CERTIFICATE OF INSURANCE (COI): WHAT EVERY CALIFORNIA CONTRACTOR NEEDS TO KNOW

You have the insurance. You won the bid. The project is ready to start. And then the GC or property manager asks for a COI — a certificate of insurance — before anyone sets foot on the property. If you do not understand what a COI is, what it needs to show, and how to get one that actually satisfies the contract requirements, that job can slip through your fingers on day one.

For California contractors, the certificate of insurance is one of the most frequently requested — and most frequently mishandled — documents in daily business operations. Getting it right is not complicated, but it requires knowing what you are looking at, what the requesting party actually needs, and where most contractors (and their brokers) go wrong. This guide covers all of it.

What a COI Actually Is

A Certificate of Insurance is a standardized document — almost universally issued on the ACORD 25 form for liability coverages — that summarizes the key details of a contractor's insurance policies. ACORD stands for Association for Cooperative Operations Research and Development, and its standardized forms have become the industry default precisely because they give everyone — GCs, property managers, project owners, public agencies — a consistent format to review and file.

Here is the most important thing to understand about a COI: it is a summary document, not a legal instrument. The certificate itself does not create coverage, does not modify the underlying policy, and does not bind the insurer to anything beyond what the actual policy says. ACORD 25 certificates contain a standard disclaimer stating exactly this: "This certificate is issued as a matter of information only and confers no rights upon the certificate holder."

This distinction matters enormously in practice. A GC who collects a COI from a subcontractor has not verified that the sub's policy actually contains the required endorsements — they have only received a document claiming that it does. Whether the policy language actually matches what the certificate represents is a separate question, and one that experienced risk managers know to probe.

A COI is a point-in-time snapshot. It reflects the policy as of the date it was issued. If the contractor's policy is subsequently cancelled, limits are reduced, or endorsements are removed, the certificate does not automatically update. This is why contracts frequently require contractors to provide notice of cancellation — typically 30 days — directly from the insurer to the certificate holder.

What Information a COI Shows

The ACORD 25 form is organized into sections that any California contractor should be able to read fluently. Understanding each section helps you both produce accurate certificates and evaluate the ones you receive from subs.

• Producer (broker) information. The name and contact information of the insurance agency or brokerage that issued the certificate. This is who the certificate holder can call to verify details or request changes.
• Insured information. The named insured — the contractor — including their legal business name and address. Accuracy here is critical: the name must match the entity named in the contract and on the policy exactly.
• Insurer information. The name and NAIC number of each insurer providing coverage. NAIC numbers allow the certificate holder to verify the insurer's financial strength and California admitted status.
• Coverage types and policy numbers. The certificate lists each coverage line — commercial general liability, commercial auto, workers' compensation/employers liability, umbrella/excess — along with the policy number for each. Each line shows whether the coverage is claims-made or occurrence-based.
• Policy effective and expiration dates. Each policy's in-force dates are shown. A certificate holder can see at a glance whether coverage extends through the project period. This is where expired certificates get caught — or missed if no one is paying attention.
• Coverage limits. For each coverage line, the certificate shows the applicable limits: per occurrence, general aggregate, products/completed operations aggregate, personal and advertising injury, damage to rented premises, and medical expense for GL; combined single limit or split limits for auto; per occurrence and aggregate for umbrella; and per accident, disease-policy limit, and disease-per-employee limits for workers' compensation.
• Description of operations / Additional remarks. This free-text box is where endorsements, project-specific conditions, and additional insured language are typically noted. It is the most important box on the form for commercial projects and the one most often left incomplete or inaccurate.
• Certificate holder. The entity requesting the certificate — the GC, property manager, project owner, or public agency. This name and address must be exact.
• Cancellation notice. Most contracts require 30-day advance notice of cancellation to the certificate holder. Some policies provide this by endorsement; others note it in the certificate description box. Verify that your policy actually provides the cancellation notice your contract requires — a promise in the description box that is not backed by a policy endorsement is not enforceable.

When California Contractors Need to Provide a COI

The short answer: whenever anyone with authority over your access to a job site or project contract asks for one. In practical terms, California contractors are asked for COIs in the following situations constantly.

Pulling Building Permits

Los Angeles (LADBS), San Francisco DBI, San Diego DSD, and most other California building departments require proof of workers' compensation insurance as a condition of pulling a permit if you have employees. Some jurisdictions require GL as well. The COI or the WC exemption form from the CSLB is typically what satisfies this requirement at the permit counter. If your policy is not set up to produce certificates quickly, permit delays can push your project start date back.

Working as a Subcontractor

Any GC worth working for will require a COI before you set foot on their job site. Most GC subcontract agreements have insurance specification pages that detail exactly what coverage types, limits, endorsements, and certificate holder information they require. Your COI must satisfy every line of that specification. A COI that shows $1M GL when the GC requires $2M, or that is missing an additional insured endorsement, will result in a hold on your work authorization until it is corrected.

Bidding on Commercial Projects

Many commercial project bid packages require a COI — or at minimum a declaration of insurability at required limits — as part of the bid submission. Submitting a bid without the required insurance documentation, or with documentation that does not meet the specified requirements, typically results in the bid being deemed non-responsive. This is especially common on developer, institutional, and multi-family projects.

Working on Commercial Properties

Commercial property owners — office buildings, retail centers, industrial parks, apartment complexes — almost always require a COI from contractors performing any work on their premises. Property management companies typically maintain standard insurance requirement sheets that they send with every vendor authorization, and their requirements are often standardized across their portfolio. Know the requirements before you start the work authorization process, not after.

Public Works and Government Contracts

State, county, and city contracts in California have among the most detailed insurance requirements you will encounter. Public agencies typically require higher limits ($2M per occurrence is common), umbrella coverage, professional liability in some cases, and specific endorsement language that must match what the contract specifies word-for-word. DIR-registered public works contractors should have their insurance set up to produce these certificates routinely — a project officer waiting for a corrected COI on day one of a public works project is not a great start to the relationship.

Property Management Companies and HOAs

If you do regular work for property management companies — maintenance, renovation, service calls — expect to provide a COI for every property management company you work with, and sometimes for every property within their portfolio. HOAs doing capital improvement projects often run through a management company with their own insurance requirements. These requirements are frequently less stringent than commercial GC requirements but still must be satisfied before work begins.

Additional Insured Endorsements — The Most Misunderstood Part

Of all the elements on a COI, the additional insured (AI) requirement is the one that generates the most confusion, the most errors, and the most coverage disputes. Getting this right is not optional — it is the part of the COI that actually determines whether a third party can make a claim against your policy.

What It Means to Name Someone as Additional Insured

When a GC requires you to name them as an additional insured on your GL policy, they are asking you to extend your policy's coverage to them for claims arising from your operations. If your work injures someone and that person sues both you and the GC, the GC — as your additional insured — can have your GL policy defend them and pay claims on their behalf. This is a meaningful transfer of risk from the GC to your insurer.

The key phrase is "arising from your operations." Most standard AI endorsements (ISO CG 20 10 for ongoing operations, CG 20 37 for completed operations) provide coverage to the additional insured only for claims caused by the named insured contractor's work — not for the additional insured's own negligence. Some contracts attempt to require broader AI coverage, and this is where endorsement language review becomes critical.

Primary and Non-Contributory Language

Most commercial contracts now require that your GL policy respond as primary and non-contributory to any coverage the additional insured carries. "Primary" means your policy pays first before the additional insured's own GL policy. "Non-contributory" means your policy does not ask the additional insured's insurer to share in the loss. This must be backed by an endorsement on your policy — specifically ISO CG 20 01 or equivalent — not just stated in the description box of the certificate. Many contractors have certificates that say "primary and non-contributory" in the description box but do not have the actual endorsement. The certificate language is worthless without the underlying endorsement.

Waiver of Subrogation

Subrogation is the right of your insurer, after paying a claim, to step into your shoes and pursue recovery from the party actually responsible for the loss. Waiver of subrogation means your insurer gives up that right against the additional insured. Many commercial contracts require waiver of subrogation in favor of the GC or project owner. This requires a specific endorsement (ISO CG 24 04) and must be requested at policy inception or renewal — you cannot add a blanket waiver of subrogation retroactively on most policies.

Blanket Additional Insured vs. Named Additional Insured

There are two ways to add additional insureds to a GL policy. A named additional insured endorsement lists specific parties by name — appropriate for a long-term GC relationship or a known project owner. A blanket additional insured endorsement automatically extends additional insured status to any party you are required by written contract to name as an additional insured. Blanket AI endorsements are the preferred solution for most contractors because they do not require a policy change every time you take on a new project or client. Confirm with your broker that your policy has a blanket AI endorsement — specifically ISO CG 20 33 or equivalent — so you are not having to call your insurer to add named AIs every time you start a new project.

Per-Project Endorsements

Some GCs — particularly larger commercial GCs and developers — require a per-project aggregate endorsement (ISO CG 25 03 or CG 25 04). This modifies your policy so that the general aggregate limit applies separately to each covered project rather than pooling across all your work for the year. Without this endorsement, a large claim on one project could erode the aggregate limit available for all your other projects in the same policy year. Per-project aggregates are a reasonable protection for the GC and a reasonable request — but you need to ask your broker whether your policy includes it before you promise it on a certificate.

Common COI Mistakes That Kill Deals or Create Liability

These are the errors that cause job delays, lost contracts, and in some cases, coverage denials. Most are entirely preventable with an organized approach and a responsive broker.

Expired Certificates

A COI that shows a policy expiration date in the past is useless and will be rejected immediately. This happens when contractors renew their policies but do not update their standard COI template, or when they send a certificate from a prior policy year. Any time your policy renews, ensure all standing certificate requests are re-issued with the new policy information. Many brokers maintain a list of certificate holders and automatically re-issue certificates at renewal — if yours does not, ask them to start doing it.

Wrong Certificate Holder Name or Address

The certificate holder name must match the entity named in the contract exactly. "ABC Construction" and "ABC Construction LLC" are different entities. A certificate issued to the wrong legal name may not satisfy the contract requirement and may create a coverage dispute if a claim arises. Always provide your broker with the exact legal name and address of the certificate holder — do not guess or abbreviate.

Missing Endorsements the Contract Requires

A COI that does not reflect the required endorsements — additional insured, primary and non-contributory, waiver of subrogation, per-project aggregate — is non-compliant regardless of what the limits show. This is the most common substantive error. Contractors who try to manage their own certificates without broker assistance frequently produce certificates that look complete but are missing critical endorsement language. Read the contract's insurance specification carefully and check each item against your policy before issuing the certificate.

Wrong Limits

A GC requires $2,000,000 per occurrence and you carry $1,000,000. Or they require a $5,000,000 umbrella and your umbrella is only $2,000,000. No matter how well-formatted your certificate is, if the limits do not match the contract requirements, you cannot start work until the issue is resolved — which typically means buying more coverage mid-term at a higher rate. Always review the insurance requirements before submitting a bid and confirm your current limits are sufficient. If they are not, factor the cost of increased limits into your bid.

Using a Certificate from an Old Policy

Old certificates — from expired policies — occasionally get pulled from files and submitted to new projects. This almost always happens by accident, but the result is the same: the certificate shows coverage that no longer exists. Establish a system for tracking your current policy documents and never submit a certificate without verifying the policy dates are current.

AI Endorsement Language That Does Not Match Contract Requirements

Some contracts specify exact endorsement form numbers or specific language for additional insured coverage. If your policy uses a different endorsement form — even one that provides substantially similar protection — a technically rigorous contract reviewer may flag it as non-compliant. This is increasingly common in developer and institutional contracts that are drafted by risk management professionals. When a contract specifies exact endorsement form numbers, provide your broker with the specification and ask them to confirm your policy uses the required forms or a manuscript equivalent.

How Fast Can You Get a COI?

This is a practical question with real business implications. When a GC needs a COI before authorizing your crew to start work tomorrow morning, your broker's response time is suddenly a critical operational variable.

A broker with a well-organized certificate management system — one who maintains your policy information, your standard certificate templates, and your additional insured endorsements in an accessible format — can issue a routine COI within minutes of your request. Same-day turnaround for any standard certificate request should be the baseline expectation for a contractor insurance broker in 2026. If a routine COI request routinely takes 24–48 hours at your current broker, that is a service failure, not an industry standard.

Non-routine certificates — those requiring endorsements that are not already on your policy, or those requiring limit increases that need insurer approval — may take longer and may require mid-term policy changes. This is why having your policy set up correctly at inception, with blanket AI endorsements and the standard commercial language already in place, minimizes the number of requests that require insurer involvement.

Emergency situations — you get a new project authorization at 4 PM and need a COI by 8 AM — are where broker relationships and after-hours access matter. Know whether your broker has an after-hours contact protocol, and make sure your policy documents are in a format you can access yourself if needed.

What to Look for When Receiving a COI from Subs

If you are a GC or a prime contractor managing subcontractors, receiving and verifying COIs from your subs is not an administrative formality — it is risk management. An uninsured or inadequately insured sub creates direct exposure for you: their GL claims may end up on your policy, their injured workers may look to you for compensation, and their property damage may fall to your GL to defend.

When you receive a COI from a sub, check the following:

• Is the coverage current? Check the policy expiration dates against your project schedule. A policy that expires mid-project needs renewal documentation.
• Are the limits sufficient? Compare the sub's limits against what your subcontract agreement requires. If your contract requires $2M per occurrence and they show $1M, send it back.
• Is your company named as additional insured? The certificate holder block shows your name. But for AI status, look in the description box — it should indicate that the certificate holder (or your specified entity) is included as an additional insured on the policy by endorsement. The words "certificate holder is included as additional insured" in the description box should also be backed by the actual endorsement on their policy.
• Is there a waiver of subrogation? If your subcontract requires it, the COI should reflect it in the description box, and the underlying policy should have the endorsement.
• Is workers' compensation shown? If your sub has employees, they are required to carry workers' compensation in California. A sub without WC creates enormous exposure — their injured workers can file claims against your WC policy as a "borrowing employer," and California courts take this seriously.
• Does the insured name match the entity in your contract? Verify the legal business name on the certificate matches the entity you contracted with.

For ongoing sub relationships, implement a certificate tracking system — a spreadsheet or simple software — that logs each sub's policy expiration dates and sends reminders when renewal is needed. Chasing expired certificates from subs on an active project is a compliance problem and a distraction you do not need.

COI vs. ACORD 27 and ACORD 28

Most contractors deal almost exclusively with the ACORD 25 form for liability coverages. Two other ACORD forms appear occasionally and are worth knowing.

The ACORD 27 is used to evidence property insurance — typically on a contractor's own commercial property or a builder's risk policy covering a project under construction. If you are required to provide evidence of builder's risk coverage on a project you own or are developing, the ACORD 27 is the form that will be requested.

The ACORD 28 is similar to the ACORD 27 but is specifically designed for commercial property coverage and is more commonly used in commercial real estate transactions and tenant improvement contexts. Contractors doing TI work in commercial spaces are occasionally asked for an ACORD 28 to evidence that the property improvements they are building are covered during construction.

For the vast majority of contractor insurance situations — subcontractor work, permit applications, GC requirements, public agency contracts — the ACORD 25 is the only form you will need to produce. But if a certificate request specifies a different ACORD form number, know what you are being asked for and make sure your broker issues the right document.