How Property Managers Can Track Vendor Certificate of Insurance (COI) Without Losing Their Mind

The Call You Don't Want to Get

A vendor completes a job, you get the invoice, everything seems fine — and then six months later, during a liability claim, someone pulls the COI on file and finds it expired before the vendor ever set foot on the property. Now your insurance carrier is asking why you let an uninsured contractor work on your site.

Or the scenario that's even harder to catch in real time: a vendor shows up, your team waves them through, the work gets done, and it's only when you go to close out the vendor file that someone notices the cert was three months stale when they were on-site.

Every property manager has a version of this story. The challenge isn't finding vendors who carry insurance — most do. The challenge is that certificates expire, vendors don't proactively send you updated ones, and the burden of tracking falls entirely on you.

If someone gets hurt on your property and your vendor's COI was lapsed at the time of the incident, your own policy absorbs the hit. That's the real cost of a broken COI tracking process.

What a COI Is — and Why It Keeps Expiring

A Certificate of Insurance is a one-page summary of a vendor's insurance coverage: who issued the policy, what types of coverage are included, the policy limits, and when coverage expires. It's a snapshot, not a permanent record.

Most commercial insurance policies run for 12 months. When a policy renews, the vendor receives a new certificate — but that new certificate won't automatically arrive in your inbox. The vendor's broker generates it, the vendor receives it, and unless someone on your team specifically asks for it, the updated cert never makes it to you.

This is the structural problem. COIs are point-in-time documents tied to annual policy terms. There's no central registry that notifies you when a vendor's coverage lapses or renews. The entire responsibility for tracking every vendor's cert status sits with whoever manages vendor relationships — which, in most property management firms, is you or someone on your team with a hundred other things on their plate.

The Spreadsheet Trap

Most property managers track COIs in a spreadsheet. Vendor name, insurance company, policy number, expiry date, maybe a column for "Additional Insured on file." It looks like a complete system. It isn't.

Spreadsheets break for three reasons. First, they only reflect what was entered — and entries drift. If someone updates the row when they receive a new cert but not when a cert lapses, the data looks current when it isn't. Second, spreadsheet maintenance depends entirely on the person managing it. When that person changes roles or leaves, the update process quietly stops.

Third — and this is the specific failure mode that gets property managers into trouble — there's no alert mechanism. You don't receive an email 30 days before a COI expires. You check the spreadsheet when you remember to, which is usually when you're about to dispatch a vendor, not before.

Here's a scenario that's more common than it should be: you're onboarding a new emergency plumbing vendor. You check the spreadsheet and see their COI expiry listed as December 2025. Looks fine — it's May. What the spreadsheet doesn't show you is that it was last updated nine months ago by a team member who's since left, and the vendor's actual policy lapsed in February. You send them to a job site with no valid coverage and no way of knowing it until something goes wrong.

What You Actually Need on File for Each Vendor

Knowing a cert is "current" isn't enough. You need to know what coverage types the vendor carries, what the limits are, and whether those limits satisfy what your lease agreements or lender covenants require. A COI can be unexpired and still be inadequate.

For a typical property management operation, the minimum requirements per vendor include:

• General Liability — The standard minimum is $1M per occurrence / $2M aggregate for routine vendors. Higher-risk work (roofing, electrical, structural) often requires $2M per occurrence. Check your master insurance policy and any commercial leases — they frequently specify minimums by vendor category.
• Workers' Compensation — Required in most states for any vendor with employees working on-site. If a vendor's worker is injured on your property and the vendor has no workers' comp coverage, your liability exposure is substantial.
• Auto Liability — Required for any vendor who drives vehicles to or on your properties. A minimum of $1M combined single limit is standard.
• Umbrella / Excess Liability — Commonly required for higher-risk scopes: roofing, tree removal, elevator maintenance, electrical work. A $2M–$5M umbrella on top of underlying GL coverage is typical for these vendors.
• Additional Insured Endorsement — This is the one most often missed. Your management company and the property owner should both be named as additional insureds on the vendor's GL policy. A COI that shows valid coverage but doesn't name you as an additional insured offers you much weaker protection in a claim.

If your properties are subject to commercial lease agreements or lender covenants, those documents may specify exact minimum coverage thresholds by contractor type. You need to match each vendor's actual COI against those requirements — not just confirm the cert hasn't expired.

What a Working COI System Actually Looks Like

Good COI management doesn't require an enterprise compliance platform. It requires four things done consistently: a central vendor record, tracked expiry dates, automated alerts, and an audit trail.

A central vendor database means one record per vendor with all COI information attached — coverage types, policy limits, expiry dates, and the actual certificate PDF. When a claim comes in or an audit happens, you go to one place, not an email inbox or a shared drive folder with 200 files named "COI_HVAC_2024_FINAL_v2."

Tracked expiry dates with advance alerts means you know 60, 30, and 7 days before a cert expires — with enough lead time to contact the vendor and request an updated certificate. Most vendors will send a new COI within a day or two when asked. The problem is nobody asks until the cert has already lapsed.

Automated vendor outreach takes this further: when a COI is approaching expiry, the system emails the vendor directly asking them to resubmit. You don't have to chase it manually. The reminder goes out; you process the new cert when it arrives.

An audit trail means you can show who reviewed and approved each certificate and when. This matters when a claim comes in six months after the job — you can demonstrate that coverage was verified at a specific point in time, by a specific person, rather than just asserting that you thought the vendor was insured.

A system built around these four elements can handle 10 vendors or 200 without the process breaking down when someone is out sick or leaves the company.

Stop Tracking COIs in a Spreadsheet

CertTrack is built exactly for this. Add your vendors, enter their COI details and expiry dates, and CertTrack tracks every certificate automatically — sending you alerts at 60, 30, and 7 days before expiration, and optionally emailing vendors directly to request updated certs before they lapse. Every approval is logged so you have a clean audit trail when you need it.

It scales from a 10-vendor boutique residential firm to a 200-vendor commercial portfolio without the tracking process falling apart.

Try it free for 14 days — no credit card required. certtrack.madethis.app