A real COI,
line by line.
If you run a small business, you've handled hundreds of these — issuing them to clients and GCs, or receiving them from subs and vendors. Here's what every line actually means, plus the things to check whichever side of the COI you're on.
Part 1 · If you're issuing a COI
Below is a sample ACORD 25 Certificate of Insurance — the standardized form used industry-wide. The layout, fields, and codes are the same whether the document comes from your carrier, your broker, or a portal. Once you understand the structure, you can read any COI in under 60 seconds.
Before we go through it, one critical reminder we mention in the glossary too:
A COI is informational, not contractual. The actual insurance policy controls. The COI summarizes what's currently in force, but it doesn't expand coverage, doesn't bind the carrier to anything not in the policy, and doesn't guarantee that coverage stays in force after the document is generated. Treat it as a snapshot, not a promise.
123 Example Street, Houston, TX 77002
Phone: (555) 555-1234 · agent@example.com
456 Worksite Lane, Houston, TX 77003
INSURER B: Texas Mutual Workers' Compensation · NAIC #: 67890 · Rating: A
INSURER C: Excess Underwriters Ltd. · NAIC #: 24680 · Rating: A
| INSR LTR |
TYPE OF INSURANCE | POLICY NUMBER | EFF DATE | EXP DATE | LIMITS |
|---|---|---|---|---|---|
| A | COMMERCIAL GENERAL LIABILITY ☒ Occurrence ☐ Claims-Made ☒ Per Project Aggregate |
GL-2026-001234 | 01/01/2026 | 01/01/2027 | Each Occurrence: $1,000,000 Damage to Premises: $100,000 Med Exp (any one person): $5,000 Personal & Adv Injury: $1,000,000 General Aggregate: $2,000,000 Products/Completed Ops Agg: $2,000,000 |
| A | COMMERCIAL AUTO LIABILITY ☒ Any Auto ☐ Hired Autos Only ☐ Non-Owned Only |
CA-2026-005678 | 01/01/2026 | 01/01/2027 | Combined Single Limit: $1,000,000 Bodily Injury (per person): — Bodily Injury (per accident): — Property Damage: — |
| C | UMBRELLA LIABILITY ☒ Occurrence ☐ Claims-Made Retention: $10,000 |
UMB-2026-009012 | 01/01/2026 | 01/01/2027 | Each Occurrence: $5,000,000 Aggregate: $5,000,000 |
| B | WORKERS' COMPENSATION & EMPLOYERS' LIABILITY ☒ Statutory Limits |
WC-2026-003456 | 01/01/2026 | 01/01/2027 | E.L. Each Accident: $1,000,000 E.L. Disease — Each Employee: $1,000,000 E.L. Disease — Policy Limit: $1,000,000 |
Certificate Holder is included as Additional Insured on General Liability and Commercial Auto policies as required by written contract. Waiver of Subrogation applies in favor of Certificate Holder on General Liability and Workers' Compensation. Coverage is primary and non-contributory.
789 Main Street, Houston, TX 77004
What each section actually means
Producer
Who issued the certificate — your insurance agency or broker.
This is the agency that wrote your policies and is generating the COI on your behalf. Their phone and email belong here so the certificate holder has someone to contact with questions about your coverage.
What to check: Make sure the producer info is accurate and current. If you've changed agents, an old producer name on your COI is a red flag the document hasn't been refreshed.
Insured
Your business — the legal entity covered by the policies.
This must match your business's legal name exactly as it appears on your policy. If your policy is in the name of "ACME Contracting LLC" but the COI says "ACME Construction" or "ACME Inc," that's a problem — coverage may not apply.
What to check: If you operate under a DBA, both the LLC name and the DBA should appear here. Mismatched names cause claim denials more often than people realize.
Insurers Affording Coverage
The actual carriers backing each policy, with their NAIC code and financial strength rating.
Each policy on the COI is associated with a letter (A, B, C…) that points back to a specific insurance company in this section. The NAIC code is a unique identifier for the carrier. The rating (A, A+, A++, etc.) reflects financial strength — most contracts require carriers rated A- or better.
What to check: Many contracts specify minimum carrier ratings. If yours requires "A.M. Best A- or higher" and your carrier is rated B++, you're in technical breach of contract — even if your coverage is otherwise compliant.
Coverages — The Big Grid
The heart of the COI. Each row is a separate policy with its limits, dates, and key features.
This is what the certificate holder is checking. Each line must match (or exceed) what their contract requires. Let's walk through a row:
What to check: Compare every line to your contract's insurance requirements. The most common compliance failures: aggregate limit too low, policy expiring before project completion, claims-made when occurrence required, missing umbrella when contract requires it.
Description of Operations / Special Items
The free-text section where contract-specific language goes. This is where most of the legal weight of a COI actually lives.
The grid in section 04 shows that policies exist. This section shows what the policies do for the certificate holder specifically. Three phrases to know:
What to check: Does the contract require these endorsements, and does your COI actually reflect them? It's surprisingly common for a contract to require all three and a COI to be issued listing them — without the underlying endorsements actually being in place. That's a fraud risk for you and a coverage problem if a claim hits.
Certificate Holder
Who the COI is being issued to.
The party requiring proof of insurance — usually a general contractor, property owner, lessor, or client. Their legal name and address must be exactly correct. Wrong name or wrong address means the COI may not satisfy the contractual requirement.
What to check: Match the certificate holder name to the contract or vendor agreement word-for-word. "Big GC Construction Company" and "Big GC Construction Co." are different entities for compliance purposes.
Cancellation
The boilerplate language about what happens if your policy is cancelled mid-term.
Modern ACORD certificates use generic language that defers to the policy itself. Older versions promised specific notice periods (often 30 days) directly to the certificate holder — a promise the carriers actually never wanted to make and that's been substantially watered down over the years.
What to check: If the contract requires a specific number of days of notice before cancellation, that obligation typically has to come from a policy endorsement, not just a line on the COI. Don't assume the cancellation language is binding without verifying with your agent.
The 60-second COI checklist
Once you understand the layout, here's what to scan for every time:
- Insured name matches your legal entity exactly
- Policy effective and expiration dates cover the entire project window
- Each policy meets the minimum limits required by the contract
- Carrier ratings meet contract minimums (usually A.M. Best A- or higher)
- Special items section names the certificate holder as additional insured if required
- Waiver of subrogation and primary/non-contributory language present if required
- Certificate holder name and address are spelled exactly correctly
That's it. Once those seven items check out, you can sign the contract and move on.
Part 2 · If you're receiving a COI
You don't have to be a general contractor for this to apply. Anyone who hires another business to do work involving meaningful risk should be requesting a COI before that work begins. Property owners with tenants. Restaurant owners hiring a cleaning crew. An office manager vetting an IT vendor. A homeowner having their roof replaced. The COI is your verification that the person you hired actually has the coverage they say they do.
If they can't produce one, that's information. A legitimate business with proper coverage can have a COI in your inbox within a few hours, often immediately. A vendor who stalls, makes excuses, or sends an outdated document is telling you something about their coverage — and about how a claim would actually be handled.
What to verify before you sign
When a COI lands in your inbox, here's the seven-point review that takes about 90 seconds and saves real money.
The legal name matches the contract
The "Insured" line on the COI must exactly match the entity you contracted with. "Acme Plumbing LLC" on your contract and "Acme Plumbing Co." on the COI are different legal entities. If a claim hits and the names don't match, the carrier may deny on the grounds that the policy doesn't cover the entity that did the work.
Common gotcha: Sole proprietors and DBAs. If you contracted with "John Smith dba Smith Roofing," both names should appear on the COI. If the policy is in John's personal name only and the contract is with the DBA, that's an immediate red flag worth a phone call.
Coverage is in force through the end of the work
Look at the expiration dates on every policy listed. If a policy expires before your project is complete, the contractor has to renew it and re-issue an updated COI before that date — not after. Don't wait for the contractor to remember; track the dates yourself.
Common gotcha: A 12-month project with policies that renew at the 6-month mark. The contractor's renewal is automatic, but a re-issued COI is not. You should request an updated COI within 30 days of any renewal date that falls during your project window.
The limits meet your contract requirements
If your contract requires "$1M per occurrence / $2M aggregate GL," the COI must show at least those numbers. Read carefully — the GL section has multiple buckets (per occurrence, general aggregate, products/completed operations aggregate), and contracts often specify minimums for each one separately.
Common gotcha: Aggregate too low for a busy contractor. A $2M general aggregate sounds fine in isolation — but if that contractor has 30 active projects, the aggregate is shared across all of them. By the time a claim hits your job, the aggregate may be partially or fully exhausted. For high-value work, look for a "per project aggregate" endorsement, which gives your job its own dedicated bucket.
You're listed as Certificate Holder — and Additional Insured if required
The "Certificate Holder" section at the bottom should show your business name and address, exactly as written in the contract. If your contract requires you to be added as Additional Insured (most do, for any work where the contractor's negligence could create liability for you), the special items section must say so explicitly.
Common gotcha: Generic "to whom it may concern" certificate holders. Some contractors keep a single COI on file and hand it out unmodified. That doesn't make you the certificate holder — it just means you saw a piece of paper. Insist on a COI issued specifically to your business name.
The endorsement language matches your contract
If your contract requires Waiver of Subrogation, Primary and Non-Contributory, or 30-day notice of cancellation, the special items section of the COI should explicitly reference those endorsements. But — and this is the trap most people don't know about — language on the COI doesn't mean the endorsements actually exist on the policy. The COI is informational; the policy is contractual.
How to verify for high-stakes work: For larger projects, ask for the actual endorsement documents (the policy forms, usually identified by codes like CG 20 10 or CG 20 37 for Additional Insured). Your agent can request these from the contractor's agent. For routine work, the COI language is generally accepted; for anything significant, get the underlying paper.
The carrier is reputable
Each policy's carrier should be rated A- or better by A.M. Best. The COI shows the carrier name and usually the NAIC code; A.M. Best ratings can be checked free at ambest.com. A B-rated carrier on a small job may be acceptable; on a high-value project, it's a real concern. Some contracts explicitly require A- minimums.
Common gotcha: Surplus lines and non-admitted carriers. These aren't always bad, but they have different regulatory protections than admitted carriers. If you see a carrier you don't recognize, a 30-second search tells you what you need to know.
It's the actual COI — not a screenshot, not an old PDF
COIs should come from the contractor's insurance agent, not from the contractor themselves. They should be dated within the last 30 days. They should be unmodified PDFs, not screenshots, not photocopies of photocopies. Forged or altered COIs do happen — usually when a contractor has lost coverage and is trying to keep working.
How to verify if you're suspicious: Call the agent listed in the "Producer" section. Tell them you've received a COI for [contractor name] and you'd like to verify the policies are in force. Legitimate agents are happy to confirm; if there's any pushback, that's information too.
The 90-second receiving checklist
Print this. Tape it to your wall. Use it every time:
- Insured name on the COI matches your contract exactly
- Policy expiration dates are after your project completion date
- Limits meet or exceed every requirement in your contract
- Your business is the Certificate Holder (not "to whom it may concern")
- You're listed as Additional Insured if your contract required it
- Waiver of Subrogation / Primary & Non-Contributory language present if required
- Carrier is A.M. Best rated A- or better; document is recent and unmodified
If anything fails this check, send it back. A reasonable contractor will get an updated COI to you within 24 hours. An unreasonable one is telling you what working with them is going to be like.
One more thing: track expirations yourself.
Modern ACORD certificates use generic cancellation language that essentially defers to the policy. The historic 30-days-notice promise has been substantially watered down. If a sub's policy lapses mid-project, you're not guaranteed to find out from the carrier.
The fix: keep a simple spreadsheet of every active sub with their COI's expiration dates. Set yourself a reminder 30 days before each one expires to request an updated COI. It takes about five minutes a quarter and prevents the worst-case scenario — which is finding out a sub was uninsured for the last two months because nobody tracked the dates.
Want a COI reviewed against a specific contract?
Send us your contract's insurance requirements and your current COI — we'll tell you in plain English whether you're compliant, where the gaps are, and what endorsements would close them. Whether you're issuing or receiving, no obligation, no upsell.
Get a COI Review