Verify a Certificate of Insurance in 5 Minutes for Small Businesses

Verify a Certificate of Insurance in 5 Minutes for Small Businesses

A certificate of insurance (COI) is a one-page document that proves an active insurance policy exists and summarizes the coverages a client, landlord, or contractor wants to see before signing off on work. It lists your insurer, policy numbers, effective dates, and limits, but it is a summary, not the contract itself. Treat every COI as a snapshot that needs its dates and endorsements checked, not a document to file and forget.

TL;DR:

Ensuring the certificate of insurance covers the entire work period and meets the specified minimum limits is crucial for avoiding project delays or legal issues.
Including necessary endorsements, such as additional insured or waiver of subrogation, requires actual policy filings; listing them on the COI alone is ineffective.
Verifying the validity of a COI involves confirming policy dates, limits, endorsements, and licensing the insurer through official state records, not just reviewing the certificate itself.
A COI is a snapshot and never guarantees ongoing coverage; policies can be canceled or amended after issuance, so regular updates are essential.
Automating certificate tracking and expiration management prevents gaps in coverage that could expose your business to financial risks or project liabilities.

What Does a Certificate of Insurance Include?
Most COIs run one page, built on the ACORD 25 form that dominates the US market. Reading one takes less than a minute once you know what each box is doing.

• Insured, insurer, and producer boxes: who holds the policy, who underwrites it, and which agency issued the certificate.
• Policy types and numbers: general liability, auto, umbrella, and workers’ compensation each get their own line and policy number.
• Effective and expiration dates: the window during which coverage is active. This is the first thing any reviewer should check.
• Coverage limits: shown as “per occurrence” (the cap on a single claim) versus “aggregate” (the cap across the whole policy term).
• Certificate holder box: the name of the party requesting proof of coverage, usually the client or landlord.

The form also carries a standard disclaimer stating the certificate does not amend, extend, or alter the coverage the underlying policy actually provides. For workers’ compensation, you will often see “Per Statute” listed instead of a dollar figure. That means the limit is whatever your state’s law requires, and you need to check the employer’s liability limits sitting just below it for the actual dollar caps.

Sample certificate of insurance: what each box on the ACORD 25 means

A sample certificate of insurance in the US is usually the ACORD 25, titled Certificate of Liability Insurance. It is one page. From top to bottom it shows the issue date, the producer, the insured, insurers A to F, a coverages table with policy numbers, dates and limits, a description of operations, the certificate holder, a cancellation clause and a signature.

The walk-through below follows the March 2016 edition, marked ACORD 25 (2016/03) in the bottom corner, as reproduced by public agencies such as the NYC Department of Design and Construction and the City of Philadelphia. ACORD says to use only the most current version of its forms, so check the edition printed on any certificate you receive.

Date and the disclaimer box

The date in the top right corner, written MM/DD/YYYY, is the day the certificate was issued. It is not a coverage date. Below the title, a boxed notice says the certificate is issued as a matter of information only and confers no rights on the certificate holder. It also says an additional insured needs policy provisions or an endorsement, and that a waiver of subrogation may need an endorsement too.

Producer

The producer is the insurance agency or broker that issued the certificate. The box next to it lists a contact name, phone, fax and email address. If you want to confirm the certificate, call the producer using a number you find yourself, not only the one printed here.

Insured

The insured is the business or person who holds the policies. The name and address should match the legal name in your contract, including any trading or dba name. A mismatch here is a common reason to send a certificate back.

Insurers affording coverage, A to F

This box lists up to six insurance companies, labelled Insurer A to Insurer F, each with an NAIC number. The NAIC number is a five-digit code that identifies the insurer. One business can have different insurers for general liability, auto and workers' compensation, so each coverage line points back to one of these letters.

Coverages table

The coverages section starts with a certificate number and a revision number. A printed statement says the listed policies have been issued to the insured for the policy period shown, and that limits shown may have been reduced by paid claims. The table below it has eight columns.

• INSR LTR: the insurer letter, A to F, for that line of coverage.
• TYPE OF INSURANCE: commercial general liability, automobile liability, umbrella or excess liability, workers' compensation and employers' liability, plus a blank line for other coverage.
• ADDL INSD: marked when additional insured status applies to that line.
• SUBR WVD: marked when a waiver of subrogation applies to that line.
• POLICY NUMBER: the policy number for that coverage.
• POLICY EFF and POLICY EXP: the effective and expiration dates, in MM/DD/YYYY format.
• LIMITS: the dollar limits for each line.

Limits on each coverage line

Each line of the table has its own set of limit labels. Read the labels, not just the numbers, because the same dollar figure means different things on different lines.

• Commercial general liability: claims-made or occurrence boxes, a choice of whether the general aggregate applies per policy, project or location, and limits for each occurrence, damage to rented premises, medical expense, personal and advertising injury, general aggregate, and products and completed operations aggregate.
• Automobile liability: boxes for which autos are covered, such as any auto, owned, scheduled, hired or non-owned, and limits for combined single limit, bodily injury and property damage.
• Umbrella or excess liability: occurrence or claims-made boxes, deductible or retention, and each occurrence and aggregate limits.
• Workers' compensation and employers' liability: a Y/N box for whether any proprietor, partner, executive officer or member is excluded, and employers' liability limits for each accident, disease per employee and disease policy limit.

Description of operations, locations and vehicles

This free-text box is where the producer adds details such as a project name, contract number, location or specific endorsement wording. If more space is needed, the form says an ACORD 101 Additional Remarks Schedule may be attached. Clients often ask for their contract or project number to appear here.

Certificate holder

The certificate holder is the party that asked for proof of insurance, such as a client, landlord or general contractor. Being named here does not make that party an additional insured. Additional insured status comes from the policy itself or an endorsement, which is why the IMPORTANT notice at the top of the form exists.

Cancellation clause

The cancellation box on the 2016 edition says that if any listed policy is cancelled before its expiration date, notice will be delivered in accordance with the policy provisions. It does not promise that the certificate holder will be told. If you need advance notice, ask for it in the contract and through the policy.

Authorized representative

The last box is the signature of an authorized representative of the producer or insurer. ACORD's forms FAQ notes that its Forms Instruction Guide recommends ACORD forms be signed by an authorized representative. An unsigned certificate is a reason to ask questions.

Is there a certificate of insurance template you can fill in yourself?

Blank ACORD 25 forms circulate online, but a certificate of liability insurance should come from your agent, broker or insurer, not from you. What you can build yourself is a tracker. A certificate of insurance template for tracking records the insured, insurer, policy numbers, expiration dates and endorsements for every vendor you rely on.

The expiration dates in the coverages table are the ones to track. A certificate stays useful only while the policies behind it are active. See how long a COI is typically valid, or set up certificate of insurance tracking so vendors get reminders and an upload link before their policies expire.

Why Do Clients and Landlords Ask for a COI?

A certificate of insurance shows up whenever one business wants proof that another business’s risk won’t become its own. The Hartford’s guidance on COIs points to a handful of recurring triggers.

• Commercial leases: landlords want proof of liability coverage before handing over keys.
• General contracting: prime contractors require COIs from every subcontractor before they set foot on site.
• Event venues: caterers, DJs, and rental companies routinely need to show coverage before the event date.
• Vendor onboarding: larger companies won’t add a new supplier to their system without one on file.
• Government bids: public agencies often require a COI as part of the bid package itself.

What the requester is actually checking is narrower than it looks: is coverage active during the work window, do the limits meet the contract’s stated minimums, and are the right endorsements attached? Miss any one of those, and you can watch a signed contract stall for a week while paperwork gets fixed. On active job sites, a missing or outdated COI is one of the most common reasons a subcontractor gets turned away at the gate.

Endorsements That Change What a COI Actually Promises

Three endorsement requests come up constantly, and each one changes what happens if a claim gets filed.

1. Additional insured: this adds another party, such as a general contractor, onto your policy so they’re covered for claims arising from your work. A “scheduled” endorsement names that party specifically; a “blanket” endorsement covers anyone you’re contractually required to add, which saves you from filing a new endorsement for every job.
2. Waiver of subrogation: this stops your insurer from going after the other party to recover a payout after a claim, but only works if the waiver is added before the loss occurs, not after.
3. Primary and noncontributory: this language forces your policy to pay first, ahead of the other party’s own insurance, instead of the two policies splitting the claim proportionally.

Every one of these needs to exist on the actual policy as a filed endorsement, not just a checkbox on the certificate. A COI that lists “additional insured” without a matching endorsement on file is worthless the moment a claim gets filed, and legal guidance on COI verification makes this point directly.

Pro Tip: Ask your agent to send the actual endorsement pages along with the COI, not just the summary page. It takes one extra email and closes the biggest gap between what a certificate says and what the policy actually does.

How to Get a Certificate of Insurance Without the Back and Forth

Getting a certificate issued is usually fast. Getting it issued correctly the first time is where most people lose a day or two.

1. Gather the exact details before you ask. You need the certificate holder’s exact legal name and address (not an abbreviation), the project or contract reference number, any required endorsements, and your deadline.
2. Pick your issuance route. A carrier portal can generate a standard COI instantly. An agent is faster for anything with endorsements attached. A broker handles it when multiple policies from different carriers need to appear on one certificate.
3. Confirm turnaround and cost. Most insurers or agents can issue a same-day certificate, and many carriers offer instant generation through online portals. Generating the certificate itself is typically free; adding a new endorsement can carry a small fee or processing delay.

Pro Tip: Build a one-paragraph request template with fields for legal entity name, project reference, required endorsements, and deadline. Reuse it for every request and you’ll cut agent back-and-forth to almost nothing.

How to Verify a Certificate of Insurance Is Legitimate

A COI takes thirty seconds to glance at and about five minutes to actually verify. Check that the insured’s name matches the contract exactly, that the policy dates cover the full project window, that any required endorsements appear on the certificate, and that the limits meet or exceed your contract’s stated minimums.

For anything beyond a routine small job, go a step further. Look up the issuing agent or carrier through your state’s insurance department licensing lookup to confirm they’re actually licensed to write business in your state. If the contract value is high enough to matter, call the agent directly using a phone number you found independently, not the one printed on the certificate, and ask them to confirm the policy is active and the endorsements are filed. Fraudulent certificates do circulate, and verification guidance from legal experts treats an independently sourced phone call as the single most reliable check available. If a certificate holder is a homeowner rather than a business, this contractor COI guide for homeowners walks through the same checks from the hiring party’s side.

How Long Is a Certificate of Insurance Valid?

A COI is only as good as the policy behind it. The moment that policy lapses, gets canceled, or expires, the certificate becomes worthless paper, regardless of what date is printed on it.

• The certificate mirrors the underlying policy term, so mark the expiration date, not the date you received the certificate.
• The ACORD 25 form’s cancellation notice language is often limited. If guaranteed advance notice matters to your business, ask for a specific policy endorsement that requires it, rather than assuming the standard form covers you.
• Keep every COI and its endorsement pages on file, and require a refreshed certificate at contract renewal or project milestones, not just at kickoff.
• A calendar reminder works for a handful of vendors. Past a dozen or so active contracts, most operations teams move to periodic manual check ins or an automated expiration tracking system.

The Operational Fix Most Businesses Skip

Most COI headaches trace back to imprecise paperwork, not insurance problems. A certificate-holder name that doesn’t exactly match the legal entity, or a missing project reference, sends a request back for correction and adds days to onboarding.

Standardizing a short request form with the exact legal name, required endorsements, and a deadline fixes most of that friction before it starts. Pair that with centralized tracking of who has an active COI on file and when it expires, and renewal reminders stop depending on someone’s memory. That’s the gap automated renewal tracking is built to close.

Certificate of Insurance vs. the Actual Insurance Policy

The certificate and the policy are not the same document, and confusing them is where a lot of businesses get burned. The policy is a legal contract, often dozens of pages long, that spells out exactly what’s covered, what’s excluded, and under what conditions a claim gets paid. The certificate is a one-page summary that someone at the insurance agency filled out based on that policy, and it exists purely to communicate information to a third party.

That distinction matters because a COI carries no contractual weight of its own. The ACORD 25 disclaimer says so explicitly: the certificate doesn’t amend, extend, or alter the coverage the policy provides. If the certificate lists a $1 million liability limit but the actual policy has since been endorsed down to $500,000, the policy wins. If the certificate says an endorsement exists but nobody actually filed it, the endorsement doesn’t exist.

This is also why a COI can’t answer every question a serious contract needs answered. It won’t show you policy exclusions, deductibles, or the fine print around how a claim gets adjudicated. For a small subcontracting job, the certificate is usually all anyone asks for or needs. For a large commercial lease or a multi-year vendor agreement, it’s worth asking to see the actual policy declarations page, or at minimum the specific endorsement pages, rather than relying on the certificate alone. The certificate tells you coverage probably exists. The policy tells you what that coverage actually does.

The Legal Limits of Relying on a Certificate of Insurance

A COI is evidence, not a guarantee. Courts in several states have ruled that a certificate alone does not create additional insured status if the corresponding endorsement was never actually issued on the policy, no matter what the certificate says. That single fact should change how any business treats an incoming certificate: the paper is a starting point for verification, not the end of it.

There’s also a timing problem baked into the process. A certificate reflects the policy’s status on the day it was issued. Nothing on that piece of paper prevents the policyholder from canceling the policy the next week, and the ACORD 25 form’s own cancellation language is often narrower than people assume. Some older versions promised advance written notice of cancellation to the certificate holder; current standard language typically doesn’t make that promise at all, which means a certificate holder relying on notification alone can be caught off guard.

For high-value contracts, government bids, or any situation where being wrong is expensive, don’t lean on the certificate as your legal protection. Ask for the actual endorsement pages, keep them on file next to the certificate, and revisit that file at contract renewal. If a dispute or a claim ever comes up, the endorsement page is what an insurer and a court will look at first, not the summary certificate that started the conversation.

How COI Requirements Differ by Industry and State

There’s no single national standard for what a certificate of insurance needs to contain beyond the common ACORD 25 layout, and requirements shift noticeably depending on who’s asking and where you’re doing business.

Construction is the industry with the most layered requirements. General contractors routinely demand additional insured status, waiver of subrogation, and primary/noncontributory language from every subcontractor on a job, often with specific minimum limits written into the subcontract itself. Government contracts push this further. Some public agencies require specific policy wording, license numbers printed directly on the certificate, or a signed addendum before they’ll accept a COI at all, a level of scrutiny that state insurance regulators have direct rules around.

Commercial leasing tends to be lighter. Most landlords want general liability coverage with a reasonable per-occurrence limit and don’t ask for the endorsement complexity you’d see on a construction site. Event-based work sits somewhere in between: a venue might require a specific liability limit and a same-day certificate showing coverage for the exact event date, nothing more.

State-level licensing boards add another layer for regulated trades. Contractors licensed under a state’s construction licensing agency, for example, may need to maintain proof of coverage on file with the state itself, separate from whatever certificate they hand a client. If your business operates across state lines or serves government clients, it’s worth confirming requirements with each specific counterparty rather than assuming your standard certificate will clear every bar.

What Happens When a Certificate Expires or Falls Short

An expired or inadequate COI isn’t a paperwork technicality. It’s an open door to real financial exposure, and the damage usually shows up at the worst possible moment, which is right after something has already gone wrong.

Picture a subcontractor whose general liability policy lapsed two weeks into a job because a premium payment was missed. The certificate on file still shows active coverage because nobody checked the actual expiration date against the project timeline. If an injury or property damage claim happens during that lapse, the party who assumed coverage was in place discovers, usually through a denied claim, that there’s no policy standing behind the paper they were handed.

The financial consequences fall on whoever assumed they were protected. A general contractor who added a sub without confirming an active COI can end up absorbing a claim meant for the sub’s insurer. A landlord who let a lease renew without an updated certificate can find themselves defending a lawsuit alone. Government agencies that accept an outdated certificate on a public project risk the same exposure, magnified by public scrutiny.

The fix is unglamorous but effective: require a refreshed certificate at every renewal point, not just at contract signing, and build in a check that flags certificates within thirty days of expiration. Businesses juggling more than a handful of vendors almost always outgrow manual tracking, which is exactly the gap that centralized expiration monitoring, the kind used across healthcare license and certification tracking, is designed to close.

What Small Business Owners Get Wrong About COIs

Most advice on certificates of insurance treats them like a compliance checkbox: get one, file it, move on. That advice is backwards for small businesses specifically, because you’re usually the one juggling COIs from a dozen vendors, subcontractors, and clients with no dedicated compliance staff to catch problems.

The judgment I’d push back on is the idea that verification is optional for smaller contracts. It’s not the dollar value of the job that determines your risk. It’s whether you assumed coverage existed and built decisions on that assumption. A $3,000 subcontract with no verified additional insured endorsement can still leave you holding a claim that should have gone to someone else’s insurer.

What gets underrated is recordkeeping discipline. Everyone focuses on getting the certificate; almost nobody builds a system for tracking when it expires. If you take one thing from this article, prioritize that: know your expiration dates before your contract holders do, not after a claim forces the question. A simple expiration tracking checklist beats a filing cabinet full of certificates nobody’s checked in eight months.

— Kuldeep

A Better Way to Track Every Certificate You’re Waiting On

Chasing down COIs from vendors and subcontractors by email is slow, and forgetting one renewal date can leave you exposed on a live contract. A dedicated platform gives small businesses a single dashboard where every certificate, its expiration date, and its required endorsements live in one place instead of scattered across inboxes.

Such platforms automate the parts that eat up the most time: renewal reminders sent before a certificate lapses, document collection so vendors upload their COI directly instead of emailing a PDF back and forth, and an audit trail that shows exactly who submitted what and when. For a business managing certificates from multiple subcontractors or clients, that means fewer missed renewals, faster turnaround when a client asks “can you send that certificate again,” and one central place to prove coverage was active when it mattered. Start a free trial on the ExpiryEdge platform and set up your first expiration tracker before your next COI request lands in your inbox.

Sources

• Certificate of Insurance (COI) | The Hartford
• What Is a Certificate of Insurance (COI)? | NerdWallet
• Certificates of Insurance | Department of Financial Services

FAQ

How do I get my insurance certificate?

Contact your insurance agent, broker, or use your carrier’s online policyholder portal. Most standard requests are issued the same day, often instantly through a portal.

How hard is it to get a certificate of insurance?

For an active policy with no special endorsements, it’s simple, often a same-day or instant turnaround through a portal or agent. Requests involving added endorsements like additional insured status take longer since they require an actual policy change.

Can I make my own certificate of insurance?

No. A COI must be issued by your insurer, agent, or broker because it certifies details about an active policy that only the insurer can verify. A self-created certificate carries no legal weight and most requesters will reject it outright.

Why would someone ask for a certificate of insurance?

They want proof that active coverage exists before letting you start work, sign a lease, or join their vendor list, so any injury, damage, or liability claim tied to your work has an insurer standing behind it. Common requesters include landlords, general contractors, event venues, and government agencies.

Recommended

• Contract Expiry and Renewal Management for Legal Ops
• Property Management Compliance Software | Licences, COIs & Inspections