, and whether prequalification belongs in the same system as certificate tracking.

A Licensed Professional Decides Every Certificate

Hawk-I AI processes the certificate first, reading the full wording of each endorsement language instead of only pulling values from fixed fields on the form. A licensed insurance professional then reviews what Hawk-I found and decides whether the document satisfies your contract. No certificate clears on the AI pass alone.

Judgment matters most on the certificates where two readings are both defensible. Consider a subcontractor who submits a blanket additional insured endorsement covering any party they agreed in writing to add based on a contract demanding completed operations coverage on a primary and noncontributory basis. The question becomes whether the specific endorsement forms behind the ACORD certificate actually deliver both. A licensed professional makes that call and can explain the reasoning if a claim tests it two years later.

illumend takes the opposite position deliberately. Their platform reviews every certificate automatically, and their own materials describe Lumie making each decision itself and escalating only rare items it can’t resolve. Teams that want more human oversight built in get directed to discuss adding it to their subscription package.

Neither company is confused about what they’re doing. Both models answer the same question, which is how much of your certificate volume genuinely needs a person, and the honest answer varies by program. A retail chain collecting general liability from cleaning vendors against a standard template needs less judgment than a general contractor working under negotiated owner requirements.

Prequalification and Financial Analysis in the Same Platform

PreQual by Vertikal RMS evaluates whether a subcontractor should be on your project at all, which is a question certificate tracking never asks. illumend collects certificates and monitors compliance against your requirements, and their product line ends there.

Watch what each system does with a financial statement. A prequalification module attached to a compliance platform typically collects the document, stores it against the vendor record, and marks the requirement satisfied. PreQual analysts read it, then return a rating covering:

• Financial capacity: Working capital, liquidity, and whether the balance sheet supports the contract value you’re about to award.
• Backlog and bonding: Current committed work against capacity, plus the surety relationship and single and aggregate bonding limits.
• Safety performance: EMR verification and OSHA history, measured against customizable scorecards you set rather than a generic pass or fail.
• Past performance: Completed project history, references, and claims experience on work comparable to yours.

Vertikal RMS staffs that work with trained analysts with expertise in construction finance, risk assessment, and industry benchmarks, backed by surety underwriting experience. Turner Construction runs prequalification through the platform.

Subcontractor default insurance underwriters expect that kind of review before they issue coverage. A general contractor carrying SDI instead of bonds has to demonstrate that someone evaluated each subcontractor’s financial capacity, and a module that files documents without assessing them won’t satisfy an underwriter asking how you vetted the trades on your project.

Certificate tracking confirms a subcontractor carries the coverage your contract requires. Subcontractor prequalification tells you whether they can finish the work.

One Workflow From Prequalification Through Certificate Compliance

Vertikal RMS develops both products, so a subcontractor exists once across prequalification and certificate tracking instead of twice in two systems that don’t talk to each other.

Your team prequalifies a subcontractor in PreQual and moves them into CertFocus with one click, carrying the vendor record forward without re-entering anything. Their live insurance status then appears on the PreQual scorecard, so the person deciding whether to award work sees current compliance alongside the financial rating. Every action in both products writes to a timestamped audit trail your risk team can produce when an owner or an underwriter asks how a particular subcontractor cleared.

Buying prequalification and certificate tracking from separate vendors puts that reconciliation on your team. Someone matches vendor records across two platforms, someone notices when the entity names don’t align, and someone answers the question of which system holds the current version. Companies absorb that work quietly until an audit makes it visible.

The combined workflow across both CertFocus and PreQual matters specifically to general contractors and owners managing subcontractor risk from award through project close. A retail program tracking janitorial vendors has no prequalification step to connect, so the advantage doesn’t apply.

Coverage Lines and Contract Types Beyond Construction

CertFocus tracks as many as 60 lines of coverage across 25 or more industries. illumend serves seven industries and doesn’t publish a coverage line count.

Construction insurance requirements follow standardized patterns, with general liability at set limits, workers’ compensation, auto, umbrella, and additional insured and waiver endorsements written to familiar language. A platform reading construction certificates encounters variations on requirements it has already processed thousands of times.

Requirements outside construction stop behaving that way:

Programs spanning several industries feel this most. A real estate investment trust holds tenant leases, property management agreements, construction contracts for tenant improvements, and service agreements with vendors touching everything from elevators to landscaping. Each contract type carries its own coverage expectations, and a platform organized around construction workflows handles some of that well and the rest by exception.

How many distinct contract types your program covers decides whether this matters to you. Programs concentrated in construction certificate of insurance tracking won’t notice. Programs managing leases, vendor agreements, and construction contracts in the same system will.

Published Pricing

CertFocus by Vertikal RMS publishes its rates. Self-service costs $6 to $8 per vendor per year, while full-service costs $13 to $29 per vendor per year. Annual minimums range from $5,000 to $10,000, and the full-service minimum is $8,000. illumend publishes nothing, and every path through their site leads to a demo request.

You can price a CertFocus program before speaking to anyone. A company tracking 1,000 vendors on the self-service tier can work out a cost of $6,000 to $8,000 a year, or the minimum if that’s higher. Getting the equivalent figure from illumend requires a sales call, a discovery process, and a proposal.

Published pricing also tells you what the vendor charges everyone else. Quote-only pricing lets a vendor read your company size, your urgency, and your alternatives before naming a number, and buyers rarely find out whether the figure they received matches what a comparable company paid.

Neither approach predicts what you’ll spend overall, since implementation, integration work, and the eventual difference between your projected vendor count and your actual one all move the total. Our breakdown of what COI tracking software costs covers the components that show up beyond the per-vendor rate.

Where illumend Wins

Five things illumend does better than CertFocus. Each one matters to a specific kind of program, and for some buyers they settle the decision.

Speed on Routine Certificates

illumend returns a compliance decision in minutes because no person stands between the document arriving and the answer coming back. Lumie reviews every certificate and endorsement on receipt, and their platform reports 87% faster reviews compared to a manual process, along with 4x faster COI management overall.

Most certificates deserve that treatment. A landscaping vendor submits general liability at $1 million per occurrence against a requirement for $1 million per occurrence, the additional insured endorsement uses standard blanket wording, and the policy dates cover the engagement. Nothing about that document requires judgment, and routing it to a licensed professional adds hours to a decision the language already made.

A vendor who learns within minutes that their limits fall short can call their agent the same afternoon and fix it, while a vendor who learns a day later has moved on to other work and may not open the notice until the following week. illumend frames this as resolving issues in one cycle instead of a chain of emails, and that framing holds up.

How much any of this matters to you depends on volume, because a program processing 300 certificates a year absorbs review time without noticing while a program onboarding 200 vendors in a quarter ahead of a project start feels every hour of it.

Lumie Answers Questions CertFocus Makes You Escalate

Lumie holds a conversation, which means a project coordinator who doesn’t know a CG 20 10 from a CG 20 37 can ask what the difference is and get an answer without finding someone to ask. illumend built the platform for people who never trained in insurance and don’t want to, and their conversational layer explains its own findings to your team and to your vendors in language neither group needs a broker to interpret.

CertFocus offers nothing comparable, since a licensed professional reviews the certificate and returns a decision, which puts the expertise inside the process instead of in front of the coordinator staring at an endorsement they don’t recognize. Getting that question answered means emailing someone and waiting for a reply.

Think about who actually does this work at most companies, because certificate compliance frequently belongs to a project administrator, an office manager, or an accounts payable clerk who inherited it from whoever held the job before them. None of them chose insurance as a career, and a platform that answers their questions directly builds capability in the person doing the work while a platform that only answers the certificate builds none.

Your vendors get the same benefit when a certificate fails. A subcontractor can ask illumend what specifically fell short and what to tell their agent, instead of forwarding a rejection notice to a broker who then calls your compliance team to find out what you actually wanted.

Every Document Reviewed the Same Way

A model applying identical logic to every certificate returns the same answer every time, and illumend makes that argument directly, noting that consistent rigor means you aren’t relying on whoever happened to open the email that day. Any process involving people carries some variance, since two licensed professionals reading the same ambiguous endorsement can reach different conclusions.

Consistency and judgment describe different properties, and the tradeoff between them is the real decision facing anyone comparing these platforms. A model applying identical logic to every certificate eliminates reviewer drift and returns answers in minutes. A licensed professional catches the endorsement that satisfies a requirement’s wording while failing its purpose, then owns that reading if anyone questions it later.

What your certificates look like determines which property serves you better. A retail program collecting general liability from janitorial and landscaping vendors against standardized requirements gets little from human judgment and a great deal from speed and repeatability. A general contractor managing subcontractors under negotiated owner requirements, with delegated design and per-project aggregates in play, encounters ambiguity often enough that a consistent wrong answer costs more than a slower right one.

Neither platform can prove its accuracy to you before you buy, which is worth saying plainly. Both make claims about how well their review works, and the only test that settles it is running your own certificates through and reading the results.

Documented Third-Party Validation

illumend has 4.6 out of 5 stars on G2 and 4.6 on Capterra, with more than 50 reviews across both websites. Their platform reports managing more than 45 million insurance documents and over 200,000 third parties. Sixteen years of operating history under the myCOI name produced that record, alongside the scale figures their site reports:

Reviews carry information a buyer can’t get any other way, since every one of them comes from a company that ran the software and chose to write publicly about implementation, support responsiveness, and what went wrong along the way. Reading a dozen of them gives you a picture no sales conversation will.

Weigh those reviews against their timing, though, because most of them describe myCOI. The platform changed substantially in May 2025 when illumend rebuilt the review model around Lumie. A review praising myCOI’s managed service team describes a product that no longer works the way it did when someone wrote it.

Contract-to-Requirement Extraction

Uploading a contract to illumend produces a set of insurance requirements the platform extracts on its own, which removes the step where somebody reads the insurance article and types limits and endorsement obligations into a compliance system. Lumie then checks incoming certificates against what it pulled.

That step consumes real time during onboarding, especially for programs where requirements vary by agreement. A property manager holding 400 leases negotiated over fifteen years has 400 different insurance articles, so someone will have to read through all of them when starting a compliance program.

Manual entry can also introduce errors that can affect the quality of your data for years:

• Transposed limits: Somebody records $1 million where the contract says $2 million, and every certificate afterward gets measured against the wrong threshold.
• Missed endorsement obligations: A waiver of subrogation requirement buried in a paragraph about indemnity never makes it into the requirement set, so nobody ever asks the vendor for it.
• Stale requirements after endorsement: The person configuring the system assigns a subcontractor’s limits to a supplier who never sets foot on site, and the supplier either gets rejected repeatedly or nobody notices the mismatch until an audit.
• Stale requirements after amendment: The contract gets amended in year three and the compliance system keeps checking against the original terms, because updating it was nobody’s assigned job.

Human error is real, and any process where a person reads a contract and configures a system carries some risk of it. CertFocus addresses that by putting the configuration work with people who read insurance requirements for a living. The Vertikal RMS team builds your requirement sets during implementation, so the person deciding whether a waiver of subrogation obligation belongs in the configuration is someone who recognizes one buried in an indemnity paragraph.

Both approaches produce a working configuration. illumend’s puts the extraction capability in your hands afterward, which matters when you sign a new contract type in month eight and want the requirements loaded without opening a support ticket.

Choose CertFocus If

CertFocus by Vertikal RMS is the stronger fit for organizations where a wrong reading of an endorsement carries real cost and where vendor evaluation has to go deeper than the certificate. If your program spans several contract types or your subcontractor risk decisions start before the certificate arrives, CertFocus is built for that.

Choose CertFocus by Vertikal RMS if:

• You need prequalification along with certificate tracking: General contractors and owners evaluating subcontractor financial capacity get both functions from one vendor, with the vendor record moving from prequalification into compliance tracking without anyone re-entering it.
• Your contracts carry negotiated insurance terms: Programs holding commercial leases, healthcare vendor agreements, or professional services contracts encounter requirements that vary by document, which is where breadth of coverage lines and contract types earns its keep.
• A wrong call on an endorsement would cost you real money: Certificates involving delegated design, per-project aggregates, or completed operations obligations on a primary and noncontributory basis benefit from a licensed professional who decides and can defend the decision.
• You want to price the program before a sales call: Published per-vendor rates and a stated annual minimum let you build a budget number without entering a discovery process first.
• Your requirements come from negotiated contracts, not a standard template: Vertikal RMS builds your requirement sets during implementation, so the person deciding whether a waiver of subrogation obligation belongs in the configuration reads insurance requirements for a living.

Choose illumend If

illumend is the stronger fit for programs where certificate volume is high, requirements are consistent, and the people managing compliance never trained in insurance. If speed and self-sufficiency matter more to you than professional review on every document, illumend was rebuilt for exactly that.

Choose illumend if:

• You have a high certificate volume and standard requirements: Retail, franchise, and vendor programs collecting general liability against a consistent template get more from minutes-long turnaround than from judgment they rarely need.
• The person managing your compliance never trained in insurance: Lumie answers questions about endorsement forms and coverage requirements directly, so a project administrator or accounts payable clerk who inherited compliance can resolve them without finding someone to ask.
• Procore is your only integration requirement: illumend’s Procore connection syncs projects, vendors, and commitments in both directions, and a program that lives entirely inside Procore needs nothing further.
• You want independent evidence before you buy: Over 50 reviews across G2 and Capterra give you accounts of implementation and support from companies that ran the platform, which is more third-party material than Vertikal RMS publishes.
• You’re loading requirements from contracts you already hold: Automatic extraction turns a stack of negotiated agreements into configured requirements without anyone transcribing them by hand.

The Bottom Line

Your certificates decide this. Programs collecting standardized coverage at volume get more from illumend, where Lumie returns answers in minutes and nobody waits on a review queue. Programs where endorsement language routinely requires a call, or where subcontractor evaluation has to start before the certificate arrives, get more from CertFocus by Vertikal RMS and the prequalification that comes with it. Read twenty of your own certificates and count the judgment calls, because that number tells you which platform you’re actually buying.

Professional liability insurance covers the financial harm your vendors cause through their work, which is the exposure their general liability policy specifically excludes.

Your vendor’s certificate showed active professional liability at project kickoff. The design defect appeared four years later. By then the vendor had switched carriers twice, and the policy that covered your project no longer exists.

That outcome doesn’t require anyone to make a mistake. Professional liability is written on a claims-made basis, so it responds only while the policy stays active. A certificate confirms coverage at the time somebody issued it, which means verifying at kickoff answers a narrower question than most compliance programs assume.

This guide covers what the coverage handles, which vendors need it, what to require in your contracts, and how to verify coverage that has to survive years past the work it protects.

What Professional Liability Insurance Covers

Nobody gets hurt and nothing gets broken. A professional liability claim comes from a vendor’s advice, their work product, or their professional judgment, and the loss shows up on your balance sheet instead of your property.

What Triggers Coverage

Four situations trigger the coverage:

• Errors in professional work: A structural calculation comes back wrong, a contract gets drafted with a defective clause, or a system architecture can’t handle the load it was designed for.
• Omissions: The vendor leaves out something their professional standard required, like a code requirement an architect failed to incorporate or a disclosure an accountant failed to make.
• Negligent performance: The work falls below the standard a reasonable professional in the field would have met, whether or not the vendor recognized it at the time.
• Negligent failure to deliver: The vendor’s work product fell short of what they were engaged to produce because of an error or omission in performing the service. A pure breach is different, since missing a deadline you negotiated is a contract claim, and the policy responds only where a professional failure caused the shortfall.

Every one of those failures costs you money. An architect’s design error could push your opening date back six months, so you carry the costs on a building you can’t use. Or a consultant’s platform recommendation could burn a quarter of implementation spend before anyone catches a major incompatibility. In both cases, the vendor’s general liability policy doesn’t do anything because nothing was damaged and nobody was hurt.

What Professional Liability Doesn’t Cover

Professional liability answers for financial harm caused by professional services, which leaves four categories uncovered that hiring parties routinely assume the policy handles:

• Bodily injury and property damage: General liability handles both, which is why a vendor performing physical work with a judgment component needs both policies and why neither one alone covers your exposure.
• Intentional acts and knowing violations: A vendor who misrepresented their qualifications or deliberately cut a corner has done the one thing their policy specifically won’t answer for, so the coverage you’re relying on disappears precisely when the vendor’s conduct was worst.
• Fraud and dishonesty: Most forms carve these out while preserving a limited defense obligation until a court establishes the conduct. Once established, the carrier recovers what it spent on defense and you’re pursuing an individual with no insurance behind them.
• Contractual liability beyond the professional standard: Professional liability responds to negligence, not to promises. A vendor who guaranteed a specific result in your contract took on an obligation their carrier never agreed to cover, which means the performance guarantee you negotiated hard for may be uninsured.

The coverage is broadest where your vendor was merely wrong and narrowest where they were culpable, so the failures that feel most deserving of recovery are the ones the policy is least likely to fund. Your indemnification provisions, any bond you require, and the vendor’s own balance sheet have to cover what the policy carves out.

What a $1 Million Limit Buys Now

Among design professionals, the average loss on the first $1 million of professional liability coverage nearly doubled between 2019 and 2023, climbing from $260,000 to $500,000 while claim reporting frequency stayed flat. That means claim severity accounted for the entire increase.

The requirement you wrote into your vendor agreement five years ago now protects you against a materially smaller share of a typical loss. Most standard contract templates haven’t moved, so companies are carrying limits calibrated to a loss environment that ended several years ago.

There’s a second reason the limit buys less than it looks like. Most professional liability policies pay defense costs from inside the limit, so every dollar spent on lawyers is a dollar unavailable to settle the claim. A vendor carrying $1 million who spends $400,000 defending a case has $600,000 left for you.

General liability usually works the other way, with defense paid outside the limit, which is why a $1 million professional liability limit and a $1 million general liability limit are not the same amount of protection. Ask whether a vendor’s policy pays defense inside or outside the limit before you accept the number on the certificate.

Professional Liability vs. General Liability

Your vendor’s liability splits between two coverages that respond to different failures. General liability insurance handles physical damage the vendor causes, while professional liability handles financial loss the vendor’s work causes. Almost every coverage question you’ll face about a vendor comes back to which side of the line their failure falls on.

Here’s how the two policies compare:

Occurrence coverage responds to incidents that happened during the policy period no matter when the claim gets filed. Claims-made coverage responds only while the policy remains active. Two vendors on the same project, both fully compliant with your requirements, will behave completely differently three years after they finish.

The Design-Build Exposure

A design-build subcontractor carries one general liability policy that covers their construction operations while excluding their design work on the same project, which means their concrete placement is insured and their design of that concrete placement isn’t. The certificate gives you no indication of the split, so a sub with $2 million in general liability and a professional services exclusion nobody read passes your compliance check while carrying nothing for the decisions that make them a design-build firm.

What that uncovered half costs is a matter of record. Among insurers writing professional liability for architects and engineers, 82% paid a claim above $1 million in 2025, with 13% paying one between $10 million and $19.9 million, and structural engineering ranked as the highest-severity discipline for 80% of those carriers.

Construction is where you’ll see that split most easily, though it applies anywhere a vendor makes decisions as well as performing physical work. An IT integrator’s general liability answers for the server rack a technician drops, while the same integrator can design an architecture that takes your order system down for three days without damaging anything their policy recognizes. Sorting your vendors by which policy answers for their worst plausible failure tells you how to set insurance requirements by vendor category before the contract goes out.

Professional Liability, E&O, and Professional Indemnity

Professional liability, errors and omissions, and professional indemnity generally describe the same coverage, and the name a vendor uses reflects their industry convention instead of a difference in what the policy does.

Technology firms, financial services companies, insurance agencies, and real estate brokerages call it E&O. Architects, engineers, and consultants call it professional liability. Professional indemnity is the British and Commonwealth term, so it turns up on certificates from vendors with UK, Canadian or Australian parent companies. Healthcare and legal vendors often call it malpractice coverage, which is the same product under the name their own professionals use.

None of that changes what you’re verifying, though. A certificate showing errors and omissions coverage at $2 million per claim gives you what a certificate showing professional liability at $2 million per claim gives you, assuming the policy form and the retroactive date check out.

When the Name Signals a Different Product

Note that technology E&O and standard professional liability are not interchangeable products, because technology E&O forms frequently bundle cyber liability, first-party breach response, and network security coverage that a conventional professional liability form omits entirely.

Where cyber and professional services share a single limit, a breach response can consume the coverage before your professional services claim reaches it. A vendor holding $2 million in combined technology E&O and cyber has considerably less available to you than a vendor holding $2 million in professional liability with cyber written separately.

Ask which structure applies. A vendor whose policy shares limits should carry a higher one, or you should require cyber liability as a separate line with its own limit.

Write your contract requirements around what the coverage must handle instead of what the industry calls it. A requirement naming “professional liability insurance” invites a vendor to argue that their E&O policy doesn’t apply, or to produce a technology E&O form that satisfies the wording while covering something narrower than you intended. Specifying that the vendor maintain coverage for financial loss arising from errors, omissions, or negligent performance of professional services closes that argument before it starts.

Which Vendors Should Carry Professional Liability

Require professional liability from any vendor whose work involves professional judgment, licensed expertise, or a deliverable you’ll rely on to make decisions. The test has nothing to do with whether the vendor wears a hard hat or a suit, and everything to do with whether their mistake would cost you money without breaking anything.

Generally, these seven vendor categories should carry professional liability in almost every engagement:

• Design-build contractors and specialty subs with a design component: Anyone performing delegated design, shop drawing preparation, or engineered systems layout carries an exposure their construction general liability won’t answer for.
• Architects, engineers, and surveyors: These vendors carry the highest claim severity of any category, which makes both the limit and the coverage duration worth setting deliberately.
• IT consultants and system integrators: Their exposure covers architecture decisions, implementation failures, data handling, and the security posture they recommended and you adopted.
• Management and financial consultants: A recommendation you acted on becomes their liability when the recommendation was wrong, though only if the policy exists to respond.
• Staffing agencies placing licensed professionals: The agency’s credentialing, license verification, and placement decisions are professional services in their own right, entirely separate from the malpractice coverage the placed clinician or specialist carries. A facility that verified only the individual’s coverage has confirmed nothing about the agency that vetted them.
• Accountants and financial advisors: Audit findings, tax positions, and valuation opinions all produce claims that arrive years after the engagement closed.
• Marketing and creative agencies: Anything they produce that you publish carries intellectual property, advertising, and regulatory exposure that follows the work into your channels.

Technology limits age faster than any other category. Average ransomware claim costs reached $713,200 in 2025, nearly double the prior year, while incident frequency fell 31%. Severity accounts for the entire move, so an integrator holding a technology E&O limit they set three years ago is holding a number chosen for conditions that no longer apply.

The harder judgment involves the vendor nobody thinks of as a professional. A revenue cycle management firm codes your claims incorrectly and triggers a payer audit. A managed service provider recommends a backup architecture that fails during the outage it was designed for. Neither vendor considers themselves a professional services firm, and the professional services exclusion in their general liability policy applies to them anyway.

Expecting those vendors to raise the issue themselves gets you nowhere. Fewer than half of US small businesses carry professional liability, and 83% of owners can’t correctly describe what the policy covers. Roughly three quarters of them misunderstand general liability as well, and most expect it to respond to a client lawsuit over bad advice. Your requirement has to identify the exposure, because the coding firm and the managed service provider won’t.

Why Claims-Made Coverage Changes Your Compliance Obligation

Professional liability responds only when the policy is active on the day someone files the claim, which means a vendor who carried perfect coverage while performing your work can leave you with nothing years later. Every other coverage in your compliance file behaves the opposite way, and that difference is the single most expensive thing to misunderstand about professional liability.

Rating agencies treat the structure as a cost driver rather than a technicality. AM Best recorded a loss adjustment expense ratio of 17.5 in legal professional liability against 10.5 for commercial casualty, attributing the difference to the claims-made nature of the coverage and to broader social inflation. The same structure that makes these policies workable for carriers is what makes them disappear on you.

The Scenario That Catches Hiring Parties

Imagine your architect completes design work in 2024 carrying $2 million in professional liability, and their certificate goes into your file exactly as your process requires. They retire in 2026 and drop the policy, which nobody tells you about because no one has any reason to. A defect appears in 2027, you file a claim, and no coverage exists to receive it.

Nothing went wrong with your compliance process. You collected the certificate, verified the limits, and confirmed the policy was active when the work happened. The architect also complied with every requirement in the contract, then cancelled a policy they had no obligation to keep. You’re the one left without coverage for that work because a claims-made policy responds to the calendar rather than to the work.

Compare that against the general liability policy from the contractor who built the same project. Under occurrence coverage, the incident happened during the policy period, so the claim responds in 2027 whether or not that contractor still carries insurance. Two vendors, one project, one compliant file each, and completely different outcomes three years later.

Wrap-Up Programs Don’t Cover It

Enrolled subcontractors stop carrying their own general liability and workers’ compensation on a wrapped project, because the master policy handles both. Wrap-up programs exclude professional liability, so every sub performing design or professional services buys and maintains that coverage themselves.

Your design-build subs and delegated design trades still hold their own claims-made policies, still decide when to stop paying for them, and still create the exposure this section describes two years after they demobilize. A general contractor who centralized everything else has centralized nothing here.

Owners sometimes purchase a project-specific professional liability or contractor’s protective professional indemnity policy alongside the wrap, which is a separate placement instead of enrollment. Confirm whether one exists on your project before assuming your design subs are on their own. Our comparison of owner-controlled and contractor-controlled insurance programs covers what enrollment includes.

Retroactive Dates and the Switch Nobody Tells You About

The retroactive date sets how far back a claims-made policy reaches, and coverage stops at that date no matter how long the vendor has been insured. Work performed before it gets nothing.

Vendors switch carriers quite often, chasing price or following a producer to a new agency. A vendor who changes carriers in 2026 can receive a policy whose retroactive date matches the new inception, which erases coverage for the 2023 work they did for you. The limits look identical, the carrier name changed, and the coverage you were relying on no longer exists.

Carriers will usually match the prior date where coverage has been continuous and someone asks for it. That depends entirely on the producer raising the question, and a vendor shopping on price has no idea the question exists. Nothing on the certificate tells you whether anyone asked. Write the retroactive date into your contract as a requirement, then check it on every renewal certificate instead of checking the expiration date alone.

Tail Coverage and How Long to Require It

An extended reporting period, which everyone calls tail coverage, keeps a cancelled policy available for claims filed after it ends. The vendor buys it once, and it covers work already performed within a defined window afterward.

Require it whenever a vendor cancels, non-renews, switches carriers, retires, or dissolves during the period your exposure remains open. That last situation matters most, since a dissolved firm has nobody left to negotiate with and their principals have moved on to other employers.

Setting the duration is where most contracts pick a round number and get it wrong. Tie the requirement to the statute of repose in the state where the work happened for construction and design vendors, or to the applicable statute of limitations for everyone else, which usually covers a shorter period and begins when someone discovers the harm.

Expect resistance, because tail coverage typically costs 150% to 200% of the expiring annual premium as a single payment. A vendor cancelling their policy has usually decided to stop spending on insurance, and the tail is the largest bill they’ll face on the way out. Putting the requirement in the contract before the engagement starts is the only version of this conversation you’ll win, since a vendor already dissolving has no incentive to negotiate.

What a Certificate Tells You and What It Doesn’t

A certificate confirms that coverage existed on the day somebody prepared the document. For occurrence-based general liability, that’s most of what you need. For professional liability, it doesn’t answer the questions that actually determine whether coverage responds.

The certificate won’t tell you whether the retroactive date moved at the last renewal, whether the vendor purchased tail coverage when they switched carriers, or whether the policy cancelled last month for nonpayment. Reading it as proof of continuing coverage is the mistake that turns a compliant file into an uncovered claim. Our explanation of how claims-made and occurrence policies differ covers the mechanics behind both forms.

What to Require in Your Contracts

Your professional liability requirements need five provisions that general liability contracts never contemplate, because the coverage can disappear while the vendor remains fully compliant with everything else you asked for.

Start with limits appropriate to the exposure:

Adjust those against contract value and the size of the decision the vendor influences. A $40,000 engineering study supporting a $12 million build justifies a limit that looks disproportionate to the fee, because the fee has nothing to do with the exposure.

The remaining three provisions handle the timing problem. Require the vendor to maintain coverage for a defined period after completion, tied to the statute of repose where the work happened, or to the applicable statute of limitations for non-construction vendors. Require tail coverage if they cancel, non-renew, switch carriers, or dissolve during that period. Require a retroactive date reaching back to at least the start of your engagement, with written confirmation at each renewal that the date hasn’t moved.

Statutes of repose govern construction and design work. Your exposure to consultants, technology vendors, staffing agencies, and financial professionals follows the applicable statute of limitations instead, which usually covers a shorter period and begins when someone discovers the harm instead of when the vendor finished. Ask your counsel which period applies to each vendor category before you write a number into your template.

The fifth provision makes the other four enforceable. Require annual certificates for the full period instead of the project duration, since most compliance processes stop collecting the moment the vendor’s work ends, which is the exact point at which professional liability starts mattering.

Additional Insured Status Usually Doesn’t Apply

You generally can’t obtain additional insured status on a vendor’s professional liability policy the way you can on their general liability.

Carriers underwrite these policies against the qualifications and claims history of one specific professional, so extending coverage to an unrelated party undermines the basis they priced. Some miscellaneous professional and technology E&O forms do offer a limited endorsement covering your vicarious liability for the vendor’s services, though it never reaches your own professional acts. Ask whether it’s available and expect the answer to be no.

That removes the contractual path you rely on everywhere else. With general liability, an additional insured endorsement places you under the vendor’s policy directly. With professional liability, your protection consists of the limit the vendor bought and how long they keep it in force, which is why the contract provisions above carry the weight that an endorsement would otherwise carry. Our guide to additional insured and named insured status covers how the endorsement works where it is available.

How to Verify Professional Liability on a Certificate

Check the policy form, the retroactive date, the policy period, and the limits. A certificate rarely states the retroactive date unless somebody asked for it, so require it in the Description of Operations box and confirm it falls before the work starts.

What Appears on the ACORD 25

Professional liability rarely gets a dedicated section on the ACORD 25. The producer enters it under “Other” near the bottom of the form, which means the coverage that carries your largest exposure appears in the space designed for whatever didn’t fit above.

Four things belong in that entry:

• Policy form: Marked claims-made or occurrence, and this determines which set of rules governs everything else you check.
• Retroactive date: Establishes how far back the policy goes, so any work you contracted before that date falls outside coverage.
• Effective and expiration dates: Define the current policy period, which is a narrower piece of information than most people treat it as.
• Per claim and aggregate limits: Show what’s available in theory, though the aggregate reflects nothing about claims other clients have already filed against it.

A professional liability entry with no retroactive date shown is incomplete rather than reassuring. Producers omit it regularly, and the omission tells you nothing about whether the date exists or where it falls. Ask for it in writing before accepting the certificate.

What the Certificate Can’t Show You

Four questions determine whether a professional liability policy will respond, and the ACORD 25 answers none of them:

• Whether the retroactive date moved at renewal: The certificate shows today’s date, not last year’s, so a reset that erased coverage for your earlier work looks identical to a date that never changed.
• Whether the vendor purchased tail coverage: Nothing on the form records an extended reporting period, which means a vendor who cancelled and bought tail looks the same as one who cancelled and bought nothing.
• What the policy excludes: Professional liability forms vary far more than general liability forms, and a technology E&O policy might exclude bodily injury arising from the vendor’s work in ways that surprise you when a claim tests it.
• How much of the aggregate remains: A $2 million aggregate that already paid $1.6 million on another client’s claim still prints as $2 million on your certificate.

Few vendors will hand over their policy documents, so rely on your own records and your contract. Comparing each renewal certificate against the one before it will show you if the retroactive date changed. For the rest, require the vendor to buy tail coverage if they cancel or switch carriers, carry a policy that covers your scope of work, and to tell you in writing when paid claims drop their aggregate below your required limit.

The Verification Sequence

Work through these checks on every professional liability certificate before the engagement starts:

1. Confirm the policy form is claims-made: Occurrence-based professional liability exists but is rare, and knowing which form applies determines every other check on this list.
2. Verify the retroactive date predates your engagement: Ask the vendor to have their broker list the retroactive date on the certificate. If the date falls after your work started, then the policy won’t cover that work at any limit.
3. Check the policy period against today: The issue date tells you when somebody prepared the document, not whether coverage survived the months since.
4. Match the named insured to your contracting entity: A policy covering the parent company won’t necessarily respond to work performed by the subsidiary that signed your agreement.
5. Confirm the limits meet your contract: Check both per claim and aggregate, since a vendor working for many clients shares that aggregate across all of them.
6. Verify the carrier’s financial strength rating: A limit only matters if the company behind it can pay.
7. Set the renewal request ahead of expiration: Requesting on the expiration date gives the vendor no time to produce the replacement before coverage lapses in your file.

Our guide to reading a certificate of insurance covers what the rest of the form tells you.

When a Vendor’s Professional Liability Claim Gets Denied

A denial puts you exactly where the vendor’s coverage was supposed to prevent you from ending up, pursuing a business with no insurance for a loss their policy was written to absorb. Somebody still pays the claim, and your options narrow to your own policy, your own balance sheet, or an indemnification provision worth whatever the vendor can actually fund.

The Five Ways a Claim Gets Denied

Each denial traces back to something a verification step would have caught:

• The retroactive date moved: Coverage never reached back to your engagement, so the policy that looked active on your certificate excluded the work it was supposed to cover.
• The policy lapsed before the claim: Claims-made coverage responds only while active, which means a vendor who dropped the policy after finishing your project has nothing to tender when the problem appears.
• The aggregate was exhausted: Other clients filed first, and the $2 million printed on your certificate had already gone out the door before anyone read your claim.
• The conduct fell inside an exclusion: Intentional acts, guaranteed outcomes, and carved-out activities all produce denials, and they tend to appear in the cases where the vendor’s failure was most egregious.
• The vendor reported late: Claims-made policies carry strict notice requirements, so a vendor who sat on your complaint for six months before telling their carrier can forfeit coverage they were otherwise entitled to.

A Denial in Practice

Your facility contracts with a healthcare staffing agency for per diem clinical coverage. The agency’s contract requires $2 million in professional liability, they produce a certificate at onboarding showing exactly that, and your compliance team files it after confirming the limits and the policy period.

Eighteen months into the relationship, a patient files a malpractice action naming both the placed clinician and your facility, alleging the agency credentialed someone whose license had been suspended in another state. The agency tenders the claim to their professional liability carrier.

The carrier denies it. The agency switched carriers fourteen months ago, chasing a lower premium after a broker recommendation. Their new policy carries a retroactive date matching the new inception, and the placement in question happened three months before that date. The certificate your team collected showed $2 million in active professional liability, and every word on it was accurate.

Your facility now defends the action on your own policy. Your recourse against the agency consists of the indemnification provision in your services agreement, enforceable against whatever assets a mid-sized staffing firm holds after their own defense costs.

What You Can Do Before It Happens

None of the five denial paths are invisible, and each one has a contractual answer:

• Require notice of cancellation or material change directly to you: A vendor’s carrier will send it to the vendor. Your contract should require the vendor to forward it within a defined number of days, with a breach provision behind the requirement.
• Verify the retroactive date at every renewal: Checking the expiration date catches lapses. Checking the retroactive date catches carrier switches, which is the failure that produced the denial above.
• Require a dedicated or per-project aggregate: A vendor’s professional liability aggregate covers every client they serve, so claims from other engagements can draw it down before yours arrives. Set your required limit with that in mind, and require the vendor to notify you when paid claims bring the aggregate below it. Project-specific policies do exist for some large engagements,
• Address the exclusions in your indemnification: Intentional acts, guaranteed outcomes, and carved-out conduct fall outside the policy permanently, so your indemnity provision and any bond you require have to reach what the carrier never will.
• Require prompt notice of potential claims: Require the vendor to notify both you and their carrier within a defined number of days of any circumstance that could produce a claim. This protects their coverage from a late-reporting denial and gives you warning before a complaint arrives.

Tracking Professional Liability After the Work Ends

Professional liability is the only coverage in your compliance file that needs to be monitored for years after the vendor finishes, and almost no manual process survives long enough to do it.

Your project closes and the vendor moves off your active list. Their file stops appearing in whatever report your team reviews, because that report tracks vendors currently performing work. Nothing prompts anyone to request a 2029 renewal certificate for design work completed in 2026, and the vendor who quietly drops coverage in 2028 has no reason to mention it. The person who set up the original file has usually moved to another role by then, and their replacement only inherits a spreadsheet with no explanation of why those rows are still there.

How long you need to keep watching depends on where the work happened. More than thirty states have enacted statutes of repose limiting how long anyone can bring a claim against a contractor or design professional, and the Associated General Contractors notes that a latent defect appearing 15 or 20 years after acceptance can still produce liability where no statute of repose applies.

Your monitoring obligation matches whichever window governs the project, not the length of the engagement. That same window should govern the completed operations coverage you require on the general liability side, so both obligations expire on the same date instead of being set independently by two different templates.

Most compliance programs weren’t designed for that timeframe. A process built around active vendors handles renewals well but doesn’t handle completed projects at all, whether it runs on a spreadsheet or on COI tracking software configured only for current work, which is why professional liability lapses go unnoticed until someone files a claim against work nobody has thought about in four years.

CertFocus by Vertikal RMS keeps those vendors in the system after their work ends. Vendors upload their own certificates, trained reviewers check the policy form and the retroactive date instead of the summary printed on the front, and the platform continues requesting renewals for as long as your requirement period lasts. A certificate confirms coverage at the time somebody issued it, which is exactly why the follow-up matters more here than anywhere else in your program.

Where This Leaves Your Compliance Program

Professional liability breaks the assumption every other coverage in your file lets you get away with. You collect a certificate, confirm the policy is active, and move on, which works perfectly for occurrence-based general liability and fails completely here.

The three checks that matter most take almost no time once you know how to make them. Start by confirming the retroactive date predates your engagement, because a policy that doesn’t reach far back enough makes every other check pointless. Then write the coverage period into the contract so the vendor keeps professional liability in force for as long as your exposure stays open. The last check is the one companies skip, which is asking again in year three and year five instead of filing the certificate and closing the project.

CertFocus by Vertikal RMS handles the first and last of those checks, confirming the retroactive date on every certificate and requesting every renewal until your requirement period ends. Request a demo to see how it works.

Independent contractor insurance requirements are different from those you’d apply to subcontractors because the party on the other side of the contract is usually one person instead of a company. That single structural difference changes what you can ask for, what you’ll actually receive, and which exposure should worry you the most.

A subcontractor brings payroll, a broker, and a workers’ compensation policy. An independent contractor brings a certificate they forwarded from their own inbox, an empty workers’ compensation box, and a carrier who may decline to name your company as an additional insured at any price. Applying your standard 1099 contractor insurance requirements to that situation will only get you a file full of documents that don’t protect you.

This guide covers what to require and why, what the empty workers’ compensation box means for your liability, why professional liability matters more than general liability for most contractor relationships, and how to verify coverage from someone with no agency managing their policy.

What Insurance Should You Require From Independent Contractors?

Require general liability from every independent contractor, professional liability from anyone whose work involves judgment or expertise, commercial auto from anyone making deliveries or transporting people, and cyber liability from anyone with access to your systems. Each one covers a different failure:

• General liability covers bodily injury and property damage the contractor causes while working for you.
• Professional liability picks up financial losses caused by a contractor’s error or bad advice.
• Commercial auto matters for anyone making deliveries, hauling materials, or transporting people for you, since personal auto policies exclude delivery and vehicle-for-hire use.
• Cyber liability handles breach response and third-party claims when a contractor with access to your systems or your customer data creates a security incident.

Workers’ compensation belongs on that list only in specific situations that don’t apply to most 1099 contractors. The overwhelming majority of them come from the 29.8 million nonemployer businesses operating in the US, which don’t have any payroll or staff to insure. A contractor working alone has no one for a workers’ compensation policy to cover, so it’s normal for them to not have workers’ compensation insurance.

Scale is what makes this your problem and not the lawyer’s. Alternative employment arrangements accounted for 11.9 million workers as their main job, of which independent contracting makes up the largest share. Once you’re hiring 1099 workers in any real numbers, your requirements list stops matching the one you’d use for subcontractors. The clearest break is workers’ compensation, which most independent contractors can’t produce at all.

Here’s what to require and when:

Treat minimums as a starting position and not a formula. A contractor writing copy for your website and a contractor rewiring your data center create different exposure, so the limit you require should track both the size of the contract and the damage the work could cause. Our subcontractor insurance requirements guide covers limits by trade and the contract language that makes any of this enforceable.

How Independent Contractor Requirements Differ From Subcontractor Requirements

A subcontractor is a business. An independent contractor is usually a person. That difference determines what coverage exists to require, who produces the certificate, and whether anyone renews it.

Subcontractors have payroll, so workers’ compensation exists and the employer’s liability backs it up. They also hold a broker relationship, which means someone professional handles certificates and watches renewal dates. They’ve been asked for additional insured status a hundred times before, so the endorsement is already on the policy. Their certificates come from an agency that issues them every day.

An independent contractor’s certificate comes from the independent contractor. They forward whatever their carrier last sent them, which may be a year old, may predate a lapse, and may name an entity that doesn’t match your contract. Nobody checks it before it reaches you.

That difference changes four things about what you can require and what you’ll actually receive:

A framing subcontractor’s worst day involves someone getting hurt or something getting damaged, which is exactly what general liability covers. A marketing consultant’s worst day involves a campaign that costs you six figures in wasted spend, and general liability won’t respond to any of it.

Move down the list of people you engage as 1099 workers and the same pattern holds. The per diem nurse practitioner, the IT contractor with production access, the fractional CFO closing your books. None of them are likely to injure anyone, and all of them can cost you money through work that goes wrong.

Where this gets complicated is the middle ground. A one-person LLC with a real broker relationship and a commercial package policy behaves like a small subcontractor, certificates and all. Meanwhile, a company you’ve labeled a subcontractor shows up as one guy with his own tools and a personal auto policy. What you wrote on the contract has no bearing on which set of requirements applies. Look at how the operation is actually run, and then decide what you can reasonably demand.

Are You Liable if Your Independent Contractor Isn’t Insured?

Yes. Vicarious liability, non-delegable duties, negligent hiring, and inherently dangerous work all reach the hiring party no matter how the contract classifies the worker. An uninsured contractor makes each one worse, because a claimant who can’t recover from them will pursue you instead.

The Four Ways You Might Be Liable

Courts pull the hiring party back into a contractor’s loss through a handful of well-established doors:

• Vicarious liability: Applies when you directed the work closely enough to look like an employer. The more you controlled the method, the schedule, and the sequence, the harder it becomes to argue the contractor operated independently.
• Non-delegable duties: Apply regardless of who performed the work. Premises liability is the common one, since hiring a contractor to maintain property you control doesn’t transfer your obligation to keep it safe.
• Negligent hiring and retention: Treats your own process as the failure. The claim isn’t about what the contractor did wrong. It’s about what you failed to confirm before handing them the job.
• Inherently dangerous activity: Closes the last door. Where the work carries serious risk no matter who performs it, courts in most states won’t let the hiring party delegate that risk away.

Each path converges on the same place. The contractor has no policy, often no assets, and sometimes no forwarding address, which leaves you as the only party still standing. Analysis of 1,288 nuclear verdicts in personal injury and wrongful death cases found an average award of $89 million, with plaintiff win rates climbing from 53% to 64% over the decade studied. The certificate you never collected is the difference between a claim your contractor’s carrier defends and a verdict your company pays.

What Your Own Policy Does When a Contractor Causes Harm

Your commercial general liability policy may not respond to work performed by an independent contractor. Many companies assume otherwise, which could be a huge mistake.

Packaged policies written for small and mid-sized businesses frequently limit or exclude liability arising out of work performed by others. Independent contractor extension endorsements exist on businessowners and commercial package forms, and most companies have never checked whether theirs includes one. Ask your broker for the answer in writing.

Where the contractor holds proper coverage and you hold additional insured status with primary and non-contributory wording, their policy responds first and yours stays behind it. Without that endorsement, their coverage defends the contractor while yours defends you from the start. Where they carry nothing at all, yours is the only policy in the room, absorbing a loss it was never priced to cover.

You Pay Even When You Win

Winning the case doesn’t undo the cost of the case. Consider a 1099 driver making deliveries for you on a personal auto policy with a business use exclusion. They rear-end someone on the highway. Their carrier denies the claim, the injured party’s attorney locates your name on the delivery manifest, and your commercial policy becomes the only source of recovery available.

Commercial auto claim severity has risen 93.5% since 2015, a compound annual rate of 7.6% against 3.2% for general inflation. The claim that would have cost $200,000 a decade ago is a materially different number today, and you’re paying it on a policy that was never rated for delivery exposure.

Even a defense you win comes with legal fees, a reserve your carrier holds open, and a claim history that follows you into renewal. A company with two hundred unverified contractors has taken on an uninsured retention it never priced and can’t quantify.

What To Require When Your Contractor Has No Workers’ Compensation

Most states let sole proprietors with no employees exempt themselves from workers’ compensation, so the certificate you receive will show nothing in that section. Accept the blank, then collect the state exemption certificate that explains it and a written commitment that the contractor won’t bring employees onto your work.

How Sole Proprietor Workers’ Compensation Exemptions Work

An exemption is an election the contractor files with the state, not a confirmation that anyone is covered.

Sole proprietors and single-member LLCs with no employees can opt out of carrying workers’ compensation on themselves in most states, though the filing requirements and eligibility rules differ. Some states require a formal application and issue a certificate. Others treat the exemption as automatic for anyone without employees and issue nothing at all.

What you receive back, in the states where anything comes back, is a state-issued document with an expiration date. It won’t arrive on an ACORD form, it won’t come through an agency, and it won’t renew the same cycle as the contractor’s general liability policy. Whoever manages your certificate file has to track it as a separate document with its own calendar.

Why the Exemption Moves the Exposure Onto You

An exemption means nobody is paying for the contractor’s injury. Somebody still ends up paying, and that somebody could be you.

Statutory employer status comes first. When an uninsured worker gets hurt, the workers’ compensation claim climbs the contractual chain until it reaches a party that carries coverage, and in many states that party is whoever hired them. You never intended to be the employer of record for that injury. The claim doesn’t ask your intent.

The second comes later and is quieter. Your own workers’ compensation carrier can treat payments to uninsured 1099 contractors as reportable payroll at audit and bill you retroactive premium for coverage you never requested. The bill lands twelve months after the engagement that caused it, calculated at the class code matching the work performed and not a rate you’d have negotiated. A contractor who saved you the trouble of collecting a certificate has quietly generated premium on your policy.

A third consequence follows from the same absence. With no workers’ compensation in the picture, an injured contractor’s only path to recovery is a liability claim against you. Workers’ compensation would have capped that exposure through exclusive remedy, which trades unlimited tort liability for defined statutory benefits. An uninsured contractor keeps the full tort claim available and aims it at the party with a policy.

When To Require Coverage Anyway

The exemption resolves the paperwork question. It doesn’t resolve the exposure, and four situations justify requiring coverage despite it:

• The contractor plans to bring help: A sole proprietor who hires a single-day laborer loses the exemption and needs a policy, often without realizing the threshold has moved. Ask directly whether anyone else will perform work under the contract.
• The work carries physical injury exposure: Anyone climbing, lifting, driving, or handling equipment creates the kind of loss that workers’ compensation exists to absorb. Nothing about their solo status makes that loss smaller.
• Your carrier charges you at audit regardless: In certain states, carriers charge premium on uninsured contractor payments whether or not the contractor holds a valid exemption. Where that applies, requiring coverage costs you less than absorbing the assessment.
• Your client contract flows the requirement down: If your own agreement obligates you to confirm coverage for everyone performing work, an exemption on file won’t satisfy that obligation when your client audits you.

Where the contractor operates alone, a ghost policy is usually the first option they’ll propose. These are workers’ compensation policies written with no covered payroll, producing a certificate that shows active coverage at minimum premium.

A ghost policy excludes the owner, so it satisfies your certificate requirement and protects you at audit while paying nothing if the contractor is injured. Where physical injury exposure is what worries you, require the contractor to elect coverage on themselves instead of accepting a ghost policy. Most states allow sole proprietors to buy in, and the premium difference rarely kills an engagement.

What To Collect When the Exemption Applies

Collecting nothing is the default and the mistake. Where you accept an exemption in place of coverage, put three documents in the contractor’s file:

• The state exemption certificate: Confirm it names the contractor as filed with the state and note the expiration date, since the document expires on its own schedule and won’t renew alongside anything else you’re tracking.
• A signed acknowledgment: Have the contractor confirm in writing that they carry no workers’ compensation and won’t bring employees or helpers onto your work without notifying you first. This gives you a contractual hook if the situation changes and they say nothing.
• A re-collection date: Set a calendar reminder ahead of the expiration and treat it like any other renewal, because a document verified once is a document nobody looks at again.

An exemption verified at contract signing tells you nothing about month eleven, and a contractor who hired someone in month four has been working uninsured on your behalf for most of a year without either of you noticing.

How Worker Misclassification Turns an Insurance Question Into a Payroll Problem

Reclassification undoes most of what your insurance requirements were meant to accomplish. Once a contractor becomes an employee in the eyes of a regulator or a court, their certificate stops answering for the exposure and it moves onto your books retroactively.

The Department of Labor recovered $259 million in back wages across nearly 177,000 workers in fiscal year 2025, and misclassifying employees as independent contractors remains a standing enforcement priority. Most companies anticipate the wage exposure, but far fewer reserve for what their insurance program does next.

Four consequences do real damage:

• Retroactive workers’ compensation premium: Your carrier recalculates payroll across the audit period and bills you for coverage on a worker you never reported. The assessment covers the full engagement, going back to the first day the contractor worked.
• Employment practices liability exposure: An EPLI policy responds to claims by employees. A reclassified worker becomes one retroactively, filing wrongful termination or discrimination claims against a company that never listed them as covered.
• Unemployment insurance assessment: State agencies pursue unpaid contributions with interest and penalties. A finding at one agency tends to prompt a review at others.
• The employer’s liability exclusion: Your general liability policy excludes bodily injury to your employees, written on the assumption that workers’ compensation covers them instead. Reclassification can strand an injury claim between the two policies. Nobody treated the incident as a workers’ compensation matter at the time, so the worker files a tort claim, and your general liability policy bars it the moment their status changes.

Regulators weigh three things when they review a classification. Behavioral control covers how the work gets performed, financial control covers the contractor’s investment and profit opportunity, and the third is the nature of the relationship both parties maintain in practice. No single factor decides the outcome, and the label on your contract carries almost no weight against how the arrangement actually operates.

Insurance verification helps you on both fronts. Asking a contractor to produce their own coverage is evidence they operate an independent business, exactly what a classification review looks for. Controlling their schedule and their working methods produces the opposite evidence.

Companies commonly get this backwards. They soften verification requirements because collecting documents feels like the kind of oversight that creates employee status, while continuing to direct the work in ways that genuinely do. Requiring proof of coverage is not control. Telling a contractor which carrier to use, what hours to work, and how to perform the job is.

Professional Liability Is the Primary Exposure for Most Independent Contractors

A consultant recommends a system that costs you $400,000 in wasted implementation and lost productivity. Nobody was injured. Nothing was damaged. Their general liability policy, with its $2 million limit clearly printed on the certificate you collected, will not contribute a dollar toward the loss. General liability answers for physical harm, while professional liability answers for the financial damage a contractor’s work causes, which is the exposure most independent contractor relationships actually produce.

That mismatch appears constantly across the kind of work companies engage 1099 contractors to do:

• A fractional CFO: Their forecast supports a hiring plan and an equipment purchase your revenue can’t sustain, and the correction costs you two quarters.
• A freelance developer: Their deployment corrupts a production database, taking your order system down for three days during your busiest period.
• A contract clinician: Their treatment decision on a per diem shift becomes the basis of a malpractice claim naming your facility.
• A design contractor: Their specification fails inspection, forcing a redesign and pushing your opening date back four months.

Whether the contractor carries coverage for any of this is genuinely uncertain. Only 42% of US small businesses carry professional liability at all, and 83% of small business owners can’t correctly describe what the policy covers. Your contractor probably won’t tell you they lack it. Many of them don’t know they need it.

Solo contractors compound the problem in two ways that don’t apply to larger vendors. First, a one-person operation buys the cheapest policy that satisfies whoever asked for it last, so the limit reflects a previous client’s requirement instead of your exposure.

The second problem is that a contractor who stops working, changes careers, or retires cancels the policy, and professional liability written on a claims-made basis responds only while it stays active. Require the contractor to maintain coverage for a defined period after the engagement ends, or the certificate you collected covers nothing by the time a claim appears.

Should You Require Additional Insured Status From an Independent Contractor?

Yes, you should require additional insured status on the contractor’s general liability policy. You might face some resistance, though. Carriers writing small business packaged policies frequently decline to add additional insureds, or they charge a fee large enough that the contractor would rather walk away from a modest engagement than pay it. A carrier collecting a few hundred dollars in annual premium from a one-person consultancy has limited appetite for extending that policy to cover your comapny’s liability for free.

Where the endorsement is available, specify what you need:

• Blanket additional insured wording: A blanket endorsement extends status automatically to any party the contractor agreed in writing to cover, so it survives renewal without maintenance. A scheduled endorsement naming your company specifically requires reissue every policy period, and somebody on your side has to catch it when it doesn’t happen.
• Ongoing and completed operations: Ongoing operations coverage protects you during the work. Completed operations protects you after the contractor finishes, which is when problems with their work tend to surface. A contractor who delivers software or a design leaves behind something that can fail long after the final invoice.
• Primary and noncontributory language: Without it, your carrier and theirs argue about who pays first while your defense costs accumulate.
• Waiver of subrogation: This prevents the contractor’s carrier from paying a claim and then pursuing your company to recover what they paid.

The certificate itself won’t confirm additional insured status, which is a limitation of the document, not a failure of the person reading it. A certificate summarizes coverage. The description of operations box holds text typed by whoever prepared it, and that text creates no obligation for the carrier. Additional insured status exists in the endorsement attached to the policy, so ask for the endorsement form number and then ask for the form.

What To Do When the Contractor Can’t Get It

Plenty of one-person operations can’t obtain additional insured status at any price, and you still need the work done. You have four options, in descending order of protection:

1. Require a project-specific policy: The contractor buys coverage written for your engagement, naming your company directly. This works when the contract value justifies the premium and fails on a $4,000 engagement, where the cost swallows the contractor’s margin.
2. Raise the limit instead: Accept the contractor’s existing coverage without additional insured status and require a higher limit to compensate. You give up the direct claim against their carrier, but you gain more coverage to pursue through the indemnification provision.
3. Rely on indemnification alone: Understand what you’re relying on. An indemnity from a one-person business is worth what that person can personally pay, which covers a fraction of any serious claim.
4. Decline the engagement: Few companies choose this. It belongs on the list because companies that never consider it end up on option two by default, without registering that they made a decision.

How To Verify Independent Contractor Insurance

Request the certificate of insurance from the contractor’s agent or carrier as well as from the contractor, confirm the policy is active as of today and not just as of issue date, and pull the endorsement forms instead of trusting what the certificate summarizes. That sequence works for any vendor. What changes with independent contractors is that nobody on their side is helping you complete it.

Nobody Is Watching the Renewal

A subcontractor’s broker tracks expiration dates as a matter of routine, chases the renewal and issues an updated certificate to everyone on the distribution list. Independent contractors rarely have that relationship. They bought a policy online, they pay it monthly, and no agency is monitoring whether the payment cleared.

That changes what a certificate tells you. The document confirms coverage existed on the date somebody prepared it. A certificate you received in January describes a policy that may have cancelled for nonpayment in March, and nobody will tell you when it does. The contractor may not notice for weeks. You won’t notice at all unless you built a system to check.

Your renewal tracking has to cover the entire population, because the alternative is discovering the lapse when a claim arrives.

The Named Insured Rarely Matches

Solo contractors produce certificates in whatever name their carrier has on file, which frequently isn’t the name on your contract.

Say a designer invoices you as Ridgeline Creative and the certificate she forwards names Sarah Whitcomb. Or a consultant carries a single-member LLC on his policy while your agreement names him personally. Both mismatches create the same problem, since the policy covers a party you didn’t contract with and the carrier can decline on that basis.

Match the named insured to your contracting entity exactly. Where they differ, find out whether you’re looking at a labeling problem or a coverage problem. A policy naming “Sarah Whitcomb DBA Ridgeline Creative” fully covers the DBA, and the certificate should say so. A policy naming only Sarah Whitcomb against a contract with Ridgeline Creative LLC leaves the LLC uninsured. Reissuing the certificate won’t change that. Closing it requires the carrier to endorse the policy and add the LLC as a named insured. Ask the contractor which situation applies, then ask for the endorsement if it’s the second.

The Verification Sequence

Work through the same checks on every contractor before the engagement starts:

1. Confirm the named insured matches your contract: The entity on the policy and the entity on the agreement have to be the same party, including the exact legal form.
2. Confirm the certificate holder line names your legal entity: A certificate naming a division, a project, or the person who hired the contractor doesn’t establish your company’s interest in the policy.
3. Check the effective and expiration dates against today: The issue date tells you when somebody prepared the document. The policy period tells you whether coverage exists right now.
4. Verify the carrier’s AM Best rating: A contractor who bought the cheapest policy available may be insured by a carrier with no financial strength rating at all. That $2 million limit only matters if the company behind it can pay the claim.
5. Pull the additional insured and waiver endorsements by form number: The endorsement is what actually grants the coverage, while the certificate only offers evidence that it exists.
6. Document the workers’ compensation position: Collect either an active policy or a current state exemption, and record the expiration date for whichever one you receive.
7. Set the re-verification date ahead of expiration: A contractor whose policy expires before you request the replacement keeps working uninsured until the new certificate arrives.

Getting through that sequence for one contractor takes a few minutes. Getting through it for four hundred, on renewal cycles that don’t align, with endorsement forms that require someone who knows what they’re reading, is a different problem. CertFocus by Vertikal RMS handles the endorsement-level review that a certificate scan misses, combining Hawk-I AI document processing with review by trained reviewers who read the forms behind the certificate.

Independent Contractor Insurance Checklist

Every item below prevents a specific failure that companies usually identify only after they get a claim:

• Execute the contract before work begins: Insurance requirements you communicate after the contractor starts have no leverage behind them, since the contractor has already accepted the engagement on different terms.
• State requirements by coverage type and limit: A contract requiring “adequate insurance” gives you nothing to enforce, while one specifying general liability at $1 million per occurrence gives you a clear standard the contractor either meets or doesn’t.
• Collect additional insured and waiver endorsements by form number: Request the actual endorsement forms instead of the certificate language describing them, because the endorsement is the document that gives you rights against the carrier.
• Verify the named insured against your contracting entity: The party on the policy and the party on your agreement have to match exactly, including the legal form of the business.
• Document the workers’ compensation position either way: Collect an active policy or a current state exemption certificate, and file whichever one you receive with its expiration date recorded.
• Review the classification before the relationship deepens: A contractor whose schedule you control and whose methods you direct creates misclassification exposure that no certificate could resolve.
• Confirm professional liability limits where the work involves judgment: Any contractor giving advice, producing designs or applying licensed expertise creates financial exposure that general liability excludes entirely.
• Set an expiration reminder ahead of the policy end date: Requesting a renewal certificate on the expiration date leaves the contractor working uninsured until they send you a replacement.
• Re-verify at every renewal rather than at onboarding only: Coverage you confirmed when signing the contract proves nothing about coverage eleven months later, especially when the contractor pays monthly and no agency monitors the account.
• Keep the file in a system that survives turnover: Contractor programs decay when the person who built the tracking spreadsheet leaves, and the replacement inherits a document nobody explained.

Managing Verification When You Have Hundreds of 1099 Contractors

A company engaging 200 independent contractors carries the same verification burden as a general contractor managing 200 subcontractors, and the independent contractor version is harder. General contractors started tracking certificates decades ago because their own insurance requirements and their owner contracts forced them to. Non-construction companies eventually reached comparable contractor volume without developing anything similar.

Most of them still manage certificates in a spreadsheet somebody made in 2019. The COI tracking software that general contractors adopted years ago solves the same problem, though buyers outside construction rarely evaluate the category because every case study names subcontractors.

Once your contractor population outgrows what one person can track manually, you lose control of four things:

• The spreadsheet stops matching reality: Someone maintains it carefully for a quarter, then a hiring manager onboards a contractor without telling anyone, and the file drifts further from the truth every month after that.
• Nobody owns the expirations: The person who collected the certificate has moved on to other work, and no process exists to flag the policy that expired last Tuesday.
• Lapsed contractors keep working: A contractor whose policy cancelled for nonpayment shows up on Monday exactly as they did the week before. Nothing about their behavior tells you what changed.
• Business units onboard without visibility: Your marketing team hires a freelance developer while your operations group brings on three drivers. Neither transaction reaches whoever manages compliance.

The cost of getting this wrong compares badly against the cost of managing it properly. Work injuries in the US carry an average cost of $48,000 per medically consulted injury, with fatalities averaging $1,540,000. One uncovered incident across an unverified contractor population outweighs several years of running a real verification program, and healthcare staffing, property management, last-mile logistics, media production, and professional service firms all engage contractors at volumes where that math applies.

What Changes When the Contractor Uploads Directly

The absence of a broker on the contractor’s side creates most of the tracking problem, so the practical fix puts the contractor into a system that watches the dates for them. A contractor who uploads a certificate to a portal instead of emailing a PDF to whoever hired them produces a record with a captured expiration date. The renewal request then goes out on schedule without anyone remembering to send it.

CertFocus by Vertikal RMS works this way. Contractors upload their own documents, trained reviewers process the endorsement forms behind each certificate instead of the summary printed on its face, and expirations get tracked across the full population.

Getting This Right Without Slowing Down the Work

The certificate you receive from a solo contractor answers fewer questions than the one you receive from a subcontractor, which makes the two documents easy to confuse. General liability at $2 million reads the same on both, while the coverage structure behind that number looks nothing alike.

None of that is difficult with four contractors. You collect the certificate, file the exemption, note the date, and check it next year. But at 300, the same work needs a dedicated person just to stay on top of it full-time.

CertFocus by Vertikal RMS takes that work off your team. Contractors upload their own certificates, our team reviews what the endorsements actually say, and the platform tracks every expiration date across your population without anyone maintaining a spreadsheet. Schedule a demo to see how it could handle your contractor population.

A subcontractor’s worker injures a third party on a commercial job site. The GC contacts the sub’s insurer expecting coverage. The insurer tells them they have no standing under the policy. Their company name is in the certificate holder box on the COI. The additional insured endorsement was never issued.

Those two things look almost identical from a distance. One is documentation that the named insured carries coverage. The other is actual coverage. They are not interchangeable, and the difference only becomes clear when a claim arrives and the insurer tells you which one you have.

In 2024, nuclear verdicts against corporate defendants totaled $31.3 billion, a 116% increase over the year before, with construction and engineering absorbing $2 billion of that exposure directly. Whether a GC absorbs the next one or accesses the sub’s insurer to fund their defense comes down to which of those two things they actually have.

What Is a Certificate Holder?

A certificate holder is the party that receives a certificate of insurance as evidence that the person or company they’re working with carries active coverage. The named insured provides the certificate, and the certificate holder holds it.

The designation is administrative. It identifies who the document was delivered to, not who has coverage rights, claims access, or any insurer obligation behind it. Those rights belong to the named insured and any additional insureds named by endorsement. The certificate holder is neither.

A GC who requires proof of insurance from a subcontractor before work begins becomes the certificate holder once the sub’s broker issues the COI. A property manager requiring a tenant to show proof of coverage before lease execution becomes the certificate holder when the tenant delivers it. Any organization that collects COIs from vendors as part of an onboarding or compliance process holds that status for each vendor whose certificate it receives.

What Certificate Holder Status Actually Provides

Certificate holder status gives you one real thing. People commonly assume it gives them a second.

Proof That Coverage Existed at Issuance

The COI confirms that the named insured carried active coverage as of the date the certificate was issued, including coverage types, limits, and effective dates shown on the form. That’s important information before you approve a vendor, sign a contract, or allow a subcontractor to start work.

What it doesn’t confirm is whether coverage is still in force today, whether the policy’s terms actually meet your contract requirements, or whether you have any rights under it. The COI is a snapshot taken at the moment of issuance, and the named insured may have modified or cancelled the policy since.

The Cancellation Notice People Assume They’re Getting

One version of the ACORD 25, in use through 2009, stated that the insurer would “endeavor to” notify the certificate holder before cancelling a policy. That language is gone. ACORD replaced it in the 2009/09 revision, and every certificate holder using the form has been required to use the updated version since October 2010.

The current form states that notice of cancellation “will be delivered in accordance with the policy provisions.” That sentence hands the entire question to the policy itself; the certificate makes no promise of its own. Most liability policies only require the insurer to notify the first named insured, which means a certificate holder, and even a named additional insured, typically has no contractual right to hear about a cancellation at all.

If guaranteed notice matters to you, the only way to get it is a specific notice-of-cancellation endorsement added to the named insured’s policy. Some carriers offer these. Requesting one, and confirming it’s attached, is the only mechanism that works.

What Certificate Holder Status Does Not Provide

Most of the confusion around certificate holder status comes from what that designation sounds like instead of what it actually provides. The name appears on the certificate. The certificate documents coverage. The reasonable but incorrect conclusion is that the certificate holder has some stake in that coverage. They don’t, and the absence of three specific protections is what makes that the case.

No Coverage Under the Policy

Being listed as the certificate holder does not extend the policy’s coverage to you. The policy covers the named insured and any additional insureds designated by endorsement, and the certificate holder is neither. If the named insured’s work creates liability exposure for you, the named insured’s insurer has no obligation to protect you from it.

That exposure has become much more expensive to absorb unprotected. Triple-I and CAS found that commercial GL claim severity grew at a compound annual rate of 6.8% from 2015 to 2024, the highest inflationary impact of any liability line studied, driven by rising jury awards and litigation financing that push claims far past the amounts that generated them.

No Right to File a Claim

The right to file a claim under a policy belongs to the named insured and any additional insureds. A certificate holder who contacts the named insured’s insurer after an incident gets told they have no standing under the policy.

Swiss Re’s research found U.S. commercial casualty losses growing at 11% annually over five years, reaching $143 billion in 2023, with social inflation at a 20-year high of 7%. General liability claims are the single largest category of nuclear verdicts, accounting for 36.7% of all cases in a decade-long ILR study, with an average verdict of $89 million. A GC named as the defendant in a sub-related GL lawsuit who holds only certificate holder status funds their own defense from the opening bell.

No Duty to Defend

When a third party files a lawsuit naming you as the defendant for an incident connected to the named insured’s work, the named insured’s insurer owes you nothing if you’re only a certificate holder. You hire your own attorneys, fund your own defense, and manage the claim through your own insurer or out of pocket.

The duty to defend is one of the most valuable protections in commercial insurance. When an insurer owes it to you, they assign defense counsel, advance defense costs, and handle settlement discussions within policy limits. Accessing that protection requires additional insured status, not certificate holder status. The NSC puts the cost per medically consulted work injury at $48,000 and the cost per work-related death at $1,540,000. A GC defending a claim in that range without the sub’s insurer paying counsel bears those legal costs from day one.

The Misconception That Certificate Holder Status Means You’re Covered

The confusion persists because the certificate shows the certificate holder’s name, which creates a reasonable but incorrect impression of having a stake in the coverage. It also persists because “having a COI on file” has become shorthand for “the vendor’s insurance is handled,” which conflates the administrative tracking function of a COI with the actual coverage protections that only endorsements can provide.

Most COI collection processes are built around the certificate holder function. They track whether vendors have submitted certificates, whether coverage is active, and whether limits meet contract minimums. That’s useful information, but it stops well short of confirming whether the protections required by contract are actually present in the underlying policy.

The ACORD Disclaimer Almost No One Reads

Every ACORD 25 states at the top that the certificate is issued as a matter of information only, confers no rights upon the certificate holder, and does not amend, extend, or alter the coverage afforded by the listed policies. That language has been part of the standard form for decades, and it’s there because ACORD recognized early that the form was being misread as granting coverage rights.

The disclaimer clarifies that ACORD’s form carries no coverage implications. It doesn’t stop the misread from happening, and it doesn’t protect the certificate holder from the consequences when a claim arrives and they discover their name on the certificate was never the same thing as their name on a policy endorsement.

Certificate Holder vs. Additional Insured vs. Named Insured

Three designations appear in COI and policy contexts, and each carries a different set of rights. The table below shows how the certificate holder fits alongside the other two:

The GL policies at the center of that table represent a $129.2 billion market in 2024, one where loss ratios worsened sharply as insurers absorbed rising claim costs and coverage disputes became more likely to be contested aggressively. In that environment, being an additional insured means the insurer has a contractual obligation to defend and pay on your behalf. Being a certificate holder means you have a document.

Why the Distinction Matters When a Claim Arrives

Arcadis’s 2025 research found the average U.S. construction dispute now costs $60.1 million to resolve, up 40% from the prior year, and that errors and omissions in contract documents have been the leading cause of those disputes for three consecutive years. A certificate that describes additional insured status that a missing endorsement doesn’t back is a contract document error of exactly that kind.

The scenario plays out the same way every time. A GC is named as a defendant in a lawsuit arising from a sub’s work. They contact the sub’s insurer expecting coverage. The insurer confirms the sub has a policy but tells the GC they have no standing under it because they’re a certificate holder, not an additional insured. The sub’s insurer handles the sub’s defense. The GC funds their own.

How Certificate Holder Status Appears on a COI

The certificate holder’s name and address appear in the dedicated box in the bottom-left corner of the ACORD 25. It’s the most visible field on the form and the easiest way to verify. If your organization’s name isn’t in the box, request a corrected certificate before approving the vendor for work.

Additional insured status is different. It appears as a checkbox in the ADDL INSD column of the coverage grid, usually next to a notation in the description of operations box like “Additional insured status applies per endorsement CG 20 10.” Neither is proof. A checked box and a form-number reference tell you additional insured status was represented on the certificate. Only the endorsement itself, obtained from the named insured’s broker, tells you it was issued.

That distinction is why the certificate holder box being complete tells you something, and a checked ADDL INSD box tells you much less than it appears to.

When Certificate Holder Status Is Enough

Certificate holder status serves a legitimate purpose when documentation is the goal rather than protection. If you need to confirm that a vendor carries active coverage before approving them for your system, or you need a record of their limits and effective dates for compliance tracking purposes, the COI delivers that.

The practical test is whether you could be named in a lawsuit arising from the named insured’s work. If your operations, property, or financial exposure aren’t implicated in what the vendor does, certificate holder status may be all the situation requires. Some scenarios that fit that profile:

• Vendor onboarding documentation: An organization that requires vendors to submit certificates of insurance (COIs) as part of a standard onboarding process, but whose own liability doesn’t depend on what those vendors do on their behalf, uses certificate holder status as a documentation checkpoint rather than a coverage mechanism. The COI confirms the vendor has insurance. The certificate holder’s own policy handles any exposure that arises from the relationship.
• Internal compliance records: Risk management programs that track vendor insurance status across large rosters use certificate holder designation to confirm coverage is in place at the time of renewal. That record supports due diligence documentation and demonstrates that the organization required and received proof of coverage, which matters when a dispute arises over what was required contractually.
• Low-exposure vendor relationships: A professional services firm that hires vendors for administrative functions like IT support, cleaning, or office maintenance may find that certificate holder status satisfies internal requirements when the vendor’s work creates minimal physical exposure on their premises.
• Short-term or one-time engagements: When a vendor performs a brief, defined scope of work with limited liability implications, the time and cost of securing additional insured endorsements may outweigh the benefit compared to the coverage the certificate holder’s own policy already provides.

The calculation changes the moment your property, employees, or financial exposure could be implicated in a claim arising from what the vendor does. At that point, certificate holder status tells you the vendor has coverage but does nothing to give you access to it.

When You Need Additional Insured Status

Additional insured status is necessary whenever you could be named in a lawsuit arising from another party’s work, operations, or presence on your property. The contract may transfer liability on paper through a hold harmless clause, but that transfer only works in practice when the party assuming the liability has coverage that actually responds to it and you have rights under that coverage to access it directly.

Construction Subcontracting

When a sub’s worker injures a third party on a GC’s project, the injured party frequently names both the sub and the GC as defendants. A GC with additional insured status on the sub’s GL policy has the sub’s insurer defending them directly. A GC who’s only a certificate holder hires their own counsel and manages the claim independently, even when the sub’s negligence caused the incident.

The BLS counted 1,034 construction worker deaths in 2024, roughly one in five U.S. workplace deaths, more than any other private industry. CPWR’s research shows construction workers accounted for nearly half of all fatal workplace falls in the U.S. in 2021, with more than 20,000 nonfatal fall injuries logged annually since 2013. Every one of those incidents generates liability exposure that flows upward through the contracting relationship, and certificate holder status on the sub’s policy provides none of the protection that exposure demands.

Tiered Subcontractor Chains

On projects where work runs through multiple tiers, additional insured status needs to follow the chain. A GC who holds additional insured status on their direct sub’s policy but not on the sub-sub’s policy has no protection against claims arising from the sub-sub’s work, even though that work happens on the GC’s project under the GC’s general supervision.

The practical requirement is that every tier of the subcontractor chain carrying out physical work on the project names the GC as additional insured. Checking the top sub’s certificate without verifying what the sub-sub carries is how that protection gets missed.

Commercial Real Estate and Property Management

A tenant’s contractor who injures a building visitor creates a claim that can name the landlord as a defendant, even though the landlord never hired the contractor or had any role in directing their work. Additional insured status on the tenant’s GL policy gives the landlord direct access to the tenant’s coverage instead of forcing them to absorb the full claim through their own policy.

Liberty Mutual’s 2025 analysis found that falls to a lower level is the leading cause of serious injuries in construction work, unlike every other industry where overexertion leads. The analysis also found that U.S. employers spend $58.8 billion per year in total workplace accident costs. That exposure flows directly through vendor and contractor work performed on managed properties, and certificate holder status on those vendors’ policies provides no protection when a claim names the property owner.

Vendor Programs and Service Contracts

Any organization that engages vendors to perform physical work on its premises, handle its equipment, or interact directly with its customers or employees faces liability exposure from the vendor’s operations. These are some of the most common scenarios where certificate holder status isn’t enough:

• Facilities and maintenance vendors: A cleaning vendor who causes a slip and fall, a maintenance contractor who damages equipment, or an HVAC technician whose work creates a safety hazard all generate claims that can name the property owner as a defendant with the vendor.
• Event and temporary staffing: A vendor operating at a hosted event whose employee injures an attendee creates immediate exposure for the organizing company. Certificate holder status confirms the vendor has coverage, but it provides no access to that coverage when the claim names both parties.
• Logistics and delivery vendors: A third-party logistics provider whose driver injures someone while operating on your loading dock or warehouse floor generates liability exposure for the facility operator that certificate holder status on the driver’s employer’s policy does nothing to address.
• Technology installation and service vendors: An IT contractor whose work damages a client’s server infrastructure or causes a data center outage creates financial exposure for the hiring organization that the vendor’s GL policy should cover, but only if the hiring organization has standing to access it.

In each scenario, the vendor’s policy may respond to the claim. Whether it responds on your behalf depends entirely on whether you’re an additional insured, not a certificate holder.

Post-Completion Liability Windows

Construction defect claims, completed operations losses, and latent property damage can pop up months or years after a sub finishes their scope and leaves the project. Additional insured status under a CG 20 10 endorsement applies to damage arising out of the sub’s ongoing operations. Once the sub’s work is complete, damage occurring after that point falls outside what CG 20 10 reaches, regardless of when the claim arrives.

CG 20 37 extends additional insured status to completed operations claims that arise after the sub’s scope is done. Without it, a GC named in a construction defect lawsuit two years after project handover has no standing under the sub’s policy for that claim, regardless of what the original certificate showed. The contractual liability coverage backing hold harmless agreements works the same way, where the certificate may reference it but the endorsement schedule is what confirms it’s actually in place.

How to Get Additional Insured Status

Certificate holder status and additional insured status both require a request, but the similarity ends there. Being listed as certificate holder means asking the named insured to have their broker put your name in a box. Getting added as an additional insured means requiring the named insured to contact their insurer, have an endorsement added to the policy, and provide documentation that it was actually issued. The time to make that requirement is before work starts, not after a claim arrives.

Require It in the Contract

The contract between you and the named insured is where additional insured status originates. Your subcontractor or vendor agreement should explicitly require the named insured to add you as additional insured on their GL policy, specify which endorsement forms apply, and make that status a condition of starting work. Leaving it implied or using language like “appropriate endorsements” gives you nothing enforceable when a claim tests it.

The endorsement forms to specify by name are CG 20 10 for ongoing operations coverage and CG 20 37 for completed operations coverage. Requiring “additional insured status” without naming the forms leaves the door open for a sub to provide a narrower endorsement that doesn’t cover completed operations, which is the scenario most likely to matter years after project handover.

Make It a Condition of Starting Work

A contract requirement that isn’t enforced before work begins is a contract requirement that doesn’t exist in practice. Require the named insured to submit a COI confirming additional insured status before you authorize any work. Hold the start date until you have it.

This is where many programs break down. The contract requires additional insured status. The sub submits the certificate. The compliance team confirms the certificate arrived and marks the vendor approved. Nobody verifies whether the AI endorsement is actually present on the underlying policy. Work starts, but the endorsement was never issued.

Verify the Endorsement, Not Just the Certificate

To confirm additional insured status, request the endorsement schedule from the named insured’s broker. Don’t rely on a certificate notation that references an endorsement. The notation tells you additional insured status was requested. The endorsement schedule tells you it was issued. Check that CG 20 10 and CG 20 37 both appear on it, that your organization’s exact legal name matches what’s in your contract, and that the policy period covers your project timeline.

Two other endorsements travel with additional insured status and matter almost as much. Primary and non-contributory language makes the named insured’s policy pay first before your own coverage gets called on. A waiver of subrogation stops the named insured’s insurer from coming after you once they’ve paid a claim arising from the named insured’s work. Without both, additional insured status alone can still leave your policy absorbing a loss it shouldn’t be touching.

When a Vendor Can’t or Won’t Provide Additional Insured Status

Not every vendor who resists an additional insured request is facing a real policy limitation. Some push back on the endorsement fee. Some don’t understand what you’re asking. Some have policies that truly can’t accommodate the endorsement. How you respond depends on the situation you’re in.

When a Vendor Says It Will Cost Extra

Adding an additional insured endorsement may carry a small fee, usually between $25 and $100 per endorsement, depending on the policy and insurer. That cost belongs to the named insured, not to you. A vendor who says adding you as additional insured is too expensive is telling you they don’t want to absorb a minor administrative cost in exchange for your business. That’s a business decision, not a policy limitation. Make additional insured status a contractual condition and let the vendor decide whether the work is worth it.

When a Vendor’s Policy Genuinely Restricts It

Some policy types don’t support additional insured endorsements at all. Professional liability policies, for example, generally don’t allow additional insured status the way GL policies do. A vendor whose only coverage is professional liability may not be able to add you regardless of how willing they are. In that case, verify whether the exposure you’re trying to cover is actually a GL exposure or a professional liability exposure, and adjust your requirements accordingly.

Some smaller vendors carry policies with restrictive endorsements that limit or prohibit blanket additional insured provisions. If a vendor’s broker confirms the policy really can’t accommodate the endorsement, request documentation of that restriction and evaluate the exposure independently before deciding whether to proceed.

Your Options When You Can’t Get Additional Insured Status

If a vendor can’t or won’t provide additional insured status, you have four paths available:

• Hold the requirement firm and find another vendor: If the scope of work creates meaningful liability exposure, certificate holder status isn’t an acceptable substitute. A vendor who won’t meet your insurance requirements is a vendor you replace before work starts, not after an incident.
• Adjust the scope of work to reduce exposure: If the specific tasks creating liability exposure can be removed from the vendor’s scope and handled differently, the residual exposure from what remains may fall within what certificate holder status adequately covers.
• Accept certificate holder status for low-exposure relationships: If the vendor’s work creates minimal physical exposure on your premises and your own policy covers the residual risk, then requiring additional insured status may be disproportionate. Apply the test from earlier: could you realistically be named in a lawsuit arising from this vendor’s work?
• Require higher GL limits as partial substitute: Higher limits don’t replace the coverage rights that additional insured status provides, but they increase the pool of coverage available to respond to a claim. This is a second-best option, not an equivalent one, and it should be documented as a deliberate risk management decision rather than treated as a clean solution.

Can You Be Both a Certificate Holder and an Additional Insured?

Yes, and in most commercial relationships you want to be both. The two designations serve different functions and having one doesn’t exclude the other.

Being listed as certificate holder gives you the COI as a documentation record. It doesn’t give you a right to a cancellation notice, since the ACORD 25 no longer promises one. Being named as additional insured gives you coverage rights under the policy, the ability to file claims directly with the named insured’s insurer, and access to legal defense when a claim names you as a defendant.

The certificate holder designation gets you the document. The additional insured endorsement gets you the protection. A compliance program that collects COIs and lists your organization as certificate holder without also verifying additional insured status has the administrative function in place without the coverage function behind it.

When you require a COI from a vendor or subcontractor, your name should appear in the certificate holder box and in the description of operations field confirming additional insured status per the applicable endorsements. Both. Every time. The certificate holder box tells you the document arrived. The endorsement confirms you’re actually covered.

How the Certificate Holder Box Gets Completed in Practice

The certificate holder box on the ACORD 25 requires the certificate holder’s legal name and their mailing address. The broker completes this field based on instructions from the named insured, the certificate holder’s own request, or the requirements spelled out in the contract between the parties.

Why Your Exact Legal Name Matters

The name in the certificate holder box needs to match your organization’s exact legal name. When additional insured endorsements are added to the policy, they identify the additional insured by name. A discrepancy between the name in the certificate holder box and the name on the endorsement creates ambiguity that only comes up in claim disputes.

“ABC Construction” and “ABC Construction, Inc.” look like the same company. In a coverage dispute, they’re two different legal entities, and an insurer denying a claim has every incentive to point out the difference. The name you provide for the certificate holder field should be the exact legal name you require on every endorsement, every time.

Why the Address Matters Less

The mailing address in the certificate holder box is for record-keeping more than anything else. The ACORD 25 doesn’t promise a cancellation notice to that address, or any address, since the current form defers entirely to what the underlying policy requires. An outdated address is worth correcting for your own files, but it doesn’t cost you a protection you never had.

For certificate holders managing large vendor rosters, outdated addresses in the certificate holder box are common and worth correcting when identified, but they don’t affect coverage rights since certificate holders have none to begin with.

Can Multiple Parties Be Listed as Certificate Holders?

Yes. A named insured can have any number of certificate holders on any number of certificates. A subcontractor working on a dozen active projects can issue a separate COI to each GC, each project owner, and each property manager who requests one. There’s no limit, and listing additional certificate holders doesn’t affect the policy, the coverage, or the named insured’s premium in any way.

This is one of the clearest illustrations of what certificate holder status actually is. Because it confers no rights and creates no obligations for the insurer, there’s no cost or risk to the named insured in issuing certificates to as many parties as request them. Additional insured endorsements work differently. Each endorsement extends actual coverage rights under the named insured’s policy, which is why insurers track them and may charge for them.

If a vendor tells you they can’t add you as a certificate holder because they already have too many, that’s not accurate. If they tell you adding you as an additional insured would affect their premium or require insurer approval, that’s a legitimate point worth understanding before you finalize requirements.

Your Responsibilities as Certificate Holder

Certificate holder status is passive in a legal sense. You receive a document, and the insurer has no obligations to you at all. But the compliance program you run as certificate holder carries real ongoing obligations that most organizations underinvest in.

Verify Coverage at Onboarding, Not Just at Request

Receiving a COI and filing it isn’t verification. Before approving a vendor or subcontractor for work, confirm that the certificate shows the coverage types your contract requires, that limits meet your minimums, that effective dates cover your project timeline, and that your organization’s exact legal name appears in the certificate holder box. A COI that arrives with the wrong entity name, expired dates, or insufficient limits needs to be corrected before work starts, not flagged after an incident.

Track Renewals and Request Updated Certificates

A certificate issued at contract execution reflects coverage at that moment. Policies renew every year, and a vendor who carried compliant coverage when you approved them may have reduced limits, changed carriers, or let coverage lapse at renewal. Your compliance program needs a mechanism to identify upcoming expirations and request renewal certificates before the prior certificate expires. Waiting for the vendor to send an updated certificate unprompted leaves your compliance program dependent on the vendor’s initiative rather than your own.

CertFocus by Vertikal RMS tracks expiration dates across your entire vendor roster and sends automated renewal requests before coverage lapses, so you’re not discovering expired certificates after work has already continued on them.

Keep Your Legal Name Current and Accurate

If your organization changes its legal name, merges with another entity, or operates under multiple legal entities for different projects, the name in the certificate holder box needs to reflect the correct legal entity for each relationship. A certificate holder name that doesn’t match the legal entity in your contract creates ambiguity that an insurer can use against you if a coverage dispute arises.

Document What You Received and When

If a compliance issue comes up later and someone asks what coverage was in place at a given time, your records are what answer that question. Keep a dated record of every certificate received, every renewal requested, every deficiency identified and corrected, and every instance where a vendor failed to comply with your requirements.

That documentation is what demonstrates that your compliance program worked as designed rather than as a filing exercise. CertFocus by Vertikaal RMS keeps that history intact, with each certificate, request, and deficiency timestamped against the vendor record.

How Long to Keep Certificates of Insurance

COI retention requirements don’t get much attention in compliance program design, but your state’s statute of repose determines how long you actually need them. That window is how long a claimant has to bring a construction defect lawsuit after substantial completion, and it runs between six and ten years in most states. A certificate documenting a subcontractor’s coverage on a project you completed in 2024 may need to be producible in 2032.

Retain the following for each vendor or subcontractor through the applicable repose period:

• The original COI: Confirms the coverage types, limits, and effective dates in place at the time of the certificate’s issuance.
• Any renewal certificates collected during the project: Documents continuous coverage through the project duration rather than just at inception.
• The endorsement schedule if you got one: Confirms which endorsements were in place at the time, which becomes critical if a claim disputes whether additional insured status or contractual liability coverage existed.
• Any correspondence related to coverage deficiencies: If you identified a compliance issue during the project and required the vendor to correct it, retain that documentation along with the corrected certificate.

CertFocus by Vertikal RMS maintains compliance records throughout the project duration and beyond, giving you an organized record of each vendor’s coverage status at every stage, including closeout. When a completed operations claim arrives years after a project closes, that documentation establishes what coverage was in place when the work was handed over.

Verifying More Than Certificate Holder Status

Most COI collection processes confirm that vendors have submitted certificates and that coverage limits meet contract minimums. That tells you the vendor has insurance, but it doesn’t tell you whether you’re protected by it.

The most common failure point is treating the certificates as the end of the verification process. A certificate can reference additional insured status in the description of operations field without the underlying endorsement existing in the policy. Your name appears. The language is right. But your endorsement isn’t there. You only find out when a claim arrives and the insurer tells you that you have no standing under the policy.

You need to request the endorsement schedule from the named insured’s broker to confirm that an endorsement is actually present. That’s a separate document that most compliance programs never request. When you do request it, here’s what to verify:

• CG 20 10 is present if ongoing operations coverage is required: The certificate notation “additional insured” means nothing without confirming which endorsement form backs it.
• CG 20 37 is present if completed operations coverage is required: This is the endorsement most commonly missing, and it’s also the one that matters most on construction projects where defect claims can arise years after handover.
• CG 21 39 and CG 24 26 are absent: Both endorsements strip or limit contractual liability coverage. Their presence on a sub’s policy means the hold harmless clause in your subcontract has no insurance behind it.
• The named insured on the endorsement matches the legal entity in your contract: A name discrepancy between the endorsement and the contract gives an insurer grounds to dispute coverage at the worst possible moment.

CertFocus by Vertikal RMS goes beyond certificate collection to verify that required endorsements are actually present in the underlying policy. Hawk-I AI processes incoming COI documentation and flags compliance deficiencies automatically. Credentialed insurance professionals review the coverage questions that require actual insurance expertise to answer. If your current process stops at confirming that a certificate was submitted, it’s worth seeing what a complete review looks like.

Certificate Holder Status and Additional Insured Status Are Not the Same Thing

Many compliance programs treat them as variations of the same protection, but they’re not. Certificate holder status tells you a vendor has insurance, while additional insured status gives you rights under it. Collecting a COI and confirming your name appears in the bottom-left box gets you the first one. Verifying that the required endorsements are actually present in the underlying policy is what gets you the second.

The difference doesn’t matter until a claim arrives. At that point it’s the only thing that matters.

CertFocus by Vertikal RMS verifies both. Hawk-I AI flags compliance deficiencies in incoming COI documentation automatically, and credentialed insurance professionals review the endorsement-level questions that certificates can’t answer. If your current compliance program confirms that certificates were submitted but doesn’t verify what’s behind them, it’s worth seeing what that review looks like.

CertFocus by Vertikal RMS and Billy are both COI tracking platforms designed to help companies manage subcontractor insurance compliance, but they come from different starting points and serve different priorities.

CertFocus by Vertikal RMS has operated for 25+ years across 25+ industries, combining Hawk-I AI processing with expert human review from licensed insurance professionals. Billy launched in 2020 as a construction-native platform built around Procore workflows, with a focused set of construction-specific features and an AI review layer that processes certificates in seconds.

The platforms overlap on the fundamentals, but they’re very different in industry breadth, integration readiness, prequalification capability, and how far each platform extends beyond the certificate itself. Billy tracks W-9s, licenses, bonds, and warranty letters and integrates deeply with Procore’s payment workflows. CertFocus by Vertikal RMS brings broader industry coverage, verification across a wider range of insurance lines, quarterly carrier verification, and native integration with PreQual by Vertikal RMS for subcontractor financial analysis.

The right choice between them depends on what your compliance program needs. If Procore integration depth and construction-first document workflows are the priority, Billy was built for exactly that. If you need multi-industry coverage, verification across a broader range of insurance lines, integrated prequalification with financial analysis, or a platform with a longer operating history behind it, CertFocus by Vertikal RMS is the stronger fit.

Quick Comparison

Both platforms handle the core COI tracking workflow. Where they separate is in how deeply each one goes beyond the certificate and whether their integrations are live or in progress.

The table below covers the features that matter most in a direct comparison:

Where CertFocus by Vertikal RMS Wins

CertFocus’s advantages over Billy are most clear in the areas that matter when a claim arrives. Coverage breadth, financial analysis depth, and active coverage verification are where the two platforms diverge most significantly. Billy wins on construction-native speed and integration breadth. CertFocus wins on the quality and depth of what happens after the certificate comes in.

Two-Layer Certificate Review

Collecting certificates is the easy part. Both platforms do it, and both do it well. The hard part is knowing whether the certificate in front of you actually delivers what your contract requires, and that comes down to endorsements.

A certificate confirms coverage existed the day it was issued. It doesn’t prove the sub carries the endorsements your contract demands. The additional insured status that protects you when a claim arrives comes from an endorsement attached to the sub’s policy, and naming you in a certificate holder box confers nothing. A certificate can list every coverage line your contract asks for while leaving you with no claim against the sub’s insurer when something goes wrong.

Agents write endorsement language as free-form prose in the Description of Operations box, and every agent writes it differently. One types “additional insured per CG 20 10 04 13.” Another types “GC is additional insured where required by written contract,” attaches no endorsement form at all, and counts on nobody checking.

CertFocus’s Hawk-I AI reads that prose as language instead of hunting for values in fixed positions. Natural language processing lets it work through how an agent actually wrote the endorsement, so wording nobody standardized still parses. Then a licensed insurance professional reviews what Hawk-I found and decides whether this certificate satisfies this contract.

Here’s what those two layers catch that field-matching tools can’t:

• An endorsement the certificate promises and nobody attached: The Description of Operations box says additional insured. Our reviewer asks for the form and finds nothing behind it. You’d never know from the certificate alone.
• Blanket wording that doesn’t reach you: A blanket endorsement extends additional insured status to parties the sub agreed to name in written contract. Our reviewer confirms your contract actually triggers it instead of taking the phrase at face value.
• An edition date that quietly drops completed operations: CG 20 10 on its own covers you while the sub works. It stops the day they finish. Our reviewer catches the missing CG 20 37 while you can still do something about it.
• Requirements your contract demands and the certificate ignores: Primary and noncontributory wording, waivers of subrogation, per-project aggregates. Our reviewer reads your requirements against what arrived and tells you what’s short.

Those two layers are why CertFocus by Vertikal RMS can take up to 48 hours to review a certificate instead of seconds. The review includes an initial AI pass plus a licensed reviewer who has read thousands of endorsements before. Billy offers human review too, but that’s an additional and optional step that they cannot complete in seconds like the AI review.

Integrated Subcontractor Prequalification With Financial Analysis

This is where the two platforms separate most sharply, and it’s the hardest gap for Billy to close. Billy offers a prequalification module that collects documents and routes submissions for review. It’s a form-and-workflow tool built to gather what a subcontractor submits.

CertFocus by Vertikal RMS integrates natively with PreQual by Vertikal RMS, a dedicated prequalification product with a fundamentally different scope. PreQual evaluates what a subcontractor submits instead of just filing it. That evaluation includes:

• Financial statement review by certified analysts: Real analysts read balance sheets, cash flow, and bonding capacity to judge whether a sub can absorb the financial risk of the work, not just whether they submitted a form.
• EMR verification: Confirms the experience modification rate that signals a sub’s safety and claims history.
• Customizable safety scorecards: Scored against your organization’s own risk criteria rather than a generic template.
• Past performance evaluation: Completion history, default history, and references from prior relationships.

That depth is why PreQual holds up for the most demanding buyers. Turner Construction, the largest domestic contractor in the US by revenue, uses PreQual by Vertikal RMS. A contractor operating at that scale runs prequalification against thousands of subcontractors, and the financial review is what separates a sub who looks capable from one who can actually carry the work without defaulting mid-project. That’s the level of evaluation Billy’s form-based module isn’t built to deliver, and it’s only half of what the platform does.

Some general contractors treat that analysis depth as optional, but SDI carriers don’t. Subcontractor Default Insurance (SDI) generally requires a robust prequalification review before a carrier will issue coverage. SDI protects the GC when a subcontractor defaults, so the carrier wants confidence the sub can finish the work before taking on that risk. A prequalification process that produces a real financial scorecard satisfies that requirement. Document collection doesn’t.

A GC sees the difference between the two platforms right away. A form-based module gathers what the subcontractor submits. A financial analysis that produces a vendor-level scorecard meets the standard SDI carriers require.

The synergy between the two products is the part Billy has no answer for. Because the same company builds both, they share one workflow instead of talking through an integration:

• One-click prequalification: When an admin adds a vendor in CertFocus, a single button starts that vendor’s full prequalification in PreQual. No re-entering data into a separate system.
• Live insurance status on the scorecard: A subcontractor’s current COI compliance from CertFocus appears directly on their PreQual scorecard. A reviewer sees insurance and financial standing in one place instead of cross-referencing two platforms.
• Always current, always logged: Any change to insurance status in CertFocus is reflected on the live PreQual submission, and every step is logged with a timestamp for a clean audit trail.
• One source of truth: No duplicate vendor records, no conflicting compliance status between systems, no manual reconciliation.

For a general contractor, this is the combination that matters. Billy can track certificates and collect prequalification forms. What it can’t do is tell you whether a subcontractor who looks compliant on paper can actually back their indemnification obligations financially.

Document collection doesn’t answer that question. Financial analysis does, and pairing it natively with live insurance compliance is what makes the CertFocus and PreQual combination something Billy’s single-platform model isn’t built to match.

Quarterly Carrier Verification

A certificate confirms coverage existed when it was issued, but it says nothing about whether that coverage is still active six months later.

CertFocus by Vertikal RMS conducts quarterly carrier verification to confirm underlying coverage remains active throughout the policy period. Billy’s website makes no mention of this capability. Mid-term cancellations, insolvencies, and policy lapses are exactly the scenarios quarterly verification catches before a claim arrives and coverage gets disputed.

Operating History and Stability

CertFocus by Vertikal RMS has been in operation for over 25 years. Billy just launched in 2020 and is a less established player. Twenty-five-plus years of operation means established workflows, a proven service model, and a client roster that includes STO Building Group.

Billy launched in 2020. At six years old, the platform is still building the institutional knowledge that comes from processing certificates across market cycles, regulatory changes, and the full range of endorsement complexity that enterprise compliance programs run into. For organizations signing multi-year contracts with a compliance partner, that experience gap is worth weighing carefully.

Breadth of Coverage Lines and Contract Types

Billy built its platform around construction. Its compliance workflows focus on the coverage lines and contract types common to that industry, like general liability, auto, workers’ compensation, professional liability, and a handful of others that appear on most construction projects.

CertFocus by Vertikal RMS operates across 25+ industries. The platform handles insurance verification across as many as 60 lines of coverage, from the standard commercial lines through specialized coverages that rarely appear on a construction certificate but are common in healthcare, real estate, manufacturing, and hospitality. It tracks compliance across scores of distinct contract types rather than the narrower set a construction-first platform is built to handle.

That breadth matters most for organizations whose vendor base doesn’t fit neatly into a single industry. A compliance program managing subcontractors, suppliers, service vendors, tenants, and professional firms across multiple sectors runs into coverage requirements and contract structures a construction-native platform wasn’t designed to process. CertFocus handles that variety because it was built for it.

Negotiated insurance terms are the other piece. Construction insurance requirements tend to be rigid and standardized. The same endorsements and limits appear across most projects, and they don’t get negotiated often.

Contracts in other industries work differently. A commercial real estate lease, a healthcare vendor agreement, or a manufacturing supply contract often carries insurance requirements negotiated for that specific deal. Tracking compliance against non-standard terms takes experience with the full range of how insurance requirements actually get written, which is exactly what 25+ years across 25+ industries creates.

Where Billy Wins

Honesty about competitor strengths is what makes a comparison worth reading. Billy has built real advantages in specific areas, and for the right buyer those advantages matter more than anything CertFocus by Vertikal RMS offers.

The question worth asking first is whether you need them. Everything below extends past the core compliance work of collecting certificates, checking them against contract requirements, chasing deficient vendors to compliance, and keeping status visible before a sub reaches the site. Both platforms handle that core work. Plenty of general contractors never need anything past it.

Procore Integration Depth

Billy’s Procore integration is the most developed among COI tracking platforms available today. It includes two-way sync of projects, vendors, and commitments, a side panel that lets reviewers evaluate certificates directly within Procore without switching platforms, and ProcorePay integration that blocks non-compliant vendors from receiving payment until their certificates meet requirements.

Billy reports that 83% of their customers already use Procore. For that audience, having compliance enforcement live inside the tool the project team uses every day is what makes it actually work. Teams ignore a separate system that makes them cross-reference by hand, but they will use a side panel that sits right inside Procore.

CertFocus’s Procore integration is currently in progress. If Procore is central to how your team operates, that difference matters right now.

Broader Document Scope

Billy tracks more than certificates of insurance. Along with COIs, it manages W-9s, business licenses, surety bonds, and warranty letters in the same system. CertFocus by Vertikal RMS focuses specifically on COIs and insurance compliance.

Onboarding a subcontractor usually means collecting a tax form, verifying a business license, confirming a bond, and tracking the certificate of insurance. When all of those live in one platform, the compliance team works from a single record per vendor instead of stitching together a COI tracker, a document repository, and a spreadsheet or two.

Construction-Native ERP Integrations

Billy ships with pre-built integrations across the ERP stack that construction firms use all the time:

• Sage 300
• Sage Intacct
• CMiC
• Viewpoint Vista
• JD Edwards
• Autodesk
• DocuSign
• Acumatica

For a GC already running one of those systems, the integration is ready to use without custom development work.

CertFocus by Vertikal RMS offers an open API, which provides flexibility but requires more technical work to connect existing systems. Pre-built integrations reduce implementation time, lower the barrier to adoption, and mean the compliance team isn’t waiting on IT to stand up a custom connection before the platform becomes useful.

Trade-Specific Insurance Requirements

Billy tracks subcontractors against the full set of standard construction trade types and lets GCs apply different insurance requirements to each one. A demolition contractor, a roofer, and a structural steel erector carry very different risk profiles, and Billy supports setting different coverage thresholds for each rather than applying one blanket requirement across every vendor.

Billy lets a GC filter COI status by trade, spot where a vendor’s coverage doesn’t match the risk of the work they’re doing, and branch prequalification requirements by trade type. A high-risk trade gets held to higher limits and specific endorsements automatically, while lower-risk vendors clear against a lighter standard.

This is construction-native functionality built around how GCs actually think about subcontractor risk. CertFocus by Vertikal RMS handles trade-based requirements through its configurable requirement sets, but Billy’s trade model is purpose-built for construction and ships with the standard trade list ready to use.

USI Insurance Partnership

Billy holds preferred vendor status in USI Insurance’s PATH risk management program. USI is one of the largest privately held insurance brokers in the United States, with clients spanning construction, real estate, and most major commercial industries.

USI doesn’t extend that designation without vetting. Preferred vendor status in a broker program of this scale involves evaluation against real criteria, and the broker community carries meaningful credibility when recommending compliance platforms to clients. Buyers who already work with USI as their broker, or who weigh broker endorsements when evaluating platforms, will find that Billy carries a credential CertFocus doesn’t.

CertFocus by Vertikal RMS maintains its own referral relationships across the insurance brokerage industry, though it doesn’t market a single formal program the way Billy does with USI.

Choose CertFocus by Vertikal RMS If…

CertFocus by Vertikal RMS is the stronger fit for organizations where review depth, prequalification substance, and active coverage matter more than construction-specific workflow integration. If your compliance program extends beyond construction or your vendor risk evaluation needs to go deeper than the certificate itself, CertFocus is built for that.

Choose CertFocus by Vertikal RMS if:

• You need thorough certificate review: If your compliance work comes down to reviewing certificates accurately and getting deficient vendors compliant, that’s what CertFocus by Vertikal RMS is built around. Procore side panels, bond tracking, warranty letters, and payment gating are real conveniences, but none of them determine whether a deficient certificate gets caught before it becomes a claim.
• Your vendor base covers multiple industries: CertFocus by Vertikal RMS serves 25+ industries. If you manage vendors across real estate, healthcare, manufacturing, hospitality, or any combination alongside construction, a platform built exclusively for GC workflows leaves your compliance team working around its own limitations.
• Your vendors span a wide range of coverage types: CertFocus verifies compliance across as many as 60 lines of coverage and scores of contract types. When you get certificates with unusual coverage lines, non-standard endorsements, or negotiated insurance terms that a construction-first platform rarely encounters, that range is what handles them accurately.
• You’re making a long-term platform decision: CertFocus by Vertikal RMS has operated for 25+ years and carries no outside investor obligations. For enterprise buyers signing multi-year contracts, a self-funded platform with more than two decades of operating history is a different kind of commitment than a six-year-old venture-backed platform.
• You run a Subcontractor Default Insurance program: SDI carriers generally require a real prequalification review before issuing coverage. PreQual by Vertikal RMS produces the vendor-level financial scorecard that meets that requirement, and pairing it with CertFocus by Vertikal RMS puts insurance compliance and financial prequalification in one integrated view. Billy’s form-based module isn’t built to deliver that depth.

Choose Billy If…

Billy is the stronger fit for construction teams whose vendor management needs extend beyond the certificate itself and who use construction platforms or major ERP that Billy integrates with. If your operations are construction-focused and integration depth is the deciding factor, Billy was built for that workflow.

Choose Billy if:

• You run your operations inside Procore: Billy’s Procore integration is live today, with two-way sync, a side panel for in-platform certificate review, and ProcorePay compliance gating. A project team already working in Procore can check compliance without switching tools.
• Your finance team is already in a construction ERP: Billy ships with pre-built connections to Sage, CMiC, Viewpoint Vista, JD Edwards, Acumatica, Autodesk, and DocuSign. If your finance team already works in one of those, the connection is ready on day one instead of waiting on IT to build against an API.
• You need to track more than COIs: Billy manages business licenses, surety bonds, and warranty letters along with certificates, all on a single platform. A compliance team that wants every vendor document type in one system avoids the overhead of juggling separate tools to track each one.
• You want to trial the platform before contracting: Billy offers a 30-day trial. CertFocus by Vertikal RMS doesn’t. A buyer who wants hands-on time with a platform before signing will appreciate that trial, though it matters less to teams that would rather evaluate through a demo and move straight to a contract.
• Your vendors are construction trades: Billy ships with the standard trade list and lets you hold a demolition contractor to different limits than a roofer, then filter compliance status by trade. That model works on day one for a subcontractor base, though vendors outside the trades need requirements built from scratch.

The Bottom Line on CertFocus vs. Billy

Both platforms solve real compliance problems. Billy is a strong choice for construction teams running Procore-first operations who need document scope beyond COIs. CertFocus by Vertikal RMS is the stronger choice when review depth, multi-industry coverage, and integrated financial prequalification matter more than native ERP connectivity. Both rank among the top COI tracking platforms on the market, and the deciding factor is whether your compliance program prioritizes integration depth or review depth.

RELATED: Excess vs. Umbrella Insurance: Key Differences Explained, What to Do If Your Subcontractor Doesn’t Have Insurance & Understanding TRIR: Definition, Formula, Calculation, and Benchmarks

Every commercial contract that requires vendors to carry liability insurance eventually specifies a combined limit that exceeds what a primary general liability policy typically provides. That gap gets filled with an umbrella or excess policy sitting above the primary. The certificate arrives showing $1 million in GL and $5 million in umbrella/excess, the compliance box gets checked, and everyone moves on.

What doesn’t get examined is whether that $5 will actually respond when a claim crosses the primary limit. The answer depends entirely on which type of policy it is. Excess insurance follows the exact terms of the primary policy below it. Umbrella insurance has its own terms and can cover claims the primary policy excludes. Those two products behave differently when a claim arrives, cost differently, and require different verification to confirm they cover what your contracts require.

In 2024, nuclear verdicts against corporate defendants totaled $31.3 billion, a 116% increase over the prior year, with the median verdict hitting $51 million. When a claim of that magnitude crosses a primary limit, whether the coverage above it follows the primary’s terms or carries its own is the question that determines what pays next.

Is Excess Liability the Same as Umbrella Insurance?

No, excess liability and umbrella insurance are not the same product. Both add limits above a primary policy and both activate after the underlying policy’s limits are exhausted, but they respond to claims in fundamentally different ways.

Excess liability insurance follows the exact terms, conditions, and exclusions of the underlying primary policy. If the primary policy excludes a type of claim, the excess policy excludes it too. The excess layer adds financial capacity for the same claims the primary covers, and nothing else.

Umbrella insurance has its own terms, conditions, and exclusions that may differ from the underlying policy. It can respond to claims the primary policy excludes, subject to the umbrella’s own coverage terms. It can also sit above multiple underlying policies simultaneously rather than extending only one.

The confusion is industry-wide and not a buyer error. Brokers use the terms interchangeably, certificates list coverage as “umbrella/excess” without specifying which type the vendor carries, and contracts routinely require one or the other without drawing any distinction between them. None of that imprecision matters until a claim crosses the primary limit and the next layer either responds or doesn’t.

What Is Excess Liability Insurance?

Excess liability insurance is a policy that provides additional coverage limits above an existing primary insurance policy, activating only after the underlying policy’s limits have been exhausted. It does not expand the scope of what the primary policy covers. It extends how much the insurer will pay for the same claims the primary policy already covers.

How Excess Insurance Works

Excess liability is a follow-form policy. That means it adopts the same insuring agreement, exclusions, conditions, and definitions as the underlying primary policy. Whatever the primary covers, the excess covers. Whatever the primary excludes, the excess excludes. The excess layer adds financial capacity without adding coverage territory.

The ISO CX 00 01 Commercial Excess Liability Coverage Form makes this explicit from its opening language. The insurance will follow the same provisions, exclusions, and limitations contained in the applicable controlling underlying insurance and will not be broader than that provided by the applicable controlling underlying insurance.

That follow-form provision has a practical consequence that matters when a claim arrives. A vendor whose primary GL policy excludes professional errors carries that same exclusion into their excess layer. A $4 million excess policy sitting above a $1 million primary GL doesn’t respond to a $2 million professional error claim. The excess layer has limits that haven’t been touched. It simply doesn’t cover that type of claim.

Excess Insurance in Practice

A commercial tenant’s GL policy covers bodily injury on the leased premises up to $1 million. Their excess policy adds $4 million above that. A visitor trips and falls, sustaining injuries that result in a $3.2 million judgment. The primary policy pays its $1 million limit. The excess policy pays the remaining $2.2 million. The follow-form provision works exactly as intended because the claim type falls within what the primary policy covers. Both layers responded because the claim involved a third-party bodily injury, which is exactly what the primary GL was designed to cover and what the excess policy follows form on.

Now change the scenario. The same tenant’s GL policy excludes personal injury claims like defamation. Their excess policy follows form. A defamation lawsuit results in a $500,000 judgment. The primary policy denies the claim because personal injury is excluded. The excess policy denies it for the same reason. The $4 million in excess limits is irrelevant.

What Excess Insurance Does Not Cover

Excess insurance does not cover claims the primary policy excludes. That follows directly from the follow-form structure, but the practical implications are worth being explicit about because they surprise buyers who assume more limits means more protection.

The most common scenarios where excess insurance fails to respond despite having available limits involve the following:

• Claims excluded by the primary policy: If the primary GL excludes professional errors, pollution liability, employment practices claims, or any other category of loss, the excess policy excludes them too. The exclusion travels upward through the follow-form provision regardless of how much capacity is in the excess layer.
• Claims covered by the primary but not yet exhausted: Excess only activates after the primary limits are fully exhausted. A claim that falls within the primary policy but hasn’t yet exhausted the primary limit gets no contribution from the excess layer, even if the claim is expected to grow beyond the primary.
• Claims on policies the excess doesn’t extend above: A vendor with a $1 million GL policy and a $5 million excess policy extending only the GL has no excess coverage for auto liability or employer liability claims. The excess layer applies only to the policy it is written above.
• Claims arising from the vendor’s failure to maintain the underlying coverage: If the primary policy lapses, is canceled, or falls below the required attachment point and the vendor fails to replace it, some excess policies will not drop down to cover the resulting exposure. That’s a drop-down capability that only umbrella policies carry in some circumstances.

When Excess Insurance Makes Sense

Excess is the right product when the underlying coverage already addresses all relevant exposures and the only need is higher limits on a specific policy. A business whose primary GL covers everything their contracts and risk profile require doesn’t need a broader umbrella. They need more capacity on the same terms, and excess delivers that at a lower cost than an umbrella because the insurer accepts no new coverage risk.

The most common use case is satisfying contract minimum limits requirements where the required combined limit exceeds what the primary policy provides but the primary policy’s coverage scope is already appropriate. A vendor required to carry $5 million in GL coverage who carries a $1 million primary GL and $4 million excess policy meets that requirement without paying for umbrella coverage that extends into claim categories their risk profile doesn’t actually present.

Excess is also the practical choice when a vendor needs to extend a specific underlying policy, like commercial auto, without restructuring their entire liability program. A single excess policy extending one underlying policy is administratively simpler and less expensive than an umbrella policy that requires coordinating terms across multiple underlying policies.

The excess liability market’s size reflects why businesses choose it over umbrella when limits rather than coverage scope are the issue. Commercial liability coverage led the entire U.S. surplus lines market in 2024, generating $30.2 billion in premiums and representing 37% of all E&S volume, as businesses sought higher limits without the broader coverage a stand-alone umbrella would require.

What Is Umbrella Insurance?

Umbrella insurance is a policy that provides additional liability limits above the underlying primary policy and can also cover claims that the primary policy excludes. It has its own terms, conditions, and exclusions that may differ from the underlying policy, which is what separates it structurally from a follow-form excess policy.

How Umbrella Insurance Works

Unlike excess insurance, umbrella coverage doesn’t mirror the primary policy’s terms. It sits above the primary layer and responds when primary limits are exhausted, but it also carries its own insuring agreement that may extend coverage into areas the primary policy doesn’t reach.

A primary GL policy that excludes personal injury claims like defamation may sit below an umbrella that covers personal injury. When a defamation claim arrives, the umbrella can respond even though the primary policy wouldn’t.

Umbrella policies can also sit above multiple underlying policies simultaneously, covering claims from GL, commercial auto, and employers liability under a single additional limit. Excess policies typically extend only one underlying policy.

Self-Insured Retention

When an umbrella policy responds to a claim that falls entirely outside the primary policy, the insured typically pays a self-insured retention before the umbrella engages. The SIR is the amount the insured absorbs directly before the insurer responds.

The SIR works differently than a deductible in a way that matters practically. A deductible is usually handled after the claim is processed, often with the insurer advancing defense costs. A SIR must be paid before the insurer responds at all. A vendor with a $250,000 SIR and limited cash reserves has umbrella coverage that may be practically unavailable for claims that fall outside the primary policy, regardless of the umbrella’s stated limits.

Single Policy vs. Multiple Underlying Policies

Excess insurance typically extends one underlying policy. A vendor with a $5 million excess policy written above their GL policy has $5 million in additional limits for GL claims only. Their auto liability, employer liability, and other underlying policies aren’t touched by that excess layer. A separate excess policy would be required to extend each one.

Umbrella insurance is designed to extend multiple underlying policies under a single additional limit. When a vendor carries a $5 million umbrella, that limit is available for claims that exhaust any of the underlying policies listed in the umbrella’s schedule, whether that’s GL, commercial auto, or employer’s liability. A single umbrella policy replaces what would otherwise require multiple excess policies purchased separately.

That structural difference has practical implications for both cost and coverage management. A vendor who buys a single umbrella rather than multiple excess policies pays one premium for one policy that responds across their full liability program. The tradeoff is that the umbrella’s own terms govern what it covers, whereas multiple excess policies each follow their own underlying policy’s terms.

The distinction matters when verifying that combined limits requirements are actually met. A contract requiring $5 million in umbrella coverage above a $1 million GL and a $1 million auto policy is asking for a single policy that extends both underlying limits. A vendor who submits separate excess policies above each underlying policy has technically provided equivalent dollar amounts but a structurally different coverage arrangement than the contract specified.

Cost Differences and Why They Exist

Excess insurance is generally less expensive than umbrella insurance because the excess insurer accepts no new coverage risk. They’re agreeing to pay more for the same claims the primary policy already covers, which means their actuarial exposure is limited to scenarios where the primary limits are exhausted on covered claims. The underwriting process is simpler, the coverage form is shorter, and the premium reflects that reduced risk.

Umbrella insurance costs more because the insurer is accepting coverage risk for claim types the primary policy already declined to cover. When an umbrella picks up personal injury claims, pollution incidents, or other excluded categories, the insurer is writing coverage for exposures they’ve never priced into the underlying policy. That additional risk gets priced into the umbrella premium.

The rate environment has made this cost difference more pronounced in recent years. Umbrella liability premiums increased 8.7% in Q4 2024, marking 29 consecutive quarters of commercial lines premium growth per the Council of Insurance Agents and Brokers, with rates having peaked at 22.9% in Q3 2020 before moderating and then resurging. Marsh’s Q1 2025 data shows umbrella and excess rates rising 16% overall, with clients carrying adverse loss history facing increases of over 30%. The sustained pressure reflects the claims environment that umbrella carriers are absorbing at the upper layers of liability programs.

Vendors under cost pressure have real incentive to carry excess where umbrella was required, or to carry umbrella with limiting endorsements that narrow its coverage toward excess-like terms. Both approaches reduce premium while appearing to satisfy combined limits requirements. Neither provides the same coverage as a clean umbrella policy written to the contract’s specifications.

Drop-Down Coverage

Some umbrella policies include a drop-down provision that allows the umbrella to respond as primary coverage when the underlying policy is exhausted, cancelled mid-term, or otherwise unavailable. If a vendor’s GL policy is cancelled and a claim arrives before a replacement policy is in place, a drop-down umbrella can step in where the primary layer has gone dark.

Drop-down provisions vary significantly by policy and carrier. Not all umbrella policies include them. When they do exist, the conditions triggering drop-down coverage and the SIR that applies are defined in the umbrella’s own terms, not the primary policy’s. Excess policies don’t have drop-down capability because they follow the primary policy’s terms, and a cancelled primary policy has no terms to follow.

What Umbrella Insurance Does Not Cover

Umbrella insurance has its own terms and can respond to claims the primary policy excludes, but that breadth has limits defined by the umbrella policy’s own exclusions. A claim that falls outside both the primary policy and the umbrella’s own terms gets no coverage from either layer regardless of available limits.

The most common exclusions that appear in umbrella policies and catch buyers off guard include the following:

• Intentional acts and criminal conduct: Umbrella policies universally exclude coverage for deliberate wrongdoing. A vendor whose employee intentionally damages property or assaults a third party has no umbrella coverage for the resulting claim regardless of the umbrella’s stated limits.
• Professional liability: Standard umbrella forms exclude errors and omissions arising from professional services. A design-build vendor, a consultant, or any vendor providing professional advice needs a separate professional liability policy for that exposure. The umbrella won’t pick it up.
• Workers’ compensation: Umbrella policies don’t replace or extend workers’ compensation coverage. Employers liability coverage, which is part of a workers’ comp policy, may be listed as an underlying policy that the umbrella extends, but the umbrella itself doesn’t cover statutory workers’ comp obligations.
• Pollution liability: Most standard umbrella policies exclude pollution claims. Vendors whose operations involve chemicals, waste disposal, or environmental exposure need separate pollution liability coverage. The umbrella exclusion applies regardless of how the claim is framed.
• Claims specifically excluded in the umbrella’s own form: Unlike excess insurance, the umbrella’s exclusions aren’t inherited from the primary policy. They’re the umbrella carrier’s own underwriting decisions. Reading the umbrella policy independently from the primary is the only way to know what those exclusions are.

When Umbrella Insurance Makes Sense

Umbrella is the right product when the underlying primary coverage has exclusions the buyer needs to address, when the vendor operates across multiple risk categories that different underlying policies address, or when contracts require broader protection than a follow-form excess policy can provide.

The clearest use case is a vendor whose risk profile includes exposures the primary GL doesn’t cover. A vendor who hosts client events faces personal injury exposure like defamation or false arrest that most primary GL policies exclude. A vendor operating internationally faces auto and general liability exposure in jurisdictions the primary policy may not extend to. An umbrella that covers those categories provides protection that no amount of excess coverage above the primary GL can replicate.

Matching the right policy type to each vendor starts with understanding what vendor insurance requirements apply to their trade and scope, since high-hazard vendors with broader exposure profiles are more likely to need umbrella than low-risk service providers who just need higher limits.

The broader terms come at a higher cost, and that cost has been rising. AM Best’s 2025 analysis found that challenged liability risks have been a key driver of seven consecutive years of double-digit growth in the non-admitted market, where umbrella underwriting flexibility is greater than in standard admitted lines. Organizations with complex or hard-to-place risk profiles increasingly find umbrella coverage in the surplus lines market rather than through standard carriers.

Excess vs. Umbrella Insurance: Key Differences

Both products add limits above a primary policy. Beyond that shared starting point, they behave differently in ways that determine which claims they cover, how much they cost, and what verification requires.

These are the biggest differences between excess and umbrella insurance:

Follow-Form vs. Stand-Alone Coverage

Follow-form is the term that determines whether an excess policy mirrors its underlying coverage exactly or deviates from it. The ISO CX 00 01 form language leaves no ambiguity on this point. The coverage will not be broader than that provided by the applicable controlling underlying insurance.

An umbrella policy is stand-alone. It has its own coverage form, its own exclusions, and its own definitions that may align with the primary policy in some areas and diverge in others. That divergence is what gives umbrella policies their potential breadth.

One important caveat applies even to follow-form excess policies. Even though the excess policy is designed to mirror the primary, it has its own declarations page and may carry endorsements that modify the follow-form relationship in specific areas. Confirming that the follow-form provision is intact requires reviewing the excess endorsement schedule, not just assuming the primary policy’s terms carry through automatically.

Self-Insured Retention Explained

Excess policies carry no self-insured retention. When a claim exhausts the primary limits, the excess policy responds from the first dollar above those limits.

Umbrella policies apply a SIR to claims that fall outside the primary policy entirely. When an umbrella responds to a claim the primary policy never covered, the insured pays the SIR before the insurer responds. The size of that retention determines whether the umbrella’s broader coverage is practically accessible or theoretically available but financially out of reach for a vendor with limited resources.

Common Misconceptions About Excess and Umbrella Insurance

Several widespread misconceptions about excess and umbrella insurance produce coverage decisions that leave real exposure.

“Umbrella and Excess Are Just Different Names for the Same Thing”

This is the most consequential misconception because it’s the one that produces denied claims. A contract that requires “umbrella or excess” coverage and accepts either product may end up with a follow-form excess policy above a primary GL that excludes several relevant claim types. The vendor technically complied. The coverage is structurally different from what the contract’s drafter likely intended.

Swiss Re’s 2024 analysis found U.S. commercial casualty losses growing at 11% per year for five years, more than double the general inflation rate, with social inflation at a 20-year high of 7%. In that environment, whether the coverage above your primary policy follows its terms exactly or carries its own broader terms determines what pays when a claim crosses the limit. Treating the distinction as a terminology preference rather than a structural difference is an expensive assumption to test in litigation.

“More Limits Always Means More Protection”

A vendor who carries $5 million in follow-form excess above a primary GL with a contractual liability exclusion has $5 million that will never respond to hold harmless claims. The excess layer has capacity. It simply carries the same exclusion upward because that’s what follow-form means.

What makes this misconception more expensive right now is that excess and umbrella premiums are rising regardless of whether the coverage they sit above actually covers what buyers think it does. Excess and umbrella recorded their highest quarterly rate increase in three years in Q4 2024 per WTW’s pricing survey, with the only other commercial line keeping pace being commercial auto. Paying more for a follow-form excess policy above an excluded claim type buys the same absence of protection at a higher premium.

“If the Certificate Shows It, the Coverage Exists”

The ACORD 25 form includes a disclaimer at the top of every certificate stating that the document does not amend, extend, or alter the coverage afforded by the policies listed. That disclaimer is there because the certificate is a summary, not a policy.

It confirms the policy existed and the limits at the time of issuance. It says nothing about endorsements, exclusions, SIRs, or whether the policy is still active. A certificate of insurance showing $5 million in umbrella coverage tells you that policy existed on the date the certificate was issued. It tells you nothing about what that $5 million will actually cover when a claim arrives.

“Umbrella Coverage Automatically Follows the Primary Policy”

Umbrella policies are not automatically follow-form. They have their own terms, and in some areas those terms are more restrictive than the primary policy sitting below them. An umbrella that excludes certain professional services liability may sit above a primary GL that covers professional services for a specific named profession.

The coverage that appears in one layer doesn’t automatically appear in the other. Reading the umbrella policy independently from the primary is required, not optional.

How Umbrella and Excess Coverage Appear on a COI

The ACORD 25 certificate has a dedicated section for umbrella and excess coverage in the coverage grid, sitting below the primary liability lines. What appears in that section determines what a compliance reviewer can confirm from the certificate alone, and what requires additional documentation to verify.

Reading the Umbrella/Excess Section on an ACORD 25

The umbrella/excess section includes fields for policy type, carrier, policy number, limits, and effective and expiration dates. The type field should indicate whether the policy is umbrella or excess, but brokers frequently leave it blank or fill it in as “umbrella/excess” without specifying which. The limits shown represent the umbrella or excess layer only, not a combined total with the primary. A certificate showing $1 million GL and $5 million umbrella represents $6 million in total available coverage for claims that fall within both policies, not $5 million.

One field worth paying special attention to is whether the umbrella policy is listed as “occurrence” or “claims-made.” An occurrence umbrella above a claims-made primary creates a coverage structure that requires careful review, because the two forms respond to claims on different timing bases. When those forms don’t align, the interaction between the layers can produce unexpected results on claims that straddle policy periods.

What the Certificate Doesn’t Tell You

The certificate confirms the umbrella or excess policy existed and the limits at the time of issuance. Everything beyond that requires the policy documents themselves. Specifically, the certificate cannot confirm the following:

• Whether the excess policy is truly follow-form: A certificate listing an “excess” policy doesn’t confirm the policy mirrors the primary policy’s terms. Some excess policies carry endorsements that modify the follow-form relationship in specific areas. Those modifications don’t appear on the certificate.
• Whether additional insured status extends to the umbrella layer: The certificate may show you as additional insured without specifying which policy layers that endorsement covers. A certificate listing you as additional insured on the primary GL says nothing about whether that same status appears on the umbrella or excess policy sitting above it.
• Whether limiting endorsements are in place: Endorsements that restrict contractual liability coverage on a primary GL policy, like CG 21 39 and CG 24 26, can also appear on umbrella policies. A limiting endorsement at the umbrella layer doesn’t appear on the certificate and won’t be caught by a review process that stops at the certificate alone.
• Whether the SIR is financially manageable: A vendor carrying a $500,000 SIR on their umbrella and operating with thin cash reserves has umbrella coverage that may be practically inaccessible for claims falling outside the primary policy. The certificate shows the umbrella limits. It says nothing about what the vendor must pay before those limits engage.
• Whether the umbrella’s own exclusions eliminate coverage your contracts require: The umbrella’s stand-alone terms may exclude claim types that your vendor program specifically needs covered. The certificate doesn’t disclose those exclusions.

Aon’s Q4 2024 market analysis found US excess liability was one of the few commercial lines still posting consistent rate increases globally, driven specifically by nuclear verdicts and litigation funding. As more claims grow large enough to cross primary limits and enter umbrella and excess layers, what sits in those layers and whether it actually responds has become a more consequential question than it was when primary limits were rarely exhausted. The certificate alone can’t answer it.

How Umbrella and Excess Coverage Interact With Contractual Liability

Hold harmless and indemnification clauses create contractual liability exposure that needs coverage at both the primary GL level and through the umbrella or excess layer above it. A contract requiring $5 million in combined liability limits typically expects a primary GL at $1 or $2 million with an umbrella or excess policy making up the difference.

Whether that upper layer actually responds to the claims your contracts are trying to transfer depends on what sits in it.

Additional Insured Status Across Policy Layers

Being named as additional insured on a vendor’s primary GL policy does not automatically extend AI status to their umbrella or excess layer. Each policy requires its own additional insured endorsement. A party named on the primary but not the umbrella has no direct access to the umbrella insurer when a large claim exhausts the primary limits.

GL claims are the most common pipeline through which verdicts grow large enough to exhaust primary limits. The ILR’s 2024 analysis found GL claims account for 37.6% of all nuclear verdict cases, with the average nuclear verdict running $89 million.

A $1 million primary GL limit and a $5 million umbrella with no additional insured endorsement at the umbrella layer leaves the party who thought they had $6 million in protection with direct access to only $1 million of it. The remaining $5 million requires going through the vendor rather than directly to the insurer.

Your subcontracts and vendor agreements should require additional insured endorsements at both the primary and umbrella layers explicitly.

Contractual Liability Endorsements on Umbrella Policies

The endorsements that limit contractual liability coverage on primary GL policies can also appear on umbrella policies. CG 21 39 eliminates the blanket contractual liability provision. CG 24 26 limits coverage to shared-fault scenarios only.

A vendor who carries a primary GL with full contractual liability coverage but attaches CG 21 39 to their umbrella has contractual liability protection only up to the primary limit. The umbrella’s stated limits become irrelevant for hold-harmless claims above that threshold.

Contractors under cost pressure in a rising-rate environment have real incentive to accept limiting endorsements that reduce their umbrella premium. Verifying umbrella endorsements independently from primary policy endorsements is the only way to confirm contractual liability coverage holds through both layers.

How to Write Umbrella and Excess Requirements Into Vendor Contracts

Vague contract language around umbrella and excess coverage is one of the most common sources of compliance programs that look complete on paper but leave real exposure when a large claim arrives. Four elements belong in any contract that requires umbrella or excess coverage from vendors:

• Specify policy type, not just limits: A contract that says “5 million umbrella/excess” accepts either product. A contract that says “$5 million commercial umbrella” specifies the broader product. Coverage scope matters as much as coverage limits, and that distinction belongs in the contract language rather than getting resolved after a claim arrives.
• Require additional insured status at each layer: Contract language requiring additional insured status should specify both the primary GL policy and the umbrella or excess policy above it. Language that says “additional insured on general liability” without addressing the umbrella layer leaves the upper layer AI requirement open to dispute at exactly the moment it matters most.
• Address the self-insured retention: A vendor with a $500,000 SIR on their umbrella and a balance sheet that can’t support that payment has umbrella coverage that may never practically respond to claims outside the primary policy. Setting a maximum acceptable SIR in the contract, and requiring disclosure of the SIR amount on the declarations page, protects against this scenario before work begins rather than during a claim dispute.
• Require endorsement schedule delivery alongside the certificate: A certificate confirms the policy existed. The endorsement schedule confirms what the policy actually covers. Requiring both at the time of submission, rather than treating the certificate as sufficient documentation on its own, is what makes umbrella and excess verification important. On construction projects where multiple subs carry layered programs, the construction COI review should verify umbrella and excess terms at every tier of the subcontractor chain rather than treating upper-layer coverage as automatic.

When the Coverage Above Your Primary Limit Matters Most

A certificate showing $5 million above a $1 million primary looks the same whether the upper layer is a follow-form excess policy that mirrors the primary’s exclusions or a stand-alone umbrella that responds to claim types the primary policy never covered. The certificate can’t tell you which one it is.

Verifying what sits above the primary limit requires the declarations page, the endorsement schedule, and the underlying schedule. It requires confirming that additional insured status extends to the umbrella layer, that contractual liability coverage hasn’t been eliminated by a limiting endorsement at the upper layer, and that the SIR is a number the vendor can actually fund.

CertFocus by Vertikal RMS tracks compliance across your entire vendor roster. When deeper verification is warranted, credentialed insurance professionals can review declarations pages, endorsement schedules, and underlying schedules to confirm whether the umbrella or excess coverage your contracts require is actually in place. If your current compliance program stops at confirming that a limit appears on the certificate, that level of review is available.

RELATED: CertFocus vs Billy: COI Tracking Software Comparison, Foster Vendor Compliance in Supply Chain Risk Management & Certificate Holder Meaning: Role on a Certificate of Insurance

Discovering that a subcontractor doesn’t have insurance can happen in two very different places. The first is during contract setup, when the sub can’t produce a certificate and work hasn’t started yet. The second is three weeks into a project when you realize the policy expired and nobody caught the lapse.

Both situations leave the hiring party holding the exposure that the sub’s insurance was supposed to cover, both require immediate action, and the steps each one calls for are different enough that treating them the same usually makes the second one worse.

This article covers both scenarios, along with the legal and financial exposure they create, what insurance subcontractors actually need to carry, how to handle the sub who refuses to get coverage, and how to build a compliance process that catches these problems before they become decisions you have to make under pressure.

What Happens If Your Subcontractor Doesn’t Have Insurance?

If your subcontractor doesn’t have insurance, you might have to absorb the financial and legal exposure their policy was supposed to cover. The NSC puts the average cost of a medically consulted work injury at $48,000 in 2024 and a fatality at $1,540,000, and when the sub has no policy to respond, those costs fall on the hiring party.

Your Legal Exposure as the Hiring Party

Most subcontracts include a hold harmless clause that assigns liability for the sub’s work to the sub. That clause works when the sub has a GL policy to back it. When they don’t, the clause assigns liability to a party with nothing to fund it, and the hiring party absorbs the claim.

The pattern holds across claim types. A sub whose worker injures a third party has the hold harmless clause naming them as responsible. A sub whose completed operations defect surfaces two years after project close faces the same assignment. In both cases, without a policy to respond, the claim reaches the hiring party.

Construction shows the scale of that exposure most clearly. The industry logged 1,034 workplace fatalities in 2024, roughly 1 in 5 of all U.S. workplace deaths that year, leading every individual private industry. The hold harmless failure extends well beyond construction, though. Any organization where subcontractors perform physical work on behalf of a hiring party faces the same consequence when a sub carries lapsed or nonexistent coverage.

The Workers’ Comp Audit Consequence

This is the consequence that catches most hiring parties off guard. It arrives from a scheduled year-end audit and has nothing to do with whether an incident occurred on the job.

At the end of every workers’ comp policy period, the carrier audits subcontractor records and requests a valid certificate for every sub who performed work during that period. The auditor treats any sub who can’t produce a valid certificate as a direct employee and applies payroll classification rates to that sub’s labor charges.

Construction classification rates make the audit charge especially important. The industry represents 27% of all workers’ comp premium volume nationally, the largest share of any single industry in the system, and medical claim severity for construction grew 13% in 2024, more than double the overall system’s growth rate. When the auditor assigns uninsured sub payroll to a construction employer’s policy at those rates, the cost compounds against a baseline that’s already rising faster than any other sector.

The audit clock starts on the first day the uninsured sub worked and runs through the full policy period regardless of the incident record. A project that ran without a single safety problem still produces audit charges if the subs can’t produce valid certificates.

What Happens to Your Own Insurance Program

Some carriers exclude coverage for subcontractor work where the hiring party obtained no certificate. An otherwise insured employer can find their own policy declining to respond to a claim the insurer traces to an uninsured sub’s operations. The exclusion applies because the hiring party accepted uninsured sub risk without documentation, regardless of whether an incident arose.

Uninsured subcontractor incidents build in the hiring party’s own loss history, raise the experience modification rate, and generate underwriting scrutiny that can result in non-renewal for carriers in high-hazard trades. The EMR increase follows into every future premium calculation, prequalification submission, and bonding rate discussion for years.

OSHA’s multi-employer citation policy adds another dimension. It allows inspectors to cite controlling employers, including GCs and project owners, when a subcontractor’s workers are exposed to hazards the controlling employer could have identified or corrected.

Fall protection violations have topped OSHA’s citation list for 14 consecutive years, with 6,307 violations recorded in FY 2024 alone. An uninsured sub incident that triggers an inspection can produce a citation that follows the hiring party’s safety record for years, affecting prequalification approvals, bonding rates, and future contract eligibility.

Are Subcontractors Covered Under the Contractor’s Insurance?

Generally no. A contractor’s GL policy covers the contractor’s own operations and employees, not the independent work of subcontractors. Most GL policies either exclude subcontractor work explicitly or contain conditions that prevent the policy from responding to claims arising from a sub’s independent operations.

When a GC’s Policy Might Extend to a Sub

Some carriers allow GCs to extend their own GL coverage to include a subcontractor’s operations for a specific project, either by adding the sub as an additional insured or by endorsing the policy to cover subcontractor work. When this happens, the sub’s work falls under the GC’s policy for that defined period. A handful of policies also include limited coverage for subcontractor work as a default provision, though the scope of that coverage varies significantly by carrier and policy form.

The practical problem with relying on this is that it transfers risk in the wrong direction. Claims from a sub’s work hitting the GC’s policy drive up the GC’s EMR, consume the GC’s aggregate limits, and can trigger carrier scrutiny or non-renewal. Requiring the sub to carry their own coverage keeps each party’s loss history separate and the GC’s policy reserved for the GC’s own operations.

Workers’ Comp Is a Separate Question

Workers’ comp operates differently from GL, and the rules here catch more GCs off guard. If a sub doesn’t carry workers’ comp and one of their workers is injured, some states treat that worker as the GC’s statutory employee for purposes of the workers’ comp claim.

The GC’s workers’ comp carrier steps in to cover the claim, and the GC absorbs the cost through their own policy and experience modification. Even states that don’t impose statutory employee status still charge the GC’s workers’ comp carrier for uninsured sub labor at audit, as covered earlier in this article.

The statutory employee risk is highest when the GC directs the sub’s work, controls their schedule, or provides tools and equipment. The more control the GC exercises, the more likely a workers’ comp board or court treats the sub’s workers as the GC’s own.

What Insurance Does the General Contractor Need?

Requiring subcontractors to carry insurance is one layer of protection. The GC’s own policy is the other, and several specific coverage elements need to be in place for that layer to actually function when a subcontractor-related claim arrives.

Contractual Liability Coverage

The hold harmless and indemnification agreements that flow upwards from subcontracts also flow upward from your own contracts with project owners and developers. Your GL policy needs contractual liability coverage to honor those obligations. Most standard GL forms include it unless a limiting endorsement like CG 21 39 removes it.

Review your own policy’s endorsement schedule before signing contracts that include broad indemnification language, and confirm the contractual liability provision is intact.

Completed Operations Coverage

Subcontractor work that produces a defect doesn’t always generate a claim while the project is active. Structural defects, water intrusion, and fire suppression failures can come up years after completion.

Your own completed operations coverage needs to extend through the state’s statute of repose for construction defect claims, not just through project handover. If your policy’s completed operations period is shorter than the repose period, you carry uninsured exposure on every project you hand over during that window.

A Subcontractor Endorsement on Your GL Policy

Some GL policies include subcontractor exclusions that limit or eliminate coverage for work performed by subs on your projects. If your policy contains one of these exclusions and a sub’s work produces a claim, your own carrier may decline to respond even though you’re the named defendant. Confirm with your broker whether your policy excludes or limits subcontractor work and what endorsement, if any, restores that coverage.

Umbrella Coverage Sized to Your Projects

Your umbrella or excess policy needs limits that reflect the actual exposure on your largest projects, not a round number that felt adequate at renewal. A $5 million umbrella on a $50 million project with broad indemnification flowing to the owner is a coverage structure worth reviewing with your broker before a claim tests it.

Subcontractor Default Insurance

Subcontractor default insurance, commonly called SDI, is a policy the GC purchases to protect against the cost of a subcontractor failing to complete their scope. Default means the sub can no longer perform, whether through financial failure, abandonment, or an inability to complete the work to specification. When that happens, the GC absorbs the cost of finishing the sub’s scope with a replacement contractor, managing delays, and handling cascading schedule impacts. SDI covers those costs.

SDI addresses a different category of risk from the insurance requirements the GC places on subs. It addresses financial default exposure. Liability for the sub’s work remains a separate question, governed by the sub’s own GL policy and the mechanisms described throughout this article.

What SDI Covers

SDI’s core function is covering the completion cost when a sub can’t finish. Policies typically cover the following:

• The additional cost to hire a replacement sub above the original subcontract value
• Delay damages caused by the schedule disruption
• Extended general conditions costs for the additional time on the project
• The cost to identify and correct defective work at the time of default

SDI doesn’t cover third-party bodily injury or property damage claims arising from the sub’s work. Those claims flow through the sub’s own GL policy, and if that policy is absent, back to the GC through the exposure described earlier in this article.

When SDI Makes Sense

SDI is most commonly used on large commercial projects with multiple major subcontractors whose default would significantly impact schedule and cost. The premium usually runs 0.5% to 1% of the total subcontract volume protected, making it worth evaluating on projects where a single sub’s default could produce losses many times that amount.

It makes less sense for smaller projects or trades where replacement subs are easy to find and the cost of switching is manageable. The value of SDI tracks with the difficulty and cost of replacing the defaulting sub mid-project.

SDI complements subcontractor insurance requirements rather than replacing them. It adds a financial backstop for the scenario where a fully insured sub defaults before completion and the GC needs to fund the difference between the original subcontract value and the cost to finish.

SDI carriers also look closely at a GC’s subcontractor prequalification practices when evaluating coverage. PreQual by Vertikal RMS is accepted and preferred by all SDI carriers, which means GCs who prequalify contractors through PreQual are well positioned when they go to market for SDI coverage.

What to Do When You Discover an Uninsured Sub Before Work Starts

Discovering the problem before work begins gives you full control over how to proceed. The options below are real choices with real tradeoffs, and they’re only available as long as work hasn’t started.

Don’t Let Work Begin

Hold the work until the sub meets the insurance requirements or you’ve settled one of the alternatives below. Every day a sub works without coverage is another day the hiring party carries the exposure, and that clock starts from the first day on the job regardless of whether an incident ever occurs.

Project schedule pressure will push back on any hold, and a sub who can’t produce a certificate creates a real delay problem. Even so, that pressure doesn’t make the underlying exposure manageable. Before resuming any conversation about timelines, document the hold in writing with a specific description of the deficiency and a deadline for resolution. That record matters if a dispute later arises about what coverage was required and when work was authorized to resume.

Your Four Options

When a sub can’t produce the required coverage before work starts, you have four paths forward:

• Require the sub to obtain coverage before starting: This is the cleanest option, and in many cases the fastest one. Most brokers can turn around a GL policy within days, though workers’ comp takes longer in some states and for some trades, so build that timeline into the deadline you give the sub. A sub who can’t afford coverage or can’t obtain it at all signals a financial problem worth knowing before any work begins.
• Add the sub as an additional insured on your own policy: Some carriers allow this, and when they do, the arrangement extends your coverage to the sub’s work, which means claims from the sub’s operations hit your policy and your loss history. That’s a risk transfer in the wrong direction, making this option appropriate only in narrow circumstances, such as a brief scope of work with a trusted sub who is actively obtaining their own coverage and can produce documentation of the timeline.
• Require a surety bond: An EY study commissioned by the Surety and Fidelity Association of America found that bonded projects are five times more likely to finish on time or ahead of schedule than unbonded ones. That performance guarantee is valuable, but it covers the sub’s contractual obligations rather than third-party bodily injury or property damage claims. A bonded sub with no GL policy still leaves the hiring party exposed to those claims, which means bonding works best as a supplement to insurance requirements rather than a replacement for them.
• Proceed with a written indemnification agreement: If the sub has no assets and no insurance, an indemnification agreement is largely theoretical protection. The sub agrees in writing to cover claims arising from their work, but if a claim materializes and the sub can’t pay, the agreement provides a legal basis to pursue them with no practical source of funds behind it. Save this option for low-risk scopes of work, involve legal counsel in drafting it, and document the sub’s capacity to honor the obligation before relying on it.

Setting Requirements by Risk Level

Insurance requirements should grow with the risk level of the work. A subcontractor handling structural demolition warrants higher limits and more specific endorsements than a vendor providing janitorial services, and getting those thresholds right before a project starts is what makes the insurance requirement enforceable when the sub can’t meet it.

The table below gives you a starting point, though contract terms, state regulations, and project owner requirements may call for adjustments above these minimums:

What to Do When You Discover an Uninsured Sub Mid-Project

This is the harder scenario. Work has already started, exposure has already been created, and project momentum works against good decisions. The steps below are different from the pre-work scenario because the problem has a history now, and that history matters.

Stop Work and Document It

Stop the sub’s work immediately and put the hold in writing. The documentation should identify the specific coverage deficiency, the date it was discovered, and the date work was suspended. Every day the sub continues working after you’ve identified the problem extends the period during which the hiring party knowingly carried uninsured exposure, which creates a separate liability problem on top of the original one.

Take pictures of the work completed to date and preserve all daily logs, inspection records, and communications with the sub from the period in question. If a completed operations claim comes up years from now, that documentation establishes what work was done during the uninsured window, under whose supervision, and what quality checks were applied. Without it, the scope and condition of work completed during the lapse period become a disputed fact at exactly the wrong time.

Assess the Coverage Period That Lapsed

Before deciding how to proceed, establish exactly how long the coverage lapse has been in effect. A lapse of three days is a materially different situation from three months of uninsured work, so pin down the timeline before making any decisions. Get four specific things from the sub’s broker:

1. The exact lapse date: Request the cancellation or expiration notice directly from the broker, not from the sub’s own account. The two often don’t match.
2. What the prior policy covered: Review which endorsements were in place and confirm if they actually met the requirements in your subcontract.
3. Whether completed operations coverage extends through the lapse window: Occurrence-form policies can protect work completed before the lapse even after the active policy expires. Confirm this window with the broker before assuming the full lapse period is uninsured.
4. Whether any incidents occurred during the lapse: If the answer is yes, treat those as active claims regardless of whether anyone has filed a formal complaint yet.

Your Options Going Forward

The four options from the pre-work scenario apply here as well, but with an additional complication that changes how you should weigh each one. New coverage obtained today may cover work going forward, but it typically won’t cover work completed during the lapse period. Whether the lapse period work carries coverage depends on:

• How the policy’s written and whether it includes a retroactive date that reaches back through the lapse window
• Whether the sub’s prior policy carries completed operations coverage that extends through the lapse period
• Whether any incidents occurred during the lapse that could produce future claims under either policy
• Whether the new policy’s carrier will accept a risk with a documented lapse in recent history

Get written confirmation from the sub’s broker on each of these before authorizing work to resume. If the sub obtains new coverage and you authorize a restart, document it in writing. That agreement should identify what coverage is now in place, what period it covers, and what work completed during the lapse remains the sub’s uninsured financial responsibility. If a lapse-period claim surfaces later, that document becomes the governing record.

What to Do If Your Subcontractor Refuses to Get Insurance

A sub who can’t produce a certificate and a sub who actively refuses to obtain coverage are different problems. The first is usually a logistics issue. The second is a signal about how the sub views contractual obligations, and it warrants a harder response.

Document the Refusal Immediately

Get the refusal in writing. If the sub communicates their position verbally, follow up with an email that summarizes the conversation and asks them to confirm. That documentation is important because it establishes that you knew about the coverage problem and took action rather than ignoring it. It also creates the paper trail you need if you pursue termination or legal action.

Note the specific coverage the sub refused to obtain, the date of the refusal, and what alternatives, if any, you offered. If the sub claims an exemption from a particular requirement, document that claim and verify it with your insurance advisor before accepting it. Sole proprietor exemptions from workers’ comp, for example, are real in many states but don’t eliminate the audit exposure on your own policy.

Your Contractual Right to Terminate

Most subcontracts give the GC the right to terminate for cause when the sub fails to meet insurance requirements. Review the subcontract before taking any action to confirm what the termination provisions say, what notice is required, and whether a cure period applies.

A cure period gives the sub a defined window to fix the deficiency before termination takes effect. If the sub has already refused, a cure period is effectively a final deadline. Send the cure notice in writing, state the exact deficiency, set a hard deadline, and make clear that work stops at termination if the sub doesn’t comply. That process protects you legally and gives the sub one more opportunity to come into compliance before the relationship ends.

When the Sub Is Already Mid-Project

Mid-project refusal is the harder version of this problem. The sub has leverage because replacing them mid-project carries real schedule and cost consequences. A hiring party who keeps an uninsured sub on the job after a documented refusal is no longer managing an oversight. The decision to proceed is now on the record.

Stop work and assess the cost of replacement against the cost of carrying the exposure for the remaining scope. Get your insurance advisor and legal counsel involved before making that call. If you proceed with the sub under any arrangement other than full insurance compliance, document the decision, the reasoning, and whatever risk mitigation you put in place. That documentation won’t eliminate the exposure, but it demonstrates that the decision was deliberate and managed rather than negligent.

Does a Subcontractor Need Insurance?

Yes. The exact coverage required depends on state law, the trade involved, and what each client’s contracts mandate, but subcontractors working in commercial industries who rely only on meeting legal minimums routinely lose work to subs who carry more.

What State Law Requires vs. What Clients Require

Most states require subcontractors with employees to carry workers’ compensation. Some states require general liability for licensed trades like electrical, plumbing, and HVAC. Beyond those minimums, state law is largely silent.

Commercial contracts fill that silence with requirements that go much further. A typical commercial subcontract specifies the following from every sub on the project:

• GL coverage at project-specific limits, often above state minimums
• Completed operations coverage extending through the statute of repose period
• Commercial auto for any business use of vehicles
• Waiver of subrogation endorsement
• Additional insured status for the GC (CG 20 10 and CG 20 37)
• Primary and non-contributory language

Every one of those requirements lives in the contract, not in state licensing statutes, and a sub who meets only the legal minimum will fail compliance checks before they submit the first bid.

What Insurance Does a Subcontractor Need?

The answer depends on the scope of work, but most commercial subcontracts require the following at minimum:

• Commercial general liability
• Workers’ compensation
• Commercial auto
• Professional liability
• Umbrella or excess coverage above the primary GL

High-hazard trades typically require higher GL limits, and project-specific requirements often exceed these minimums. The endorsements that need to accompany each coverage type are covered in the contract requirements section below.

Why Subcontractors Need Insurance Beyond Compliance

Carrying insurance protects the sub’s own financial position, not just their ability to win bids. Construction workers account for 46.2% of all fatal falls across the entire US workforce, despite representing a far smaller share of total employment, and the industry has logged more than 20,000 nonfatal fall injuries annually since 2013. A subcontractor whose worker sustains a serious injury on a job without workers’ comp absorbs that financial exposure personally, with no insurer to respond.

Beyond personal finance exposure, uninsured subs lose bids before they start. Most GCs and project owners maintain approved sub lists that require documented insurance compliance, and a sub who can’t produce a valid certificate with the required endorsements gets excluded from those lists. GCs who do hire uninsured subs often recover their workers’ comp audit charges through payment deductions, meaning the sub ends up absorbing the hiring party’s insurance costs on top of carrying the uninsured risk themselves.

What About Sole Proprietors and Independent Contractors?

Sole proprietors and independent contractors operate under different rules than subs with employees, and those differences create specific traps for hiring parties who assume the same requirements apply across the board.

Workers’ Comp Exemptions and What They Actually Mean

Most states exempt sole proprietors from the requirement to carry workers’ comp for themselves. A sole proprietor working alone with no employees usually falls outside the workers’ comp mandate in their state, and many will claim that exemption as a reason they don’t need to provide a workers’ comp certificate.

That exemption applies to their own obligation to carry coverage. It doesn’t protect you. When a sole proprietor without workers’ comp gets injured on your job and files a claim, many states treat them as your statutory employee for purposes of that claim. Your workers’ comp carrier responds, the cost hits your policy, and the audit charge follows at year end regardless of the state’s exemption.

The practical response is to require workers’ comp from every sub regardless of their sole proprietor status or to obtain a valid exemption certificate from the state confirming the sub qualifies and to document clearly that you hold it. An exemption certificate doesn’t eliminate your audit exposure in every state, but it demonstrates that you conducted due diligence on the sub’s status before allowing them to work.

When Is a Subcontractor Actually an Employee?

Misclassification is the other trap. A sub who looks independent on paper can be treated as your employee by a workers’ comp board, an IRS audit, or a court, depending on how the working relationship actually functions. The more control you exercise over how the work gets done, not just what the outcome is, the stronger the argument that the sub is an employee.

These are the signals that push toward employee classification:

• You supply the sub’s tools and equipment
• You set their hours and work schedule
• You require them to work exclusively for you
• You direct how the work gets done, down to the method and means, rather than simply specifying the end result

When a worker gets reclassified as your employee after a claim, your workers’ comp carrier covers it, your EMR absorbs the cost, and your state labor authority can layer penalties on top of that for the misclassification itself.

Review how your working relationships with solo operators are actually structured, not just how they’re labelled in the contract. If the substance of the relationship looks like employment, a certificate of insurance and a subcontract label won’t change how a claims board sees it.

How to Write Subcontractor Insurance Requirements Into Your Contracts

Vague contract language produces vague compliance. A contract that says “subcontractor shall maintain proper insurance” gives you no enforceable standard to measure against and no legal ground to stand on when a claim comes up and the coverage falls short.

Contracts that actually hold up include the following elements:

• Coverage types and minimum limits stated explicitly: Name each required policy, specify per-occurrence and aggregate limits for GL, and state the required workers’ comp, commercial auto, and umbrella limits separately. A number only functions as a limit if the contract names it as one.
• Endorsements required by name: CG 20 10, CG 20 37, waiver of subrogation, and primary and non-contributory language should all appear in the contract by name. “Appropriate endorsements” is unenforceable language that produces exactly the compliance problems you’re trying to prevent.
• Annual certificate renewal throughout the project duration: A certificate that was valid when you signed the contract means nothing if the policy lapses six months in. Require renewal certificates before each policy period expires and hold work if the renewal doesn’t arrive.
• Coverage active through the completed operations period: The exposure window keeps running well after the project is completed. Require coverage to remain in force through the state’s statute of repose for construction defect claims, which can run as long as ten years.
• Certificate delivery deadlines: Require the certificate before work starts, built into the subcontract as a hard condition, not left to the sub’s initiative.
• Cure periods and remedies for non-compliance: Specify what happens when a sub fails to produce a required certificate or allows coverage to lapse. Stop-work authority, payment holds, and the right to terminate for non-compliance all belong in the contract before any of those situations arise.

What to Look for on a Subcontractor’s Certificate of Insurance

A certificate of insurance confirms that a policy existed when the certificate was issued. It doesn’t confirm that the policy is still active, that it contains the endorsements your contract requires, or that the coverage terms match what you think they are. Knowing what to check on the certificate and what requires additional documentation to verify is how you run a compliance program that actually catches problems.

Here’s what to check on the face of the certificate:

• Named insured: The named insured on the certificate should match the legal entity named in your subcontract exactly. A certificate issued in a trade name instead of the legal entity, or in the name of a parent company rather than the sub performing the work, can produce coverage disputes when a claim arrives.
• Coverage types and limits: Confirm each required coverage type appears on the certificate with limits that meet your contract minimums. GL limits show as per occurrence and aggregate. Check both. A sub who meets the per-occurrence minimum but carries a depleted aggregate from a prior claim on the same policy period has materially less coverage than the certificate suggests.
• Effective and expiration dates: Coverage dates should run continuously through the project duration. A certificate that expires before the project closes needs to be renewed before the expiration date. Also confirm that GL and workers’ comp periods line up. Misaligned policy periods create windows where one coverage is active and the other isn’t.
• Additional insured status: The certificate should show your organization as additional insured for the applicable coverages. Additional insured status on the certificate is a representation, not a guarantee. The actual endorsement on the policy is what creates the legal relationship.
• Workers’ comp coverage: Confirm workers’ comp appears on the certificate for any sub with employees. A sub claiming sole proprietor exempt status should provide a state-issued exemption certificate alongside the COI.

What the Certificate Can’t Confirm

The ACORD 25 form includes a disclaimer stating it does not amend, extend, or alter the coverage afforded by the listed policies. That disclaimer exists because the certificate is a summary, not a policy. These are the things that matter specifically when you’re relying on a sub’s coverage that don’t appear on a COI:

• Whether the sub’s work is actually covered: Some GL policies contain trade-specific exclusions that eliminate coverage for the exact operations the sub performs on your project. Roofing exclusions, height restrictions, and classification limitations are common examples. A certificate showing compliant limits can represent a policy that excludes the sub’s primary scope of work entirely.
• Whether the required endorsements are in place: A certificate can show additional insured status without the underlying policy containing the correct endorsement. CG 20 10 and CG 20 37 are the forms that create additional insured status for ongoing and completed operations. Confirming those endorsements requires the policy’s endorsement schedule.
• Whether limiting endorsements exist: Endorsements that remove contractual liability coverage, like CG 21 39, don’t appear on the certificate. A sub’s policy can show compliant limits while carrying an endorsement that eliminates the contractual liability coverage your hold harmless clause depends on.
• Whether the aggregate limit is intact: GL policies carry an aggregate limit that caps total claims payments across the policy period. A sub who has already had claims against their current policy may have a depleted aggregate that leaves far less coverage available than the certificate shows.
• Whether the policy is still active: A certificate is evidence that coverage existed on the date it was issued. But policies lapse, expire, or can be cancelled after that date, and the certificate itself has no mechanism to reflect those changes once it leaves the broker’s hands.

How to Prevent Working With Uninsured Subcontractors

Both scenarios in this article trace back to the same two points where a compliance process breaks down. The first is insurance verification before work begins. The second is monitoring after work begins.

Verify Insurance Before Work Begins

CertFocus by Vertikal RMS handles COI verification across the full project lifecycle, including before work starts. Adding a subcontractor record to CertFocus before work begins triggers an automatic COI request and validation. A sub who can’t produce valid coverage at this stage doesn’t start work, which means the discovery scenarios described throughout this article never come up.

GCs who also need to evaluate a subcontractor’s financial health, EMR, and safety performance before approval will find that PreQual by Vertikal RMS provides that deeper assessment alongside the insurance verification.

The Associated Builders and Contractors 2025 analysis of more than a billion construction work hours found that the most safety-committed contractors operated 658% safer than the BLS industry average. A sub who can’t document required insurance has usually not built the safety and risk management infrastructure that goes with it. PreQual by Vertikal RMS’s review of balance sheets, cash flow, bonding capacity, and EMR identifies that pattern before the sub reaches the project.

Track Coverage Throughout the Project

CertFocus by Vertikal RMS monitors policy status throughout the project and alerts your compliance team when coverage lapses or expires before renewal. A certificate valid on day one doesn’t guarantee coverage on day ninety, and CertFocus catches lapses before work continues on expired coverage.

Vertikal RMS’s own data shows 7 out of 10 COIs received from vendors are out of compliance in at least one area. That means most compliance problems arise on certificates that looked fine on arrival, but may not be fully compliant. Our Hawk-I AI flags discrepancies automatically, and credentialed insurance professionals review endorsements and policy documentation to confirm the coverage your contracts actually require is in place.

CertFocus by Vertikal RMS also performs quarterly carrier verification to confirm directly with the carrier that the underlying policies remain active. A certificate can represent a policy the carrier cancelled after issuance, and quarterly verification can catch that before a claim does.

Collect Final Certificates at Project Close

Most compliance programs focus on getting certificates before work starts. Fewer address what needs to happen when work ends. Work through the following steps before releasing payment to each subcontractor:

1. Collect a final certificate from every sub: The certificate should confirm completed operations coverage remains in force and extends through the state’s applicable statute of repose period.
2. Confirm you are listed as certificate holder on the policy: Certificate holder status means the insurer must notify you directly if the sub’s policy is cancelled or lapses before the completed operations period ends. Ask the broker to confirm this at closeout and request a certificate reflecting it.
3. Confirm the sub hasn’t initiated a cancellation: A sub who cancels their GL policy the week after a project handover leaves a completed operations window that can run ten years or more with no insurance behind it. Ask the broker directly before closing out the sub’s scope.
4. Document the coverage status of every sub at substantial completion: Construction defect claims can arise years after handover, and the documentation you hold at project close is what establishes the coverage picture at the time the work was handed over.
5. Preserve those records through the statute of repose period: The period runs from the date of substantial completion. In most states, that means keeping records for at least six to twelve years.

CertFocus by Vertikal RMS maintains compliance records throughout the project duration, giving you an organized record of each sub’s coverage status at every stage including closeout. That documentation becomes your reference point when a completed operations claim arises years after the project closes.

Why Most Uninsured Sub Problems Are Preventable

The situations described in this article don’t have to become crises. They become crises when the compliance process that was supposed to prevent them either skipped verification before approval or stopped monitoring after the first certificate arrived.

Requiring a certificate at contract signing is the baseline. What actually protects you is knowing the coverage is still in force three months into a project, that the sub’s completed operations coverage will extend through the statute of repose, and that the endorsements your contracts require actually appear in the underlying policy. Most compliance programs confirm the first of those things. Fewer confirm the others.

CertFocus by Vertikal RMS manages the full compliance lifecycle, requesting and validating COIs before work begins, monitoring policy status throughout the project, and maintaining records through completion and beyond. CertFocus alone covers every insurance compliance objective in this article.

GCs who also need to assess a subcontractor’s financial health and capacity to perform can integrate PreQual by Vertikal RMS with CertFocus for that additional layer of screening. PreQual is an optional integration, not a requirement, for organizations whose prequalification process extends beyond insurance compliance.

A subcontractor signs a hold harmless agreement before starting work on a commercial project. The GC requires it, the contract is thick, and the sub signs without reading that particular section carefully. An incident occurs on the job site. The sub files a claim expecting coverage, but their insurer denies it because the policy excludes liability assumed under contract. The sub is personally exposed for a claim they assumed their insurance would handle.

This scenario plays out all the time in commercial construction. Hold harmless agreements are among the most commonly signed and least understood clauses in commercial contracting, and the insurance that’s supposed to back them is equally misunderstood. Most contractors who sign indemnification clauses have no clear picture of what they’ve agreed to, which contracts their insurance actually covers, or whether their policy has been quietly modified to exclude the coverage they’re counting on.

The environment those claims land in has changed dramatically. In 2024, nuclear verdicts against corporate defendants totaled $31.3 billion, a 116% increase over 2023, with construction and engineering facing $2 billion of that exposure directly. A contractual liability coverage gap in that environment isn’t an administrative oversight. It’s a financial exposure that can exceed any reasonable business reserve.

This guide covers what contractual liability insurance is, how it works inside the CGL policy, which contracts it covers and which it doesn’t, and how to verify that the coverage you’re requiring from subcontractors is actually in place when a claim arrives.

What Is Contractual Liability Insurance?

Contractual liability insurance covers the financial obligations a business assumes when it agrees, through a contract, to be responsible for another party’s liability. When a subcontractor signs a hold harmless agreement promising to indemnify the GC for claims arising from their work, contractual liability coverage is what pays those claims if they materialize. Without it, the sub has signed a personal financial obligation their insurer isn’t required to honor.

The coverage lives inside the commercial general liability (CGL) policy as a built-in component, subject to specific conditions that determine when it applies and when it doesn’t. These conditions are what this article covers, because most contractors who sign indemnification clauses have never read them.

Two terms appear constantly in commercial contracts and carry distinct meanings that matter when a claim arrives:

• Hold harmless and indemnify: These terms often appear together, and many courts treat them as synonymous. Both refer to an agreement to assume financial responsibility for another party’s liability. In some jurisdictions courts distinguish between them, but the practical effect in most commercial contracts is the same: one party agrees to absorb losses that would otherwise fall on the other.
• Defend: An obligation to pay for the other party’s legal defense during the claim. This must be explicitly stated in the contract to be required. A contract that says “indemnify” but not “defend” doesn’t obligate the indemnitor to fund the indemnitee’s attorneys.

The commercial liability lines that house contractual liability coverage reached $129.2 billion in direct premiums written in 2024, with loss ratios deteriorating sharply as nuclear verdicts and social inflation drove claims costs higher. That market pressure is part of why insurers enforce exclusions and endorsements carefully when a claim arrives rather than extending coverage liberally.

Is Contractual Liability Included in General Liability?

The answer is yes, with an important qualification. Standard CGL policies include contractual liability coverage, but only for a defined category of contracts called insured contracts. Liability assumed in contracts that fall outside that definition is excluded entirely.

The mechanics work through a two-step structure in the policy. The contractual liability exclusion eliminates coverage for liability assumed under contract. An exception to that exclusion then restores coverage specifically for liability assumed in insured contracts. Most commercial hold harmless and indemnification clauses in construction subcontracts, leases, and vendor agreements qualify as insured contracts and are covered. Not all do, and the ones that don’t leave the indemnitor holding personal financial exposure.

The stakes behind this distinction have grown considerably. Construction’s available liability limits dropped approximately 60% over the past decade as insurers responded to rising casualty losses, and US commercial casualty losses reached $143 billion in 2023, surpassing total global insured losses from natural catastrophes that year. Coverage a contractor carried five years ago may bear little resemblance to what they carry today, which makes understanding exactly what the current policy covers more consequential than it used to be.

A contractor who signs a broad indemnification clause without confirming their policy includes contractual liability coverage for that type of agreement has signed a personal guarantee. The hold harmless clause exists. The insurance backing it may not.

The table below shows which types of assumed liability fall on each side of that line under a standard CGL policy:

What Is an Insured Contract?

An insured contract is a specific category of contract defined in the CGL policy under which liability assumed by the named insured receives coverage through the policy’s contractual liability provisions. The term appears in the policy’s definitions section and determines whether the contractual liability exclusion’s exception applies to a given agreement.

The standard ISO CGL policy identifies six types of contracts that qualify as insured contracts:

• Lease of premises: A lease agreement under which the named insured assumes liability for the leased premises, with limited exceptions for fire damage to property the insured rents or occupies.
• Sidetrack agreements: Agreements with railroads granting the insured the right to use a sidetrack on railroad property.
• Easement or license agreements: Agreements granting rights to use another party’s property, excluding construction or demolition operations within 50 feet of railroad property.
• Municipal indemnification agreements: Agreements to indemnify a municipality, except for work performed directly for that municipality.
• Elevator maintenance agreements: Agreements to maintain elevators on premises owned or used by the named insured.
• Blanket contractual liability: Any contract or agreement pertaining to the named insured’s business under which they assume the tort liability of another party.

The sixth category is the one that matters most in construction. A subcontractor hold harmless clause requiring the sub to assume the GC’s tort liability qualifies as an insured contract under the blanket contractual liability provision, the sixth and broadest category in the definition, which means the sub’s CGL policy covers that assumed liability as long as the other policy conditions are met.

There is one limitation that applies to all six categories, too. The insured contract coverage responds to assumed tort liability of the other party, meaning liability the other party would face under general law for their negligence. It doesn’t cover situations where the insured agreed to accept greater liability for their actions than general law would impose. That distinction matters in contract drafting and in claim disputes, and courts have reached different conclusions about where the line sits in specific fact patterns.

What Is Not an Insured Contract?

Several categories of contracts fall outside the insured contract definition entirely. Construction firms working across multiple trades and contract structures need to review each indemnification obligation against these exclusions before assuming their CGL policy has them covered.

Railroad Construction and Demolition

Easement or license agreements to assume liability for construction or demolition operations within 50 feet of railroad property fall outside the insured contract definition. Since railroad construction typically requires right-of-entry agreements with the railroad, this exclusion affects most contractors working near active rail infrastructure even though it applies specifically to that category of agreement rather than to every contract connected to railroad-adjacent work.

Most contractors working near active rail infrastructure don’t realize their standard GL program has a gap here until they’re trying to satisfy a railroad’s insurance requirements before work begins. Two coverages close it, and both need to be specifically requested since neither comes with the standard CGL policy:

• Railroad protective liability insurance: Covers the railroad’s own exposure from bodily injury and property damage arising from the contractor’s operations near railroad property.
• Contractual liability endorsement for railroad operations: Specifically amends the insured contract definition to include railroad-adjacent construction agreements, restoring the coverage the standard exclusion removes.

Professional Services Indemnification

Any agreement to assume liability for professional services performed by architects, engineers, or surveyors falls outside the insured contract definition. The same exclusion applies when the insured is the design professional seeking coverage for their professional indemnification obligations. Neither direction of professional services liability gets coverage through the standard CGL contractual liability provisions.

Design-build contractors and specialty subs with a professional services component hit this exclusion more often than any other trade. A design-build sub who agrees to indemnify the GC for design errors cannot rely on their CGL to back that commitment. The same sub’s GL policy may respond to bodily injury and property damage arising from their construction operations under the same contract. Two scopes of work, one contract, and two different policies are required to cover the full range of assumed liability.

The professional liability policy needs to carry its own contractual liability provisions appropriate to the professional services being performed. Professional liability also operates on a claims-made policy structure, so a design-build sub who lets that coverage lapse after project closeout loses both their professional indemnity protection and the contractual liability provisions that backed their hold harmless obligation. Confirming that before the contract is signed takes minutes, but discovering the gap after a design defect claim takes years.

Agreements Expanding Liability Beyond General Law

Any contract where the insured agrees to accept greater liability for their actions than general law would also impose falls outside the insured contract definition. The coverage backs the assumption of another party’s tort liability. It doesn’t back a promise to hold yourself to a higher standard than negligence law requires.

This category has generated the most litigation of the three, and courts have not landed in the same place. The Texas Supreme Court’s ruling in Gilbert Texas Construction held that agreeing to expand your liability beyond what general law imposes triggers the contractual liability exclusion. Most other jurisdictions take a narrower view and limit the exclusion to hold harmless and indemnification agreements for another party’s liability specifically.

A clause stating the contractor warrants workmanlike performance creates a performance duty. A clause stating the contractor assumes all liability arising from the project regardless of fault may create expanded assumed liability that sits outside standard insured contract coverage. Those two formulations look similar on a quick read. In a dispute, they produce entirely different insurance outcomes, and the difference becomes clear at exactly the wrong moment.

Contractual Liability Insurance Examples in Construction

Construction generated $2.154 trillion in work put in place across the United States in 2024, almost every dollar governed by contracts that include hold harmless and indemnification clauses flowing through every level of the project hierarchy. No other industry produces contractual liability exposure at that scale or at that depth of layering.

The four scenarios below represent the most common contractual liability relationships in commercial construction:

• GC-subcontractor hold harmless clause: The sub agrees to hold the GC harmless from claims arising from the sub’s work, including injuries to third parties and property damage caused by the sub’s operations. The sub’s contractual liability coverage pays claims made against the GC for the sub’s negligence. Without it, the sub’s GL policy denies coverage for the assumed liability, and the GC absorbs a loss the contract was supposed to transfer. Confirming that subs carry the right insurance before signing the hold harmless clause is the only way to verify the contractual transfer has actual coverage behind it.
• Owner-GC indemnification: The owner requires the GC to indemnify them for all construction-related claims, including damage to adjacent properties and injuries to visitors. The GC’s contractual liability coverage responds when adjacent property owners sue the owner and the owner passes the claim to the GC under the contract. On larger projects, owners extend this requirement through the entire subcontractor chain, meaning the GC’s indemnification obligations flow downward to every sub they hire.
• Tenant-landlord lease indemnification: A commercial tenant agrees to hold the landlord harmless for claims arising from the tenant’s operations or contractors. When the tenant’s electrical contractor causes a fire that damages neighboring units, the tenant’s contractual liability coverage pays the landlord’s exposure that the lease transferred to the tenant. The landlord’s own policy isn’t called on. The liability transfer works exactly as the contract intended.
• Sub-to-sub-sub pass-through requirements: A mechanical sub requires their pipe-fitting sub-sub to hold them harmless for claims arising from the sub-sub’s work. The sub-sub’s contractual liability coverage responds when the mechanical sub faces a claim that the sub-sub’s work caused. Each layer in the chain needs its own contractual liability coverage, or the transfer breaks down at that tier, with the layer above absorbing liability for work they didn’t perform. You need a construction COI process that verifies contractual liability coverage at every tier, because checking GL limits on the top sub’s certificate tells you nothing about what the sub-sub three layers down is actually carrying.

Each of these scenarios only works as intended if the contract language is clear and the coverage behind it has been verified. Arcadis’s 2025 research found the average US construction dispute now costs $60.1 million to resolve and that contract document errors remain the leading cause of those disputes for the third consecutive year. The indemnification clause is a contract document, and getting it wrong is how a dispute starts.

The Difference Between Assuming a Duty and Assuming a Liability

One of the most persistent misunderstandings in contractual liability involves confusing an agreement to perform a duty with an agreement to assume another party’s liability for damages. The distinction determines whether a claim gets handled under the CGL policy’s standard tort liability provisions or its contractual liability provisions and whether insurers can legitimately deny coverage by invoking the contractual liability exclusion.

Assuming a Duty

Assuming a duty means agreeing to perform an obligation that didn’t exist before the contract. A maintenance contractor who agrees to service building machinery has created a duty of performance. If they fail to service the machinery and someone gets hurt, that’s a negligence claim. The breach of duty caused the injury.

The CGL policy responds through its standard bodily injury and property damage coverage because the claim is tort-based. The contractual liability exclusion doesn’t apply. The fact that a contract created the duty doesn’t change the nature of the claim.

Assuming a Liability

Assuming a liability means something different. A hold harmless clause requiring a subcontractor to indemnify the GC for claims arising from the sub’s work doesn’t create a duty to perform. It creates an obligation to absorb the financial consequences of the GC’s legal liability to third parties. The CGL policy’s contractual liability provisions respond to this, subject to the insured contract definition.

The table below shows how the two concepts differ across the scenarios that matter most in construction:

Why This Distinction Gets Litigated

Insurers sometimes attempt to deny CGL claims by arguing that any liability connected to a contract constitutes assumed liability excluded by the contractual liability exclusion. Courts across most jurisdictions reject that argument. The contractual liability exclusion targets hold harmless and indemnification agreements specifically, not every obligation that touches a contract.

The following claim types arise in a contractual context but do not involve assumption of another party’s liability:

• Breach of contract claims: The insured failed to perform an agreed obligation. Not an assumed liability.
• Negligent performance claims: The insured performed but performed carelessly. Tort-based, not contractual assumption.
• Warranty claims: The insured’s work failed to meet a stated standard. Performance-based, not liability transfer.

Class action settlements exceeded $40 billion for the fourth consecutive year in 2025, reflecting a litigation environment where the stakes behind coverage decisions have never been higher. Whether a claim falls within the CGL policy’s contractual liability provisions or outside them determines whether the insurer absorbs that exposure or the contractor does. Getting that analysis wrong before a dispute escalates is an expensive mistake.

How to Verify Contractual Liability Coverage on a COI

A certificate of insurance (COI) that confirms general liability coverage doesn’t confirm contractual liability coverage hasn’t been excluded. The two are not the same thing, and the difference between them doesn’t show up on the face of the certificate.

Standard CGL policies include contractual liability coverage for insured contracts automatically. What removes it is an endorsement, and endorsements don’t show up on the ACORD 25 form. They live in the policy documents behind it. A GC who reviews a sub’s COI, confirms GL coverage is in place, and considers verification complete has missed the step that matters most.

The Two Endorsements That Remove Contractual Liability Coverage

Two endorsements in particular should trigger scrutiny when verifying a subcontractor’s contractual liability coverage.

CG 21 39: Contractual Liability Limitation

This endorsement eliminates coverage for the blanket contractual liability provision, the sixth and broadest category in the insured contract definition. A sub carrying this endorsement has contractual liability coverage only for the five narrower insured contract categories. Hold harmless clauses in construction subcontracts don’t fall into any of them. The sub has signed an indemnification obligation their insurer won’t honor.

The five categories that remain covered under CG 21 39 are worth knowing because they show how narrow the coverage becomes once the blanket provision is removed:

• Lease of premises: Liability assumed under a real property lease agreement.
• Sidetrack agreements: Liability assumed in agreements granting use of railroad sidetracks.
• Easement or license agreements: Liability assumed in agreements granting rights to use another party’s property.
• Municipal indemnification: Liability assumed in agreements to indemnify a municipality.
• Elevator maintenance agreements: Liability assumed in agreements to maintain elevators.

A standard construction subcontract hold harmless clause fits none of those categories. A sub who accepts a policy with CG 21 39 attached saves money on their GL premium. Their GC discovers the problem when a claim arrives and the sub’s insurer declines to cover the assumed liability.

CG 24 26: Amendment of Insured Contract Definition

This endorsement takes a different approach. Rather than eliminating the blanket contractual liability provision entirely, it limits coverage to situations where both the insured and the indemnitee share fault for the underlying incident. A sub carrying CG 24 26 provides no contractual liability protection to the GC for incidents where the sub was solely responsible.

That limitation is important because sole negligence by the sub is exactly the scenario most hold harmless clauses are designed to address. A GC who requires a sub to indemnify them for claims arising from the sub’s work expects that protection to apply when the sub causes an incident. CG 24 26 guts that expectation. The clause exists in the contract. The coverage to back it doesn’t.

Why Market Conditions Make This More Important Now

The same market pressure that has been thinning available limits over the past decade has also made insurers more aggressive about enforcing exclusions when claims arrive. A contractor who last reviewed their policy structure five years ago may be carrying materially different coverage today without realizing it. Endorsements that limit or eliminate contractual liability protection are one of the places that reduction shows up.

When premiums climb, contractors look for ways to reduce costs without visibly dropping coverage. Accepting a policy with CG 21 39 or CG 24 26 attached accomplishes that. The GL coverage line still appears on the certificate. The contractual liability protection it was supposed to include is gone.

The GC on the other end of that sub’s hold harmless agreement has no way to know any of this from the certificate alone. The gap only becomes visible when someone pulls the endorsement schedule, and most COI review processes never do. The leading COI tracking platforms flag these endorsement gaps automatically, but most entry-level solutions only check basic certificate fields without touching the endorsement schedule behind them.

How to Check

Request the endorsement schedule along with the COI and work through the following steps before approving any subcontractor whose contract includes a hold harmless or indemnification clause:

• Confirm the policy includes the blanket contractual liability provision: Look for the absence of CG 21 39 on the endorsement schedule. If it’s there, the sub’s contractual liability coverage has been stripped down to five narrow categories that don’t include construction subcontract hold harmless clauses.
• Check whether CG 24 26 has been attached: If it has, the sub’s contractual liability coverage only responds when fault is shared. That means you have no protection for incidents where the sub was solely responsible, which is exactly the scenario you required the hold harmless clause to address.
• Verify the endorsement schedule matches what the certificate implies: A certificate that references additional insured status, waiver of subrogation, and contractual liability coverage means nothing if the underlying endorsement schedule tells a different story. The certificate is a summary. The policy is what the insurer honors.
• Follow up directly with the broker if anything is unclear: Don’t rely on the sub to interpret their own endorsements. Call the broker, identify the specific endorsements you’re reviewing, and get written confirmation of what the policy covers and what it doesn’t.
• Document what you received and when: If a claim surfaces later and coverage is disputed, your records showing when you received the endorsement schedule and what it contained matter. A sub who resists providing their endorsement schedule is worth scrutinizing further before you approve them for work. This endorsement review fits naturally into the subcontractor prequalification process, where GCs evaluate financial stability, safety performance, and insurance compliance together before approving a sub for their roster.

CertFocus by Vertikal RMS handles this process across your entire subcontractor roster rather than one certificate at a time. Our own data shows 7 out of 10 COIs your vendors submit are out of compliance in at least one area. Contractual liability exclusions and limiting endorsements are among the hardest of those failures to catch without real insurance expertise behind the review.

What to Do When an Insurer Denies a Contractual Liability Claim

Insurers deny contractual liability claims more often than they should, and the denial isn’t always legitimate. The most common basis for denial is the argument that the liability at issue was assumed under contract and therefore excluded by the contractual liability exclusion. As the article has already covered, that argument fails in most jurisdictions when the claim is actually tort-based rather than a genuine assumption of another party’s liability.

When your insurer or a sub’s insurer denies a claim on contractual liability grounds, work through the following steps before accepting the denial as final:

• Get the denial in writing with the specific policy language cited: A verbal denial or a vague reference to “contractual liability exclusion” isn’t sufficient. You need the exact policy language the insurer is relying on and their specific argument for why it applies to your claim. Without that, you can’t evaluate whether the denial is legitimate or challenge it effectively.
• Determine whether the claim is actually tort-based: If the underlying incident involved bodily injury or property damage caused by negligence, the claim may be a tort claim that the contractual liability exclusion doesn’t reach. The exclusion targets hold harmless and indemnification obligations specifically. It doesn’t eliminate coverage for negligence claims just because a contract exists between the parties.
• Review the endorsement schedule for limiting endorsements: If CG 21 39 or CG 24 26 appears on the policy, the denial may be legitimate for that specific coverage limitation. If neither endorsement is present, the insurer is relying on the base policy exclusion, and the exception for insured contracts should restore coverage for most commercial construction hold harmless clauses.
• Engage coverage counsel before accepting the denial: Insurance coverage disputes involving contractual liability exclusions are fact-specific and jurisdiction-dependent. An attorney with commercial insurance coverage experience can evaluate whether the insurer’s position holds up under your state’s case law and advise on whether a reservation of rights letter or coverage lawsuit is warranted.
• Document the timeline and all communications: Insurers have duties to defend and indemnify under specific timelines. Delays in responding to a tender, failure to issue a reservation of rights letter, or unreasonable denial positions can create bad faith exposure for the insurer. Keep records of every communication, every deadline, and every representation the insurer makes about the claim.

Most wrongful denials on contractual liability grounds don’t get challenged because the contractor assumes the insurer is right. Courts across most jurisdictions have repeatedly held that the contractual liability exclusion doesn’t apply to tort-based negligence claims simply because the parties had a contract. If your claim fits that description, the denial is worth pushing back on.

How Contractual Liability Coverage and Additional Insured Requirements Work Together

Contractual liability coverage and additional insured endorsements are frequently required together in the same subcontract, and they’re frequently confused with each other. They protect against different failure modes, and having one without the other leaves a considerable gap.

Contractual liability coverage protects the indemnitor. When a sub signs a hold harmless clause agreeing to absorb the GC’s liability for claims arising from the sub’s work, the sub’s contractual liability coverage is what pays those claims. The coverage sits on the sub’s policy and responds when the sub’s assumed obligation is triggered.

An additional insured endorsement protects the indemnitee directly. When a GC is named as an additional insured on the sub’s policy, the sub’s insurer has a direct obligation to defend and indemnify the GC for covered claims arising from the sub’s work. The GC doesn’t have to wait for the sub to honor their contractual indemnification obligation. They can go straight to the sub’s insurer.

The two mechanisms work together as a system. The table below shows what happens when one is missing:

When the Sub Has an Additional Insured Endorsement but No Contractual Liability Coverage

This is the gap most GCs don’t see coming. A sub adds the GC as an additional insured, the certificate reflects that status, and the GC assumes they’re fully protected. When a claim arrives and the GC tenders it to the sub’s insurer, the insurer defends the GC for standard bodily injury and property damage claims arising from the sub’s operations. That coverage works.

Where it breaks down is on claims that require the sub to honor their indemnification commitment beyond what the additional insured endorsement covers. A concrete example makes this clearer. If a hold harmless clause requires the sub to indemnify the GC for the GC’s own partial negligence in supervision, and the additional insured endorsement only covers claims arising from the sub’s acts or omissions, the gap appears.

The additional insured endorsement doesn’t respond because the claim involves the GC’s conduct. The hold harmless clause does require the sub to indemnify, but without contractual liability coverage on the sub’s policy, the sub’s insurer won’t pay. The GC is left pursuing the sub directly under the contract rather than deferring to the insurer.

When the Sub Has Contractual Liability Coverage but No Additional Insured Endorsement

This scenario is less common but equally problematic. The sub’s contractual liability coverage will respond to covered assumed liability claims, but the GC has no direct relationship with the sub’s insurer.

When a claim comes up, the GC depends entirely on the sub to tender it to their insurer and carry the claim through to resolution. If the sub becomes insolvent, disputes the claim, or simply moves too slowly, the GC has no direct recourse to the insurer. The contractual liability coverage exists. Getting to it requires going through the sub rather than directly to the insurer.

What to Require in Your Contracts

Your subcontracts should require all the following, verified together and not treated as separate checklist items:

• Contractual liability coverage: Confirmed present on the endorsement schedule with no CG 21 39 or CG 24 26 limiting the scope.
• Additional insured status for ongoing operations: CG 20 10 endorsement naming your company, covering the period while the sub is actively working on your project.
• Additional insured status for completed operations: CG 20 37 endorsement extending coverage after the sub finishes their scope and leaves the job site.
• Primary and non-contributory language: Confirms the sub’s policy responds first before your coverage is called on.
• Waiver of subrogation: Prevents the sub’s insurer from pursuing you after paying a claim arising from the sub’s work.

CertFocus by Vertikal RMS checks all five requirements on every incoming certificate, with Hawk-I AI flagging deficiencies and credentialed insurance professionals reviewing the coverage questions automated systems miss.

What Does Contractual Liability Insurance Cost?

For most contractors, contractual liability coverage doesn’t carry a separate line item on their GL premium. It’s built into the standard CGL policy as part of the insured contract provisions, which means you’re already paying for it as part of your general liability coverage without seeing it broken out on your invoice.

The cost question becomes more important when you look at what removing it saves. A policy endorsed with CG 21 39 costs less than a standard CGL policy because the insurer is accepting less risk. That premium reduction is real, but so is what gets removed. Contractors who accept policies with contractual liability limiting endorsements attached are effectively trading coverage for cost savings without always understanding what they’ve given up.

What Affects the Cost of Contractual Liability Coverage

Several factors influence how much of your overall GL premium is attributable to contractual liability exposure:

• Volume and scope of indemnification agreements: A GC managing dozens of subcontracts with broad hold harmless clauses carries more contractual liability exposure than a specialty sub who signs one or two contracts per year. More exposure means higher premium allocation to that coverage component.
• Trade and risk profile: High-hazard trades carry higher GL premiums across the board, and contractual liability exposure grows with that underlying risk. A roofing contractor’s assumed liability exposure is priced differently than an office services vendor’s.
• Breadth of indemnification language: Broad-form hold harmless clauses create more exposure than intermediate or limited-form agreements. Insurers price that difference into the policy.
• Claims history: Prior contractual liability claims affect renewal pricing. A contractor with a history of indemnification claims pays more to maintain the coverage than one with a clean record.

What You’re Actually Paying For

The more useful way to think about contractual liability coverage cost is what it replaces rather than what it adds to your premium. A contractor who signs a hold harmless clause without contractual liability coverage on their policy has accepted a personal financial obligation. If a covered claim arises and their insurer declines it, the contractor pays out of pocket. The premium difference between a policy with and without CG 21 39 is typically modest. The exposure difference is not.

How Umbrella and Excess Policies Interact With Contractual Liability Coverage

A large indemnification claim can exhaust GL limits quickly. Construction defect claims, multi-party bodily injury claims, and property damage claims from a single incident regularly exceed the standard $1 million per occurrence GL limit. Whether your umbrella or excess policy picks up the exposure above that limit depends on whether those policies follow form on contractual liability.

Most commercial umbrella policies are written on a follow-form basis, meaning they extend coverage consistent with the underlying GL policy for most coverage lines. Contractual liability is one area where follow-form treatment isn’t guaranteed. Some umbrella policies include their own contractual liability exclusions or limitations that are more restrictive than the underlying GL policy. A contractor who assumes their umbrella automatically picks up excess contractual liability exposure may discover otherwise when a large indemnification claim arrives.

What to Check on Your Umbrella Policy

Before signing a broad indemnification clause on a large commercial project, verify the following on your umbrella or excess policy:

• Whether the umbrella follows form on contractual liability: Look for language confirming the umbrella covers liability assumed in insured contracts consistent with the underlying GL definition. If the umbrella contains its own contractual liability exclusion, your coverage effectively caps at your GL per occurrence limit for indemnification claims regardless of how high your umbrella limits sit.
• Whether the umbrella carries its limiting endorsements: The same endorsements that gut contractual liability coverage on a GL policy, CG 21 39 and CG 24 26 equivalents, can appear on umbrella policies as well. A clean GL policy with full contractual liability coverage doesn’t guarantee the umbrella sitting above it provides the same.
• Whether the retained limit applies to contractual liability claims: Some umbrella policies require the insured to exhaust the underlying GL limits before the umbrella responds. Others impose a self-insured retention on claim types the GL policy excludes. If your GL excludes a particular contractual liability claim and the umbrella picks it up, you may face a retention before umbrella coverage kicks in.

Why This Matters More on Large Projects

Standard GL limits of $1 million per occurrence are adequate for many routine subcontractor relationships. On large commercial projects, infrastructure work, or multi-year construction programs, the indemnification obligations a GC or sub assumes can expose them to claims that dwarf those limits. An owner who requires a GC to indemnify them for all construction-related claims on a $200 million project is creating potential exposure that no $1 million GL limit was designed to absorb alone.

Getting umbrella follow-form confirmation in writing from your broker before signing large indemnification obligations takes one conversation. Discovering the umbrella doesn’t follow form after a claim exceeds your GL limits takes considerably longer and costs considerably more.

How Contractual Liability Applies to Completed Operations

A subcontractor’s indemnification obligation doesn’t end when they finish their scope and leave the job site. If a hold harmless clause requires the sub to indemnify the GC for claims arising from the sub’s work, that obligation extends to completed operations claims that come up months or years after project completion. The contractual liability coverage backing that obligation needs to stay in place for the same period.

The way most GL policies work creates a practical problem here. Contractual liability coverage is part of the CGL policy’s products-completed operations hazard coverage, which means it follows the policy period. A sub who cancels their GL policy after finishing a project loses their contractual liability coverage for that project at the same moment they lose their completed operations coverage generally. The indemnification obligation in the contract continues. The insurance backing it doesn’t.

What This Means for GCs Requiring Indemnification

If your subcontracts require subs to indemnify you for claims arising from their work, that requirement is only as good as the sub’s active coverage. A roofing sub who finishes their scope, cancels their GL policy six months later, and then faces a claim two years after project completion when the roof fails has no contractual liability to honor their indemnification commitment. Your hold harmless clause exists in the contract. The coverage that would have paid it lapsed when the sub’s policy did.

This is why construction subcontracts on commercial projects routinely require subs to maintain GL coverage, including completed operations and contractual liability coverage, for a specified period after project completion. That period typically runs concurrent with the state’s statute of repose, commonly six to ten years depending on the jurisdiction.

What to Include in Your Subcontract Language

Your contracts should address completed operations and contractual liability continuity together rather than treating them as separate requirements:

• Minimum coverage duration: Specify how many years after final completion the sub must maintain active GL coverage, including contractual liability and completed operations. Tie this to your state’s statute of repose rather than picking an arbitrary number.
• Annual certificate requirements: Require the sub to provide updated certificates annually throughout the required coverage period, not just at project inception. A sub who lets their policy lapse two years after completion won’t volunteer that information.
• Endorsement continuity: Require that the same endorsements present at project inception remain on the policy throughout the coverage period. A sub who renews with a CG 21 39 attached three years after project completion has effectively eliminated the contractual liability coverage your contract required them to maintain.
• Notification requirements: Require the sub to notify you within a specified number of days if their policy is cancelled, non-renewed, or materially modified during the required coverage period.

CertFocus by Vertikal RMS tracks policy expiration dates and sends renewal requests to subcontractors before coverage lapses, so you’re not relying on subs to self-report when their policies come up for renewal. When a sub’s completed operations coverage or contractual liability coverage drops off during the required maintenance period, your team knows before the gap becomes a problem.

Contractual Liability Coverage Is What Makes the Contract Hold Up

Hold harmless agreements and indemnification clauses only work when the coverage behind them has been verified. The contract transfers liability on paper. Contractual liability coverage is what actually pays when a claim arrives.

Most COI review processes stop at confirming GL coverage exists. They don’t pull the endorsement schedule. They don’t check for CG 21 39 or CG 24 26. They don’t verify whether the umbrella follows form or whether completed operations coverage is still active three years after a sub left the job site.

Those are precisely the places where contractual liability coverage disappears without anyone noticing until a claim arrives.

CertFocus by Vertikal RMS catches what standard COI reviews miss. Hawk-I AI processes incoming certificate documentation automatically. Credentialed insurance professionals review the complex coverage questions automated systems can’t resolve. Policy renewals get tracked across your entire subcontractor roster so coverage doesn’t quietly lapse during the required maintenance period.

If your current process stops at the certificate, it’s worth seeing how a complete review changes the picture.