You discover that a vendor's Certificate of Insurance expired six months ago. They've been on site every Tuesday since. You go looking for the consequences. This post is the honest answer.

The short version

A lapsed vendor COI exposes you to four categories of cost. Most operators only think about the first one.

Denied claim coverage. If something happens during the gap, your General Liability carrier may decline to cover.
Contract or lease violation. Most commercial agreements require active vendor coverage as a condition of access.
Insurance audit penalties. Year-end audits inspect vendor coverage; missing certificates trigger back-billed premium.
Operational disruption. Stop-work orders, badge revocation, and franchisor inspections all check this.

How likely each one bites depends on what kind of operator you are, and what kind of incident (if any) happens during the lapse window. Below, the practical breakdown.

Category 1: Denied claim coverage

This is the headline risk. Here's how it actually plays out.

A subcontractor's General Liability policy lapsed in March. In April, one of their employees damages property on your job site. The injured party files a claim, names the sub and you (because you're the GC, the property manager, or the building owner — somebody up the chain).

The sub's GL carrier looks at the policy: lapsed before the incident date, claim denied. The plaintiff's attorney pivots to your policy. Your GL carrier looks at the contract you had with the sub (which required active coverage) and at the COI you (allegedly) maintained. If the COI on file is current, you're protected by your indemnification language. If it lapsed and you didn't catch it, your carrier may deny the additional-insured pickup, or pay and then subrogate against you for failing to enforce the contract.

The financial exposure is whatever the claim is worth — minus whatever your contract's indemnification language and your own insurance can absorb. It can be five figures or seven.

This is the part most operators have heard about. It's not the only part.

Category 2: Contract and lease violation

Almost every commercial contract — leases, prime contracts, franchise agreements, vendor master service agreements — requires active vendor insurance as a condition of access or continued service.

When the agreement says "Vendor shall maintain General Liability of not less than $1M and shall provide a current Certificate of Insurance to Owner upon request," and the COI lapsed, the vendor is in technical breach. So are you, in many flow-down arrangements, because you're contractually responsible for ensuring the sub maintains coverage.

The practical consequence depends on who notices and how aggressive they are:

The owner notices: cure-period letter, possible stop-work, possibly a non-compliance flag in the management agreement.
The franchisor notices: franchise compliance violation, fee, possible re-inspection, possible franchise rating downgrade.
The carrier notices (during a loss inspection): citation, premium adjustment, possible non-renewal.

Most of the time the lapse goes unnoticed. The risk is not that it always blows up — it's that when it does, the consequences are out of proportion to the size of the gap.

Category 3: Insurance audit penalties

This is the boring one nobody mentions until it hits.

Most commercial GL policies are subject to year-end premium audits. The carrier looks at:

Your gross receipts
Your subcontractor payments (1099s)
Whether each subcontractor had active coverage during the period

For every 1099 sub without a current COI on file during the period, the carrier reclassifies the work as if you had performed it directly. Your premium gets recalculated using the higher-rate class for that work — and they back-bill the difference, with no negotiation.

The math: if you paid $500K to subcontractors and 10% of them had coverage gaps, the carrier may treat $50K of that as direct labor at your higher class rate. The premium impact is often $5K–$25K of back-billed premium, depending on your class codes and the rate differential.

Most operators don't know this is how it works until they get the audit results.

Category 4: Operational disruption

Even when nothing bad has happened, even when no claim is filed, even when no audit is pending — the lapse itself costs you.

Stop-work orders. Some commercial properties run automated COI checks on access badges. Lapsed cert = no access = your problem to fix today, not next week.
Tenant complaints. A property manager whose tenants notice lapsed coverage on an HVAC contractor on a shared roof — that's a phone call you don't want.
Franchise inspections. Some franchisors check vendor compliance during routine inspections. A miss is a flag, even if no incident occurred.
Internal credibility. Operators who maintain compliance build trust with owners, GCs, and brokers. Operators who don't, eventually don't get the next job.

The disruption costs are diffuse, hard to measure, and they compound over time. They show up as relationships you don't realize you've lost.

What to do when you discover a lapsed COI

The triage workflow:

Step 1: Immediately request a new COI from the vendor. No discussion, no apology, no prelude. Send the renewal request now.

Step 2: Document the gap. Write down the lapse window — start date (the prior expiration), end date (today, or the new effective date when it arrives). You may need this later.

Step 3: Check for incidents during the gap. Did anything happen on this vendor's work during that period? If yes, talk to your broker. If no, you've dodged the worst category of risk.

Step 4: Decide on the relationship. Did the vendor know they were uninsured? If yes, that's a trust signal. If no (their broker dropped the ball), it's recoverable.

Step 5: Set up automated tracking before this happens again. This is the actual lesson. Manual tracking will fail again — not maybe, definitely. The next lapse is just a matter of time.

How to make this never your problem again

The mechanics of preventing lapses are simple and well-known:

Capture every vendor's expiration date when you collect the COI.
Set automated reminders 30, 14, and 7 days before expiry — not one reminder, three.
The 30-day reminder is for the broker to bind a new policy.
The 14-day reminder is for the brokers who didn't respond the first time.
The 7-day reminder is the last clean exit before lapse.
Send the renewal request from a templated email so it goes out the same way every time.
Hold the PDF on file. When the audit happens, you have it.

You can do all of this in a spreadsheet plus calendar plus email plus a Google Drive folder. Most teams do, until the surface area gets large enough that the manual maintenance fails. The honest threshold is around ten vendors with rolling renewals — past that, the failure rate of manual tracking becomes noticeable, and the cost of one missed COI exceeds years of software fees.

COI Tracker is free for up to 3 vendors — enough to test the workflow on real data before deciding to scale. The Starter plan covers 25 vendors at $19/mo; Growth, 100 at $49/mo. If you're losing one weekend a year to renewal chases, the math is already in favor of the upgrade.

The post you want before the lapse is this one. The post you want after the lapse is the same one. It just costs more by then.

Related reading: How to Track Vendor Certificates of Insurance is the practical guide. Spreadsheet vs COI Tracking Software is the upgrade decision. Pricing for when you're ready.