How to Track Subcontractor Certificates of Insurance

A subcontractor's insurance protects you in two directions. If their crew damages property or injures someone, their policy responds first — instead of yours. And if you are named as an additional insured on their policy, their insurer may owe you a defense when a claim names your company alongside theirs.

When a certificate lapses and nobody notices, both protections quietly disappear. The exposure usually surfaces at one of three moments:

• A claim. An uninsured sub's incident lands on your policy, or on you directly.
• An insurance audit. Your carrier reviews payments to subcontractors. Payments to subs without evidence of their own coverage are typically reclassified, and you are charged premium as though those workers were yours.
• An owner or GC audit. The party above you asks for proof you were tracking your subs. "We had a spreadsheet" is not a satisfying answer.

None of these are exotic. They are the ordinary consequences of a certificate expiring on a Tuesday when everyone was busy.

Before you can check a certificate, you need something to check it against. Write your requirements down once and apply them to every sub, rather than deciding case by case.

A typical set for a small general contractor:

Then the requirements that are not limits, and that cause most of the trouble:

• Additional insured status for your company (and often the property owner)
• Waiver of subrogation in your favor
• Primary and non-contributory wording

Whether you require these — and from whom — should follow your contracts, and is worth one conversation with your own insurance agent. Requirements that appear in your subcontract but never in your certificate review are requirements in name only.

A note on higher-risk trades. Roofing, excavation, demolition, and anything involving heights or heavy equipment often warrant higher limits than your baseline. Setting one template for most subs and a second for high-risk trades is usually enough structure.

Most subcontractors do not produce certificates themselves. They forward your request to their insurance agent, who issues it. This means the fastest path is often to ask the sub for their agent's contact information up front, and to copy the agent on the request.

Give the sub the exact requirements from Step 1 in writing. A request that says "send me your insurance" produces a certificate that meets nobody's requirements. A request that specifies limits, additional insured wording, and who should be named produces one that usually does.

Collect the W-9 at the same time. You need it before you pay them, and asking twice is twice the chasing.

This is the step that gets skipped. A certificate arriving is not the same as a certificate being acceptable. Check:

1. The named insured matches the company you contracted with. Subsidiaries, DBAs, and similar-sounding entity names are a common mismatch.
2. Every required coverage is present. Missing lines are easy to overlook on a form this dense.
3. The limits meet your requirements. Read both the per-occurrence and the aggregate.
4. The policy dates are current and cover the period the sub will be on site.
5. Additional insured and waiver of subrogation are actually granted — not merely mentioned. This is where most certificates fail, and it is subtle enough that we wrote a separate guide on it.
6. Your company is listed correctly, spelled the way it appears in the contract.

If something is wrong, go back to the agent rather than the sub. The agent can reissue a corrected certificate quickly; the sub can only forward your complaint.

For Washington subcontractors, check the state contractor registration at the same time with our free Washington contractor license lookup — an expired or suspended registration is worth resolving before the work starts.

Every policy on a certificate has its own expiration date, and they rarely align. A certificate with general liability expiring in March and auto expiring in August needs attention twice.

The practical rule: track the earliest expiration date on each certificate, and request a renewal roughly 30 days before it. Thirty days is enough time for the sub to reach their agent, the agent to issue, and you to review — with room for one round of corrections.

Waiting until the expiration date means working with a sub whose coverage has already lapsed while you sort it out.

Keep the certificate documents themselves, and keep a record of the process: when you requested, when you followed up, when it arrived, and what you verified. If an auditor or insurer ever asks whether you were managing this, the trail is the answer.

This is also the part that saves you when a dispute is about what happened rather than what a document said.

A spreadsheet is the honest starting point and works for a handful of subs. Columns for sub name, agent contact, coverage types, limits, each expiration date, and status. The failure mode is not the spreadsheet — it is that nothing in it reminds you, so it stays current only as long as someone remembers to update it.

Calendar reminders patch the reminder problem and add their own: reminders fire whether or not the underlying work happened, and they get dismissed.

Dedicated software automates the request-and-remind loop and the expiration tracking. It is worth the cost at the point where the chasing itself has become the job — usually somewhere north of ten to fifteen active subs, though it depends more on turnover than headcount.

Whatever you choose, the process above is the same. The tool only decides how much of it you do by hand.

• Filing a certificate without reading it. A certificate on file that does not meet your requirements provides documentation, not protection.
• Tracking only the general liability date. Workers' compensation lapsing is often the more expensive miss.
• Accepting "it's in the policy." If it is not evidenced, you cannot demonstrate it later.
• Letting a sub start work while the certificate is "coming." The gap between mobilization and paperwork is exactly when incidents are least covered.
• Never re-verifying. Policies get cancelled mid-term. An annual certificate is a snapshot, not a guarantee.