COI insurance is shorthand for a certificate of insurance, a one-page document that proves a business carries active insurance coverage meeting specific requirements. If you’ve been asked to provide or collect one before signing a lease, starting a construction project, or onboarding a vendor, you’re looking at one of the most routine documents in commercial business. The certificate itself doesn’t change any policy or give anyone new rights under it, but without one, most contracts stall before work begins.
What a Certificate of Insurance Shows
A COI is a snapshot of an insurance policy at a specific point in time. It lists coverage types, policy numbers, effective dates, coverage limits, and the name of the insurer. It is not the policy itself. That distinction matters more than most people realize, because the standard language printed on every COI says exactly that: the certificate “is issued as a matter of information only and confers no rights upon the certificate holder” and “does not affirmatively or negatively amend, extend or alter the coverage afforded by the policies.” If a dispute arises, the actual policy controls.
The insurance industry standardized these documents through ACORD, which publishes certificate forms used across states. The most familiar is the ACORD 25 for liability coverage, with other forms covering property, vehicles, marine, and other lines.1ACORD. Certificates of Insurance Frequently Asked Questions
Certificate Holder vs. Additional Insured
This is where most confusion lives, and getting it wrong can leave you unprotected when it counts. A certificate holder simply receives the COI as proof that coverage exists. That’s it. Being named as a certificate holder gives you no coverage under the other party’s policy and no right to file a claim on it. You’re just holding a piece of paper that says “yes, they have insurance.”
An additional insured actually gains coverage under the policyholder’s policy through an endorsement. If you’re named as an additional insured, you can file claims under that policy for covered losses arising from the named insured’s work. A landlord who requires a tenant’s COI typically wants to be listed as an additional insured, not just a certificate holder, because only the additional insured status provides actual protection if someone gets hurt on the premises due to the tenant’s operations.
When reviewing a COI, check the “Description of Operations” section near the bottom. That’s where additional insured status, special endorsements, and project-specific details appear. If you asked to be named as an additional insured and it doesn’t show up there, the certificate doesn’t do what you think it does.
Coverages Typically Listed on a COI
A COI can list several coverage lines, depending on what the contract or business relationship requires. The most common ones follow a predictable pattern.
- Commercial general liability (CGL) covers bodily injury and property damage claims from business operations. The most common limits are $1 million per occurrence and $2 million aggregate per policy period, which is also the standard minimum most commercial contracts and leases require.
- Workers’ compensation covers medical expenses and lost wages for employees injured on the job. Nearly every state requires businesses with employees to carry this coverage, though a handful of states make it optional for certain private employers. The COI shows coverage at statutory limits, meaning whatever the applicable state law requires.
- Commercial auto liability covers accidents involving business-owned vehicles. Most commercial contracts require a $1 million combined single limit. Interstate motor carriers face significantly higher federal minimums enforced by the Federal Motor Carrier Safety Administration, filed through forms like the BMC-91X.2FMCSA. Insurance Filing Requirements
- Professional liability, sometimes called errors and omissions, covers claims of negligence or inadequate professional work. This matters most for service-based businesses like consultants, architects, and technology firms. Limits vary widely based on industry risk.
- Property insurance protects physical assets like buildings, equipment, and inventory. Limits typically reflect the replacement value of covered assets.
- Umbrella or excess liability provides additional coverage above the limits of underlying policies. Contracts for large projects or high-risk work often require umbrella coverage of $5 million or more.
What Contracts Typically Require
When a contract specifies insurance requirements, it’s usually asking for three things: minimum coverage limits, additional insured status for the requesting party, and sometimes special endorsements.
Minimum Limits and Additional Insured Status
Construction contracts are the most demanding. A general contractor hiring subcontractors will typically require CGL limits of at least $1 million per occurrence and $2 million aggregate, plus workers’ compensation at statutory limits and commercial auto at $1 million. The contract will almost always require the general contractor to be named as an additional insured on the subcontractor’s policy. Federal government contracts impose their own insurance mandates, with specific coverage types and minimum amounts depending on the nature of the work.3Acquisition.GOV. Federal Acquisition Regulation Subpart 28.3 – Insurance
Real estate leases follow a similar pattern. Landlords require tenants to carry general liability insurance and name the landlord as an additional insured. Property managers require COIs from every contractor who sets foot on the premises, from cleaning crews to landscapers to renovation teams.
Waiver of Subrogation
A waiver of subrogation is an endorsement you’ll see requested in many construction and leasing contracts. Normally, if an insurer pays a claim, it has the right to sue whoever caused the loss to recover what it paid. A waiver of subrogation gives up that right. The practical effect: if the insurer pays for damage caused by the other party to the contract, the insurer can’t turn around and sue that party. Both sides agree to let their own insurance absorb their own losses. This endorsement gets added to the policy and then noted on the COI.
Cancellation Notice
Contracts often require advance written notice if the insured’s policy is canceled, so the certificate holder isn’t left unknowingly exposed. The most common notice period is 30 days, though some states extend this to 60. For nonpayment of premiums, the notice period is typically shorter, often 10 days. Keep in mind that the ACORD 25 form’s standard language no longer obligates the insurer to notify certificate holders of cancellation. If cancellation notice matters, the contract itself needs to address it, and the underlying policy endorsement should back it up.
How to Get a COI
Getting a certificate is straightforward and typically free. You don’t pay extra for the document itself since it’s a standard service included with your policy. Contact your insurance agent, broker, or your insurer’s online portal and request a certificate. Most insurers can generate one within minutes through their digital platforms. You’ll need to provide the certificate holder’s name and address, any specific language or endorsements the contract requires, and the project or location details if applicable.
If the requesting party wants you named as an additional insured or needs a waiver of subrogation endorsement, those are policy changes that your insurer or agent handles. The endorsement gets added to the policy first, then the COI reflects it. Some endorsements may carry a small additional premium, but many insurers include blanket additional insured endorsements in their standard CGL policies at no extra charge.
Turnaround time depends on complexity. A basic COI showing existing coverage takes minutes. Adding endorsements or increasing limits might take a day or two while the insurer processes the change.
When a COI Expires
A certificate is only valid for the policy period shown on it. When the underlying policy expires, the certificate becomes worthless. There is no automatic renewal of the COI itself. If a policy renews, a new certificate must be issued reflecting the new policy dates.
For businesses managing dozens or hundreds of vendor relationships, tracking COI expirations is one of the biggest operational headaches. A vendor whose coverage lapses during an active project creates direct liability exposure for the hiring company. Best practice is to start the renewal request process at least 60 days before a vendor’s COI expires, which builds in enough time for the vendor to contact their agent, process any changes, and issue a fresh certificate without a gap.
Digital COI management platforms automate expiration alerts, send renewal reminders at set intervals (typically 60, 30, and 15 days before expiration), and allow real-time verification of coverage status.
How to Spot an Invalid or Fraudulent Certificate
Fraudulent COIs are a real problem, particularly in construction, where subcontractors sometimes alter certificates to show coverage they don’t actually have. The consequences fall on whoever relied on the fake certificate. If a subcontractor’s COI is fraudulent and a worker gets injured, the general contractor’s own workers’ compensation policy often ends up covering the claim, which drives up the GC’s premiums and invites lawsuits from other parties on the project.
Red flags include an insurer name you don’t recognize, contact information that doesn’t check out, coverage limits that seem unusually high for the type of business, or policy dates that conveniently match the exact contract period with no prior coverage history. Expired policies showing as active are the most common form of invalid certificates, and they’re also the easiest to catch.
To verify a COI, call the issuing insurance company directly using a phone number you find independently, not the number on the certificate itself. Ask the insurer to confirm the policy number, named insured, coverage limits, and effective dates. You can also check whether the insurance company is financially stable through AM Best’s rating service. If the insurer listed on the certificate doesn’t appear in AM Best’s database, that’s a serious warning sign.
Forging or materially altering a certificate isn’t just a breach of contract. Under 18 U.S.C. ยง 1033, anyone engaged in the insurance business who knowingly makes a false material statement, creates a false entry, or engages in fraudulent conduct affecting interstate commerce faces up to 10 years in federal prison and fines, with the maximum rising to 15 years if the fraud jeopardizes an insurer’s solvency.4Office of the Law Revision Counsel. 18 USC 1033 – Crimes by or Affecting Persons Engaged in the Business of Insurance Most states have their own insurance fraud statutes as well.
What a COI Does Not Do
A few misconceptions about COIs cause real problems in practice. The certificate does not guarantee coverage for a specific claim. It shows what coverage existed at the time the certificate was issued, but the actual policy contains exclusions, conditions, and limitations that the one-page certificate can’t capture. A COI showing $2 million in general liability coverage doesn’t mean every claim will be paid up to $2 million.
The certificate also does not bind the insurer to maintain coverage. If the insured stops paying premiums and the policy cancels, the COI becomes a historical artifact. Certificate holders who assume they’ll be automatically notified of cancellation are often wrong, because the standard ACORD form language explicitly disclaims any obligation to provide notice. Contractual cancellation notice requirements only work if they’re backed by a policy endorsement, and even then, enforcement can be inconsistent.
Finally, a COI does not substitute for reading the actual policy. When coverage matters, when you’re taking on a high-value project, entering a long-term lease, or hiring contractors for hazardous work, request and review the policy itself or at least the declarations page and relevant endorsements. The certificate is a starting point, not the final word.