The 2026 Property Manager's Guide to Vendor COI Compliance

Vendor COI compliance is one of the most operationally important — and most consistently neglected — workflows in property management. Done well, it protects you from six-figure liability exposure when a contractor's work causes property damage or injury. Done poorly (the spreadsheet-and-hope approach), it produces a paper trail that won't hold up in litigation.

This is the operational playbook for property managers tracking 30-300 vendor COIs across multiple trades, multiple states, and multiple properties. We cover the requirements that actually matter, the verification steps that catch real problems, the carrier validation logic everyone skips, and the point at which you graduate from spreadsheets to automation.

Key Takeaways

• The 5 things that actually matter on a COI (in priority order): General Liability limits, Workers' Compensation status, Additional Insured endorsements (CG 20 10 + CG 20 37), Waiver of Subrogation (CG 24 04), Carrier financial strength (A.M. Best A- minimum).
• The 6-step verification process that catches 95% of compliance gaps: structural validation, named-insured match, endorsement form-number check, carrier rating lookup, limit compliance, and expiry validation.
• Trade-specific requirements vary 3-5x — an electrician's GL limits should be different from a janitorial vendor's. Use our free generator to produce trade-specific requirements.
• State-specific overrides matter for Workers' Comp class codes (NCCI vs state-monopoly systems), CA/NY/PA/MA/MN/DE/NJ/WI have their own systems. See state requirements.
• The spreadsheet ceiling is ~25 vendors. Beyond that, expiry tracking + endorsement verification + carrier rating validation breaks down. Automation pays for itself at that volume.
• The COI Grader catches 90%+ of the issues a manual review misses — run any COI through it free.

Why COI Compliance Matters More Than Most PMs Realize

The standard answer — "to transfer liability to the vendor's insurance" — is technically correct but understates the operational stakes. Specifically:

1. Subrogation risk. Without a waiver of subrogation endorsement (CG 24 04 or WC 00 03 13), the vendor's insurance can sue your property's insurance after paying a claim. Your premiums rise even though you weren't at fault.

2. Additional insured gaps. Without both CG 20 10 (ongoing operations) AND CG 20 37 (completed operations) endorsements, you're only protected during the work — not afterward. Latent defects from electrical work or roofing 18 months later? You're exposed.

3. Carrier insolvency. A COI from a B- or C-rated carrier looks compliant on paper. When the claim hits and the carrier can't pay, you have a worthless certificate. A.M. Best A- minimum is industry standard for property management for a reason.

4. State-specific Workers' Comp exposure. Hiring an "independent contractor" without WC coverage in monopolistic states (Ohio, Washington, Wyoming, North Dakota) creates personal liability if they're injured. Many property managers don't realize this distinction exists.

5. Lender requirements. Most commercial property loans require vendor COI compliance as a covenant. Lapses can trigger technical default — not common, but real.

The 5 Things That Actually Matter on a COI

When you receive a COI, the temptation is to glance at the limits and file it. Don't. Here's the priority order:

1. General Liability limits

The standard floor for most property management is $1M per occurrence / $2M aggregate. High-risk trades (electrical, roofing, elevator, fire protection) warrant higher — $2M / $4M is increasingly standard for these. Very-high-risk work (demolition, asbestos abatement) may need $5M+. See trade-specific GL minimums.

Per-occurrence vs aggregate matters: per-occurrence is what the carrier pays for a single incident; aggregate is the total they'll pay across all incidents during the policy period. A vendor with $1M / $1M (same per-occurrence and aggregate) effectively has one shot — if they cause one $1M claim, they have $0 coverage left for the rest of the policy period.

2. Workers' Compensation status

Required in all 50 states except Texas (where it's technically optional but functionally required for any vendor entering commercial property). Verify:

• Coverage is in force (not just "applied for")
• The class codes match the actual work — an electrician with class code 8810 (clerical) instead of 5190 (electrical wiring) is either misclassified or fraudulent
• In monopolistic states (Ohio, Washington, Wyoming, North Dakota), the policy is with the state fund, not a private carrier

For specifics by state, see state requirements.

3. Additional Insured endorsements (CG 20 10 + CG 20 37)

Both are required for full coverage:

• CG 20 10 — Additional Insured for ongoing operations (covers you while the work is being performed)
• CG 20 37 — Additional Insured for completed operations (covers you after the work is finished — critical for latent defects)

A COI that names you additional insured "by blanket endorsement" without specifying the form is ambiguous and often missing CG 20 37. Always require the actual form numbers, not the certificate's checkbox.

Alternative blanket forms (CG 20 33, CG 20 38) cover both ongoing and completed via a single endorsement but require the underlying contract to name you. Acceptable, but the contract language matters.

4. Waiver of Subrogation (CG 24 04 / WC 00 03 13)

• CG 24 04 — Waiver on the General Liability policy
• WC 00 03 13 — Waiver on the Workers' Comp policy

Without these, the vendor's insurer can subrogate against your insurer after paying a claim — meaning your premiums rise even when the loss wasn't your fault. Standard practice for commercial property management is to require both.

5. Carrier financial strength

The COI is only as good as the carrier behind it. Require A.M. Best A- or better at minimum; A or better for high-risk trades or large contract values.

Check the carrier name against the A.M. Best rating registry. A surprising number of COIs come back with unrated regional carriers or B-rated surplus-lines carriers — both are red flags that the vendor couldn't get coverage from a top-tier insurer.

The 6-Step Verification Process

This is the workflow that catches the issues spreadsheets miss:

1. Structural validation. Is this an ACORD 25 (the standard COI form)? Does it have all required sections filled in? Many fraudulent COIs are subtly wrong in formatting.

2. Named-insured match. Does the "Certificate Holder" section list your organization correctly? Many COIs are made out to a previous property manager or to the wrong legal entity.

3. Endorsement form-number check. Does the COI explicitly cite CG 20 10, CG 20 37, CG 24 04 by form number? Or does it just check the "Additional Insured" and "Waiver of Subrogation" boxes without specifying forms? Check the explicit forms — that's what an insurance adjuster will look at after a loss.

4. Carrier rating lookup. Pull the A.M. Best rating for every listed carrier. Flag B-rated or unrated carriers.

5. Limit compliance. Compare the per-occurrence and aggregate limits to your trade-specific requirements. A janitorial vendor with $1M/$2M is probably fine; an electrician with the same limits is under-insured.

6. Expiry validation. Note the policy expiration dates. Set reminders 30, 14, 7, and 1 day before expiry — and verify the renewal COI arrives before the lapse, not after.

The COI Grader automates steps 1-5 in under 30 seconds. Step 6 (expiry tracking) is what COIPulse the product handles continuously across all your vendors.

Trade-Specific Requirements

Generic "$1M GL, WC required" templates miss trade-specific risk. Real-world requirements vary 3-5x across trades:

• Electricians: $1M/$2M GL minimum; $2M/$4M for panel/rewire work. WC class code 5190. Fire and shock risk drives higher requirements.
• Plumbers: $1M/$2M GL standard; water damage coverage clarification on policy.
• HVAC contractors: $1M/$2M GL; refrigerant handling certification (EPA 608); rooftop work warrants fall protection verification.
• Roofing contractors: $2M/$4M GL minimum; completed operations critical; warranty language in the contract matters.
• General contractors: $2M/$4M GL minimum; subcontractor flow-down requirements; project-specific aggregates.
• Painting: $1M/$2M GL standard.
• Landscaping: $1M/$2M GL; auto coverage if they use trucks on-site.
• Janitorial/cleaning: $1M/$1M acceptable for routine; janitorial bond consideration for high-value properties.
• Fire protection: $2M/$4M GL minimum; system certification (NICET, NFPA) required.
• Elevator contractors: $2M/$4M GL; state elevator inspector certification.

For all 20 trades with specific GL minimums, NCCI class codes, recommended additional coverages, and additional insured endorsement language, use our free COI Requirements Generator — pick a trade, get a customized print-ready requirements document.

State-Specific Overrides

Workers' Comp class codes and limits vary by state. Eight states use their own systems instead of NCCI:

• California — uses its own Workers' Comp rating bureau (WCIRB), different class codes
• New York — NYWCRB class codes (similar to NCCI but distinct)
• Pennsylvania — PCRB class codes
• Massachusetts — Workers' Compensation Rating and Inspection Bureau (WCRIB)
• Minnesota — Minnesota Workers' Compensation Insurers Association (MWCIA)
• Delaware — Delaware Compensation Rating Bureau
• New Jersey — New Jersey Compensation Rating and Inspection Bureau
• Wisconsin — Wisconsin Compensation Rating Bureau

Plus monopolistic states (Ohio, Washington, Wyoming, North Dakota) where Workers' Comp is purchased from the state fund only — private-carrier WC policies are not valid in these states.

For state-by-state requirements including auto and GL specifics, see state requirements. Per-state overrides layer on top of trade-defaults — a Texas electrician has different requirements than a California electrician.

The Spreadsheet Ceiling

Most property managers start with a spreadsheet. It works fine for the first 10-15 vendors. Past that, the cracks start:

• At ~25 vendors, expiry tracking breaks down. You miss renewals. Vendors operate uninsured on your property.
• At ~50 vendors, endorsement verification becomes infeasible. You start trusting checkboxes instead of form numbers.
• At ~100 vendors, carrier rating lookup is skipped entirely. You're effectively accepting any carrier.
• At ~200+ vendors, the spreadsheet becomes a security theater — it exists but no longer reflects reality.

This isn't a tools problem; it's a math problem. Each vendor requires ~30 minutes of careful initial review plus 5-10 minutes per renewal. A 200-vendor portfolio at one renewal per year per vendor = 33 hours/year of pure renewal review, plus 100 hours of initial reviews, plus reactive verification when claims happen.

At that point, automation pays for itself. See the COI ROI calculator for the specific math on your portfolio size.

What COIPulse Automates

COIPulse handles the operational layer that breaks under spreadsheet load:

• AI extraction of 24+ fields per COI — including the specific ISO endorsement form numbers (CG 20 10, CG 20 37, CG 20 33/38, CG 25 03/04, WC 00 03 13). No manual reading.
• Carrier financial strength verification against an A.M. Best registry. Every insurer matched against current rating; flag unrated or below-threshold carriers.
• Named insured + entity verification — checks that the certificate names your organization correctly.
• 50-state compliance templates — pre-configured Workers' Comp, auto, and GL requirements per state.
• Per-trade + per-project rules — rule stack: org default → trade template → state override → project override.
• Vendor self-service portal — each vendor gets a unique token-based portal showing current compliance status, deficiency reasons, requirements, and upload history. No login required.
• Multi-step outreach campaigns — define escalation sequences (Day 0 deficiency → Day 7 reverification → Day 14 final), enroll any set of vendors.
• Automated expiry reminders — 30, 14, 7, 1 day before, plus weekly expired notices.
• Compliance trend analytics — daily snapshots drive time-series compliance rate.

See pricing — most teams running this manually save 15-30 hours/month.

The Free Tools to Start With

Even if you're not ready for COIPulse, three free tools cover the most common compliance gaps:

1. COI Requirements Generator — pick a trade, get customized GL/WC/AI requirements + endorsement language. Print-ready as a contract exhibit.

2. COI Grader — upload an actual COI and get an instant compliance score against trade-and-state rules.

3. COI ROI Calculator — calculate hours saved + financial risk reduction of automating COI tracking vs spreadsheets.

All three run in your browser, no signup. They cover most of the operational gaps that drive property managers to eventually upgrade.

The 30-Day Compliance Audit

If you're inheriting a property management portfolio with sketchy COI hygiene, here's the 30-day fix:

Week 1: Discovery. Pull every active vendor file. Build the master list. Identify vendors with missing or expired COIs.

Week 2: Hard requirements. Send a 30-day notice to every non-compliant vendor: "Submit a current COI with X, Y, Z by [date] or you can't access the property." Be specific about the missing items.

Week 3: Verification. As COIs arrive, run them through the COI Grader. Flag the ones with sub-A.M. Best A- carriers, missing endorsements, or under-limit policies. Send specific deficiency notices.

Week 4: Enforcement. Vendors still non-compliant: pause their access. This is the only enforcement mechanism that actually works. Documentation > collaboration when the chips are down.

Day 31: Set up renewal reminders for every COI you accepted. The 30-day audit produces a clean baseline; ongoing compliance is a different muscle. Most teams who do the 30-day audit move to automation within 60 days because the manual workload of maintaining the baseline is brutal.

Key Takeaways

• The 5 things on a COI that actually matter: GL limits, WC status, AI endorsements (CG 20 10 + CG 20 37), Waiver of Subrogation (CG 24 04), carrier A.M. Best rating ≥A-.
• The 6-step verification process: structural validation, named-insured match, endorsement form-number check, carrier rating lookup, limit compliance, expiry validation.
• Trade-specific requirements vary 3-5x. A janitorial vendor's $1M/$1M is fine; an electrician's isn't.
• State-specific Workers' Comp rules apply in 8 NCCI-exempt states + 4 monopolistic states.
• Spreadsheet ceiling is ~25 vendors. Beyond that, manual tracking becomes security theater.
• Free tools cover meaningful ground. Start with the Requirements Generator, COI Grader, and ROI Calculator before moving to paid software.
• The 30-day audit fixes inherited messes; ongoing automation prevents new ones.