Vendor Insurance Verification: What to Collect

Vendor insurance verification means confirming, from the document itself and not from a vendor's assurance, that the contractor working in your building carries the coverage your contract requires — and then confirming it again before the certificate expires. The first check takes an afternoon. Keeping coverage current for the life of a five-year contract is a calendar discipline most property managers do not have.

A certificate on file from two years ago proves nothing about today. Coverage gets cancelled for non-payment, policies renew on different limits, and subcontractors get added to jobs without anyone telling the manager. The only defence is a register with expiry dates and a routine that reads it.

Key takeaways

Collect the certificate of insurance and the workplace insurance clearance before the vendor's first shift.
Record every expiry date in a register and diarise the renewal chase 30 days before it lapses.
Verify limits against the contract minimums, not against what the vendor happens to carry.
Re-check whenever the vendor adds a subcontractor, changes vehicle use, or works in a new province.
Treat a lapsed certificate as a site access issue — the crew does not work until cover is evidenced.
Keep the whole file retrievable per site and per date, because you will need it when a claim starts.

What vendor insurance verification actually covers

Insurance is only one part of vendor compliance, and managers who treat them as the same thing end up with gaps. Insurance transfers financial risk. Compliance confirms the vendor is legally entitled to be on site doing the work. You need both, and they come from different places.

The documents fall into four groups:

Risk transfer documents — commercial general liability, automobile liability, and in some contracts, umbrella or excess liability.
Statutory coverage or clearance — workplace insurance coverage or a valid clearance certificate.
Competence and training records — site orientation, chemical safety training, and any certification the work demands.
Site-specific permissions — record checks, restricted-area authorisations and after-hours approvals.

Which of these you must collect is set by the contract, the building's own rules and provincial law. The register is what makes them manageable. When a vendor panel grows past three or four contractors, memory stops working — and that is when a pre-qualification list should be doing the work, as set out in our guide to building an approved vendor panel.

Which documents to collect before the first shift

Answer the question in the contract first: what are the minimum limits, and which certificates are required? Then collect to that list.

Document	What it proves	Typical re-check
Certificate of insurance (CGL)	Liability coverage and limits are in force	Every 12 months, at renewal
Additional insured / waiver endorsements	Your building is named where the contract requires it	Every 12 months, at renewal
Automobile liability	Vehicles used on site or between sites are covered	Every 12 months, at renewal
Workplace insurance clearance	Payroll obligations to the workers' board are current	Every 90 days
Chemical safety and hazard training records	Workers can handle and dilute products	At onboarding, refreshed with new products
Site orientation sign-off	Each individual has been inducted	Every new worker, every site
Police record checks, where required	Access suitability for the building	Per the building's own policy

Two habits matter more than the list. Collect documents for individuals, not just the company. And collect them per site, because a vendor working in four of your buildings needs four sets of site specifics even when the corporate certificates are shared.

Not regulatory advice. Coverage requirements, clearance rules and record-check expectations vary by province and are enforced by provincial workplace safety boards and privacy regulators. Confirm your obligations with those bodies and with the building owner's insurance advisor.

How do you verify a certificate of insurance?

Read the certificate rather than filing it. Six details decide whether it actually protects you.

The named insured matches the contracting entity. If you contracted with a numbered company, a certificate naming a different trade name may not respond.
The policy period covers the work dates.
The limits meet or exceed the contract minimum. Compare the number to the clause, not to your recollection of it.
The coverage types match the risk. General liability does not cover a vehicle, and it does not cover professional advice.
The endorsements exist where required. Additional insured status and waiver of subrogation are separate documents, not sentences on the certificate.
The certificate is genuine and current. When in doubt, ask for the broker's details and confirm.

A certificate is evidence, not a guarantee.

What to do when the certificate expires

Coverage that lapsed last month is no coverage today, and the vendor may not know. Diarise the renewal 30 days out and send a written request quoting the expiry date back.

Day −30: written request for the renewed certificate, copied to the vendor's account manager.
Day −7: second request, and notice that site access suspends on the expiry date.
Expiry date: crews do not work until the renewed certificate is in the register. This is an access problem before it is a contract problem, which is why it belongs in your vendor site access and key control procedure.
Day +1: written notice to the vendor.
Day +5: the gap becomes a contract performance issue, handled through the contract remedy rather than by email.

The suspension step is unpopular and it is the step that makes the rest work. A vendor stopped at the loading dock once will renew on time for the next three years. Say in the contract that access is conditional on current coverage, so the decision is not personal when you make it.

Where subcontractors change the picture

Your vendor's insurance does not automatically cover a subcontractor, and your vendor may not know which subcontractors are on your site this month. Require written disclosure of every subcontractor, and collect the same documents for each one you have not already approved. The accountability chain is worked through in who is responsible when a vendor subcontracts, and the practical test is simple: can you name every company that had a worker in the building last month, and produce a current certificate for each?

Three common gaps:

The subcontractor's certificate names the vendor, not your building, so the additional insured endorsement is missing.
A labour agency supplies workers whose coverage sits with the agency, and nobody collected the agency's clearance.
A one-person operator insists they need no coverage because they have no employees, while the building's insurer expects evidence either way.

Ask for the answer in writing, per site and per month. A vendor that cannot produce a current list of its subcontractors is telling you something about its supervision.

Building a compliance register you will actually maintain

A register fails when it lives in one person's inbox. Keep it somewhere the whole team can see, with four columns per document: the site or vendor, the document type, the expiry date, and the named owner responsible for chasing it.

Then set the routine:

Monthly: list everything expiring in the next 60 days.
Quarterly: re-verify clearances, which provincial boards usually issue on a short cycle.
Annually: re-verify insurance at each policy renewal, and re-read the contract's insurance clause.
On event: re-verify after any change of ownership, any subcontractor addition, any incident, and any move into a new province.

Pair the register with the contract. When you onboard a vendor, the documents and the site rules travel together, which is why the sequence in our vendor onboarding checklist puts the insurance file before the first shift. And make the minimums specific in the contract — percentages, dollar figures and named endorsements — because a clause that says "adequate coverage" cannot be enforced.

Compliance checks that go beyond insurance

Some of the most common compliance failures in commercial buildings have nothing to do with a certificate. They are visible only when somebody walks the site.

Chemical storage and labelling. Products left in unlabelled spray bottles, or the same bottle used across a restroom and a kitchen, is a training and supervision failure. Our WHMIS for cleaners overview covers what workers should have been taught.
Dilution discipline. Concentrates mixed by eye produce both chemical waste and cleaning that does not work. The controls are set out in chemical inventory and dilution control.
Equipment condition. Vacuum cords taped mid-run, missing floor signage, and machines stored in a stairwell are all findings.
Scope creep into regulated work. A crew asked to handle sharps or clinical waste without the training and equipment for it is a serious exposure.

Scope note: Asbestos disturbance, confined space entry, clinical and sharps waste handling, pest treatment, mould remediation, electrical work and pool chemical dosing are normally outside a cleaning contractor's scope. Confirm in writing what is included, and report rather than act on anything outside it.

A compliance file that only contains PDFs is a filing system, not a control.

Frequently asked questions

How often should I re-verify a vendor's insurance?

At least once a year at each policy renewal, and immediately after any change in scope, ownership or subcontracting. Workplace insurance clearances need checking more often — every 90 days is a practical rhythm. Put the expiry date in a register and chase the renewal 30 days before it lapses.

What is the difference between a certificate of insurance and a clearance certificate?

A certificate of insurance comes from the vendor's broker and shows the liability policies, limits and period in force. A clearance certificate comes from the provincial workplace safety board and confirms the vendor's account is in good standing. You need both; one does not substitute for the other.

Can I stop a vendor working if their coverage has lapsed?

Only if the contract makes current coverage a condition of access, so put that clause in at signature. Where it is in place, the process is a written request 30 days before expiry, a second request a week out, and suspension of access on the expiry date until a renewed certificate is filed.

Do I need insurance documents for a vendor's subcontractors?

Yes. A vendor's policy does not automatically respond to a subcontractor's work, and the additional insured endorsement you rely on is unlikely to extend to a company nobody disclosed. Collect the same certificates for each subcontractor before that company's first shift.

What should I do if a vendor refuses to provide a certificate?

Treat it as a contract breach rather than a paperwork dispute, because it is. Say in writing what the contract requires and by when, hold access or payment as the contract allows, and record each step. A contractor that will not evidence coverage will not respond well to a claim either.

Sourcing vendor insurance verification

Vendor insurance verification is not complicated, but it is continuous, and continuous work needs a place to live. Build the register, name an owner for each document type, and put the expiry dates where you will see them a month before they matter.

Where this fits in the vendor management process

This is one part of a wider discipline. It sits alongside vendor management programme, which sets out how to select, onboard, monitor and renew the contractors a building depends on.

NeatScore keeps the site-level records, photos and dated reports a manager needs when a vendor's compliance is questioned, alongside the inspection results for the same building. Start a free 14-day trial or see pricing.