How Property Managers Track Vendor Certificates of Insurance

Every property manager hires vendors: roofers, HVAC techs, landscapers, plumbers, elevator servicers, pool maintenance crews. Each one steps onto property you're responsible for, does work that can cause injury or damage, and leaves. When something goes wrong, the first question everyone asks — the injured party's attorney, your insurer, the owner — is whether that vendor carried valid insurance at the moment of the incident. If the answer is no, the exposure often lands on the property.

That's why certificate of insurance (COI) tracking isn't paperwork. It's risk control. This article covers why lapsed vendor coverage becomes the property's problem, what to collect from each trade, and how to build a system that actually keeps certificates current.

Why a Lapsed Vendor COI Becomes Your Liability

A certificate of insurance is a snapshot. It proves a vendor had coverage on the date the certificate was issued — not that they still have it today. Policies get cancelled for non-payment, lapse at renewal, or get downgraded to limits that no longer meet your requirements. A COI you collected 11 months ago tells you almost nothing about coverage right now.

When an uninsured vendor causes a loss, the claim doesn't disappear. It follows the deepest available pocket, and on a managed property that frequently means the owner, the association, and the management company. If you also failed to verify coverage you were supposed to require, you've added a second problem: it looks like a lapse in your own duty of care.

This is general information, not legal or insurance advice. But the underlying principle is simple and consistent: the value of a COI is entirely tied to whether it's current. Tracking is what turns a static document into ongoing protection.

What to Collect From Each Vendor

Not every trade carries the same risk, but a baseline applies to almost all of them. For each vendor, you generally want:

• Commercial General Liability (CGL) — covers bodily injury and property damage from the vendor's operations. This is the core policy for nearly every vendor.
• Workers' Compensation — covers the vendor's own employees if they're injured on your property. Without it, an injured worker may look to the property for recovery.
• Commercial Auto — relevant for any vendor driving on-site: landscapers with trailers, delivery-based suppliers, snow removal.
• Umbrella / Excess Liability — additional limits above the primary policies, often required for higher-risk work like roofing or anything at height.

Then confirm the details that make a certificate meaningful:

1. Adequate limits. Set minimums appropriate to the work. A landscaper and a roof-replacement crew shouldn't carry identical requirements.
2. Additional insured status. The property owner and management company should be named as additional insureds on the CGL, so the vendor's policy responds on your behalf for claims arising from their work.
3. Current policy dates. The effective and expiration dates must cover the entire period the vendor is working on-site.
4. Correct named insured. The entity on the certificate must match the entity you actually contracted with — a common gap when a vendor uses subcontractors or a differently named DBA.
5. Waiver of subrogation, where your agreements require it, which prevents the vendor's insurer from turning around and coming after the property.

Match requirements to risk by trade. Roofers and anyone working at height, HVAC crews handling refrigerants and electrical, and elevator servicers typically warrant higher limits and umbrella coverage. Landscapers and pool crews should carry solid CGL, workers' comp, and auto where vehicles are involved.

The Hidden Failure Point: Expiration

Most property managers collect a COI before a vendor starts. Far fewer track what happens next. Policies commonly run 12-month terms, and vendors rarely send you the renewal certificate on their own. So the certificate you have quietly expires, the vendor keeps showing up, and the coverage gap goes unnoticed until a claim exposes it.

A real system watches expiration dates and pushes for renewal certificates before coverage lapses — not after. That single shift, from collecting once to monitoring continuously, is what separates a compliant property from an exposed one.

Building a System That Actually Holds

You don't need enterprise software to start, but you do need discipline. A workable process looks like this:

1. Build a vendor roster. List every vendor with property access, the work they perform, and your insurance requirements for that category of work.
2. Set requirements in writing. Put coverage types, minimum limits, and additional-insured language into your vendor agreements so the COI has something concrete to satisfy.
3. Collect before first access. No certificate, no work. Make it a hard gate, not a follow-up item.
4. Verify, don't just file. Check limits, dates, named insured, and additional-insured status against your requirements when each certificate comes in.
5. Record every expiration date. This is the field that matters most, and the one spreadsheets lose track of.
6. Chase renewals early. Request updated certificates ahead of expiration — a 30-to-60-day lead time is reasonable.
7. Escalate non-compliance. Decide in advance what happens when a vendor won't produce a current COI: suspended access, withheld payment, or removal from the approved list.

Spreadsheets can run this for a handful of vendors, but they don't remind you of anything. As your vendor count grows, manual tracking becomes the weak link — a missed expiration is invisible until it isn't. Purpose-built COI tracking software automates the part people forget: watching expiration dates and prompting for renewals so nothing lapses silently. Tools designed for COI tracking for property managers also centralize certificates across every property and vendor, so an auditor, owner, or your own insurer can see compliance status at a glance.

Make It Routine, Not Reactive

The properties that stay protected treat COI tracking as an ongoing operational habit, not a scramble after an incident. Set requirements once, gate access on a current certificate, monitor expirations continuously, and escalate when a vendor falls out of compliance. Done consistently, it fades into the background — which is exactly where risk control belongs.

If you'd rather stop tracking expiration dates by hand, you can try TradeGuard free for 14 days at trade-guard.pro/signup and see how automated reminders fit your properties. No pressure — set it up, add a few vendors, and decide for yourself.