Verify a Certificate of Insurance in 5 Minutes for Small Businesses
Verify a Certificate of Insurance in 5 Minutes for Small Businesses

A certificate of insurance (COI) is a one-page document that proves an active insurance policy exists and summarizes the coverages a client, landlord, or contractor wants to see before signing off on work. It lists your insurer, policy numbers, effective dates, and limits, but it is a summary, not the contract itself. Treat every COI as a snapshot that needs its dates and endorsements checked, not a document to file and forget.
TL;DR:
Ensuring the certificate of insurance covers the entire work period and meets the specified minimum limits is crucial for avoiding project delays or legal issues.
Including necessary endorsements, such as additional insured or waiver of subrogation, requires actual policy filings; listing them on the COI alone is ineffective.
Verifying the validity of a COI involves confirming policy dates, limits, endorsements, and licensing the insurer through official state records, not just reviewing the certificate itself.
A COI is a snapshot and never guarantees ongoing coverage; policies can be canceled or amended after issuance, so regular updates are essential.
Automating certificate tracking and expiration management prevents gaps in coverage that could expose your business to financial risks or project liabilities.
Expiryedge
Keep Insurance Deadlines Visible
Track certificates, renewals, and other time-sensitive obligations in one platform with automated reminders, alerts, and deadline monitoring.
Explore ExpiryEdge
Table of Contents
What Does a Certificate of Insurance Include?
Why Do Clients and Landlords Ask for a COI?
Endorsements That Change What a COI Actually Promises
How to Get a Certificate of Insurance Without the Back and Forth
How to Verify a Certificate of Insurance Is Legitimate
How Long Is a Certificate of Insurance Valid?
The Operational Fix Most Businesses Skip
Certificate of Insurance vs. the Actual Insurance Policy
The Legal Limits of Relying on a Certificate of Insurance
How COI Requirements Differ by Industry and State
What Happens When a Certificate Expires or Falls Short
What Small Business Owners Get Wrong About COIs
A Better Way to Track Every Certificate You’re Waiting On
Sources
FAQ
What Does a Certificate of Insurance Include?
Most COIs run one page, built on the ACORD 25 form that dominates the US market. Reading one takes less than a minute once you know what each box is doing.
- Insured, insurer, and producer boxes: who holds the policy, who underwrites it, and which agency issued the certificate.
- Policy types and numbers: general liability, auto, umbrella, and workers’ compensation each get their own line and policy number.
- Effective and expiration dates: the window during which coverage is active. This is the first thing any reviewer should check.
- Coverage limits: shown as “per occurrence” (the cap on a single claim) versus “aggregate” (the cap across the whole policy term).
- Certificate holder box: the name of the party requesting proof of coverage, usually the client or landlord.
The form also carries a standard disclaimer stating the certificate does not amend, extend, or alter the coverage the underlying policy actually provides. For workers’ compensation, you will often see “Per Statute” listed instead of a dollar figure. That means the limit is whatever your state’s law requires, and you need to check the employer’s liability limits sitting just below it for the actual dollar caps.
Why Do Clients and Landlords Ask for a COI?
A certificate of insurance shows up whenever one business wants proof that another business’s risk won’t become its own. The Hartford’s guidance on COIs points to a handful of recurring triggers.
- Commercial leases: landlords want proof of liability coverage before handing over keys.
- General contracting: prime contractors require COIs from every subcontractor before they set foot on site.
- Event venues: caterers, DJs, and rental companies routinely need to show coverage before the event date.
- Vendor onboarding: larger companies won’t add a new supplier to their system without one on file.
- Government bids: public agencies often require a COI as part of the bid package itself.
What the requester is actually checking is narrower than it looks: is coverage active during the work window, do the limits meet the contract’s stated minimums, and are the right endorsements attached? Miss any one of those, and you can watch a signed contract stall for a week while paperwork gets fixed. On active job sites, a missing or outdated COI is one of the most common reasons a subcontractor gets turned away at the gate.
Endorsements That Change What a COI Actually Promises
Three endorsement requests come up constantly, and each one changes what happens if a claim gets filed.
- Additional insured: this adds another party, such as a general contractor, onto your policy so they’re covered for claims arising from your work. A “scheduled” endorsement names that party specifically; a “blanket” endorsement covers anyone you’re contractually required to add, which saves you from filing a new endorsement for every job.
- Waiver of subrogation: this stops your insurer from going after the other party to recover a payout after a claim, but only works if the waiver is added before the loss occurs, not after.
- Primary and noncontributory: this language forces your policy to pay first, ahead of the other party’s own insurance, instead of the two policies splitting the claim proportionally.
Every one of these needs to exist on the actual policy as a filed endorsement, not just a checkbox on the certificate. A COI that lists “additional insured” without a matching endorsement on file is worthless the moment a claim gets filed, and legal guidance on COI verification makes this point directly.
Pro Tip: Ask your agent to send the actual endorsement pages along with the COI, not just the summary page. It takes one extra email and closes the biggest gap between what a certificate says and what the policy actually does.
How to Get a Certificate of Insurance Without the Back and Forth
Getting a certificate issued is usually fast. Getting it issued correctly the first time is where most people lose a day or two.
- Gather the exact details before you ask. You need the certificate holder’s exact legal name and address (not an abbreviation), the project or contract reference number, any required endorsements, and your deadline.
- Pick your issuance route. A carrier portal can generate a standard COI instantly. An agent is faster for anything with endorsements attached. A broker handles it when multiple policies from different carriers need to appear on one certificate.
- Confirm turnaround and cost. Most insurers or agents can issue a same-day certificate, and many carriers offer instant generation through online portals. Generating the certificate itself is typically free; adding a new endorsement can carry a small fee or processing delay.
Pro Tip: Build a one-paragraph request template with fields for legal entity name, project reference, required endorsements, and deadline. Reuse it for every request and you’ll cut agent back-and-forth to almost nothing.
How to Verify a Certificate of Insurance Is Legitimate
A COI takes thirty seconds to glance at and about five minutes to actually verify. Check that the insured’s name matches the contract exactly, that the policy dates cover the full project window, that any required endorsements appear on the certificate, and that the limits meet or exceed your contract’s stated minimums.
For anything beyond a routine small job, go a step further. Look up the issuing agent or carrier through your state’s insurance department licensing lookup to confirm they’re actually licensed to write business in your state. If the contract value is high enough to matter, call the agent directly using a phone number you found independently, not the one printed on the certificate, and ask them to confirm the policy is active and the endorsements are filed. Fraudulent certificates do circulate, and verification guidance from legal experts treats an independently sourced phone call as the single most reliable check available. If a certificate holder is a homeowner rather than a business, this contractor COI guide for homeowners walks through the same checks from the hiring party’s side.
How Long Is a Certificate of Insurance Valid?
A COI is only as good as the policy behind it. The moment that policy lapses, gets canceled, or expires, the certificate becomes worthless paper, regardless of what date is printed on it.
- The certificate mirrors the underlying policy term, so mark the expiration date, not the date you received the certificate.
- The ACORD 25 form’s cancellation notice language is often limited. If guaranteed advance notice matters to your business, ask for a specific policy endorsement that requires it, rather than assuming the standard form covers you.
- Keep every COI and its endorsement pages on file, and require a refreshed certificate at contract renewal or project milestones, not just at kickoff.
- A calendar reminder works for a handful of vendors. Past a dozen or so active contracts, most operations teams move to periodic manual check ins or an automated expiration tracking system.
The Operational Fix Most Businesses Skip
Most COI headaches trace back to imprecise paperwork, not insurance problems. A certificate-holder name that doesn’t exactly match the legal entity, or a missing project reference, sends a request back for correction and adds days to onboarding.
Standardizing a short request form with the exact legal name, required endorsements, and a deadline fixes most of that friction before it starts. Pair that with centralized tracking of who has an active COI on file and when it expires, and renewal reminders stop depending on someone’s memory. That’s the gap automated renewal tracking is built to close.
Certificate of Insurance vs. the Actual Insurance Policy
The certificate and the policy are not the same document, and confusing them is where a lot of businesses get burned. The policy is a legal contract, often dozens of pages long, that spells out exactly what’s covered, what’s excluded, and under what conditions a claim gets paid. The certificate is a one-page summary that someone at the insurance agency filled out based on that policy, and it exists purely to communicate information to a third party.

That distinction matters because a COI carries no contractual weight of its own. The ACORD 25 disclaimer says so explicitly: the certificate doesn’t amend, extend, or alter the coverage the policy provides. If the certificate lists a $1 million liability limit but the actual policy has since been endorsed down to $500,000, the policy wins. If the certificate says an endorsement exists but nobody actually filed it, the endorsement doesn’t exist.
This is also why a COI can’t answer every question a serious contract needs answered. It won’t show you policy exclusions, deductibles, or the fine print around how a claim gets adjudicated. For a small subcontracting job, the certificate is usually all anyone asks for or needs. For a large commercial lease or a multi-year vendor agreement, it’s worth asking to see the actual policy declarations page, or at minimum the specific endorsement pages, rather than relying on the certificate alone. The certificate tells you coverage probably exists. The policy tells you what that coverage actually does.
The Legal Limits of Relying on a Certificate of Insurance
A COI is evidence, not a guarantee. Courts in several states have ruled that a certificate alone does not create additional insured status if the corresponding endorsement was never actually issued on the policy, no matter what the certificate says. That single fact should change how any business treats an incoming certificate: the paper is a starting point for verification, not the end of it.
There’s also a timing problem baked into the process. A certificate reflects the policy’s status on the day it was issued. Nothing on that piece of paper prevents the policyholder from canceling the policy the next week, and the ACORD 25 form’s own cancellation language is often narrower than people assume. Some older versions promised advance written notice of cancellation to the certificate holder; current standard language typically doesn’t make that promise at all, which means a certificate holder relying on notification alone can be caught off guard.
For high-value contracts, government bids, or any situation where being wrong is expensive, don’t lean on the certificate as your legal protection. Ask for the actual endorsement pages, keep them on file next to the certificate, and revisit that file at contract renewal. If a dispute or a claim ever comes up, the endorsement page is what an insurer and a court will look at first, not the summary certificate that started the conversation.
How COI Requirements Differ by Industry and State
There’s no single national standard for what a certificate of insurance needs to contain beyond the common ACORD 25 layout, and requirements shift noticeably depending on who’s asking and where you’re doing business.
Construction is the industry with the most layered requirements. General contractors routinely demand additional insured status, waiver of subrogation, and primary/noncontributory language from every subcontractor on a job, often with specific minimum limits written into the subcontract itself. Government contracts push this further. Some public agencies require specific policy wording, license numbers printed directly on the certificate, or a signed addendum before they’ll accept a COI at all, a level of scrutiny that state insurance regulators have direct rules around.
Commercial leasing tends to be lighter. Most landlords want general liability coverage with a reasonable per-occurrence limit and don’t ask for the endorsement complexity you’d see on a construction site. Event-based work sits somewhere in between: a venue might require a specific liability limit and a same-day certificate showing coverage for the exact event date, nothing more.
State-level licensing boards add another layer for regulated trades. Contractors licensed under a state’s construction licensing agency, for example, may need to maintain proof of coverage on file with the state itself, separate from whatever certificate they hand a client. If your business operates across state lines or serves government clients, it’s worth confirming requirements with each specific counterparty rather than assuming your standard certificate will clear every bar.

What Happens When a Certificate Expires or Falls Short
An expired or inadequate COI isn’t a paperwork technicality. It’s an open door to real financial exposure, and the damage usually shows up at the worst possible moment, which is right after something has already gone wrong.
Picture a subcontractor whose general liability policy lapsed two weeks into a job because a premium payment was missed. The certificate on file still shows active coverage because nobody checked the actual expiration date against the project timeline. If an injury or property damage claim happens during that lapse, the party who assumed coverage was in place discovers, usually through a denied claim, that there’s no policy standing behind the paper they were handed.
The financial consequences fall on whoever assumed they were protected. A general contractor who added a sub without confirming an active COI can end up absorbing a claim meant for the sub’s insurer. A landlord who let a lease renew without an updated certificate can find themselves defending a lawsuit alone. Government agencies that accept an outdated certificate on a public project risk the same exposure, magnified by public scrutiny.
The fix is unglamorous but effective: require a refreshed certificate at every renewal point, not just at contract signing, and build in a check that flags certificates within thirty days of expiration. Businesses juggling more than a handful of vendors almost always outgrow manual tracking, which is exactly the gap that centralized expiration monitoring, the kind used across healthcare license and certification tracking, is designed to close.
What Small Business Owners Get Wrong About COIs
Most advice on certificates of insurance treats them like a compliance checkbox: get one, file it, move on. That advice is backwards for small businesses specifically, because you’re usually the one juggling COIs from a dozen vendors, subcontractors, and clients with no dedicated compliance staff to catch problems.
The judgment I’d push back on is the idea that verification is optional for smaller contracts. It’s not the dollar value of the job that determines your risk. It’s whether you assumed coverage existed and built decisions on that assumption. A $3,000 subcontract with no verified additional insured endorsement can still leave you holding a claim that should have gone to someone else’s insurer.
What gets underrated is recordkeeping discipline. Everyone focuses on getting the certificate; almost nobody builds a system for tracking when it expires. If you take one thing from this article, prioritize that: know your expiration dates before your contract holders do, not after a claim forces the question. A simple expiration tracking checklist beats a filing cabinet full of certificates nobody’s checked in eight months.
— Kuldeep
A Better Way to Track Every Certificate You’re Waiting On
Chasing down COIs from vendors and subcontractors by email is slow, and forgetting one renewal date can leave you exposed on a live contract. A dedicated platform gives small businesses a single dashboard where every certificate, its expiration date, and its required endorsements live in one place instead of scattered across inboxes.

Such platforms automate the parts that eat up the most time: renewal reminders sent before a certificate lapses, document collection so vendors upload their COI directly instead of emailing a PDF back and forth, and an audit trail that shows exactly who submitted what and when. For a business managing certificates from multiple subcontractors or clients, that means fewer missed renewals, faster turnaround when a client asks “can you send that certificate again,” and one central place to prove coverage was active when it mattered. Start a free trial on the ExpiryEdge platform and set up your first expiration tracker before your next COI request lands in your inbox.
Sources
- Certificate of Insurance (COI) | The Hartford
- What Is a Certificate of Insurance (COI)? | NerdWallet
- Certificates of Insurance | Department of Financial Services
FAQ
How do I get my insurance certificate?
Contact your insurance agent, broker, or use your carrier’s online policyholder portal. Most standard requests are issued the same day, often instantly through a portal.
How hard is it to get a certificate of insurance?
For an active policy with no special endorsements, it’s simple, often a same-day or instant turnaround through a portal or agent. Requests involving added endorsements like additional insured status take longer since they require an actual policy change.
Can I make my own certificate of insurance?
No. A COI must be issued by your insurer, agent, or broker because it certifies details about an active policy that only the insurer can verify. A self-created certificate carries no legal weight and most requesters will reject it outright.
Why would someone ask for a certificate of insurance?
They want proof that active coverage exists before letting you start work, sign a lease, or join their vendor list, so any injury, damage, or liability claim tied to your work has an insurer standing behind it. Common requesters include landlords, general contractors, event venues, and government agencies.
Recommended
Frequently asked questions
For an active policy with no special endorsements, it's simple, often a same-day or instant turnaround through a portal or agent. Requests involving added endorsements like additional insured status take longer since they require an actual policy change.
No. A COI must be issued by your insurer, agent, or broker because it certifies details about an active policy that only the insurer can verify. A self-created certificate carries no legal weight and most requesters will reject it outright.
They want proof that active coverage exists before letting you start work, sign a lease, or join their vendor list, so any injury, damage, or liability claim tied to your work has an insurer standing behind it. Common requesters include landlords, general contractors, event venues, and government agencies.



