COI Compliance Checklist for Property Managers | COI File
Complete COI compliance checklist for property managers: 7 categories, 8-point verification, endorsement requirements, and expiration tracking. Print-ready and actionable.
COI compliance for property managers comes down to seven categories of checks, and your liability exposure lives in the gaps between them. About 75% of vendors don't meet insurance requirements on first submission. In spreadsheet-tracked portfolios, roughly 30% of COIs are expired at any given time. This checklist covers exactly what to verify, when to renew, and how to build a compliance process that holds up under audit, whether you manage 10 vendors or 500.
Use this checklist as a self-audit tool or a daily compliance workflow. Each section identifies what to check, common failure points, and the minimum frequency for verification.
Quick Reference
📋 7 compliance categories · ✅ 8-point COI verification · ⏰ 4-stage expiration alert cadence · 📊 Quarterly audit schedule
What belongs in a COI compliance checklist for property managers?
A property manager's COI compliance program has seven structural components. Missing any one of them creates a gap that auditors, insurers, and plaintiffs can exploit. Here is each category with the specific checks to perform:
1. Insurance Requirement Definition
Before you can verify compliance, you need documented standards to verify against. Without written requirements, every COI review becomes a judgment call, and judgment calls don't hold up in audits.
| Check | Status | Notes |
|---|---|---|
| Coverage requirements documented by vendor tier (low/medium/high risk) | ☐ | Tiered by trade risk: janitorial vs. roofing require different limits |
| Minimum limits defined per coverage type | ☐ | GL, WC, Auto, Umbrella, specify per-occurrence AND aggregate |
| Required endorsements specified (CG 20 10, CG 20 37, waiver of subrogation) | ☐ | Most commonly missed items, specify form numbers |
| Requirements referenced in every vendor contract and lease | ☐ | Unenforceable if not in the signed agreement |
| Requirements reviewed and updated annually | ☐ | Lender requirements, state laws, and portfolio risk change |
Industry benchmark for minimum limits: $1M per occurrence / $2M aggregate general liability is standard for most trades. High-risk trades (roofing, electrical, HVAC, demolition) require $2M/$4M. Workers' compensation at statutory limits. Commercial auto at $1M combined single limit. Umbrella of $2-5M for vendors handling projects over $100K.
2. Vendor Onboarding Document Collection
Collect before work begins, never after. A completed vendor file should contain more than just a COI. Research from the Evident study found that 23% of vendors do not respond to proof-of-insurance requests at all, so starting collection early is essential.
| Check | Status | Frequency |
|---|---|---|
| Current Certificate of Insurance (ACORD 25 or equivalent) | ☐ | Before work begins, then annually |
| Additional insured endorsement pages (not just COI checkbox) | ☐ | With every COI submission |
| Waiver of subrogation endorsement (workers' comp at minimum) | ☐ | With every COI submission |
| Signed vendor contract with insurance requirements clause | ☐ | At onboarding, updated at renewal |
| State trade license (if applicable, HVAC, electrical, plumbing) | ☐ | Verify active status with state licensing board |
| W-9 with verified TIN | ☐ | At onboarding, re-verify if entity changes |
3. COI Verification, The 8-Point Review
This is the step where most compliance programs fail. Document receipt and logging are usually handled; comparison against requirements is not. Every COI must pass all eight checks before a vendor is cleared to work. The three fields that fail most often: additional insured endorsement, coverage limits, and policy dates.
| # | Verification Point | What to Check | Status |
|---|---|---|---|
| 1 | Named Insured | Vendor's legal entity name matches the contract exactly. Include entity type suffix (LLC, Inc., Corp.). Mismatch = coverage may not apply to the contracted entity. | ☐ |
| 2 | Coverage Types | All required coverage types present: General Liability, Workers' Compensation, Commercial Auto (if driving on property), Umbrella (if required for tier). Verify each line is checked and active. | ☐ |
| 3 | Policy Dates | Effective date is in the past. Expiration date covers the full duration of work. For multi-month projects, confirm the policy period extends through project completion, or plan for a mid-project renewal. | ☐ |
| 4 | Coverage Limits | Each limit field meets or exceeds your requirements. Check per-occurrence AND aggregate separately. A vendor who meets per-occurrence but falls short on aggregate is non-compliant. | ☐ |
| 5 | Additional Insured | Checkbox marked on GL line AND endorsement page attached. Form CG 20 10 (ongoing operations) or CG 20 37 (completed operations) must be referenced. A checkbox alone is not sufficient, you need the endorsement. | ☐ |
| 6 | Waiver of Subrogation | Checked on workers' compensation line at minimum. Endorsement attached confirming the carrier waives its right to recover from you. Without this, the vendor's insurer can sue you to recover claim payouts. | ☐ |
| 7 | Certificate Holder | Your entity's correct legal name and mailing address in the certificate holder box. Include property owner entity if different from the management company. Certificate holder = notice only, not coverage, this is separate from additional insured. | ☐ |
| 8 | No Limiting Language | Read the Description of Operations box. Look for language that restricts coverage scope, excludes specific operations, or limits coverage to certain projects. Any carve-out language = potential coverage gap. | ☐ |
Important: A COI is a snapshot of coverage at the moment it was issued, not a guarantee of ongoing protection. Policies can be cancelled mid-term for non-payment, and carriers are not required to notify certificate holders despite what the ACORD 25 cancellation provision implies. This is why continuous monitoring matters more than one-time verification. For a deeper dive, read our guide on how to verify a certificate of insurance.
4. Expiration Tracking, The 4-Stage Alert Cadence
Collecting a COI at onboarding is step one. Keeping it current is the ongoing work. With commercial insurance policies running on annual terms, every active vendor represents at least one renewal risk point per year. For 50 vendors, that's roughly one renewal to track every week, which is why manual calendar tracking fails beyond small portfolios.
In spreadsheet-tracked portfolios, roughly 30% of COIs are expired at any given time. Use this alert schedule:
| Timing | Action | Status |
|---|---|---|
| 90 days before expiration | Internal notification, flag the upcoming renewal. Add to compliance review queue. | ☐ |
| 60 days before expiration | First renewal request to vendor. Include your insurance requirements so they know what to provide. | ☐ |
| 30 days before expiration | Second renewal request. Copy the vendor's primary contact and your internal compliance lead. | ☐ |
| 7 days before expiration | Final notice. If no response, flag vendor as at-risk. Prepare to pause work if certificate isn't received. | ☐ |
| Day of expiration | If no updated COI received: mark vendor as expired/lapsed. Suspend work authorization until a verified current certificate is in hand. | ☐ |
Automation note: Property managers tracking 50+ vendors should use COI tracking software that sends automated renewal reminders directly to vendors. Manual email follow-up for 50 vendors consumes 3-6 hours per month in administrative labor. Tools like COI File handle this automatically, vendors receive branded upload links and reminders without staff involvement. See our cost analysis of spreadsheet vs. software COI tracking for the full numbers.
5. Centralized Record-Keeping
When an incident occurs or an auditor requests documentation, you have hours, not days, to produce records. Centralized storage means every compliance document for every vendor lives in one searchable system. The most common audit failure: COIs stored in individual email threads with no system for retrieval.
| Check | Status | Details |
|---|---|---|
| Current COI stored for every active vendor | ☐ | Digital, searchable, not in email attachments |
| Historical COIs retained (all prior certificates) | ☐ | Needed to prove compliance at a specific date for claims defense |
| Endorsement pages attached to each COI record | ☐ | Additional insured and waiver of subrogation endorsements stored with COI |
| Compliance correspondence logged (requests, responses, deficiency notices) | ☐ | Audit trail of what was requested, when, and the vendor's response |
| Compliance status visible at portfolio level | ☐ | Dashboard or report showing compliant/expiring/expired by property |
| Accessible by multiple team members (not one person's computer) | ☐ | If the compliance lead leaves, the records don't leave with them |
6. Non-Compliance Handling Protocol
What happens when a vendor's COI lapses? Without a written protocol, the answer is usually "it depends", and that inconsistency becomes a liability in litigation. Document your escalation path:
| Check | Status |
|---|---|
| Work-pause policy defined: does vendor work stop at expiration or at X days past? | ☐ |
| Escalation path documented: who decides on exceptions, and what documentation is required? | ☐ |
| Override process: all compliance overrides require written justification and manager sign-off | ☐ |
| Reinstatement process: what must happen for a lapsed vendor to resume work? | ☐ |
7. Quarterly Audit Preparation
Internal audits catch gaps before external auditors, or plaintiffs' attorneys, find them. 72% of organizations have faced financial loss due to vendor-related issues including improper insurance, per risk management surveys. A quarterly internal audit takes 2-4 hours and surfaces compliance gaps while they're still fixable.
| Check | Status | Frequency |
|---|---|---|
| Random spot-check: verify 10% of vendor files for completeness | ☐ | Quarterly |
| Expiration report: list all COIs expiring within 90 days | ☐ | Monthly |
| Compliance rate dashboard: portfolio-wide percentage of compliant vendors | ☐ | Monthly |
| Deficiency trend analysis: identify recurring gaps by vendor type or property | ☐ | Quarterly |
| Insurance requirement review: update minimums based on claims experience and market changes | ☐ | Annually |
| External audit readiness: can you produce a complete compliance report in under 5 minutes? | ☐ | Test quarterly |
Property managers using automated COI tracking reduce compliance gaps by 87% within six months, according to SmartCompliance case data. Spreadsheet-based programs average 40-60% compliance at any point in time, meaning nearly half your vendors could be uninsured right now and you wouldn't know. For more on the tradeoffs, read our analysis of what happens when vendor insurance lapses.
COI compliance checklist: one-page summary
Print this condensed version or save it as your daily compliance workflow reference:
📋 COI COMPLIANCE CHECKLIST, PROPERTY MANAGERS
☐ 1. REQUIREMENTS DEFINED
Coverage types, minimum limits, endorsements documented by vendor tier. Referenced in every contract.
☐ 2. ONBOARDING DOCUMENTS COLLECTED
COI + additional insured endorsement + waiver of subrogation + contract + W-9. Before work begins.
☐ 3. 8-POINT COI VERIFICATION PASSED
Named insured ✓ Coverage types ✓ Policy dates ✓ Limits ✓ Additional insured ✓ Waiver ✓ Certificate holder ✓ No limiting language ✓
☐ 4. EXPIRATION ALERTS ACTIVE
90-day / 60-day / 30-day / 7-day alert cadence set. Automated if 50+ vendors.
☐ 5. RECORDS CENTRALIZED
Current + historical COIs, endorsements, correspondence. Accessible by team. Not in email.
☐ 6. NON-COMPLIANCE PROTOCOL DOCUMENTED
Work-pause policy, escalation path, override process, reinstatement steps. In writing.
☐ 7. QUARTERLY AUDIT SCHEDULED
10% spot-check monthly · Expiration report monthly · Compliance dashboard monthly · Trend analysis quarterly · Requirements review annually.
When to move from a checklist to COI tracking software
This checklist works well for portfolios with fewer than 25 active vendors. Beyond that threshold, the administrative burden of manual tracking exceeds the cost of software, property managers tracking 50+ vendors spend 6-13 hours per week on COI administration, translating to $11,000-$30,000 annually in labor alone. Organizations managing 200+ vendors with manual processes can spend over $36,000 per year.
Clear signals it's time to switch:
- You're tracking 25+ active vendors across multiple properties
- COI administration consumes more than 5 hours per week
- You've discovered expired COIs during an audit (the average property manager finds 3-5 expired certificates in their first audit)
- Multiple team members need access to compliance data
- Audit preparation takes more than one hour
What checklists miss: Even the best checklist won't catch mid-term policy cancellations, carriers can cancel policies for non-payment without notifying certificate holders. No checklist can verify that a vendor's insurance agent actually filed the additional insured endorsement with the carrier. And checklists are only as good as the person completing them. For high-risk portfolios or organizations with audit requirements, pairing this checklist with automated COI tracking software reduces the compliance gap from the typical 40-60% to 90%+. COI File offers a 7-day free trial on all plans, so you can test the automated workflow alongside your checklist before committing. After the trial, Base at $39/month for up to 10 vendors, Growth at $89/month for up to 50 vendors, and Pro at $199/month for unlimited vendors. Start a 7-day free trial, cancel anytime.
Firdaosh Bano
COI Compliance Specialist
Firdaosh Bano is a COI compliance specialist and the founder of COI File. She spent 6 years managing vendor compliance for commercial properties - tracking 2,000+ COIs across 150+ properties in spreadsheets before building the tool she wished she'd had. She writes about certificate of insurance compliance, vendor risk management, and making insurance tracking less painful for small teams.