Set Up Certificate Tracking in Your First Month as Owner

Build one register that lists every certificate of insurance the business issues and every one it collects. Give one person ownership of it, and set reminders before each expiration date. A shared spreadsheet is enough for most small businesses, as long as it has the right columns and links to the endorsements and contracts behind each certificate. This guide is for new owners who inherited a pile of certificates, a few vendor portal logins and no system.

What is certificate tracking, and why start in month one?

A certificate of insurance (COI) is a one-page summary showing which policies and limits were in force on the day it was issued. Certificate tracking is simply keeping a current list of those summaries and acting before they go stale. It runs in two directions:

• Outbound: certificates your broker issues to customers, general contractors, landlords and lenders to prove your coverage. For lenders and landlords this often includes evidence of property insurance and the loss payee or mortgagee endorsement, which a liability certificate does not show.
• Inbound: certificates you collect from subcontractors and vendors to prove theirs.

Month one matters because closing can change much of what a certificate shows. In an asset deal your entity and policy numbers are new, and in any deal the broker or renewal dates may change. Customers will ask for new certificates within weeks, subcontractors will keep working, and your first audit will ask for proof. Cleaning up the seller's outstanding certificates is covered in certificates the seller issued. This guide is about the system that keeps it clean afterwards.

What columns should the certificate register have?

One spreadsheet with two tabs (outbound and inbound) works for most businesses with fewer than a few hundred holders and vendors. Use these columns:

Use the earliest expiration date on each certificate, because once one policy on it expires the certificate no longer proves everything the contract requires. If the business has a Small Business Administration (SBA) loan, the lender's property and loss payee requirements are covered in SBA lender insurance requirements. For how to read each box, see how to read a certificate.

What should I store besides the certificate itself?

A certificate alone proves little. Keep these in one folder per party, linked from the register:

• The certificate, with the date you received or sent it.
• The endorsements behind any additional insured, primary and noncontributory or waiver wording. A certificate cannot create that coverage; see why a certificate is not coverage.
• The contract's insurance exhibit, so anyone can check the requirement without hunting for the full agreement.
• Correspondence: requests, renewals and any written waiver of a requirement by the customer.
• For subs, the dates worked, so you can match certificates to audit periods later.

Keep inbound certificates and endorsements for at least the workers' compensation audit window. The standard workers' compensation policy allows audits for up to three years after the policy ends. For subs on finished jobs, keep them much longer. A claim about finished work can arrive years later. The sub's certificate and additional insured endorsement for the period it worked are how you send that claim to the sub's insurer. Ask your attorney how long that is in the states where you work.

Who should own certificate tracking?

Pick one person inside the business, often an office manager, controller or project coordinator. Their job is to keep the register current, not to issue certificates. Then set three rules:

1. Outbound requests go to the owner of the register, who sends them to your broker. Only your broker or carrier should issue certificates. Never edit one yourself; see can I make my own certificate.
2. Inbound certificates are a condition of new work, and of payment where your subcontract or vendor agreement allows it. Accounts payable checks the register before paying a sub or vendor that needs one; ask your attorney before holding back payment for work already done.
3. New contracts go to the broker before signing. The register owner adds the requirement the day the contract is signed.

If the seller's broker still services policies you kept, agree in writing who issues certificates until any broker of record change takes effect. If the policies have been replaced and the seller's broker still receives requests, ask it in writing to forward them to you and stop issuing on the old policies. One channel prevents conflicting certificates.

How should expiration reminders work?

Do not count on the certificate's cancellation box to warn you. Common certificate forms say notice will be delivered in accordance with the policy provisions, which often means the holder may never hear of a cancellation. If a contract requires advance notice of cancellation to the holder, ask your broker whether your carrier offers an endorsement that provides it; the certificate alone cannot. Your own tracking is the safety net. See notice of cancellation on certificates and renewal certificates mid-project.

What does a four-week setup plan look like?

• Week 1: Gather. Get the seller's broker's certificate holder list, vendor portal logins and the accounts payable list of subs and vendors for the last 24 months.
• Week 2: Build. Create the register, enter every holder and vendor, and attach the contracts' insurance exhibits. Mark anything missing.
• Week 3: Fix. Ask your broker to reissue outbound certificates from your current policies after any endorsement fixes. Request current certificates and endorsements from every active sub; see do your subcontractors carry the coverage your contracts require.
• Week 4: Lock in. Name the owner, set reminders, brief accounts payable and project managers, and review the first weekly status filter together.

A hypothetical example. A buyer acquires a commercial cleaning company with 60 customer sites and 12 regular subcontractors. In week one the seller's broker sends a list of 45 certificate holders; the buyer finds 15 more through two vendor portals and the receivables list. By week four the register shows 52 outbound certificates reissued, 8 waiting on an added waiver endorsement, 9 subs current and 3 paused until they send proof. From then on the office manager spends about an hour a week on it. The figures are illustrative only.

When is a spreadsheet no longer enough?

A spreadsheet works until the volume or the stakes outgrow it. Consider dedicated tracking software, or a service from your broker, when you have:

• hundreds of subs or holders
• customers that require uploads to several portals
• multiple locations or acquired companies to track
• audits that keep finding gaps

Holding companies doing add-ons often reach this point quickly; see consolidating insurance across add-on acquisitions.

Whatever tool you use, the habit matters more than the software: one register, one owner, contracts and endorsements behind every certificate. If it helps, Morrow can check your register against your current policies and key contracts and flag certificates that need fixing before they go out.

Keep reading

• Certificates the Seller Issued That Your Policy Does Not Back Up
• Do Your Subcontractors Carry the Coverage Your Contracts Require?
• How to Check Your Customer Contracts Against Your Policies
• Your First 90 Days of Insurance After Buying a Business: A Checklist
• All guides for new business owners

Frequently asked questions

What is the easiest way to track certificates of insurance?

For most small businesses, a shared spreadsheet with one tab for certificates you issue and one for certificates you collect, a weekly status filter and calendar reminders. Move to software when volume or portal requirements outgrow it.

How long should I keep subcontractor certificates?

At least as long as your policies can be audited; the standard workers' compensation policy allows audits for up to three years after the policy ends. For subs on finished jobs, keep certificates and additional insured endorsements much longer, because a claim about finished work can arrive years later and you need them to send it to the sub's insurer. Ask your attorney how long that is where you work.

Will the insurer tell my customer if my policy is canceled?

Not necessarily. Common certificate forms say notice will be delivered in accordance with the policy provisions, and many policies do not require notice to certificate holders. Keep your own register current rather than relying on the certificate.

Who should issue certificates for my business?

Your broker or the carrier. Route requests through one person in the business to your broker. Never edit a certificate yourself, because that can create legal exposure and does not change the coverage.

What should I do when a subcontractor's certificate expires?

Ask for a renewal certificate before the date, mark the sub as expired if it does not arrive, and pause new work until it does. Ask your attorney before withholding payment for work already performed. Keep the new certificate with the dates the sub worked for you.

References

• New York State Department of Financial Services: Certificates of Insurance
• IRMI: Certificate of insurance (definition)
• NCCI: Workers Compensation and Employers Liability Insurance Policy, WC 00 00 00 C, Part Five (Audit) (copy hosted by Guard)

This article is general information, not legal, tax or financial advice, and not a coverage determination. Coverage depends on the actual policy wording, carrier underwriting, your purchase agreement and your contracts. Ask your attorney and accountant about deal and legal questions.