If you have ever hired a contractor, signed a commercial lease, worked with a general contractor as a subcontractor, or done business with a company that has any kind of vendor requirements, someone has asked you for a certificate of insurance. Most business owners produce them without giving much thought to what the document actually means or what it does not mean. That is a mistake, because a certificate of insurance has specific uses and specific limitations, and misunderstanding either one creates real exposure.
A certificate of insurance, often called a COI, is a summary document that provides evidence of your insurance coverage at a given moment in time. It is not your policy. It does not grant coverage rights. It is essentially a snapshot that tells whoever is receiving it what type of coverage you carry, who your insurer is, what the limits are, and when the policies expire. Nothing more and nothing less.
The reason certificates matter so much in business relationships is that they serve a risk management function for the person requesting them. Before a property owner lets a contractor work on their building, they want to know the contractor has liability coverage so that if something goes wrong, the contractor’s insurer, not the building owner, is first in line to pay. Before a staffing company places employees at a client’s location, the client wants confirmation that the staffing company carries workers’ compensation. Before you sign a vendor agreement with a large corporation, their procurement department wants proof that you are adequately insured. The COI is how you provide that proof quickly and in a standardized format.
What Appears on a Certificate of Insurance
The most common COI format is the ACORD 25, which is used for liability insurance. There is also the ACORD 28, which applies specifically to commercial property and is used when landlords or lenders need evidence of property coverage. ACORD stands for Association for Cooperative Operations Research and Development, which is the nonprofit standards organization that created these forms. The forms are widely recognized across the industry and accepted by virtually every party that requests certificates.
On an ACORD 25, you will find the name and contact information of the producing agent or broker, the name and contact information of the insurer for each listed policy, and the name of the insured, which is the policyholder. The certificate lists each type of coverage, the policy number, the policy effective date, the policy expiration date, and the key limits for each coverage type. For general liability, this typically shows the each occurrence limit, the general aggregate, the products and completed operations aggregate, the personal and advertising injury limit, and the damage to rented premises limit. For commercial auto, it shows combined single limit. For umbrella or excess liability, it shows the aggregate and per-occurrence limits. Workers’ compensation certificates show the per accident, disease per employee, and disease policy limit.
The certificate also has a section for additional insured endorsements and a section for certificate holders. There is a description of operations box where specific information about the project, contract, or relationship can be noted, such as a job address, a project name, or a contract reference number. Finally, there is a cancellation notice provision, which typically states that the insurer will endeavor to provide thirty days written notice of cancellation to the certificate holder, though the legal enforceability of that notice has limitations that are worth understanding.
Who Issues a Certificate of Insurance
Your broker issues your certificate of insurance on your behalf. This is one of the routine administrative functions that brokers handle, and in most cases it happens quickly. You or someone on your team contacts the broker, provides the details of who is requesting the certificate and whether any special endorsements are needed, and the broker produces the document, typically within a business day or sometimes within hours depending on the relationship and volume of activity.
You can also request certificates through an insurer’s online portal if you are working directly with a carrier rather than through a broker. Some larger insurers have self-service portals that let policyholders generate standard COIs on demand. The limitation of those systems is that they do not handle non-standard requests, like certificates with specific additional insured language or endorsements that need to be verified against the policy, as smoothly as a broker who can review the actual policy and make sure the certificate reflects reality.
Certificates are supposed to be accurate representations of the underlying policy. The producer who signs the certificate is attesting that the information on it is accurate to the best of their knowledge. Issuing a certificate that overstates coverage limits, lists coverages that do not exist on the policy, or shows a policy as active when it has lapsed is insurance fraud, regardless of whether it is intentional or the result of sloppy record keeping. If you receive a certificate from a subcontractor or vendor and you have reason to doubt its accuracy, you have the right to request the actual policy declarations pages for verification.
Additional Insured vs. Certificate Holder: A Critical Distinction
This is the area where more confusion and more conflict arises around certificates of insurance than any other. The certificate holder and the additional insured are two completely different things, and conflating them is a costly mistake.
A certificate holder is simply the party who receives the certificate. Being listed as a certificate holder gives you evidence that coverage exists. It does not give you any rights under the policy. You are not a party to the insurance contract. You cannot file a claim under the policy. You are not protected if the policyholder injures you. Being a certificate holder is purely administrative. It means you know about the coverage, nothing more.
An additional insured is a different matter entirely. When a party is added as an additional insured through an endorsement to the underlying policy, they acquire actual coverage rights under that policy. If the policyholder’s operations cause damage or injury that results in a claim against the additional insured, the policy responds on behalf of the additional insured up to the applicable limits. This is the protection that landlords, general contractors, clients, and franchisors are actually seeking when they ask to be added to your policy.
The confusion arises because many requestors ask to be named as additional insured but are only listed as certificate holders on the ACORD 25. The certificate can note that the party is an additional insured in the description of operations box, but that notation on the certificate does not itself create additional insured status. The endorsement must be on file with the insurer and attached to the actual policy. The certificate reflects existing policy terms. It does not create them. If a client asks to be added as an additional insured on your general liability policy, the right process is for your broker to file an additional insured endorsement with the insurer, and then the certificate should be issued reflecting that endorsed coverage.
What a Certificate Does Not Prove
A certificate of insurance is a point-in-time document. It shows that coverage existed as of the date it was issued. It does not guarantee that coverage exists at the moment you are reading it, particularly if time has passed since the certificate was produced. Policies can cancel for non-payment of premium. Policies can be rescinded if the underwriter discovers misrepresentation in the application. The mere existence of a certificate from six months ago does not mean the policy is still in force today.
This is why the cancellation notice provision matters. Certificates typically state that the insurer will endeavor to provide a certain number of days of notice, commonly thirty, if the policy is cancelled. But that language is carefully worded. Endeavor does not mean guarantee. Courts have examined this language extensively, and the notice provision in a certificate does not generally create a binding obligation that the insurer will be held to if notice is not actually sent. If you need protection against policy cancellation, the right approach is to require in your contract that the insured add you as an additional insured with a thirty-day cancellation notice endorsement on the policy itself, not just a notation on the certificate.
A certificate also does not tell you the full scope of coverage. It shows the basic policy types and headline limits, but it does not reveal exclusions, sublimits, endorsements that restrict coverage, claims-made versus occurrence triggers, retroactive dates, or deductibles. A policy with a $1 million general liability limit might have a significant exclusion that effectively eliminates coverage for the type of work you care about. The certificate will show $1 million and you will feel comfortable, and the exclusion will only surface when a claim arises. For high-stakes contractor relationships or large projects, requesting actual policy declarations and endorsement schedules is appropriate.
Requesting COIs from Subcontractors and Vendors
If you hire subcontractors, you should be collecting certificates of insurance from them before they start work. The reason is straightforward. If your subcontractor’s employee is injured on your job site, or if the subcontractor’s negligence causes property damage or injury to a third party, you may face liability exposure as the general contractor or project manager. Your own general liability policy may cover some of that, but then you face a claim on your own policy with all the attendant premium impact. If the subcontractor has their own coverage, that policy is first in line to pay.
When you collect certificates from subs, verify that the limits meet your minimum requirements. Many general contractors and property owners establish minimum insurance requirements in their contracts, such as $1 million per occurrence general liability and $1 million commercial auto. If a sub provides a certificate showing $500,000 limits when your contract required $1 million, they are in breach of the subcontract regardless of what their policy actually says.
You should also verify that you are listed as an additional insured on the subcontractor’s general liability policy if your contract requires it. Look at the description of operations on the ACORD 25 for a notation, but as discussed above, confirm with the subcontractor’s broker that the additional insured endorsement is actually on file. For ongoing subcontractor relationships, track certificate expiration dates and re-request updated certificates before the existing ones expire. Many project management systems and contractor management platforms have built-in certificate tracking functionality for exactly this purpose.
How to Read a COI Efficiently
When you receive a certificate, the first things to check are the policy expiration dates. If any policy expires before your project is complete or before your contract period ends, you need to ask for an updated certificate before the expiration date. The second thing to check is the coverage types and limits. Make sure every coverage type your contract requires is present and that the limits meet your minimums. Third, check the named insured section. The entity listed there should match the entity you are contracting with. If your contract is with ABC Plumbing LLC but the certificate shows coverage for ABC Plumbing Inc., that is a mismatch that needs to be resolved before work begins.
Check the additional insured section if you have requested that status. Look for your entity name in the description of operations box. If it is not there, contact the sub’s broker and ask for a corrected certificate that reflects the additional insured endorsement. Fourth, note the insurer’s name and verify that it is a recognized, admitted carrier in your state. A certificate from an insurer you have never heard of, or one that is non-admitted, warrants a follow-up question about financial strength and licensing.
Finally, note any project-specific language in the description of operations. If your contract specifies that the sub’s policy must include certain language, such as a reference to your project name, your contract number, or a specific additional insured form number like CG 20 10 or CG 20 37, verify that language appears on the certificate. Sophisticated buyers of subcontractor services track these details because they matter in coverage disputes. The groundwork you lay through diligent certificate review is what determines whether your risk transfer to the subcontractor actually holds up when a claim is filed.