What are the essential documents required in a construction vendor compliance checklist?

A complete compliance checklist requires: (1) Form W-9 with matching TIN, (2) Signed Master Subcontract Agreement with hold-harmless clauses, (3) ACORD 25 Certificate of Insurance with $1M/$2M General Liability, Auto, and Workers' Comp, (4) Specific endorsement forms including CG 20 10 (Ongoing Operations), CG 20 37 (Completed Operations), and CG 24 04 (Waiver of Subrogation), (5) Active trade licenses, and (6) OSHA safety credentials.

Why is an ACORD 25 Certificate of Insurance not enough on its own?

An ACORD 25 form states clearly at the top that it is an informational summary conferring no contractual rights. If the subcontractor's policy does not actually have attached endorsement riders (like CG 20 10 and CG 20 37), the insurance carrier will reject your Additional Insured claim when an injury or defect occurs.

How does SubDoc automate the 5-pillar compliance checklist?

SubDoc allows general contractors to configure custom compliance templates. Subcontractors and their insurance brokers receive secure, passwordless magic links to upload certificates and endorsements. SubDoc's AI OCR extracts and checks every field in under 5 seconds, flags missing endorsements, alerts your team at 90/60/30/14/7 days before expiration, and flags non-compliant vendors for payment holds.

How do Workers' Compensation audits penalize missing subcontractor compliance documents?

During annual Workers' Comp policy audits, insurance underwriters review general contractor disbursement ledgers. Any payment made to a subcontractor who cannot provide valid, unexpired proof of Workers' Compensation insurance is reclassified as direct company payroll, triggering thousands of dollars in surprise back-premiums.

How do accounting payment holds prevent compliance violations?

Automated payment holds prevent accounts payable clerks from issuing progress payments to subcontractors who have expired insurance policies or missing endorsements. SubDoc generates 1-click CSV exports formatted for QuickBooks, Sage, and Yardi to pause payments before check runs.

COI Compliance Checklist for Subcontractors & Vendors (2026)

Allowing an unvetted subcontractor or building vendor onto a job site is one of the highest legal and financial risks a general contractor can take. A single uncovered job-site accident, unverified trade license, or missing Additional Insured endorsement can result in hundreds of thousands of dollars in direct liability.

To protect your balance sheet and avoid severe Workers' Compensation audit penalties, your risk management team must enforce a strict, multi-pillar pre-mobilization checklist before work begins or progress payments are disbursed.

The 60-Second COI Compliance Checklist

Run every subcontractor or vendor certificate through these checks before approving it. Print this list or copy it into your onboarding SOP. The detailed pillars below explain each item.

The certificate itself

Current ACORD 25 (with ACORD 28 for property, if required)
Named insured matches the legal entity on your subcontract
Your exact legal name and address in the certificate holder box
Real policy numbers (no "TBD" or "pending")
Insurer shows an NAIC number and meets your AM Best minimum

Coverage & limits

General Liability limits meet your contract minimums
Auto, Workers' Comp / Employer's Liability and Umbrella as required
Policy terms cover the full project, not just the start date

Endorsements (get the pages)

Additional insured for ongoing operations (e.g. CG 20 10)
Additional insured for completed operations (e.g. CG 20 37)
Waiver of subrogation on GL, Auto and WC
Primary and non-contributory wording
30-day notice of cancellation to the certificate holder

Beyond insurance

Signed W-9 matching the insured's legal name
Active state or local contractor license
Safety documents your project requires (e.g. OSHA logs)
Expiration dates logged, with renewal requests scheduled 30+ days out

Not sure a certificate is genuine? See how to spot a fake certificate of insurance. Missing documents? Use the templates in how to request a COI from a subcontractor.

The 5 Pillars of Subcontractor Compliance

Review the essential requirements across all five operational compliance pillars:

1Pillar 1: Legal & Corporate Identification

Form W-9 (Current Year)

Must contain valid legal entity name, Taxpayer Identification Number (TIN), and matching IRS signature.

State Secretary of State Certificate

Verification that vendor is active and in good standing with state licensing boards.

Master Subcontract Agreement (MSA)

Executed contract containing explicit indemnification, hold harmless, and defense clauses.

2Pillar 2: Commercial Insurance Coverage (ACORD 25)

Commercial General Liability (CGL)

$1,000,000 each occurrence / $2,000,000 general aggregate / $2,000,000 products-completed operations.

Commercial Automobile Liability

$1,000,000 combined single limit covering Any Auto (Symbol 1) or Owned, Hired & Non-Owned autos.

Workers' Compensation & Employers Liability

Statutory workers' comp limits plus $1,000,000 each accident / $1,000,000 disease limits.

Commercial Umbrella / Excess Liability

$1,000,000 to $5,000,000+ excess liability depending on trade hazard tier.

3Pillar 3: Policy Endorsement Schedules

CG 20 10 04 13 (Ongoing Operations)

Names General Contractor and Owner as Additional Insured during active work.

CG 20 37 04 13 (Completed Operations)

Extends Additional Insured protection for construction defect claims after job completion.

CG 20 01 (Primary & Non-Contributory)

Ensures vendor insurance responds first without seeking contribution from GC insurance.

CG 24 04 (Waiver of Subrogation)

Prevents subcontractor insurance carriers from suing general contractor after paying a claim.

4Pillar 4: Safety & Regulatory Certifications

Active State Trade Contractor License

Must match trade scope (electrical, plumbing, HVAC, roofing) without active disciplinary actions.

OSHA 10 / OSHA 30 Cards

Field supervisor and crew verification of mandatory OSHA safety certifications.

Experience Modification Rate (EMR) Letter

3-year historical worker injury rating (target score 1.0 or lower).

OSHA Form 300 / 300A Logs

Prior 3 years of work-related injury and illness summaries.

5Pillar 5: Accounting & Payment Mobilization Gates

Pre-Mobilization Jobsite Clearance

Superintendent badge approval tied to 100% verified compliance files.

Progress Payment Hold Rule

Accounting payment pause in QuickBooks or Sage when insurance or licenses lapse.

Conditional & Unconditional Lien Waivers

Signed statutory progress lien releases submitted with each pay application.

Why an ACORD 25 Certificate Alone Is Not Enough

Many administrative teams mistakenly believe that collecting an ACORD 25 certificate provides full legal protection. In reality, every standard ACORD 25 contains explicit legal disclaimer language:

"This certificate is issued as a matter of information only and confers no rights upon the certificate holder. This certificate does not affirmatively or negatively amend, extend or alter the coverage afforded by the policies below."

To obtain true enforceable coverage, general contractors must inspect the underlying endorsement schedules:

CG 20 10: Grants Additional Insured status for ongoing operations during construction.
CG 20 37: Crucial coverage that extends Additional Insured status for completed operations (protecting against construction defect lawsuits filed years later).
CG 24 04: Waiver of Transfer of Rights of Recovery (Waiver of Subrogation) preventing the trade contractor's carrier from suing you after paying an injury claim.

The Workers' Compensation Audit Penalty

During annual policy audits, your Workers' Compensation insurance carrier examines your general ledger disbursements. If you paid an uninsured trade contractor or cannot produce a valid certificate covering the exact dates of work, the auditor reclassifies those payments as direct payroll.

This results in massive surprise back-premium charges ($10,000 to $50,000+) that erode contractor profit margins on completed projects.

How SubDoc Automates the Checklist in 4 Clicks

SubDoc replaces manual paper chasing with a fully automated compliance engine:

Passwordless Magic Links: Subcontractors and insurance agents upload directly in under 60 seconds (no logins or app downloads).
5-Second AI OCR Extraction: Automatically reads policy numbers, expiration dates, and endorsement checkmarks.
Expiration Alerts: Your team is alerted before each policy lapses, and one click sends the subcontractor a renewal request with the same upload link.
1-Click Accounting Payment Holds: Exports clean CSV hold lists for QuickBooks Online/Desktop, Sage 100/300, and Yardi.

The Subcontractor & Vendor COI Compliance Checklist