Requesting a vendor's Certificate of Insurance (COI) might seem like a routine administrative task, but it's one of the most important risk-management steps you can take. Without proof of adequate coverage, your company could be liable for accidents, property damage, or lawsuits arising from the vendor's work. Yet many procurement professionals struggle with this request—either they ask too late, use vague language, or fail to specify the coverage requirements. This guide walks you through the timing, wording, and follow-up strategies to get the right certificate quickly, with ready-to-use templates for every scenario.
When Should You Request a Vendor's Certificate of Insurance?
Timing is everything. Requesting a COI too early can make you seem overly bureaucratic; requesting it too late exposes you to unnecessary risk. The sweet spot is to request the certificate before any work begins or any contract is signed—ideally during the final negotiation phase. This gives you leverage: the vendor is motivated to provide the document to close the deal.
Beyond the initial request, there are other key moments to ask for an updated COI: at each contract renewal, when the vendor's scope of work changes significantly, or when your own insurance requirements change (e.g., you increase liability limits). Additionally, if you work in a regulated industry (healthcare, construction, finance), you may need to request COIs annually as part of compliance audits. Proactive timing protects you from coverage gaps and regulatory fines.
💡 Pro Tip:
Include a COI requirement in your standard vendor onboarding checklist. That way, you never forget to ask, and vendors know it's a non-negotiable part of doing business with you.
Common Mistakes to Avoid When Requesting a COI
Even experienced buyers make these errors, which can delay projects or leave you underinsured. Avoid them to keep the process smooth.
- Asking for a "certificate of insurance" without specifying the required coverage types or limits: The vendor might send a minimal policy that doesn't meet your requirements. Always specify: general liability ($1M/$2M), workers' comp, professional liability, and any endorsements like "additional insured" or "waiver of subrogation."
- Not verifying that the vendor is the named insured: The certificate must show the vendor's legal business name exactly as it appears on your contract. If the name differs, the insurance may not cover your engagement.
- Accepting a COI that is not current: Ensure the policy effective date is recent and the expiration date is at least as long as your contract term. An expired or soon-to-expire policy is worthless.
- Failing to ask for a "ACORD 25" or "ACORD 25-S" form: This is the industry-standard COI format. While vendors may use their own, the ACORD form is widely accepted and contains all key information.
- Not designating your company as an additional insured: For high-risk projects, you need to be named as an additional insured on the vendor's policy. This ensures you're covered if a claim arises from their work. Many vendors won't offer this unless you specifically ask.
Templates for Requesting a Vendor's Certificate of Insurance
Below are three templates: a standard initial request, a follow-up reminder, and a more formal request for high-risk or regulated industries. Each includes subject line options and placeholders.
Template 1: Standard Initial COI Request (Polite & Clear)
Subject: Certificate of Insurance request – [Vendor Name] – [Project/Contract Name]
Dear [Vendor Contact Name],
I hope you're doing well. As we finalize our agreement for [Project/Contract Name], we need to obtain a current Certificate of Insurance from your company for our compliance records.
**Please provide a COI that includes the following coverage:**
- General liability: $1,000,000 per occurrence / $2,000,000 aggregate
- Workers' compensation: statutory limits
- Professional liability (if applicable): $1,000,000 per claim
- Automobile liability: $1,000,000 combined single limit
- Additional insured endorsement: naming [Your Company Name] as additional insured
- Waiver of subrogation: in favor of [Your Company Name]
The certificate should be on an ACORD 25 form and show the current policy period. Please also ensure that the certificate holder is listed as:
[Your Company Name]
[Your Address]
[City, State, Zip]
If possible, please have your insurance agent email the certificate directly to me at this address, or forward it yourself.
Please let me know if you need any additional information. We appreciate your prompt attention to this—we'd like to have this on file before we begin work on [Date].
Thank you for your cooperation.
Best regards,
[Your Full Name]
[Your Title]
[Your Company Name]
[Your Phone Number]
Alternative subject lines: "Insurance certificate required for [Project]" / "COI request – [Vendor Name] – please provide"
Template 2: Follow-Up Reminder (If No Response)
Subject: Following up on COI request – [Vendor Name] – [Project]
Dear [Vendor Contact Name],
I'm circling back on my email from [Date] regarding the Certificate of Insurance for [Project/Contract Name]. We need this document to finalize our vendor onboarding and ensure compliance before we begin work.
If you've already sent it, please disregard this—and my apologies for the extra note. If not, could you please provide the COI or let me know when we can expect it?
We're eager to move forward, and this is the last outstanding item. If you need me to clarify the coverage requirements or certificate holder details, I'm happy to assist.
Thank you for your help.
Best,
[Your Full Name]
Alternative subject lines: "Re: COI request for [Vendor Name]" / "Gentle reminder: Certificate of Insurance needed"
Template 3: Formal COI Request (for High-Risk or Regulated Industries)
Subject: Insurance compliance requirement – COI for [Vendor Name] – contract #[#]
Dear [Vendor Contact Name],
Per the terms of our contract (Section [X]), and as required by [regulatory body / your company's risk policy], we require a valid Certificate of Insurance before any services are performed. This is a mandatory compliance step and must be completed before we can issue a purchase order or schedule work.
**The minimum acceptable coverage requirements are:**
- Commercial general liability: $2,000,000 each occurrence / $4,000,000 aggregate
- Umbrella/excess liability: $2,000,000
- Workers' compensation: statutory, including employer's liability at $1,000,000
- Professional liability (errors & omissions): $2,000,000 each claim
- Cyber liability (if applicable): $1,000,000
**Additional endorsements:**
- [Your Company Name] must be listed as an additional insured on all liability policies.
- The policy must include a waiver of subrogation in our favor.
- The certificate must state that the coverage is primary and non-contributory.
Please have your insurer complete an ACORD 25 certificate and email it to [Your Email] with the subject "COI for [Vendor Name]". The certificate holder should be:
[Your Company Name]
[Your Address]
[City, State, Zip]
This request is time-sensitive—we need the COI by [Date] to stay on schedule. If you have questions about these requirements, please contact our risk management team at [email/phone].
We appreciate your prompt attention to this compliance matter.
Sincerely,
[Your Full Name]
[Your Title]
[Your Company Name]
Alternative subject lines: "Mandatory insurance certificate – [Vendor Name] – urgent" / "Compliance requirement: COI for contract #[#]"
⚠️ Reminder:
Never accept a COI that is not signed by an authorized representative of the insurance company. A certificate generated by the vendor themselves is not valid. Always check the "Authorized Representative" signature box.
Checklist for Verifying the Certificate of Insurance
Once you receive the COI, don't just file it away. Verify these key details to ensure it meets your requirements.
- Policy effective and expiration dates: Ensure the current date falls within the policy period. If the policy expires before your contract ends, request a renewal certificate later.
- Insurer's A.M. Best rating: While not always required, it's wise to check that the insurer is financially stable (rated A- or better). A weak insurer might not be able to pay claims.
- Coverage limits: Compare the limits on the certificate to your minimum requirements. If they are lower, ask the vendor to increase coverage or provide an umbrella policy.
- Additional insured endorsement: Confirm that your company is correctly named as an additional insured. The certificate should list your company's full legal name and address.
- Waiver of subrogation: This endorsement prevents the insurance company from pursuing your company to recover claims paid out. Ensure it is included.
- Certificate holder: Verify that your company name and address are listed accurately as the certificate holder.
- Signature and date: The certificate should be signed and dated by the insurer's authorized agent. If it's not signed, it's not a valid document.
What to Do If the Vendor Delays or Refuses to Provide a COI
Sometimes vendors are slow to provide a COI—or they resist because they lack the required coverage. Here's how to handle these situations without derailing the relationship.
- Send a polite but firm follow-up referencing the contract clause that requires insurance. Mention that you cannot proceed without it.
- Offer to help the vendor contact their insurance agent: Sometimes the delay is due to the agent's slow response. A quick call from you to the vendor's agent can speed things up.
- Ask for a binder or interim certificate: If the vendor is in the process of renewing their policy, they may be able to provide a binder—a temporary evidence of coverage—valid for 30 days.
- Escalate to the vendor's management: If the contact person isn't responsive, cc their supervisor or head of operations. Explain that compliance is a requirement, not a preference.
- Consider alternative vendors: If a vendor consistently cannot provide adequate insurance, they may not be a reliable partner. Use this as a red flag in your vendor evaluation process.
Remember: It's better to delay a project than to proceed without proper insurance coverage. A single incident can cost far more than the lost time.
Frequently Asked Questions
Q: Is a Certificate of Insurance the same as a policy document?
A: No. A COI is a summary of coverage—it shows policy types, limits, effective dates, and endorsements. It does not contain the full policy terms, exclusions, or conditions. For detailed review, request a full policy, but for most vendor management purposes, a COI is sufficient.
Q: Can I request a COI from a vendor that is a sole proprietor or freelancer?
A: Yes, but they may not have commercial insurance. In that case, you can require them to obtain a policy or sign a waiver acknowledging they are responsible for their own risks. However, for your own protection, it's best to work with vendors who carry adequate coverage.
Q: How long is a COI valid?
A: A COI is valid only for the policy period shown. If the policy expires, the certificate is no longer valid. You should request an updated COI at each renewal or annually, whichever comes first.
Q: What if the vendor's coverage limits are lower than my minimum?
A: You have three options: (1) accept the lower limits if the risk is minimal, (2) ask the vendor to increase their limits (they may need to purchase an umbrella policy), or (3) find a different vendor. Document your decision to protect yourself.
Q: Should I keep the COI in my vendor file or share it with my insurance company?
A: Keep it in your vendor file for audit purposes. You should also forward it to your own insurance broker or risk management department so they can verify that you are properly protected and that there are no coverage gaps in your own policies.