Vendor Insurance: Why Your HOA Must Verify COIs
hoa-vendorsinsurancerisk-managementboard-operations

Vendor Insurance: Why Your HOA Must Verify COIs

A certificate of insurance is evidence, not coverage. Here is what a board should read on one, what additional insured status actually buys, and how to keep the file current.

The HOA-OS Team

A contractor emails a one-page form with an insurance company's name on it, and the board files it and moves on. That page is a certificate of insurance, and it is worth understanding what it is before you rely on it.

A certificate is evidence. It is a document showing that certain general types of coverage and certain limits have been purchased by the party who furnished it. Evidence of a policy is not the policy: it is a snapshot of what was true on the day the agent generated it, and it grants the recipient nothing on its own. That distinction is the whole reason the rest of this matters.

Boards still need it, and they need to read it rather than file it, because it is the cheapest look they will ever get at whether the company working on their property is carrying what it says it carries. Our post on the association's own coverage covers the other half of this picture.

Before any of this, be sure the work belongs to the association at all. Our post on maintenance responsibilities covers where that line sits.

What to read on the certificate

The named insured. It has to be the legal entity you contracted with, spelled the way it is spelled on the contract. A certificate in the owner's personal name when the contract is with an LLC is a mismatch worth a phone call.

The coverage types. For most association work you are looking for general liability, workers compensation, and auto if vehicles come on site. What counts as adequate varies by trade and by the size of the job, which is a good reason to have the association's own insurance agent tell you what to require before the contract goes out rather than after.

The limits. Per occurrence and aggregate are different numbers, and the aggregate is shared across every claim in the policy year. A contractor who has already had a bad year may have far less of the aggregate left than the certificate suggests.

The policy dates. This is the one that fails quietly. A certificate issued in March for a policy expiring in June is accurate the day you receive it and worthless in July.

Workers compensation specifically. If a worker is hurt on association property and the contractor carries no comp coverage, the question of who is responsible for that injury lands somewhere, and the association is one of the places it can land. This is the concrete reason the licensing check matters too, since an unlicensed contractor is frequently an uninsured one.

A worker installing shingles on a residential rooftop

Photo by Keith on Pexels

Additional insured status is a separate ask

Being handed a certificate does not make the association an insured under anyone's policy. Additional insured status is a change to the contractor's policy, made by endorsement, and it has to be requested and granted.

IRMI explains what it buys in a way boards should sit with: the contractor's promise to indemnify the association is a contract promise, and contract promises can fail. Their reference on additional insured status puts it plainly, that if the indemnity agreement proves unenforceable for some reason, the indemnitee may still be able to obtain coverage for its liability by making a claim directly as an additional insured under the indemnitor's CGL policy. The endorsement is the backstop for the promise.

So the contract asks for it, and the certificate should reflect it. If the certificate shows the association as a certificate holder only, the association has been sent a copy of a document and nothing more.

Notice where that request has to live. The insurance requirement belongs in the contract the association signs, spelled out as coverage types, minimum limits, and the additional insured endorsement, because the certificate is generated to match whatever the contractor's agent was told to show. A board that asks for the certificate and never wrote the requirement down has no basis to say the coverage was inadequate later, and no leverage to fix it while the contractor still wants the job. Write the requirement first and read the certificate against it.

Insurance language is dense and it repays a slow read. The NAIC, the body US state insurance regulators run jointly, keeps a glossary of insurance terms that is a reasonable place to check a word before you sign something that turns on it.

Hands signing a contract with a pen

Photo by Kindel Media on Pexels

Keeping the file current

Collecting certificates once is common. Keeping them current is rare, and it is where the exposure actually sits, because the certificate that matters is the one in force on the day something goes wrong.

Ask for the certificate before work starts, not after the first invoice. A contractor who cannot produce one within a week has told you something.

Record the expiration date somewhere the board will see it, and ask for the renewal certificate ahead of that date rather than after it. On a landscaping or pool contract that runs all season, one lapse can cover the busiest weeks of the year.

Keep the certificate with the contract and the scope sheet rather than in the treasurer's inbox. An association running HOA-OS has a document library that holds all three, so the next treasurer inherits the file instead of rebuilding it. Our vendor management guide covers what else belongs in that folder.

A board that reads certificates and chases renewals never has the conversation where an injured worker's claim arrives and nobody can find the coverage that was supposed to answer it.