Subcontractor COI Tracking & Insurance Verification: Stop Coverage Gaps Before They Cost You
Quick Answer
A certificate of insurance (COI) is a summary document (typically ACORD Form 25 or 28) that confirms a subcontractor's insurance coverage at a specific point in time. GCs need to track COIs because they are the primary evidence that subcontractors carry adequate insurance to cover claims arising from their work on the project.
A single subcontractor with lapsed general liability insurance can expose a GC to seven-figure claims overnight. Yet most general contractors still track certificates of insurance in shared drives and spreadsheets, discovering coverage gaps only after an incident triggers a claim. This guide covers COI tracking from collection through continuous verification, with the specific coverage thresholds and endorsement requirements that commercial construction demands.
Why COI Tracking Is the GC's First Line of Defense
Certificate of insurance tracking is the most time-sensitive compliance function on a construction project. Unlike OSHA training cards (which expire on predictable cycles) or trade licenses (which renew annually), insurance policies can lapse mid-project due to missed premium payments, policy cancellations, or coverage changes that the GC never sees.
The financial exposure is straightforward. If a subcontractor's worker is injured on your jobsite and the sub's workers' compensation policy has lapsed, the GC's insurance carrier becomes the fallback. A single serious injury claim averages $42,000 in workers' comp costs. A fatality claim can exceed $1 million. When you multiply that risk across 15 to 30 subcontractors on a commercial project, the math demands systematic tracking.
Under the broader subcontractor compliance management framework, COI tracking sits at the intersection of risk transfer and legal protection. The certificate of insurance is proof that your subcontract's indemnification clause is backed by actual coverage.
What Every Subcontractor COI Must Include
A certificate of insurance is not an insurance policy. It is a snapshot document (typically ACORD Form 25 or 28) that summarizes the sub's coverage at a point in time. The COI itself does not grant coverage or modify the underlying policy. That distinction matters because a COI can show adequate coverage on the day it was issued while the actual policy lapses two weeks later.
For commercial construction, every subcontractor COI should verify these coverage lines:
Commercial General Liability (CGL)
Minimum: $1M per occurrence / $2M aggregate
Must include products-completed operations. Verify the aggregate hasn't been eroded by prior claims.
Workers' Compensation
Minimum: Statutory limits + $1M employer's liability
Must cover all employees working on the project. No ghost policies (policies with zero payroll reported).
Commercial Auto Liability
Minimum: $1M combined single limit
Required if sub operates vehicles on or near the jobsite. Covers owned, hired, and non-owned autos.
Umbrella / Excess Liability
Minimum: $5M (varies by project)
Provides additional limits above CGL and auto. Required for subs on projects over $10M.
Professional Liability (E&O)
Minimum: $1M per claim
Required for design-build subs, engineers, and architects performing design work.
Additional Insured Endorsements
The most critical (and most frequently missed) element of a subcontractor COI is the additional insured endorsement. This endorsement adds the GC, project owner, and any other required parties to the sub's CGL policy as additional insureds for liability arising out of the sub's work.
A COI that lists the GC as an additional insured in the certificate holder section is not the same as an actual additional insured endorsement on the policy. The certificate merely states who should receive notice; the endorsement modifies the policy to extend coverage. Always request the actual endorsement form (CG 20 10 or CG 20 37) as backup to the COI.
Waiver of Subrogation
Most construction contracts require subcontractors to carry a waiver of subrogation endorsement on their CGL and workers' comp policies. This prevents the sub's insurer from suing the GC to recover claim payments. Without this waiver, even if your contract has a solid indemnification clause, the sub's insurance carrier can pursue the GC for reimbursement after paying a claim.
Would You Pass an OSHA Inspection Today?
Free compliance check shows which certs are expired, which training records are missing, and what an OSHA inspector would flag. No signup required.
Five Coverage Gaps That Catch GCs Off Guard
Mid-project policy lapse
Sub misses a premium payment and coverage lapses for 5 days before renewal. The COI on file still shows the old expiration date.
Eroded aggregate
Sub has a $2M aggregate but has already paid out $1.4M in claims this policy year. Only $600K of coverage remains, but the COI still shows $2M.
Missing additional insured
COI lists the GC as certificate holder but the actual policy has no additional insured endorsement. The GC has no coverage under the sub's policy.
Classification mismatch
Sub's policy classifies their work as 'general carpentry' but they're performing structural steel erection on your project. The insurer can deny claims based on the classification mismatch.
Ghost workers' comp policy
Sub carries a workers' comp policy with zero payroll reported to get the minimum premium. If an employee is injured, the insurer can rescind coverage for material misrepresentation.
Manual COI Tracking vs. Automated Verification
Manual COI tracking follows a predictable pattern: the project coordinator collects COIs via email at the start of the project, logs expiration dates in a spreadsheet, and sets calendar reminders. This process breaks down at scale for several reasons.
First, COIs arrive in inconsistent formats. Some subs send ACORD 25 forms, others send ACORD 28, and some send direct carrier letters. Extracting coverage limits, endorsements, and expiration dates from each format requires manual reading, which introduces data entry errors.
Second, the volume overwhelms manual processes. A 20-sub project with five coverage lines per sub generates 100 expiration dates to track. Add mid-year policy renewals and you're managing 150+ dates across the project lifecycle. Calendar reminders don't scale.
Third, manual tracking can't detect mid-term cancellations. Unless you set up direct notice of cancellation from every sub's insurer (which most carriers won't do for certificate holders), you have no visibility into policy changes between renewal dates.
Automated COI tracking software solves these problems by extracting data from uploaded certificates using OCR/AI, setting tiered expiration alerts, and flagging coverage deficiencies against project-specific requirements. For the full comparison, see our compliance software vs. spreadsheets TCO analysis.
The COI Tracking Workflow for Construction Projects
An effective COI tracking workflow operates in four phases:
Phase 1: Pre-Contract Collection
Before executing the subcontract, collect the sub's current COI and verify it meets project requirements. This is a hard gate: no compliant COI, no executed contract, no mobilization. Use a subcontractor tracking platform with a self-service portal where subs upload COIs directly, eliminating the email chase.
Phase 2: Deficiency Resolution
When a COI doesn't meet requirements (coverage limits too low, missing additional insured endorsement, wrong policy classification), send a specific deficiency notice identifying exactly what needs to change. Generic "your insurance doesn't meet requirements" notices cause delays because the sub's agent doesn't know what to fix. Itemize each deficiency with the contract clause that requires it.
Phase 3: Continuous Monitoring
Once the project is underway, the system monitors expiration dates and sends tiered alerts (90/60/30/14 days before expiration). For workers' compensation specifically, verify that the sub's policy remains active each month, since WC policies can be cancelled for non-payment with only 10 days' notice in most states.
Phase 4: Renewal Verification
When a policy renews mid-project, verify the new COI against the same requirements as the original. Policy renewals sometimes change coverage limits, remove endorsements, or alter deductibles. Don't assume the renewal matches the expired policy. For related OSHA documentation requirements, see our subcontractor document management guide.
See FileFlo In Action
Try our interactive demo with real compliance scenarios. See exactly how FileFlo works. Takes 2 minutes, no signup required.
What to Look for in COI Tracking Software
AI-powered data extraction from ACORD 25/28 forms and carrier letters
Automatic coverage limit verification against project-specific requirements
Additional insured endorsement detection and flagging
Waiver of subrogation verification
Tiered expiration alerts (90/60/30/14 days) with configurable recipients
Sub self-service portal for direct COI uploads
Deficiency notice generation with specific gap identification
Dashboard showing project-wide insurance compliance status
Support for multiple projects with different coverage requirements per project
Audit trail documenting every COI received, reviewed, and approved
How FileFlo Handles COI Tracking
FileFlo's COI tracking is integrated into the broader subcontractor compliance platform, so insurance documents are tracked alongside OSHA cards, trade licenses, and prequalification packages in a unified system:
- AI document processing: Upload a COI (scan, photo, or PDF) and FileFlo extracts policy numbers, coverage limits, expiration dates, additional insured status, and endorsement details automatically.
- Project-specific requirements: Set different coverage thresholds per project. A $5M commercial project and a $500K residential renovation can have different CGL, umbrella, and auto requirements.
- Deficiency auto-detection: When a COI doesn't meet project requirements, FileFlo generates a specific deficiency report identifying each gap with the corresponding contract clause.
- Sub self-service portal: Subcontractors upload their own COIs, workers' comp certificates, and endorsement forms. No email chains, no lost attachments.
- Continuous monitoring: Tiered alerts at 90/60/30/14 days before expiration, with escalation to project managers when subs don't respond to renewal requests.
Stop Discovering Coverage Gaps After Incidents
One lapsed COI on one sub can expose your firm to seven-figure liability. FileFlo tracks every sub's insurance with AI-powered verification so you catch gaps before they become claims.
$299/month - No credit card required - 5-day free trial - Unlimited subcontractors
Subcontractor COI Tracking: FAQ
Common questions about certificate of insurance tracking and subcontractor insurance verification.
A certificate of insurance (COI) is a summary document (typically ACORD Form 25 or 28) that confirms a subcontractor's insurance coverage at a specific point in time. GCs need to track COIs because they are the primary evidence that subcontractors carry adequate insurance to cover claims arising from their work on the project. Without verified COIs, the GC's own insurance becomes the fallback for sub-caused incidents, and the GC can lose the risk transfer protection built into the subcontract.
Verify subcontractor insurance at three points: (1) before executing the subcontract (hard gate), (2) continuously during the project via automated expiration monitoring with 90/60/30/7-day alerts, and (3) at every policy renewal. Workers' compensation policies specifically should be verified monthly because they can be cancelled for non-payment with as little as 10 days' notice.
A certificate holder is simply the party that receives a copy of the COI, typically for informational purposes. Being listed as a certificate holder provides no coverage under the sub's policy. An additional insured is a party that has been added to the sub's policy via endorsement, giving them actual coverage for liability arising from the sub's work. Always verify the actual additional insured endorsement form (CG 20 10 or CG 20 37), not just the certificate holder listing.
If a sub's insurance lapses mid-project, the GC loses risk transfer protection for that sub's work. Any claims arising during the coverage gap fall on the GC's insurance or directly on the GC if the claim exceeds policy limits. Most subcontracts include a clause allowing the GC to suspend the sub's work and/or purchase insurance on the sub's behalf (at the sub's cost) if coverage lapses. The challenge is detecting the lapse, since standard COIs don't provide real-time notification of cancellations.
No. A COI is a summary document, not a guarantee of coverage. The COI can be accurate on the day it was issued but outdated within days if the policy is cancelled, modified, or the aggregate is eroded by claims. For critical verifications (additional insured status, waiver of subrogation), always request the actual endorsement forms from the sub's insurance agent. For ongoing monitoring, use automated tracking software that flags expirations and sends renewal requests automatically.
Related Articles
Continue learning about compliance and operational excellence