A COI is not the policy. Verify the cover before work begins.
If a contractor works on your site or on your behalf, checking their insurance and certifications is your job. Plenty of certificates look fine and aren't: the wrong endorsement, no additional-insured wording, a policy that can be cancelled halfway through. ExpiryEdge tracks each document for each contractor and flags the problem before anyone picks up a tool.
Quick answer
Contractor compliance tracking means collecting a contractor's insurance certificates, trade certifications, work permits and safety documents, checking them, and keeping an eye on them for as long as you use that contractor. Get the evidence before they start. Check that the limits, dates and endorsements match what the contract asks for, and set alerts before anything expires. Checking is where the real work happens. When one document falls short, ask for that fix only, instead of making them start the whole pack again.
Why contractor compliance fails
9 in 10
certificates in some artisan-contractor market segments materially misrepresented the cover in force.
Source: IRMI – Dybdahl (2015; artisan-contractor market)COI ≠ policy
A certificate is a point-in-time summary; it does not amend or guarantee the insurance coverage behind it.
Source: ACORD, cited by IRMI (2015)$165,514
maximum OSHA penalty per willful or repeat violation involving an unqualified contractor on a site you control.
Source: OSHA (2025 adjustment)Every document, for every contractor
General / public liability insurance
Workers' compensation / employer's liability
Professional indemnity / errors & omissions
Additional insured endorsement (CG 20 10 / 20 37)
Waiver of subrogation endorsement
Commercial auto insurance
OSHA 10 / OSHA 30 training cards
Trade certifications (CSCS, Gas Safe, NICEIC, EPA)
W-9 / W-8BEN-E and 1099 contractor docs
I-9 / right-to-work documentation
Background checks and DBS certificates
Site-specific method statements / RAMS
Collect, validate, monitor - on repeat
Set the requirement list once, per contractor type
Decide what an electrical sub has to send you, what a caterer needs, what the cleaning firm needs. Save each list as a reusable document collection request. A new contractor gets a link they can open without an account, in place of a long email thread.
Validate, do not just collect
Check the limits meet your contract minimums. Make sure your entity is named Additional Insured, not only Certificate Holder, and that the endorsement form is actually attached. If something's wrong, reject it with a comment. The same link opens again and the contractor fixes that one document. Having a COI on file doesn't mean you're covered.
Monitor continuously, not just at expiry
Reminders go out 60 and 30 days before each document expires. If a policy is cancelled mid-term, you get an alert straight away. Anyone with a lapsed document turns red on the dashboard, and you can set gates that stop them working until it's sorted.
Built for whoever owns the risk
General contractors and construction firms
Subcontractor COIs and additional insured endorsements (CG 20 10 / 20 37), plus OSHA training and trade cards. Nothing gets signed or paid until they're in.
Property managers and REIT operators
Hundreds of vendor COIs, each renewing on its own date. On top of that come tenant insurance and the certificates for your elevator mechanics and HVAC firms.
Facilities and operations leaders
The cleaners, the landscapers, security, pest control, catering: whoever an inspector asks about, the evidence is in one place.
Procurement and vendor risk teams
A vendor record you can stand behind when SOC 2 or ISO 27001 auditors, supplier risk reviews or M&A due diligence come asking.
The day an incident happens
A subcontractor's general liability policy ran out three weeks ago. Nobody noticed. Then someone got hurt on site. On day three of the claim the investigator asked for the contractor's COI, and the one in your file had already expired. So the claim landed on your policy.
Sixty days before the policy ran out, ExpiryEdge alerted your project manager and the contractor. The contractor sent the renewal, you checked the new COI, and they stayed green on the dashboard. On the day someone got hurt, you could show a current certificate and endorsement, plus a record proving cover never lapsed.
Enterprise capability without enterprise pricing
| ExpiryEdge | ISNetworld / Avetta | Spreadsheet | |
|---|---|---|---|
| Document collection & expiry tracking | |||
| Validates AI endorsements (CG 20 10/37) | |||
| Automatic 60/30-day reminders | |||
| Mid-term cancellation alerts | |||
| Fits 5–500 contractors | Enterprise only | ||
| Flat-rate pricing | $10–60k/yr | Free |
In practice, often yes. Hire a contractor to work on your site or for you, and if they hurt someone while uninsured, you can be held liable. The claim moves up the chain. The injured person sues the contractor, the contractor has no cover, and the claim goes to whoever does have insurance, which is usually you. Courts have held principals to a duty of care to check insurance before work starts and to keep checking it while the work goes on.
Being Certificate Holder only means you get a copy. It gives you no rights under the policy. To be covered by the contractor's policy you have to be named as an Additional Insured, and that shows up as a separate endorsement form attached to the COI (usually CG 20 10 for ongoing work and CG 20 37 for completed work). Lots of COIs name the right entity as Certificate Holder and have no Additional Insured endorsement attached. It's one of the most common gaps we see.
At minimum you want general or public liability, workers' compensation (or employer's liability), and commercial auto if they drive for the job. Add professional indemnity for design or advisory work, plus the Additional Insured and Waiver of Subrogation endorsements. Site contractors need OSHA 10 or 30 cards and trade certifications (CSCS, Gas Safe, NICEIC, EPA). Then the paperwork: W-9 or W-8, I-9 or right-to-work documents, background checks if the role calls for them, and method statements and risk assessments for the site.
A sole trader with no employees can legally hold a workers' comp exemption. The trouble starts when the form is over 12 months old, names the wrong entity, or is for a different state from the one where the job is. ExpiryEdge keeps the exemption as its own document type with its own expiry date and state, so an out-of-date form gets caught instead of quietly accepted.
Yes. It's how a lot of "but we had the certificate" stories start. Most policies can be cancelled mid-term, and whether the carrier tells you depends on the endorsement wording. ExpiryEdge keeps checking status against expiry dates and supports notice-of-cancellation endorsements (CG 24 04 or equivalents), so you're watching the policy and not only the piece of paper.
Yes. You pick who gets the alert for each contractor document: your team, the contractor, or both. By default reminders go 60 and 30 days before expiry. If the contractor hasn't responded by 14 days out, your team is pulled in.
No. You send a document collection link. The contractor opens it, uploads their COI and anything else you ask for, fills in your fields and signs if needed. No account at any point. If one field is wrong, reject it with a comment. The same link opens again and they fix that field, not the whole submission.
ISNetworld, Avetta, Veriforce and TrustLayer are built for big principals with thousands of subs and large risk budgets. Expect $10–60k a year plus per-contractor fees. ExpiryEdge is aimed at companies with 5 to 500 contractors, where those tools cost too much. You still get document collection, validation, expiry tracking and an audit trail, at a flat rate.
Know every contractor is covered before they arrive
Free to try. No credit card required.
