Home / Resources / COI Tracking Guide
Cornerstone guide

Certificate of Insurance tracking: the complete guide

Every subcontractor and vendor you hire brings their own insurance — and their own risk. Here’s how to make sure that coverage is real, current, and enough, without drowning in paperwork.

What is COI tracking?

COI tracking is the ongoing process of collecting, verifying, and monitoring the Certificates of Insurance your subcontractors and vendors provide. A Certificate of Insurance — nearly always the standardized ACORD 25 form — is a one-page snapshot issued by a vendor’s insurance agent that proves what coverage they carry, how much, and through what date.

Collecting one certificate is easy. The “tracking” part is the hard, never-ending job: making sure every active vendor has a valid certificate on file, that the limits still meet your requirements, that you’re named correctly, and — critically — that you catch each one before it expires and re-collect a new one. Do that across dozens of vendors renewing on dozens of different dates, and you understand why so many companies let it slip.

Why COI tracking matters

The reason is simple and expensive: an uninsured vendor’s liability becomes your liability. When you hire a subcontractor, you take on the risk that their work causes injury or property damage. Their insurance is the thing that pays for that — but only if it’s in force at the moment something goes wrong.

Picture a roofer whose general liability policy lapsed three weeks ago. On your job, their torch starts a fire. The building owner’s claim doesn’t evaporate because the roofer was uninsured — it looks for the next covered party in line, which is you. Now your general liability policy absorbs a loss it never priced for, your loss history takes the hit, and your premiums climb for years. In construction, that same dynamic drives up your experience modification rate (EMR) and can price you out of bids that require an EMR under 1.0.

It runs in both directions, too. Your own insurer, your lenders, and your clients all expect you to prove that everyone working below you is insured. A missing or expired certificate can hold up a lender draw, fail an insurance audit, or stall a project. COI tracking is how you stay continuously audit-ready instead of scrambling when someone asks.

The manual spreadsheet problem

Most companies start — and get stuck — with a spreadsheet. There’s a tab of vendors, a column for “COI on file,” and a column for the expiration date. It works for about ten vendors. Then reality sets in:

The result is a document that looks like a control but isn’t one. The certificates on file are a snapshot of the day they were collected, not the coverage that exists today.

What to track on every certificate

Verifying a COI means checking specific fields — not just confirming a PDF exists. On every certificate, these are the things that matter:

GL limitsGeneral Liability, usually expressed as per-occurrence and aggregate (e.g. $1M / $2M). Confirm it meets the minimum your contract requires, and that products-completed operations is included where relevant.
Auto liabilityCommonly a $1M combined single limit for any vendor driving to or hauling on your site. Check that owned, hired, and non-owned autos are covered.
Workers’ compStatutory workers’ compensation plus Employer’s Liability. This is the coverage that keeps an injured worker’s claim off your policy — the most-audited line on any jobsite.
Additional insuredConfirm you (and the owner, where required) are actually named as additional insured via endorsement — not merely listed as certificate holder. This is what extends the vendor’s coverage to you.
Waiver of subrogationA waiver on the GL and WC policies stops the vendor’s insurer from paying a claim and then suing you to recover it.
Expiration datesEach policy line has its own effective and expiration date. Track the earliest one per vendor and re-collect before it passes.
Certificate holderYour correct legal entity and address. If the holder is wrong, the certificate may not actually document coverage for the right party or project.

Additional insured vs. certificate holder is the trap most people fall into. Being the certificate holder means the certificate was sent to you — nothing more. Only an additional insured endorsement actually gives you coverage under the vendor’s policy. Always verify the endorsement, ideally by requesting the CG 20 10 / CG 20 37 forms, not just the certificate.

How software and AI help

COI tracking software exists to turn that manual, error-prone process into a system that runs itself. The best modern tools do four things a spreadsheet never could:

That’s exactly the loop CoverGuard is built to run: AI reads the ACORD 25, checks it against your requirements, flags anyone under-covered, and automatically chases the renewal before coverage lapses. It’s designed for the SMB general contractors and property managers who are stuck on spreadsheets — not enterprise risk departments. See how it stacks up against the other COI tracking tools, or read the step-by-step guide to tracking subcontractor COIs.

Frequently asked questions

What is a Certificate of Insurance (COI)?
A Certificate of Insurance is a one-page summary — almost always the ACORD 25 form — issued by an insurance agent or broker that proves a business carries specific coverage. It lists the insurer, policy numbers, coverage types, limits, and effective and expiration dates. It is evidence of insurance, not the policy itself.
Why do I need to track my vendors’ COIs?
Because an uninsured or under-covered vendor’s claim can flow up to you. If a subcontractor’s general liability lapsed before an accident, your policy — and your loss history and premiums — can absorb the claim. Tracking certificates and their expiration dates is how you keep that exposure off your books and stay audit-ready for your own insurer, lenders, and clients.
How often do Certificates of Insurance expire?
Most commercial policies renew annually, so each certificate typically has a 12-month life. But vendors renew on different dates, mid-term cancellations happen, and a certificate can be issued for a shorter term. That’s why tracking expiration dates per vendor — not once a year — matters.
What’s the difference between additional insured and certificate holder?
The certificate holder is simply the party the certificate was sent to — being listed there gives you no coverage. Additional insured is an actual endorsement to the vendor’s policy that extends their liability coverage to you. To be protected, you need to be named additional insured, not just certificate holder.
Can software track Certificates of Insurance automatically?
Yes. Modern COI tracking software uses AI to read the ACORD 25, extract the carriers, limits, and dates, compare them against your requirements, and automatically request a fresh certificate before the current one expires — replacing the manual spreadsheet-and-email process.

Let AI run your COI tracking.

CoverGuard reads every certificate, flags anyone under-covered, and chases renewals before they lapse. Join early access — free COI audit at launch.

Get early access →