Certificate of Insurance Tracking: Step-by-Step Guide

Most companies start their certificate of insurance tracking process with a simple spreadsheet. They list vendor names, paste in expiration dates, and hope someone checks the file often enough. However, this approach breaks down quickly for three key reasons:

• Human ErrorManual data entry mistakes can easily lead to missed expiration dates.
• Lack of ProactivitySpreadsheets don't send emails. If you forget to check the file, an expired policy can easily go unnoticed.
• Audit DisconnectStoring PDF files on a shared network drive while keeping compliance logs in a separate spreadsheet makes safety audits incredibly slow.

Before you start collecting documents, you need to decide what "good" looks like. In other words, set the minimum coverage limits every vendor must meet. These numbers change depending on your industry and contract size, but the table below shows common starting points:

The hardest part of certificate of insurance tracking is getting vendors to send their documents in the first place. If contractors have to download forms, create logins, and fill out long screens, they will put it off — and your project start dates slip.

To fix this, use a tool that removes the friction. For example, SubDoc sends vendors a secure magic link so they can upload their certificate of insurance in seconds — no account needed. The system then checks the upload, logs it in your review queue, and sets up expiration alerts right away.

SubDoc's vendor checklist shows each required document with 1-click renewal requests and magic upload links for fast certificate of insurance collection.

Collecting a certificate of insurance is only the first step. Since most policies expire every 12 months, your certificate of insurance tracking system needs to watch those dates and alert your team early enough to request the renewal before coverage lapses. A tiered schedule works like this:

The Compliance Center tracks every vendor's policy expiration with countdown timers and flags non-compliant contractors in real time.

SubDoc's document review modal catches coverage shortfalls and date errors automatically before you approve a certificate.

If a policy does lapse, the system should flag the contractor as "Non-Compliant" right away and notify project managers to pause active work until a renewed certificate of insurance is on file.

Whether you use a spreadsheet or software, moving an existing vendor list onto a real tracking process goes in the same order. Most teams can do steps 1 to 4 in a day.

1. 1
   Risk-tier your vendorsSort vendors by what they do on site. Roofing, structural and electrical trades are high risk; a delivery-only supplier or an office cleaner is lower. Tiers decide which limits and endorsements each vendor must meet.
2. 2
   Write the requirements for each tierRecord the coverage types, minimum limits and endorsements (additional insured, waiver of subrogation, primary and non-contributory) for each tier, plus documents such as a W-9 or license.
3. 3
   Audit the certificates you already holdGo through the COIs on file and mark each vendor as current, expired, missing a coverage or missing an endorsement. This is your starting backlog.
4. 4
   Request what is missing in one passSend every vendor in the backlog a single request that lists exactly what they owe, so their broker can fix it in one certificate instead of three.
5. 5
   Review each certificate against its tierCheck named insured, dates, limits and endorsements before you approve. Reject with a specific reason so the corrected version comes back right.
6. 6
   Tie compliance to site access and paymentAgree with project managers and accounting that a vendor without a current certificate does not start work and does not get paid. The rule is what makes vendors respond.

Stop tracking insurance documents by hand. SubDoc is purpose-built certificate of insurance tracking software that handles COI collection, coverage validation, and expiration alerts to your team in one dashboard. When a renewal is due, one click sends the vendor a secure upload link they can forward to their broker.

As a result, you spend less time on admin and more time on the work that matters — while every vendor stays compliant without you having to remember a single expiration date.