Use Case · Contractor & Vendor Compliance

A COI is not the policy. Verify the cover before work begins.

If a contractor works on your site or on your behalf, checking their insurance and certifications is your job. Plenty of certificates look fine and aren't: the wrong endorsement, no additional-insured wording, a policy that can be cancelled halfway through. ExpiryEdge tracks each document for each contractor and flags the problem before anyone picks up a tool.

Start Free Trial
No credit card required · Setup in minutes
General liability (COI)Renews in 64 daysValidAdditional insured (CG 20 10)Renews in 11 daysExpiringWorkers' compRenews in 120 daysValidOSHA 30 cardRenews in LapsedExpired

Quick answer

Contractor compliance tracking means collecting a contractor's insurance certificates, trade certifications, work permits and safety documents, checking them, and keeping an eye on them for as long as you use that contractor. Get the evidence before they start. Check that the limits, dates and endorsements match what the contract asks for, and set alerts before anything expires. Checking is where the real work happens. When one document falls short, ask for that fix only, instead of making them start the whole pack again.

By the numbers

Why contractor compliance fails

9 in 10

certificates in some artisan-contractor market segments materially misrepresented the cover in force.

Source: IRMI – Dybdahl (2015; artisan-contractor market)

COI ≠ policy

A certificate is a point-in-time summary; it does not amend or guarantee the insurance coverage behind it.

Source: ACORD, cited by IRMI (2015)

$165,514

maximum OSHA penalty per willful or repeat violation involving an unqualified contractor on a site you control.

Source: OSHA (2025 adjustment)
What you track

Every document, for every contractor

General / public liability insurance

Workers' compensation / employer's liability

Professional indemnity / errors & omissions

Additional insured endorsement (CG 20 10 / 20 37)

Waiver of subrogation endorsement

Commercial auto insurance

OSHA 10 / OSHA 30 training cards

Trade certifications (CSCS, Gas Safe, NICEIC, EPA)

W-9 / W-8BEN-E and 1099 contractor docs

I-9 / right-to-work documentation

Background checks and DBS certificates

Site-specific method statements / RAMS

How it works

Collect, validate, monitor - on repeat

1
Set the requirement list once, per contractor type

Decide what an electrical sub has to send you, what a caterer needs, what the cleaning firm needs. Save each list as a reusable document collection request. A new contractor gets a link they can open without an account, in place of a long email thread.

2
Validate, do not just collect

Check the limits meet your contract minimums. Make sure your entity is named Additional Insured, not only Certificate Holder, and that the endorsement form is actually attached. If something's wrong, reject it with a comment. The same link opens again and the contractor fixes that one document. Having a COI on file doesn't mean you're covered.

3
Monitor continuously, not just at expiry

Reminders go out 60 and 30 days before each document expires. If a policy is cancelled mid-term, you get an alert straight away. Anyone with a lapsed document turns red on the dashboard, and you can set gates that stop them working until it's sorted.

Who this is for

Built for whoever owns the risk

General contractors and construction firms

Subcontractor COIs and additional insured endorsements (CG 20 10 / 20 37), plus OSHA training and trade cards. Nothing gets signed or paid until they're in.

Property managers and REIT operators

Hundreds of vendor COIs, each renewing on its own date. On top of that come tenant insurance and the certificates for your elevator mechanics and HVAC firms.

Facilities and operations leaders

The cleaners, the landscapers, security, pest control, catering: whoever an inspector asks about, the evidence is in one place.

Procurement and vendor risk teams

A vendor record you can stand behind when SOC 2 or ISO 27001 auditors, supplier risk reviews or M&A due diligence come asking.

The difference

The day an incident happens

Without ExpiryEdge

A subcontractor's general liability policy ran out three weeks ago. Nobody noticed. Then someone got hurt on site. On day three of the claim the investigator asked for the contractor's COI, and the one in your file had already expired. So the claim landed on your policy.

With ExpiryEdge

Sixty days before the policy ran out, ExpiryEdge alerted your project manager and the contractor. The contractor sent the renewal, you checked the new COI, and they stayed green on the dashboard. On the day someone got hurt, you could show a current certificate and endorsement, plus a record proving cover never lapsed.

How it compares

Enterprise capability without enterprise pricing

ExpiryEdgeISNetworld / AvettaSpreadsheet
Document collection & expiry tracking
Validates AI endorsements (CG 20 10/37)
Automatic 60/30-day reminders
Mid-term cancellation alerts
Fits 5–500 contractors

Enterprise only

Flat-rate pricing

$10–60k/yr

Free

ISNetworld, Avetta, Veriforce and TrustLayer are built for large principals with thousands of subs. ExpiryEdge does the core jobs for companies with 5–500 contractors, where those tools usually cost too much.
Frequently asked questions

In practice, often yes. Hire a contractor to work on your site or for you, and if they hurt someone while uninsured, you can be held liable. The claim moves up the chain. The injured person sues the contractor, the contractor has no cover, and the claim goes to whoever does have insurance, which is usually you. Courts have held principals to a duty of care to check insurance before work starts and to keep checking it while the work goes on.

Being Certificate Holder only means you get a copy. It gives you no rights under the policy. To be covered by the contractor's policy you have to be named as an Additional Insured, and that shows up as a separate endorsement form attached to the COI (usually CG 20 10 for ongoing work and CG 20 37 for completed work). Lots of COIs name the right entity as Certificate Holder and have no Additional Insured endorsement attached. It's one of the most common gaps we see.

At minimum you want general or public liability, workers' compensation (or employer's liability), and commercial auto if they drive for the job. Add professional indemnity for design or advisory work, plus the Additional Insured and Waiver of Subrogation endorsements. Site contractors need OSHA 10 or 30 cards and trade certifications (CSCS, Gas Safe, NICEIC, EPA). Then the paperwork: W-9 or W-8, I-9 or right-to-work documents, background checks if the role calls for them, and method statements and risk assessments for the site.

A sole trader with no employees can legally hold a workers' comp exemption. The trouble starts when the form is over 12 months old, names the wrong entity, or is for a different state from the one where the job is. ExpiryEdge keeps the exemption as its own document type with its own expiry date and state, so an out-of-date form gets caught instead of quietly accepted.

Yes. It's how a lot of "but we had the certificate" stories start. Most policies can be cancelled mid-term, and whether the carrier tells you depends on the endorsement wording. ExpiryEdge keeps checking status against expiry dates and supports notice-of-cancellation endorsements (CG 24 04 or equivalents), so you're watching the policy and not only the piece of paper.

Yes. You pick who gets the alert for each contractor document: your team, the contractor, or both. By default reminders go 60 and 30 days before expiry. If the contractor hasn't responded by 14 days out, your team is pulled in.

No. You send a document collection link. The contractor opens it, uploads their COI and anything else you ask for, fills in your fields and signs if needed. No account at any point. If one field is wrong, reject it with a comment. The same link opens again and they fix that field, not the whole submission.

ISNetworld, Avetta, Veriforce and TrustLayer are built for big principals with thousands of subs and large risk budgets. Expect $10–60k a year plus per-contractor fees. ExpiryEdge is aimed at companies with 5 to 500 contractors, where those tools cost too much. You still get document collection, validation, expiry tracking and an audit trail, at a flat rate.

Know every contractor is covered before they arrive

Free to try. No credit card required.