Key takeaways
- COI tracking is an ongoing loop, not a one-time filing, because a policy can cancel, lapse, or renew with lower limits the day after a certificate is issued.
- The quiet failures are lapsed coverage, limits below the contract, and missing endorsements like additional insured or waiver of subrogation, each invisible until a claim tests it.
- Always collect the certificate from the issuing broker or carrier, never a vendor-forwarded PDF, and confirm required endorsements sit on the policy rather than just a checked box.
- Advocate runs the whole loop, with COI Tracking collecting, reading, and verifying certificates against your requirements, while Coverage Gap Analysis flags gaps across every vendor at once.
What COI tracking actually is
A certificate of insurance (COI) is a one-page summary that shows the coverage a policy carries: the lines, the limits, the carriers, and the effective and expiration dates. COI tracking is the discipline of collecting that certificate from every third party you do business with, confirming the coverage meets your requirements, and monitoring each expiration so nothing lapses between a signed contract and a claim.
It is a loop, not a one-time filing, because a certificate is only accurate the day it is issued. A policy can cancel, lapse, or renew with reduced limits the next day, and the PDF in your folder will not update itself. So the cycle runs for every party, indefinitely: request, collect, verify, monitor, and re-verify at renewal. Advocate is built to run that loop for you, and this guide maps the manual version first so you can see exactly where it breaks. For a primer on the form itself, see the certificate of insurance overview.
The certificate is information only. It proves coverage existed on the issue date and confers no rights on the holder, so if the certificate and the policy disagree, the policy governs.
It is an ongoing obligation. A certificate collected once at onboarding is necessary but not sufficient, because coverage changes and expires on its own schedule.
Why companies track certificates of insurance
When a vendor, subcontractor, or tenant causes a loss and their coverage has lapsed or falls short, the exposure lands on you. A signed contract that requires insurance is only as good as the coverage actually in force when the claim arrives, and a lapsed or insufficient certificate hides exactly that. Tracking closes the gap between what a contract required and what is really in place today.
The failure mode is quiet. Certificates expire unnoticed, limits come in below the contract, a required additional insured endorsement was never bound, or a certificate arrived straight from the vendor rather than the issuing broker. Each one stays invisible until a claim tests it. Coverage Gap Analysis surfaces these the moment a certificate lands and flags them across the whole vendor list at once, rather than one folder at a time, which is why the U.S. Small Business Administration treats confirming third-party coverage as basic operational hygiene rather than paperwork.
Uninsured or underinsured third-party losses fall back on your own policy, your own balance sheet, or both.
Lapsed coverage is the most common gap, because no one is guaranteed notice when a third party's policy cancels.
Missing endorsements (additional insured, waiver of subrogation, primary and non-contributory) shift risk back up the chain to you.
An audit or a lender can ask you to prove every vendor was covered, and a folder of stale PDFs is not proof.
The COI tracking process, step by step
However you run it, COI tracking follows the same five stages for every third party, and the order matters because each stage can stop the next. There is no point monitoring a certificate you never verified, or verifying one that named the wrong entity. Advocate automates every stage below; the manual version is what it replaces.
Request. Ask the third party for a certificate, and send the exact requirements the contract or lease sets: the coverage lines, the minimum limits, and any additional insured, waiver of subrogation, or primary and non-contributory wording.
Collect. Gather the certificate from the issuing agent, broker, or carrier, never a PDF forwarded by the vendor, and record which entity it covers and which contract it maps to.
Verify. Check the named insured, the coverage lines, the limits, the effective and expiration dates, and confirm the required endorsements sit on the underlying policy rather than just a checked box on the form.
Monitor. Track every expiration date and every renewal, because a policy can lapse or renew with reduced limits the day after the certificate is issued.
Re-verify at renewal. Re-run the checks each cycle, since a renewal can quietly drop an endorsement, cut a limit, or change the carrier.
What you check when tracking a COI
Verification is where tracking earns its keep, and it is the step manual programs skip under volume. Reading the certificate tells you what it claims; confirming those claims against the policy and the contract tells you whether the coverage is actually there. Advocate runs each check below against a standard you set. For the full field-by-field walkthrough, see how to verify a certificate of insurance.
Coverage lines. The certificate carries the lines the contract requires, commonly General Liability, Workers' Compensation, and Commercial Auto, plus umbrella or excess where the exposure calls for it.
Limits. Each limit meets or exceeds the contract minimum, line by line, including the products-completed-operations aggregate that the certificate face can overstate.
Effective and expiration dates. Every line is current, read per line rather than off the issue date in the header, because lines can lapse on different days.
Manual vs automated COI tracking
The same five stages, run two ways. A spreadsheet works for a handful of certificates, but each stage gets harder as the book grows, and the parts that protect you (verification and expiration monitoring) are the first to slip.
Task | Manual (spreadsheet and email) | Advocate |
|---|---|---|
Collection | Chase each vendor by email and file the PDF by hand | Automated notices request and gather certificates on arrival |
Verification | Eyeball limits and dates; endorsement pages rarely read | Fields checked against your requirements automatically |
Expiration alerts | A calendar reminder someone has to maintain | Every expiration tracked, with automated notices |
Audit trail | Scattered across inboxes and file shares | One record of who was covered, and when |
Scale and effort | Breaks down past a few dozen certificates | Holds up across a whole portfolio |
How manual spreadsheet-and-email COI tracking compares with running the same loop on Advocate.
No process removes the need for judgment. Automation makes the verification and monitoring stages practical on a full book instead of a spot check; it surfaces and flags gaps rather than guaranteeing every lapse is caught.
When COI tracking outgrows the spreadsheet
Manual tracking is fine for a handful of certificates. It stops scaling when the book grows, when contracts demand endorsements that have to be read on the policy rather than the face, or when an audit asks you to prove coverage for every vendor across a period. That is the point where teams move from spreadsheets to certificate of insurance tracking software, or to broader insurance tracking software when the goal is monitoring a whole portfolio rather than a single vendor list.
The honest version: automation surfaces and flags exposure, it does not eliminate it, and a flagged gap is still a prompt to go back to the producer. What Advocate changes is whether the verification and monitoring stages actually happen on every certificate, or only on the ones someone had time for. A small portfolio can start on the free tier and add coverage checks as the vendor list grows.
Explore
Keep exploring
FAQ
Frequently asked questions
What is COI tracking?
COI tracking is the ongoing process of collecting, verifying, and monitoring certificates of insurance from vendors, tenants, or subcontractors so that required coverage stays active and never lapses unnoticed. It manages the third party's certificate over time. The certificate is informational only, so tracking confirms the coverage behind it is real, sufficient, and current, not just that a document arrived.
Why do companies track certificates of insurance?
Because an uninsured or underinsured third-party loss falls back on you. When a vendor, subcontractor, or tenant causes damage and their coverage has lapsed or falls short, the exposure lands on your own policy or balance sheet. Tracking closes the gap between what a contract required and what coverage is actually in force today.
How do you track COIs manually, and why does it break?
Manually, teams request certificates by email, save the PDFs to a folder, and log limits and expiration dates in a spreadsheet with calendar reminders. It works for a handful of vendors, but it breaks at scale: verification gets skipped, endorsement pages go unread, and expirations slip because no one is guaranteed notice when a policy cancels. Advocate automates the collection, verification, and monitoring stages so they happen on every certificate.
What is the COI tracking process?
Five stages, run in order for every third party: request the certificate with your exact requirements, collect it from the issuing agent or carrier, verify the named insured, limits, dates, and endorsements against the contract, monitor every expiration, and re-verify at each renewal. The loop repeats indefinitely because coverage changes and expires on its own schedule.
Show 7 more questionsShow fewer questions
What should you check on a certificate of insurance when tracking it?
Check the coverage lines against the contract, the limits line by line, the effective and expiration date on each line, and that any required additional insured, waiver of subrogation, and primary and non-contributory endorsements sit on the underlying policy rather than just a checked box. Confirm the certificate came from the issuing agent, broker, or carrier and that the carrier is licensed. Advocate runs these checks against a standard you set.
How often do COIs need to be re-checked or renewed?
At minimum, re-verify at every renewal, because a renewal can quietly drop an endorsement, reduce a limit, or change the carrier. Track each expiration date so a lapse is caught before a claim, not after. Collecting a certificate once at onboarding is necessary but not sufficient, which is why tracking is an ongoing task rather than a one-time filing.
Who should a certificate of insurance come from, and what about altered ones?
Only the issuing agent, broker, or carrier. A certificate emailed directly by the vendor is a fraud vector, because the fields can be altered before it reaches you, and then you are relying on coverage that may not exist. Request it from the producer who placed the coverage, confirm the policy is active, and confirm the carrier is licensed through the NAIC or your state Department of Insurance.
What is the difference between a certificate holder and an additional insured?
A certificate holder is the party the certificate is issued and mailed to; it receives proof that coverage exists but gains no rights under the policy. An additional insured is added to the policy itself by endorsement and gains coverage rights. See the full breakdown in the certificate holder vs additional insured guide.
Is COI tracking the same as COI compliance?
They are related but not identical. COI tracking is the operational process of collecting, verifying, and monitoring certificates. Compliance is the outcome you are aiming for: every third party carrying the coverage its contract requires, at all times. Tracking is how you reach and maintain compliance, but the process and the result are different things.
When does COI tracking need dedicated tooling?
Volume decides it. A spreadsheet handles a few certificates, but reading endorsement pages and monitoring renewals across many vendors is where manual tracking slips. That is the point teams move to certificate of insurance tracking software, which collects, structures, and verifies each certificate against your requirements and tracks every expiration automatically.
Can you track certificates of insurance for free?
Yes, up to a point. A spreadsheet costs nothing, and Advocate offers a free tier with the Coverage Library and unlimited AI policy reviews, so a small portfolio can start verifying coverage without a contract. The practical limit is time: manual verification and expiration monitoring get expensive in hours long before they cost money, which is what pushes growing books toward automation.
Track every certificate without the spreadsheet
14 days of Premium, free. No credit card. Value in 10 seconds.