What Happens When a Vendor COI Expires?

The short answer: nothing happens — right up until it does. A missing or expired Certificate of Insurance has no immediate effect on its own. What it changes is your position if something goes wrong during the gap: you lose the documentation your own carrier and your own contract were relying on. Whether that costs you anything depends on your policies, your contract wording, and whether an incident, an audit, or an inspection lands in the window.

Two different situations get treated as one problem, and they need different responses:

• The vendor never gave you a COI at all. You have no evidence they were ever insured. Start here.
• You had a valid COI and it expired. You have evidence of coverage up to a date, and nothing after it. Start here.

If you have a certificate in hand and you're not sure what it says, you can check a Certificate of Insurance here — free, no signup — or scan a whole vendor spreadsheet for expired COIs.

A note before the detail: a certificate is evidence of what a policy said on the day it was issued. It is not the policy, and it is not a promise that any claim will be paid. Nothing below is legal or insurance advice — the person who can tell you what your specific policy does is the broker who sold it to you.

The four things a gap can affect

Most operators think only about the first one.

1. What your own carrier will do with a claim. If an incident during the gap gets tied back to that vendor, your carrier may look for the certificate and the contract that was supposed to require it.
2. Whether you're in breach of your own agreements. Most commercial leases, prime contracts, and franchise agreements require vendor coverage as a condition of access — often flowing that obligation down to you.
3. How your year-end premium audit comes out. Audits commonly examine whether subcontractors you paid carried their own coverage.
4. Operational friction. Site access, badge systems, franchisor inspections, and owner reporting all tend to check this.

How much each one matters is genuinely situational. Below is how each mechanism generally works — not a prediction about your case.

Category 1: Denied claim coverage

This is the headline risk. Here's how it actually plays out.

A subcontractor's General Liability policy lapsed in March. In April, one of their employees damages property on your job site. The injured party files a claim, names the sub and you (because you're the GC, the property manager, or the building owner — somebody up the chain).

The sub's GL carrier looks at the policy: lapsed before the incident date, so there is nothing there to respond. The claim pivots to your policy. Your carrier looks at the contract you had with the sub — which required active coverage — and at the certificate you were supposed to be holding. If a current certificate is on file, your indemnification language has something to stand on. If it lapsed and nobody caught it, your carrier may take a different view of the additional-insured pickup, or pay and then look to you for failing to enforce your own contract requirement.

How much that costs depends entirely on the claim, your contract wording, and your policy — which is why you won't find a number here. Anyone quoting you a typical dollar figure for this is guessing. Your broker can tell you what your specific policy does; a blog post cannot.

This is the part most operators have heard about. It's not the only part.

Category 2: Contract and lease violation

Almost every commercial contract — leases, prime contracts, franchise agreements, vendor master service agreements — requires active vendor insurance as a condition of access or continued service.

When the agreement says "Vendor shall maintain General Liability of not less than $1M and shall provide a current Certificate of Insurance to Owner upon request," and the COI lapsed, the vendor is in technical breach. So are you, in many flow-down arrangements, because you're contractually responsible for ensuring the sub maintains coverage.

The practical consequence depends on who notices and how aggressive they are:

• The owner notices: cure-period letter, possible stop-work, possibly a non-compliance flag in the management agreement.
• The franchisor notices: franchise compliance violation, fee, possible re-inspection, possible franchise rating downgrade.
• The carrier notices (during a loss inspection): citation, premium adjustment, possible non-renewal.

Most of the time the lapse goes unnoticed. The risk is not that it always blows up — it's that when it does, the consequences are out of proportion to the size of the gap.

Category 3: Insurance audit penalties

This is the boring one nobody mentions until it hits.

Most commercial GL policies are subject to year-end premium audits. The carrier looks at:

• Your gross receipts
• Your subcontractor payments (1099s)
• Whether each subcontractor had active coverage during the period

Where a subcontractor you paid cannot be shown to have carried their own coverage for the period, that spend is commonly reclassified — treated as though you had performed the work yourself, and rated accordingly. The difference gets back-billed.

The size of that adjustment depends on your class codes, the rate differential between them, and how much of your subcontractor spend is undocumented. Those are all specific to your policy, so there is no useful general figure — and the certificates you can produce at audit time are the part you control. Ask your broker how your policy handles uninsured subcontractor spend before the audit, not after.

Most operators don't know this is how it works until they get the audit results.

Category 4: Operational disruption

Even when nothing bad has happened, even when no claim is filed, even when no audit is pending — the lapse itself costs you.

• Stop-work orders. Some commercial properties run automated COI checks on access badges. Lapsed cert = no access = your problem to fix today, not next week.
• Tenant complaints. A property manager whose tenants notice lapsed coverage on an HVAC contractor on a shared roof — that's a phone call you don't want.
• Franchise inspections. Some franchisors check vendor compliance during routine inspections. A miss is a flag, even if no incident occurred.
• Internal credibility. Operators who maintain compliance build trust with owners, GCs, and brokers. Operators who don't, eventually don't get the next job.

The disruption costs are diffuse, hard to measure, and they compound over time. They show up as relationships you don't realize you've lost.

You never had a certificate

This is the harder of the two situations, and it gets discussed far less.

If a vendor never gave you a COI, you have no evidence they were ever insured — not for the current period and not for any of the work already done. An expired certificate at least documents a period of coverage and tells you precisely when it stopped. Nothing tells you nothing.

What that changes in practice:

• You can't date the gap. With a lapse you know the window. Here the window is the entire relationship, so "was there coverage when that job happened?" has no answer on file.
• Your contract requirement was probably never satisfied. If your agreement required a certificate before work started and none was collected, the requirement was unmet from day one rather than at a point in time.
• At audit, undocumented is undocumented. A carrier reviewing subcontractor spend cannot distinguish "uninsured" from "insured but never evidenced." Both look the same in the file.
• The vendor may well be insured. Plenty of small operators simply never got asked, or asked their broker and let it drop. Don't assume the worst — assume nobody chased it.

What to do:

1. Ask, plainly, and give them the specifics. Most vendors can get a certificate from their broker quickly and at no cost. Tell them the exact legal name and address to list as certificate holder, the coverages and limits your contract requires, and whether you need additional-insured status or a waiver of subrogation.
2. Set a date. "Before the next scheduled visit" is a real deadline. "When you get a chance" is not.
3. Decide what happens if it doesn't arrive. Whether that means pausing work is a contract and business decision — but decide it before the deadline, not after.
4. Check it when it lands. Upload it here to confirm it actually names you as certificate holder and carries the coverages you asked for. A certificate that arrives fast and lists the wrong holder is a certificate you'll have to request twice.
5. Record the expiration date the moment you have it — so this becomes the expiry problem below rather than repeating.

The certificate you had expired

The triage workflow:

Step 1: Immediately request a new COI from the vendor. No discussion, no apology, no prelude. Send the renewal request now — and include the certificate-holder wording and required coverages so you don't have to ask twice.

Step 2: Document the gap. Write down the lapse window — start date (the prior expiration), end date (today, or the new effective date when it arrives). You may need this later.

Step 3: Check for incidents during the gap. Did anything happen on this vendor's work during that period? If yes, talk to your broker. If no, the worst category never came up.

Step 3b: Read the replacement certificate when it arrives. Confirm the new effective date actually closes the gap — a certificate issued today can carry a policy that started after the lapse began, which leaves the window open. You can check the dates here in a couple of minutes.

Step 4: Decide on the relationship. Did the vendor know they were uninsured? If yes, that's a trust signal. If no (their broker dropped the ball), it's recoverable.

Step 5: Set up automated tracking before this happens again. This is the actual lesson. Manual tracking will fail again — not maybe, definitely. The next lapse is just a matter of time.

How to make this never your problem again

The mechanics of preventing lapses are simple and well-known:

• Capture every vendor's expiration date when you collect the COI.
• Set automated reminders 30, 14, and 7 days before expiry — not one reminder, three.
• The 30-day reminder is for the broker to bind a new policy.
• The 14-day reminder is for the brokers who didn't respond the first time.
• The 7-day reminder is the last clean exit before lapse.
• Send the renewal request from a templated email so it goes out the same way every time.
• Hold the PDF on file. When the audit happens, you have it.

You can do all of this in a spreadsheet plus calendar plus email plus a Google Drive folder. Most teams do, until the surface area gets large enough that the manual maintenance fails. The honest threshold is around ten vendors with rolling renewals — past that, the failure rate of manual tracking becomes noticeable, and the cost of one missed COI exceeds years of software fees.

COI Tracker is free for up to 10 vendors — enough to test the workflow on real data before deciding to scale. The Starter plan covers 25 vendors at $29/mo; Growth, 100 at $59/mo. If you're losing one weekend a year to renewal chases, the math is already in favor of the upgrade.

The post you want before the lapse is this one. The post you want after the lapse is the same one. It just costs more by then.

---

Related reading: Check a Certificate of Insurance is the free reader — upload a COI and see its dates, limits, and missing fields. How to Track Vendor Certificates of Insurance is the practical guide. Spreadsheet vs COI Tracking Software is the upgrade decision. Pricing for when you're ready.