If you've ever been asked to "provide a certificate of insurance" before starting a job, signing a lease, or working with a new client, you've run into one of the most misunderstood documents in business. A certificate of insurance, or COI, gets treated by a lot of small business owners as a stamp of approval — proof that everything is covered and everyone is protected. It isn't quite that, and knowing the difference matters.
What a Certificate of Insurance Actually Is
A COI is a summary document issued by an insurance company or broker that lists the policies a business currently holds — the type of coverage, the policy number, the coverage limits, and the effective dates. It's generated on request, usually within a day or two, and it's meant to give a third party a quick snapshot of someone's insurance status without handing over the entire policy.
That's it. It's a summary, not a contract, and not a guarantee.
What It Proves
A COI is reasonably good evidence that, as of the date it was issued, the named business had an active policy of the type and limits described. If you're hiring a contractor and they hand you a COI showing general liability coverage of $1 million per occurrence, that's a real signal — it means a real insurer has underwritten that business and is willing to stand behind claims up to that limit, assuming the policy stays active and the claim is covered.
It also typically shows the policy period, which lets you confirm coverage is current rather than expired or not yet started.
What It Doesn't Prove
Here's where people get tripped up. A certificate of insurance is not a guarantee that coverage will still be active when you actually need it. Policies can be cancelled or lapse for non-payment after the certificate was issued, and in most states the insurer has no legal obligation to notify the certificate holder when that happens. The COI you're holding could be describing a policy that no longer exists by the time an incident occurs.
A COI also doesn't guarantee that a specific claim will be covered. Policies are full of exclusions, and the certificate doesn't list them. Two businesses can have identical-looking certificates with very different actual coverage once you read the underlying policy language.
And critically, a certificate of insurance is not a contract between the insurer and the certificate holder. Most certificates include language stating exactly that — that the document confers no rights on the holder and doesn't amend, extend, or alter the coverage described. If a dispute arises, the certificate itself generally isn't enforceable; the actual policy is what matters.
Additional Insured Status Is a Separate Step
One of the most common mistakes is assuming that appearing on someone's COI means you're covered under their policy. It doesn't, unless you've been added as an "additional insured" through a separate endorsement to the policy. Being named as a certificate holder just means you receive a copy of the certificate — it doesn't extend any coverage to you at all.
If you need actual protection under a vendor's or contractor's policy — for example, so their general liability coverage responds if their work damages your property — you need to be added as an additional insured, and ideally see the endorsement itself, not just a certificate that mentions it.
Why Businesses Ask for Them Anyway
Despite their limits, COIs still serve a real purpose. They're a fast, low-friction way to confirm that a vendor, contractor, or tenant carries some baseline level of coverage before you do business with them. Requiring a current COI before work begins — and asking for an updated one periodically on longer engagements — catches the obvious gaps: the contractor with no liability coverage at all, or the vendor whose policy lapsed last year.
The mistake is treating the certificate as the end of the due diligence rather than the start of it.
How to Use Them More Effectively
A few habits make certificates of insurance more useful as actual risk management rather than paperwork theater. Request certificates directly from the insurer or broker rather than accepting a document handed over by the insured party, since certificates can be altered. For any relationship where real exposure exists — a contractor working on your premises, a vendor handling sensitive data — ask to be added as an additional insured and request the endorsement, not just the certificate. Set calendar reminders tied to policy expiration dates so you're prompted to request updated certificates rather than assuming coverage continues indefinitely. And for high-stakes relationships, it's worth having your insurance broker or an attorney glance at the actual policy language rather than relying on the certificate summary alone.
None of this means certificates of insurance aren't useful — they are, as a first filter. Just don't mistake the summary for the guarantee.
Comments
Post a Comment