COI Compliance Checklist: Everything Subcontractor Managers Need to Know
Managing subcontractor certificates of insurance is one of the most consequential risk management tasks in construction. A single lapsed policy or missing endorsement can leave a general contractor exposed to millions of dollars in uninsured liability. This complete COI compliance checklist walks you through every verification step, common pitfalls to avoid, and the systems that leading construction companies use to stay protected on every project.
According to industry data, construction accounts for roughly 20% of all workplace fatalities in the United States each year, and disputes over insurance coverage are among the most common causes of construction litigation. When a subcontractor's certificate of insurance is outdated, incomplete, or fraudulent, the ripple effects can include denied claims, contract disputes, OSHA investigations, and reputational damage that takes years to recover from.
Whether you manage five subcontractors or five hundred, a standardized COI compliance checklist is the backbone of your risk management program. This guide breaks the checklist into actionable phases so you can implement it immediately, regardless of the size of your operation.
For a broader overview of how COI requirements fit into your overall program, review our guide on construction insurance compliance before diving into the line-item details below.
Phase 1: Pre-Qualification COI Requirements
Compliance starts before a subcontractor ever sets foot on your job site. The pre-qualification phase is where you define your minimum insurance standards and collect baseline documentation. Failing to establish this phase is the most common reason contractors find themselves with non-compliant subs on active projects.
Pre-Qualification Checklist Items
- Define project-specific minimum limits — General liability limits of $1M per occurrence and $2M aggregate are a common industry baseline, but larger commercial or federal projects routinely require $5M or more. Confirm limits with your contract before setting subcontractor requirements.
- Specify required coverage types — At minimum, require commercial general liability (CGL), workers' compensation, employer's liability, and commercial auto. Depending on scope, you may also require professional liability (E&O), pollution liability, or contractor's professional and pollution liability (CPPL).
- Require a minimum AM Best insurer rating — Most contracts specify A-VII or better. Subcontractors insured through non-admitted or low-rated carriers represent a real risk that a claim goes unpaid.
- Obtain the certificate before contract execution — Never sign a subcontract without a current, compliant COI in hand. This creates a contractual record that compliance was a precondition of the engagement.
- Verify the certificate is issued directly by the broker or insurer — Certificates submitted by the subcontractor themselves, especially PDFs with no identifying broker information, should be treated with heightened scrutiny. Fraudulent COIs are a growing problem in the construction industry.
For a detailed breakdown of what belongs on every certificate, see our resource on certificate of insurance requirements for construction projects.
Phase 2: Certificate Verification Checklist
Receiving a COI is only half the task. Verification is where most compliance programs break down, especially when teams rely on visual scanning rather than a structured review process. Each line item on the ACORD 25 form needs deliberate attention.
What to Verify on Every ACORD 25 Certificate
- Named insured matches the subcontractor entity — The legal name on the certificate must exactly match the entity named in your subcontract. A certificate naming "ABC Plumbing LLC" provides no coverage for work performed by "ABC Plumbing Inc."
- Policy numbers are complete and current — Cross-reference policy numbers with the insurer or broker when in doubt. Do not accept certificates with "applied for" in the policy number field for active projects.
- Effective and expiration dates cover the full project period — If a project spans a policy renewal period, require the subcontractor to provide an updated certificate before the existing policy expires. Build 30-day advance notice into your subcontract language.
- Your company is listed as an additional insured — This is non-negotiable. The additional insured endorsement extends the subcontractor's liability coverage to protect your company for claims arising from their work. Confirm this is reflected both on the certificate and in the actual endorsement, not just in the description of operations box.
- Waiver of subrogation is endorsed where required — Many prime contracts require a waiver of subrogation, which prevents the insurer from suing your company after paying a claim. Confirm this endorsement is in place before work begins.
- Workers' compensation coverage is active in the correct state — Workers' comp is state-specific. If your subcontractor is based in one state but performing work in another, verify the policy includes a "Other States" endorsement or a separate policy covering the project state.
- Umbrella or excess policy sits correctly over underlying limits — When umbrella coverage is required, confirm it follows form over the CGL, auto, and employer's liability policies, and that the combined limits satisfy your contract requirements.
This verification process ties directly into your broader subcontractor insurance verification program and should be performed consistently across every trade partner, regardless of relationship history.
Phase 3: Ongoing Monitoring and Renewal Tracking
COI compliance is not a one-time event. Policies expire, endorsements get dropped at renewal, and subcontractors sometimes change carriers without notifying the general contractor. Ongoing monitoring closes the gap between initial verification and project completion.
Ongoing Monitoring Checklist
- Set expiration alerts 30 and 60 days in advance — Whether you use a spreadsheet or a dedicated compliance platform, automated expiration alerts give you time to collect renewal certificates before a lapse occurs.
- Re-verify certificates at each policy renewal — Renewal certificates must go through the same full verification process as the original. Do not assume coverage terms carried forward unchanged.
- Track all active subcontractors by project — Maintain a roster that maps each subcontractor to their active projects, current COI status, and next expiration date. This gives you real-time visibility into your compliance exposure.
- Document all non-compliance incidents — If a subcontractor works while non-compliant, document the gap, the corrective action taken, and any contractual remedies applied. This documentation is critical for your own insurance audit defense. Learn more about construction insurance audit preparation to understand how these records are reviewed.
- Maintain a complete compliance file for each subcontractor — Each file should include the signed subcontract, all COIs received, correspondence about deficiencies, and endorsement copies. Organized contractor compliance documentation is your first line of defense in a coverage dispute.
Construction projects in states with high litigation frequency — including California, Texas, Florida, and New York — see disproportionate numbers of additional insured disputes. If your operation spans multiple states, your monitoring process must account for state-specific endorsement requirements that vary significantly across jurisdictions.
Tools and Systems for COI Compliance Management
For companies managing more than a handful of subcontractors, manual tracking quickly becomes a liability in itself. Missed renewals, misfiled certificates, and inconsistent verification standards are almost inevitable without a structured system.
Purpose-built COI management platforms offer automated expiration tracking, digital certificate storage, compliance dashboards, and direct insurer verification integrations. For teams already using construction management software, many of these platforms integrate with Procore, Sage, and other industry-standard tools.
At minimum, even small general contractors should maintain a centralized, version-controlled spreadsheet with standardized fields covering insured name, policy type, limits, effective date, expiration date, additional insured status, and waiver of subrogation status. Consistency in how data is captured is what makes the checklist defensible in an audit or legal proceeding.
Frequently Asked Questions About COI Compliance Checklists
What should be included in a COI compliance checklist?
A comprehensive COI compliance checklist should include verification of general liability, workers' compensation, commercial auto, and umbrella insurance policies. It must confirm policy limits meet project minimums, check that your company is listed as an additional insured, verify policy expiration dates, confirm the insurer's AM Best rating, and ensure the certificate holder information is accurate. Endorsement copies for additional insured status and waiver of subrogation should be collected alongside the ACORD 25 certificate itself.
How often should I update my COI compliance checklist?
Your COI compliance checklist should be reviewed at least annually and updated whenever a subcontractor renews their policy, takes on a new project, or when your contract insurance requirements change. Many construction managers implement 30-day pre-expiration alerts to stay ahead of lapses. For high-risk or long-duration projects, quarterly audits of the entire subcontractor roster are a best practice.
What happens if a subcontractor fails the COI compliance checklist?
If a subcontractor fails your COI compliance checklist, work should be halted or not started until they provide a corrected, compliant certificate. Allowing non-compliant subcontractors on-site exposes the general contractor to significant liability, including coverage gaps that could cost hundreds of thousands of dollars in the event of a claim. Document the deficiency in writing and retain records of all corrective communications in the subcontractor's compliance file.
Can I use a digital tool to manage my COI compliance checklist?
Yes. Digital COI management platforms automate expiration tracking, additional insured verification, and compliance status reporting across your entire subcontractor roster. These tools significantly reduce administrative time and human error compared to spreadsheet-based tracking, and they provide an audit trail that is invaluable during insurance audits or litigation. Look for platforms that offer direct broker or insurer verification to guard against fraudulent certificates.
Get Expert Help With Your COI Compliance Program
SubcontractorCOI.com helps construction companies build airtight COI compliance programs that protect against coverage gaps, simplify subcontractor onboarding, and keep every project audit-ready. Whether you're starting from scratch or upgrading a broken manual process, our team can help you design and implement a system that works at scale.
Contact us today to discuss your subcontractor COI compliance needs and get a free assessment of your current program.
