Certificate of insurance tracking is the process of collecting, verifying, and monitoring insurance documents from vendors, subcontractors, tenants, or carriers — so you always know which third parties are compliant and which ones have lapsed coverage.
If you manage subcontractors on a job site, tenants in a building, or carriers in a fleet, one expired COI can cost you a claim, a lawsuit, or an audit finding. This guide walks through what to track, how to track it without a spreadsheet that nobody maintains, and what to look for in COI tracking software.
What a certificate of insurance actually proves
A certificate of insurance (most often an ACORD 25 form in the US) is a one-page snapshot of an insurance policy. It tells you:
- Who the insured party is
- What types of coverage they hold (general liability, auto, workers’ comp, professional liability, umbrella)
- Coverage limits per occurrence and in the aggregate
- Effective and expiration dates
- The insurance carrier and policy number
- Whether you are listed as an additional insured
A COI is not the policy itself. It is a summary issued by the broker. That matters because limits, endorsements, and exclusions on the actual policy can differ from what the certificate shows — which is why thorough COI tracking includes endorsement pages, not only the cover sheet.
Why COI tracking matters
The costs of weak COI tracking are easy to ignore until they aren’t:
- Uninsured loss. If a subcontractor causes damage and their policy lapsed last month, your insurer pays — and your premiums go up.
- Audit exposure. Workers’ comp and general liability audits look at every 1099 you paid. If you cannot produce a valid COI for that vendor on the date they worked, the auditor classifies the payment as payroll and you owe back premium.
- Contractual default. Most master services agreements require you to maintain proof of insurance for every active vendor. A missing COI is a breach.
- Project delays. General contractors block subcontractors from the site if their COI isn’t current. A two-hour scramble to find a renewed certificate is a two-hour delay for the whole crew.
The shift from “we should track this” to “we have to track this” usually happens after one expensive incident. The point of this guide is to help you skip the incident.
What to collect for full COI tracking
A complete COI tracking process collects more than the certificate. For each vendor, subcontractor, or tenant, request:
- The ACORD 25 (or equivalent) with all coverage types your contract requires
- Additional insured endorsement (often an ACORD 855 or insurer-specific form) naming your company
- Waiver of subrogation endorsement if your contract requires it
- Workers’ compensation certificate if they have employees
- Auto liability certificate with hired and non-owned auto coverage if they drive on your behalf
- Umbrella or excess liability certificate if coverage limits stack
- W-9 form to confirm the legal entity and tax ID matches the named insured
For a deeper checklist of compliance documents specific to construction, see our construction compliance documents guide. For subcontractor onboarding more broadly, our subcontractor prequalification checklist covers the rest of the file.
The five stages of COI tracking
Most organizations follow this lifecycle, whether they realize it or not:
1. Request
Trigger a COI request when you onboard a new vendor, sign a new lease, or hire a new carrier. The request should specify exactly which coverages and limits you need, who must be named as additional insured, and the deadline.
2. Receive
Capture the certificate in a system where you can find it later. A shared inbox is not that system — attachments get buried, and nobody knows which version is current.
3. Verify
Confirm three things on every certificate:
– Limits meet your contract requirements
– Your company is named as additional insured (and the endorsement form is attached, not just a checkbox on the ACORD)
– The effective dates are current and the certificate has not been issued for a stale policy term
4. Store
Save the certificate, the endorsements, and any related documents (W-9, signed MSA, certifications) against the vendor record. You should be able to answer “show me every active COI on July 12th” in under a minute.
5. Renew
Most policies run for 12 months. Set a reminder 30 days before expiration so you have time to chase the broker before coverage lapses. Track who you reminded, when, and whether they responded.
How to track COIs without losing your mind
The spreadsheet phase works until you hit roughly 30 vendors. After that, three things break: you forget to renew, you forget who has been chased, and you cannot produce a current certificate in an audit because the most recent file is buried in someone’s inbox.
What good COI tracking looks like in practice:
- A single source of truth — one place where every active vendor’s COI lives, indexed by expiration date
- Automated renewal reminders — both to your team and to the vendor, sent on a schedule (60, 30, 14 days out)
- Status visibility — at a glance you see who is compliant, who is expiring soon, and who has lapsed
- A portal vendors actually use — if the upload step is painful, they will email you instead, and you are back to the inbox problem
- Audit-ready exports — when an auditor or insurer asks, you can pull a CSV of every COI with effective and expiration dates without rebuilding the report
If you have ever tried to collect documents from clients without email, you already know why a portal beats inbox-based collection.
What to look for in COI tracking software
Some teams build COI tracking on a CRM, others on a spreadsheet plus calendar reminders, and a growing number use purpose-built document expiration tracking software. If you are evaluating tools, here are the features that matter most:
| Feature | Why it matters |
|---|---|
| Expiration date tracking per document | The whole point — without this, you are back to a calendar |
| Automatic reminders before expiration | Gives vendors time to renew and you time to chase |
| Branded vendor portal | Vendors are far more likely to upload through a portal that looks like your company |
| Bulk import of vendors | If you are migrating off a spreadsheet, you need this on day one |
| Multiple document types per vendor | COI, endorsements, W-9, MSA all in one place |
| Audit log of who uploaded what when | For insurance audits and internal compliance reviews |
| API and webhooks | So your COI status flows into your accounting or job-costing system |
| Repeatable workflows | Because every renewal is the same process, run again |
Superdocu handles all of these out of the box. Vendors get a branded portal with no password, you set the expiration dates and reminder schedule once, and the system automatically nudges anyone whose COI is approaching expiration. When the renewed certificate is uploaded, the expiration date resets and the workflow continues.
A simple COI tracking workflow you can copy
Here is a workflow you can replicate today, whether you build it in Superdocu or somewhere else:
Step 1 — Vendor information form
Collect legal name, tax ID, contact name, contact email, scope of work, contract start date.
Step 2 — Insurance requirements acknowledgment
Display a one-page summary of the coverages and limits you require. Have the vendor acknowledge they have read it.
Step 3 — Document uploads
Request the COI, additional insured endorsement, waiver of subrogation (if required), and W-9. Each document has its own expiration date field.
Step 4 — Internal review
Your compliance team verifies coverages, limits, and named insured details. Approve or reject with a reason.
Step 5 — Renewal reminders
60 days before expiration, the system emails the vendor. 30 days out, it emails again and copies your team. 14 days out, it flags the vendor as “watch” on your dashboard.
Step 6 — Renewal upload
The vendor uploads the new certificate. The reviewer approves it. The expiration date updates automatically. The cycle continues.
That is the entire process, repeated across every active vendor, without anyone touching a spreadsheet.
Common COI tracking mistakes
A few patterns we see often:
- Treating the COI as a one-time onboarding step. Coverage lapses on the same schedule whether you remember to check or not.
- Accepting the certificate without the endorsement. “Additional Insured” being checked on the ACORD does not guarantee you are actually named on the policy. The endorsement is the binding document.
- Storing COIs in email attachments. When the bookkeeper who set up the system leaves, so does access to the certificates.
- Renewing only when the vendor reminds you. They won’t. Their broker might, but the broker’s reminder goes to the vendor, not to you.
- No proof of who chased whom. When something goes wrong, you want an audit trail of every reminder you sent and every response you received.
Frequently asked questions
What is COI tracking?
Certificate of insurance tracking is the process of collecting insurance certificates from third parties (vendors, subcontractors, tenants, carriers), verifying that they meet your contract requirements, storing them in a central system, and automatically reminding everyone before they expire.
How often should COIs be reviewed?
Verify every COI on receipt and at every renewal — usually annually, since most commercial policies run for 12 months. In addition, run a quarterly compliance review of your full vendor list to catch any certificates that slipped through.
What’s the difference between a COI and an additional insured endorsement?
The COI is a summary of the policy. The additional insured endorsement is the binding document that adds your company to the vendor’s policy. The endorsement is what gives you protection — the certificate is just evidence that it exists.
Can I track COIs in a spreadsheet?
For under 30 vendors, yes. Above that, the renewal reminders and audit history become harder to manage manually, and most teams move to a document collection platform with expiration tracking built in.
Does Superdocu support COI tracking?
Yes. Superdocu lets you build a vendor onboarding workflow that requests the COI and supporting documents, captures expiration dates, sends automatic renewal reminders, and gives your team a dashboard view of who is compliant, expiring soon, or lapsed.
Get COI tracking off your plate
Manual COI tracking is one of those tasks that scales linearly with your vendor count — every new subcontractor adds another renewal date to remember. A workflow-based system flips that: the work goes up once when you set it up, then stays roughly flat as you grow.
Try Superdocu free for 7 days and set up your first COI tracking workflow today: start your free trial. No credit card required.