Is a Certificate of Insurance Enough?

The short answer is no.

A Certificate of Insurance is the most commonly collected vendor document in HOA management. It is also the most commonly misunderstood. Boards collect it, file it, and assume the association is protected. In many cases, it is not.

A COI is not the insurance policy. It is a summary document issued by the contractor's insurance agent confirming that coverage existed at the time the certificate was generated. Standard ACORD certificate language states explicitly that the certificate "is issued as a matter of information only and confers no rights upon the certificate holder."

That means the piece of paper most boards rely on for protection is, by its own terms, informational. It does not guarantee coverage. It does not prevent cancellation. And it does not make the HOA a covered party.

What a COI actually proves

A certificate of insurance proves three things:

1. A policy existed at the time the certificate was issued
2. The policy had certain coverage types and limits at that time
3. The named insured on the policy is the entity listed on the certificate

That is all.

It does not prove the policy is still active today. It does not prove the HOA has any rights under the policy. It does not prove the contractor will maintain coverage through the duration of the project.

What a COI does not prove

The policy is still in force

A policy can be cancelled the day after the certificate is issued. Unless the HOA has a cancellation notice provision (requiring the carrier to notify the HOA if the policy is cancelled), the board has no way of knowing coverage has lapsed until they need it.

A COI dated six months ago is not evidence of current coverage. A COI dated three months ago is not evidence either. The only way to have confidence is to request a fresh certificate close to the start of work and, for long projects, periodically during the project.

The HOA is actually covered

This is the gap that catches the most boards.

Being listed as the "certificate holder" on a COI does not make the HOA a covered party under the policy. It means the HOA received a copy of the certificate. That is a different thing.

To have rights under the contractor's policy, the HOA needs to be listed as an additional insured — and that requires a specific endorsement on the general liability policy. The endorsement is a modification to the policy itself, not just a notation on the certificate.

Without additional insured status, the HOA may have no standing to make a claim under the contractor's policy, even if the contractor caused the damage on the HOA's property.

Workers' comp is included

General liability and workers' compensation are separate policies. A COI showing general liability coverage does not mean the contractor has workers' comp. It should appear as a separate line item on the certificate.

If it is missing, the contractor may have no workers' comp. Sole proprietors with no employees may not be required to carry it in every state, but the HOA’s exposure is the same — a worker injured on common property can file a claim against the association regardless of whether the contractor was legally required to carry coverage.

The coverage matches the project

A COI with $500,000 in general liability may be adequate for a landscaping contract. It may not be adequate for a $300,000 roof replacement. The certificate shows the limits, but it does not tell the board whether those limits are sufficient for the scope of work.

Boards should set minimum coverage requirements based on project size and risk, not accept whatever limits the contractor happens to carry.

The additional insured problem

Additional insured status is the single most important protection a COI alone cannot provide.

When the HOA is an additional insured on the contractor's general liability policy, the HOA has direct rights to make a claim. This matters when:

• A contractor's employee damages common property
• A third party is injured due to contractor operations
• The HOA is named in a lawsuit arising from the contractor's work

Without the endorsement, the HOA's only recourse may be to sue the contractor directly and hope they have the assets to pay. The entire point of requiring insurance is to avoid that situation.

How to verify: the COI should show the HOA’s legal name in the "Additional Insured" section, not just the "Certificate Holder" section. But the COI notation alone is not proof — request a copy of the actual additional insured endorsement from the contractor’s agent. The endorsement is the binding document; the COI is just a summary.

What boards should actually do

A certificate of insurance is a starting point, not an endpoint. Here is what a proper insurance verification looks like:

1. Request a current COI — Dated within 30 days. Do not accept certificates from the bid process if work starts months later.

2. Verify the named insured — It should match the contractor's legal business name, not a trade name or DBA.

3. Check coverage dates — The policy must cover the entire project timeline, not just the start date.

4. Require additional insured status — The HOA should be listed as an additional insured on the general liability policy. Request a copy of the endorsement, not just the COI notation.

5. Confirm workers' comp separately — Look for it as its own line item. Do not assume it is included in general liability.

6. Evaluate limits against project scope — A small policy on a large project leaves the HOA exposed.

7. Request cancellation notice — For projects over $25,000 or lasting more than 30 days, ask that the carrier notify the HOA if the policy is cancelled or materially changed.

The real question a COI should answer

The question is not "does the contractor have insurance?" The question is: if something goes wrong on this project next month, will the file we have today hold up?

That means current coverage, correct endorsements, adequate limits, and verified status — not just a certificate in a folder.

For a deeper breakdown of coverage types, see Contractor Insurance for HOAs.

How BuildRated approaches this

BuildRated tracks insurance verification status as part of every contractor's compliance profile. The system distinguishes between "coverage on file" and "coverage verified current" — because that distinction is exactly where most vendor files break down.

The daily compliance check flags expired or unverified insurance automatically. The VECR (Vendor Eligibility and Compliance Record) includes credential status for each coverage type at a specific point in time, so boards and auditors can verify what was actually in force when a payment was approved — not just what was in the folder. For the full VECR specification, see VECR: Vendor Eligibility and Compliance Record.