By Patrick Turcotte, COO, Docutrax. Last reviewed: 14 July 2026.

A certificate of insurance is a one-page summary of an insurance policy, issued as evidence that coverage is in place. You will encounter it from one of two sides: requesting one from a contractor, vendor, tenant, or supplier, or providing one because a client or general contractor has asked you to prove you are insured.

Either way it is the same document. This page covers what is on the form, how to request or provide one, what it establishes, and how to judge when a certificate is the right level of oversight and when it is not.

What is a certificate of insurance?

A certificate of insurance is a standardized summary of an insurance policy, prepared by the policyholder's broker, agent, or insurer and issued to a third party as evidence that coverage is in place.

ACORD introduced the first standardized certificate in 1976. The current liability form, the ACORD 25 Certificate of Liability Insurance, is in its 2016/03 edition. Most certificates you receive in the United States will be an ACORD 25 or a carrier's near-identical equivalent.

The certificate is not the policy. The policy is often hundreds of pages and it is the contract between the insurer and the policyholder. The certificate is a one-page report about that contract, and it does not modify it.

What is on an ACORD 25?

The form is dense and every field carries meaning. Read left to right, top to bottom.

Producer. The broker or agent who issued the certificate. If you need something corrected, this is who you contact. It is not the insurer.

Insured. The named insured: the party that owns the policy. This is the field people get wrong most often. It must match the legal entity you actually contracted with, not the trading name, not the parent company, and not a related LLC. A policy issued to "Acme Construction LLC" does not cover "Acme Construction Inc."

Insurers affording coverage. Each carrier, with its NAIC code, lettered A through F. The letters map to the coverage rows below.

Insurers affording coverage: what the form does not tell you. The NAIC code identifies the carrier. It says nothing about the carrier's financial strength rating or whether it is admitted in the relevant state, and those are two different questions. Financial strength is measured by rating agencies, and an unrated or weakly rated carrier can meet every limit on the certificate and still be a poor risk. Admitted status is a regulatory question: a non-admitted policy carries no state guaranty fund protection and is not subject to state rate and form approval. A non-admitted carrier can be strongly rated, and a great deal of construction casualty is written on surplus lines paper by strong carriers. Checking the rating and the admitted status are separate steps and neither is on the form.

Coverages. The main grid. Typically Commercial General Liability, Automobile Liability, Umbrella or Excess, and Workers Compensation and Employers' Liability. For each line: the insurer letter, the policy number, the effective and expiration dates, and the limits.

OCCUR and CLAIMS-MADE. Two checkboxes on the general liability row, and they change what the policy is worth to you. An occurrence policy responds to an incident that happened during the policy period, whenever the claim is made, including years later. A claims-made policy responds when the claim is first made during the policy period or an extended reporting period, and only for incidents that happened after the policy's retroactive date. For work with a long tail, construction defects being the obvious case, a claims-made policy that lapses after the job ends may leave nothing to claim against unless tail coverage was purchased. Contracts that require occurrence coverage require it for this reason.

The ADDL INSD and SUBR WVD columns. Two narrow checkbox columns between the coverage description and the policy number on each row. ADDL INSD indicates that additional insured status has been granted. SUBR WVD indicates that subrogation has been waived. These two checkboxes carry an enormous amount of weight in practice, and a tick in a box is not the same as a grant on the policy. More on that below.

Description of Operations / Locations / Vehicles. A free-text box where the broker or agent adds detail: the project, the contract, which endorsements are attached, sometimes the endorsement form numbers. This is the most useful field on the form and the least reliable, because it is typed by hand and it describes intent.

Certificate Holder. You. The party receiving the certificate.

Cancellation. A short paragraph stating that notice will be delivered in accordance with the policy provisions. It is worth reading carefully. See below.

Authorized Representative. The signature of the producer.

The disclaimer, and the notice below it. Two blocks of small print at the top of the form. They are the most consequential text on the page and they are covered in their own section below.

Named insured, certificate holder, additional insured: who is who?

Three roles, easily confused. Most certificate disputes come from confusing them.

The named insured owns the policy. The premiums are theirs, the coverage is theirs, and the insurer's obligations run to them.

The certificate holder receives the certificate as evidence. Being the certificate holder does not, on its own, grant any coverage.

An additional insured is a party the policy has been written or endorsed to protect. Additional insured status comes from one of two places: an endorsement added to the policy, or an additional insured provision built into the policy form itself, typically triggered when a written contract requires it. Either way, it is what obligates the other party's insurer to defend and indemnify you for liability arising out of their work, subject to the scope of the grant and the terms of the policy.

A certificate holder is not automatically an additional insured. The ADDL INSD checkbox on the certificate indicates that an endorsement or a qualifying policy provision is supposed to exist. Confirming that it does, that it reaches your correct legal entity, and that it is the right form for the risk, means looking at the policy language itself.

How do you request or provide a certificate of insurance?

The request flows from the party that wants evidence, to the policyholder, to the policyholder's broker or agent, and back. It usually takes a day or two, and there should be no charge.

If you are requesting one

Specify the exact legal entity. Give them the full legal name of the entity that must appear as certificate holder and, where required, as additional insured. Entity mismatches are the single most common defect and the most expensive one.

State the coverages and limits your contract requires, line by line, so the producer can confirm each against the policy.

Name the endorsements by form number where your contract requires them. For construction, that usually means additional insured for ongoing operations and for completed operations, a waiver of subrogation, and primary and noncontributory. Naming the forms removes ambiguity for everyone, including the producer.

Ask for the endorsements themselves, not just the certificate, wherever the risk warrants it. A producer can attach the actual endorsement pages, or the policy form pages where the grant is built in. Most will if asked. This single habit closes most of the gap this page describes.

In New York construction, ask for the ACORD 855 as well. It is a New York-specific addendum to the ACORD 25 and it asks the producer to disclose which additional insured endorsement form is attached and whether specific exclusions apply. It exists because the ACORD 25 does not surface those things.

If you have been asked for one

Send the request to your broker or agent, not your insurer. The producer issues certificates. Give them the full legal name and address of the certificate holder, the contract or project reference, and any endorsement requirements the contract names.

Read the contract's insurance clause before you forward it. If it requires additional insured status, a waiver of subrogation, or primary and noncontributory, those are grants that have to exist on your policy, whether by endorsement or by a built-in provision. They are not lines your producer can simply type onto the certificate. Some carry a premium. Some carriers will not write them at all, which is worth knowing before you sign rather than after.

Check the entity name on the way out. If your contract is signed by one entity and your policy is issued to another, the certificate will be technically accurate and commercially useless.

Expect to be asked again. Certificates are tracked to expiry. A renewal certificate will be requested every policy period, and often sooner if the contract or the project changes.

Certificates, binders, and the other ACORD forms

A certificate evidences coverage that already exists. A binder is temporary evidence that coverage has been agreed but the policy has not yet been issued. A binder expires, usually in thirty to ninety days, and it is not a substitute for a certificate.

The ACORD 25 covers liability. Property coverage uses different forms: the ACORD 27, Evidence of Property Insurance, and the ACORD 28, Evidence of Commercial Property Insurance. A contract requiring property coverage and given an ACORD 25 has not been satisfied.

What does a certificate actually prove?

It proves that a policy existed on the day the certificate was issued, and that the producer believes it is structured as described.

It is not binding on the insurer, and the clearest authority on that point is the form itself.

Below its disclaimer, the ACORD 25 carries a notice. In substance: if the certificate holder is an additional insured, the policy must have additional insured provisions or be endorsed. If subrogation is waived, an endorsement may be required. And a statement on the certificate does not stand in for either. In ACORD's own words, a certificate does not confer rights to the certificate holder in place of such endorsements. (ACORD 25, 2016/03 edition.)

Note the wording. The 2016/03 edition says the policy must have additional insured "provisions or be endorsed." That phrase was added deliberately, because many policies grant additional insured status through blanket provisions in the coverage form rather than a scheduled endorsement. The form tells the reader to go and confirm the grant, wherever in the policy it lives.

The reason is statutory. The "information only" language conforms the certificate to insurance law, which prohibits an insurer from making a contract of insurance other than as plainly expressed in the policy. (New York DFS General Counsel Opinion 00-09-04.) A certificate cannot create coverage the policy does not contain, because no document other than the policy is permitted to.

Where this has been litigated, courts have overwhelmingly held that the policy controls over an erroneous certificate, and no additional insured status attached. A minority of decisions have found for the certificate holder on estoppel or apparent authority grounds where reliance was reasonable, but the weight of authority runs the other way. (Insurance Advocate, reporting a CPCU Annual Meeting panel.)

A certificate is a reliable index to the policy, a reliable record of what was in force on the issue date, and a reliable statement of what the producer intended. It is not proof that the coverage is built the way a contract requires.

When is certificate tracking enough?

Often. Collecting certificates, checking them against contractual requirements, and tracking them through expiry and renewal is sufficient oversight for a large share of third-party relationships. Reviewing every policy in a vendor base is unaffordable, and for most vendors it would surface nothing.

One question sorts them. What is the worst credible claim that could arise from this relationship, and would a certificate tell you whether it is covered?

Where the certificate is the right depth. Low limits, no site access, no work that can injure anyone, a short or low-value engagement, and no contractual requirement for additional insured status or waiver of subrogation. A software supplier. A graphic design firm. A consultant working off site. For these, confirming that a policy exists, that the limits meet the contract, and that it has not lapsed is proportionate oversight. Reading the policy would tell you nothing you need.

Where the certificate plus the endorsements is the right depth. Site access, a contract requiring additional insured status or a waiver of subrogation, moderate limits, and work that could produce an injury or a property damage claim. Most janitorial, landscaping, maintenance, facilities, and light trade relationships sit here. The certificate establishes the policy. The endorsements and policy provisions establish whether the coverage actually reaches you. Verifying both is the middle tier and it is where most third parties belong.

Where the certificate is nowhere near enough. Construction, work at height, heavy equipment, high limits, catastrophic claim potential, or a high-exposure jurisdiction. Here the exclusions and the endorsement structure inside the policy determine whether a claim will be paid, and neither appears on a certificate. A subcontractor's policy can carry an exclusion that removes exactly the coverage your contract was written to secure, and no amount of certificate checking will surface it.

Depth is matched to exposure. A programme that reads every policy spends money on vendors who cannot hurt it. A programme that reads none of them is exposed exactly where it can least afford to be.

What do you do when a certificate is expired or non-compliant?

The certificate arrives, and something is wrong. The limits are short of the contract. The additional insured box is unticked. The entity name does not match. The policy expired last month.

The path is the same in each case, and it runs through the producer.

Identify the specific defect, by field. "The certificate is non-compliant" is not actionable. "The named insured is Acme Construction LLC, our contract is with Acme Construction Inc." is.

Go back to the third party, who goes to their broker or agent. The producer issued the certificate and the producer corrects it. Where the defect is on the policy rather than the certificate, the producer has to go to the carrier, and that takes longer.

Distinguish a certificate error from a coverage gap. A mistyped entity name on the certificate is a paperwork fix. A missing endorsement on the policy is a coverage problem, and correcting the certificate does not correct the coverage. This distinction determines whether you are waiting two days or two weeks.

Decide what happens in the meantime. Whether a non-compliant third party can mobilize, stay on site, or be paid is a decision for the operating business. It depends on the contract, the exposure, and the commercial relationship, and nobody outside the business can make it.

This is the shape of the work Docutrax does. Certificates, endorsements, and policies are reviewed by licensed P&C professionals, the defect is identified, and the correction is coordinated with the broker or agent. The facts and the documentation come back to the client. The client decides.

Will you be told if the coverage is removed?

Usually not. Contracts routinely require thirty days of notice before a policy is cancelled, and in most cases nobody is in a position to supply it.

ACORD's 2010 revision replaced the old promise to endeavor to mail thirty days written notice with a statement that notice will be delivered in accordance with the policy provisions. Policy wording, in most cases, requires that notice go only to the first named insured. (Insurance Advocate; PARCEL Industry.)

Three consequences follow. Additional insureds have no right to notice of cancellation, absent a specific notice-of-cancellation endorsement, which some contracts require and some carriers will not provide. Named insureds other than the first named insured generally do not receive it either. And insurers typically have no record of the certificates that brokers and agents issue, so they could not notify certificate holders even if the policy required it.

A certificate is a snapshot. Coverage can be reduced or removed the day after it is issued, and the certificate holder is not on the list of people who find out. This is the practical reason certificate tracking is a continuous function rather than a one-time collection step: coverage has to be re-confirmed at renewal and monitored between renewals, because the notice clause in the contract will not do it for you.

Do any states regulate certificates of insurance?

Some do, and the rules are not uniform.

A number of states have enacted laws or regulatory directives governing certificates of insurance. New York added Article 5 to the Insurance Law, titled Certificates of Insurance, sections 501 through 505, by Chapter 552 of the Laws of 2014, effective in 2015. Other states rely on general unfair trade practice statutes, and some, including New Jersey and Vermont, have no certificate-specific statute at all. (Big I Virtual University; PIA Northeast, January 2026.)

What the regulation typically targets is the practice of demanding or issuing certificates that assert coverage terms not actually in the policy. No state's rules turn a certificate into proof of coverage. The policy governs everywhere.

When do you need to go deeper than the certificate?

When the endorsements matter, or when the exclusions do.

At the endorsement level, the questions are specific and answerable. Is the additional insured grant actually on the policy, whether by scheduled endorsement or blanket provision, in the correct form and edition, reaching the correct legal entity? For construction, are both ongoing operations and completed operations covered, since the common CG 20 10 covers only ongoing operations and completed operations requires a separate CG 20 37? (IRMI.) Is the waiver of subrogation endorsed in favour of the right party? Is primary and noncontributory wording on the policy rather than merely asserted on the certificate? Under current ISO wording the subcontractor's policy is already primary for an additional insured, and your own policy sits excess over it. What the primary and noncontributory wording adds is certainty: it bars the subcontractor's carrier from seeking contribution from your policy, and it holds the priority in place when your own program is written on forms that lack the excess-when-additional-insured provision. (ISO CG 00 01, Other Insurance condition; IRMI.) These questions are the subject of the insurance endorsements guide.

At the policy level, the questions are about exclusions, conditions, and coverage structure: whether anything in the policy removes the coverage your contract was written to secure. That is the subject of the contractual risk transfer guide, and it is where a certificate check cannot see the risk.

The certificate is where verification starts. How far it goes is a function of what the relationship can cost.

Quick answers

Is a certificate of insurance the same as the policy? No. The certificate is a one-page summary issued as evidence that a policy exists. The policy, with its endorsements and exclusions, is the contract that determines what is covered. The certificate is not binding on the insurer.

Who is the certificate holder? The party that receives the certificate as evidence of another party's insurance. Being the certificate holder does not by itself grant coverage. Coverage for a third party comes from an additional insured endorsement or a qualifying additional insured provision on the policy.

Does a certificate of insurance prove I am an additional insured? No. Additional insured status comes from an endorsement on the policy or an additional insured provision in the policy form. The ACORD 25 states that the policy must have additional insured provisions or be endorsed, and that a statement on the certificate does not confer rights in place of them. A tick in the ADDL INSD box means a grant is supposed to exist.

How long is a certificate of insurance valid? It reflects coverage on the day it was issued and shows the policy dates. Coverage can be reduced or removed afterwards without the certificate holder being notified, which is why certificates are tracked through renewal rather than collected once.

How do I get a certificate of insurance? Ask the third party. They request it from their broker or agent, who issues it. It usually takes a day or two and there should be no charge. Specify the exact legal entity, the required coverages and limits, and any endorsements your contract requires.

Is collecting certificates enough? It depends on the exposure. For low-risk third parties with no site access and no endorsement requirements, collecting and tracking certificates is proportionate. Where a contract requires additional insured status or a waiver of subrogation, the endorsements need verifying. For construction and other high-exposure work, the policy itself has to be read.