The one thing most people get wrong about a COI
A certificate of insurance is a snapshot, not a contract. The ACORD 25 form says so in its own header: it is issued as a matter of information only, confers no rights upon the certificate holder, and does not amend, extend or alter the coverage of the policies it describes. Everything that actually protects you — additional insured status, waiver of subrogation, primary and non-contributory wording — lives in endorsements attached to the policy, not in the boxes on the certificate.
That distinction is the whole game. A vendor can hand you a certificate with the additional-insured box checked and still not have named you on the policy. The certificate is the claim; the endorsement is the proof.
What each section of the ACORD 25 actually tells you
| Section | What it says | What to actually check |
|---|---|---|
| Producer | The insurance agency that issued the certificate | A real, reachable agency — this is who you email to confirm coverage |
| Insured | The business the policy covers | The exact legal entity you contracted with, not a similar-sounding DBA |
| Insurer(s) Affording Coverage + NAIC # | The carriers behind each line, with their NAIC identifier | Carrier is admitted and financially rated; NAIC # is present, not blank |
| Type of Insurance | General liability, auto, umbrella, workers' comp, and so on | Every coverage line your contract requires is present |
| Addl Insd / Subr Wvd columns | Checkboxes claiming additional insured and waiver of subrogation | The matching endorsement form is actually attached |
| Policy Eff / Policy Exp | The dates the policy starts and ends | Coverage is live for the whole work period, not expiring mid-job |
| Limits | Each-occurrence, aggregate, products-completed operations, and more | Each limit meets or beats your written requirement |
| Description of Operations | Free text — job references, AI wording, project numbers | Names the right project, and any wording claimed here is backed by a form |
| Certificate Holder | Who received the certificate | Your exact legal entity and address, spelled correctly |
| Cancellation | Notice language | Read it honestly — see the cancellation section below |
Certificate holder is not the same as additional insured
Being listed as the certificate holder means one thing: someone sent you a copy of the document. It gives you no coverage and, on its own, no right to be notified of anything. Additional insured status is a change to the policy itself, made by endorsement, that extends the vendor's liability coverage to defend and indemnify you for claims arising out of their work. Different mechanism, different paperwork, entirely different level of protection.
This is the single most common gap we find on real certificates.
Read: additional insured vs certificate holderThe cancellation language is weaker than people assume
Older certificates promised 30 days' written notice of cancellation to the certificate holder. Current ACORD 25 wording says notice will be delivered in accordance with the policy provisions — and most policies only obligate the carrier to notify the named insured, not you. In practice, carriers do not broadcast mid-term cancellations to certificate holders.
How long a certificate stays meaningful
Exactly as long as the shortest policy period on it. A certificate showing a general liability policy expiring in four months is worthless in five. That is why COI management is a calendar problem more than a reading problem: the document was accurate the day it was issued, and the risk is that nobody looks again until a claim arrives.
- Collect the certificate before work starts, never after.
- Record every expiration date the moment the document lands.
- Start chasing the renewal 30 days out, not on the expiry date.
- Re-verify limits and endorsements on each renewal — coverage silently shrinks between years.
Who issues a COI, and what it costs
The vendor's insurance agency (the producer) issues it, usually free and usually within a day or two. If a vendor tells you a certificate will take weeks or cost money, that is a signal worth following up on — most agencies produce them on demand from their management system.