By Patrick Turcotte, COO, Docutrax. Last reviewed: 29 October 2026.

Verifying a certificate means confirming each thing it reports against a source other than the certificate. For a broker that runs in two directions. You verify certificates your commercial client receives from third parties, and you issue certificates for your own insureds. The document is the same and the discipline is the same. The rules governing each side are different.

Those rules are worth holding together, because they explain each other. A producer who knows exactly why they cannot type a thirty-day notice of cancellation promise onto a certificate also knows why they should not accept one when it arrives on a certificate from somebody else. And one of the statutes most often cited at producers turns out to bind the party demanding the certificate. You only notice that reading from both directions at once.

What can the ACORD 25 establish?

Less than it is asked to establish, and the current edition says so more plainly than any edition before it.

The top of the form reads:

THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER.

The last of those three sentences is new in the 2025/12 edition. The first two are not.

What else is new is the limits column. The 2025/12 edition carries an asterisked note with two sentences. Limits shown may have been reduced by paid claims. And, added in this edition, limits shown are inclusive of amounts requested by the certificate holder and may not reflect policy limit amounts in excess of those requested. The asterisk marks both sentences as not applicable in Wyoming.

Read that carefully, because it changes what a matching number proves. If a contract requires $1,000,000 and the certificate reports $1,000,000, the face of the form now discloses that the figure may be a reflection of what was asked for rather than what the policy carries. ACORD’s stated position, in a response reproduced by the Big “I” Virtual University in July 2026, is that the language is permissive rather than mandatory, that it does not change any producer’s standard of care, and that it does not require anyone to show less than actual policy limits. Big I New York continues to recommend showing actual policy limits.

For a producer verifying someone else’s certificate, that is one more thing the limits column does not settle. For a producer issuing one, it is a decision the agency should make deliberately and apply consistently across the book.

What changes on 1 December 2026?

A deadline sits in front of every agency in the country, and in most states it is a contractual deadline rather than a regulatory one.

ACORD’s licensing terms permit use of a replaced edition of a form for no more than twelve months after publication of the new edition. The ACORD 25 (2025/12) published in December 2025, which puts the end of the transition window for the 2016/03 edition at 1 December 2026. New York’s Department of Financial Services removed the 2016/03 edition from its approved certificates list when it posted the new one.

Big I New York’s Timothy Dodge has set out the part worth knowing: using the older edition is not, in New York, illegal for the producer. Nothing in Article 5 prohibits an agency from using an unapproved form, because that restriction binds the requester. The reasons to move are that ACORD’s license stops permitting it, and that non-standard forms increase the agency’s E&O exposure.

That analysis is New York’s. The interesting part is what happens to the same date in Georgia, where superseded ACORD and ISO editions are deemed approved only for as long as ACORD and ISO permit their use during periods of transition. Georgia has tied its regulatory deadline to ACORD’s licensing window. Same date, different legal mechanism, and a different consequence: in Georgia the license expiry converts directly into a form that is no longer deemed approved.

ACORD’s own position is that its forms are approved by departments of insurance on an as-depicted basis, and that modifying them in any way results in the form being non-compliant, which covers removing a section as much as adding language to one.

That is the issuing side. On the verifying side, the date gives you a new signal. A certificate arriving on the 2016/03 edition after 1 December 2026 tells you something about the agency that issued it, and it will not carry the limits disclosure the current edition carries.

What the form has no field for

The coverages grid has eight columns: INSR LTR, TYPE OF INSURANCE, ADDL INSD, SUBR WVD, POLICY NUMBER, POLICY EFF, POLICY EXP and LIMITS. Below it sits a free-text description of operations box, and below that the cancellation and certificate holder blocks.

There is no field for exclusions. There is no endorsement schedule. There is no schedule of underlying insurance, which means the form cannot establish what an umbrella or excess layer attaches over. No amount of care in reading a certificate produces information the form has no field to carry.

Certificate review is still the right level of review across a large share of any third-party population, and doing it properly is real work. What decides the level is the requirements the client has set and the exposure in the relationship. Where scope, jurisdiction or completed-operations exposure warrants closer scrutiny, the certificate will not show the exclusions or the endorsement language that decides the claim, and the endorsement pages or the policy become the proportionate next step.

The form New York built to close the gap

The ACORD 855 NY (2014/05) is an addendum headed “Attach to ACORD 25,” not a replacement for it, and its thirteen lettered sections capture most of what the ACORD 25 has no field for. Section C records operations excluded or restricted by location, type of construction, building height or designated work. Section D records which additional insured endorsement is attached, by form number. Section E records primary and noncontributory status. Section G records whether blanket contractual liability has been removed or restricted, and Section H whether the insured contract exception to the employers liability exclusion survives. Section I records whether the general liability policy excludes additional insured coverage for injuries to the named insured’s or a subcontractor’s employees. Section J records restrictions on earth movement, excavation, explosion, collapse and underground property damage.

If your client is on New York work and you are relying on the ACORD 25 alone, the form that answers your questions already exists. It is also the cleanest available illustration of what the ACORD 25 leaves out, because somebody had to build thirteen sections to carry it.

Verifying a certificate your client received

Six confirmations make up the job, and each one has a source other than the certificate.

Read that list from the other direction and it is also the list of six things you cannot certify on your own paper. If you cannot establish something from a source other than the certificate, you cannot put it on one.

Two traps worth naming.

The first is the carrier that will not show as licensed. A non-admitted or surplus lines carrier is not licensed in the state, and that is normal rather than a defect. Eligibility is confirmed on a different list: the state’s own surplus lines eligibility list, or, for alien insurers, the NAIC Quarterly Listing of Alien Insurers. Note that a state list may not be the whole eligible universe. California’s LASLI lists insurers approved under one code section, and an insurer can also be eligible under a different section without appearing on that list, in which case the placing broker carries the duty to determine eligibility.

The second is the phone number printed on the certificate. If the document is forged, the contact details are whatever the forger chose. Great American Insurance Group’s loss control guidance is direct about this: call the insurance company, or broker, listed on the form using publicly available information to confirm that the information is accurate. Its other red flags are the ones you would expect and still miss under time pressure. A certificate not filed on ACORD forms. Handwriting or white-out on a typed document. Spelling errors. A carrier you cannot find at all.

The endorsements that decide it

Every endorsement below sits on the third party’s policy. When you are verifying, you are asking about somebody else’s coverage. When you are issuing, you are describing your own client’s.

Additional insured status comes from an endorsement, or from an additional insured provision written into the policy form itself. The ADDL INSD box is a representation about what the producer understands the policy to contain. The form says so in its own words:

IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s).

Which endorsement matters. The CG 20 10 grants status for the third party’s ongoing operations, in language that cuts off once all work on the project other than service, maintenance or repairs has been completed, or once the portion of that work out of which the injury arises has been put to its intended use. Completed operations status generally requires the CG 20 37. The 11 85 edition of the CG 20 10 covered both, which is why the request still surfaces, but the 1993 revision narrowed the granting language and the 2001 revision introduced the separate completed-operations form.

Under the 04 13 and later editions, three restrictions travel with the grant. The insurance applies only to the extent permitted by law. It will not be broader than the contract requires. And the most the insurer will pay on behalf of the additional insured is the amount required by the contract or the amount available under the policy limits, whichever is less. An additional insured does not automatically reach the full policy limit.

The blanket endorsement, from both sides

A blanket endorsement grants status only where a written contract requires it, and it turns on who that contract is with. In Gilbane Bldg. Co./TDX Constr. Corp. v. St. Paul Fire & Marine Ins. Co., New York’s Court of Appeals read the phrase “with whom you have agreed to add as an additional insured by written contract” to require a written contract between the named insured and the party seeking the status, and rejected the argument that indirect contractual references were enough. On a multi-tier project that is the difference between an owner who is covered and an owner who is named in a contract they were not party to.

That mechanism is also why IIAT’s rule for issuing is unqualified: do not check the ADDL INSD box or enter Y for yes if a blanket additional insured endorsement applies. The endorsement has not yet determined status, so the box would assert something the policy has not decided. Check it in a section of COVERAGES when an endorsement specifically naming the certificate holder is attached for that policy.

The two rules are the same fact seen from either end. Verifying, a checked box on a blanket program tells you nothing and you go to the endorsement and the contract. Issuing, the same logic is why you leave the box alone and attach the endorsement instead. Attaching copies ends the conversation in one step.

The rest of the set

Primary and noncontributory is a separate endorsement with two conditions, both required. The additional insured must be a named insured under the other insurance, and the named insured must have agreed in writing that this insurance would be primary and would not seek contribution. Additional insured status alone does not produce it.

Waiver of subrogation runs in one direction and only one. It sits on the third party’s own policy, and it is that party’s insurer that gives up its right to recover from the upstream party after paying a claim. It is not something the upstream party’s carrier does. And only the insurer’s rights are waived; the insured itself has not waived anything and can still pursue the upstream party directly. The general liability waiver and the workers compensation waiver are separate endorsements on separate policies. The workers compensation form waives recovery for an injury covered by that policy. A general liability waiver does nothing for workers compensation subrogation, and the SUBR WVD box does not tell you which one you have.

Per project aggregate deserves a line of its own because the ISO form is scheduled rather than blanket. Each project must be described in the schedule. A designated construction project aggregate endorsement whose schedule omits the project in front of you does nothing for that project.

Issuing certificates: the sequence

This is the half that carries your own exposure. Run it as a sequence, because the order is what keeps the errors out.

Confirm coverage is in force. Do not issue a certificate unless there is an in-force policy in effect. Utica National’s agents E&O loss control material is unusually direct on why this one matters more than the others: the most common reason it sees claims related to certificates is their issuance when coverage is not in force. Where the insurer has not yet issued a policy number, show “Policy Number Pending Issuance of Policy,” suspense a follow-up to send another certificate when the number exists, and do not enter a binder number without identifying it as a binder.

Confirm who is authorized to sign. For an admitted insurer the agency is appointed with, IIAT’s certificate guidance identifies three categories of authorized representative: an agency principal, meaning an owner, partner or executive officer; an employee with a general lines license who has been appointed by the agency and authorized by a principal to execute certificates; and an employee with an ISR license on the same terms. Which license qualifies is a question of state law, and those two are the Texas license types. The signature block is headed AUTHORIZED REPRESENTATIVE, and in almost every case that representative is a representative of the producer rather than the insurer.

Describe only what the policies grant. IIAT states the content rules about as plainly as they can be stated. Do not add words or phrases on the certificate that reflect or imply coverages or conditions not explicitly granted by the policies. Do not alter wording on an ACORD or other printed certificate form.

Establish additional insured status by endorsement, not by box. Covered above. Wait for the carrier’s formal approval before listing an additional insured, and note on the certificate any endorsements that change coverage.

Confirm who asked and whether the insured agreed. Document who requested the certificate and what was requested. Where the request came from the certificate holder rather than your client, obtain the insured’s permission before issuing. This one arrives weekly and it carries two separate questions: whether you have authority to issue on that request at all, and what you are disclosing about your client’s program to a party your client has not cleared. Both are answered in the file, before the certificate goes out.

Review before release. Utica National recommends a two-person review to confirm the information is accurate before certificates are released. Its related recommendations cost the same five minutes. Get carrier approval before adding nonstandard wording. Never hand a client a signed blank certificate to complete themselves. Review current coverage instead of copying last year’s certificate.

Demands you cannot satisfy on the form

Most of the pressure on a certificate desk arrives as a handful of recurring requests. Each one has a correct answer that is not the certificate.

The pattern underneath all five is the same. The certificate reports. The endorsement grants. When a demand asks the certificate to do the granting, the answer is to go get the grant.

What the law prohibits, and who it binds

States regulate certificates through statutes, regulations and department directives that vary enormously in depth. This is educational. Work from the rules of the states you are licensed in.

The second half of that heading is the part worth reading for, because the answer is not uniform.

Two rows are too good for a cell.

New York’s form restriction runs against the person or entity requesting or requiring the certificate. A requester may not willfully require a certificate on a form other than one promulgated by an insurer or approved by the superintendent, and may not willfully require terms or language the referenced policy does not expressly contain. The provision that reaches the producer’s own document is the general one: a certificate of insurance shall not amend, extend or alter the coverage provided by the policy it references. Willful violation carries $1,000 for the first and $2,000 for each subsequent violation, and governmental entities, which are among the more insistent certificate demanders, are bound by the prohibition but carved out of the penalty.

Texas is the state that refuses to let the disclaimer do too much work. An approved certificate, properly executed and issued, constitutes confirmation that the referenced policy has been issued or that coverage has been bound, regardless of whether the face carries “for information purposes only.” The disclaimer stops a certificate from altering coverage. It does not stop it from confirming the policy exists. A producer who issues a certificate before coverage is bound cannot shelter behind it. And the Texas department’s published position on the additional insured question is that a certificate cannot grant additional insured status, though it can state that the policy contains a blanket additional insured endorsement.

One note on the NCOIL model, adopted in November 2012 and re-adopted in 2017 and again in 2022. It is NCOIL’s, not the NAIC’s; there is no NAIC certificate of insurance model act. And the phrase “affirmatively or negatively” in its prohibition is deliberate. A certificate that understates coverage is as much a problem as one that overstates it, which is the point the next section turns on.

Where your own exposure sits

A broker’s exposure sits in two places, and they are different in kind.

The first is the ordinary standard of care, which varies by state and turns on facts. The baseline duty everywhere is to exercise reasonable care and diligence to procure the insurance the client requested, and to tell the client if it cannot be obtained. Whether a producer owes anything beyond that, and in particular whether there is an affirmative duty to advise on the adequacy of coverage, is where the states diverge sharply. Several recognize a heightened duty where a special relationship exists, and the factors that create one differ by jurisdiction and are applied case by case. Your own counsel and your E&O carrier are the right sources for the states you write in.

The second is specific to certificates, and it is the reason the content rules above are worth following literally. A certificate’s disclaimers are usually enough to stop the document creating coverage, and courts have applied that principle in both directions.

It has defeated certificate holders relying on what a certificate said. It has also defeated insurers arguing that a certificate narrowed what the policy granted. In Charter Oak Fire Ins. Co. v. Lexington Ins. Co., a Tennessee appellate court rejected an insurer’s argument that a certificate note limiting an owner’s additional insured status to physical damage restricted the owner’s coverage, holding the certificate had no effect on the policy. In J.A. Jones Constr. Co. v. Hartford Fire Ins. Co., an Illinois appellate court rejected an insurer’s argument that typed certificate language limiting additional insured status to the extent of the subcontractor’s negligence restricted coverage, relying on the certificate’s own statement that it does not amend, extend or alter the coverage afforded by the policies.

But the disclaimer is not unconditional. In T-Mobile USA, Inc. v. Selective Ins. Co. of America, 450 P.3d 150 (Wash. 2019), decided on a question certified by the Ninth Circuit, the Washington Supreme Court held an insurer bound by its authorized agent’s specific written representation of additional insured status on a certificate, notwithstanding the preprinted boilerplate stating the certificate could not expand coverage. The majority reasoned that the specific term controls the general one, and that the agency’s certificate had named an entity the policy did not cover. One justice dissented and would have given the disclaimers effect. That is a single state, over a dissent, and it is an authority-of-the-agent holding rather than a certificate-as-policy holding. It is also the clearest available illustration of why what gets typed into a certificate is not free text. Outcomes vary by state and by who issued the document.

What does not scale on a certificate desk

A producer can verify a certificate. A producer can verify twenty. What does not scale in an agency is the rest of it: confirming that every entity the contract requires appears in the endorsement schedule rather than the certificate holder box, re-confirming at every renewal and every time scope or entity structure changes, running remediation back through the third party’s broker when an endorsement is missing, and retaining the record long enough for a completed operations claim that arrives years after the third party finished and left.

That is a different job from certificate review. It runs on a renewal calendar instead of a request queue, it carries a retention obligation measured in years, and it needs somebody to work another broker’s file until an endorsement is corrected. An agency can do all of it. The question is whether doing it across a client’s entire third-party population is the best use of the desk.

Where Docutrax fits alongside the broker

Docutrax works on behalf of the operating business. Licensed insurance professionals and CRIS-certified Account Managers review what was submitted against the requirements the client has set, coordinate remediation through the third party’s broker or agent, and maintain the record across the portfolio. The client owns its requirements framework and makes its own compliance decisions. Docutrax surfaces the facts and resolves the gaps.

Docutrax does not place coverage, does not advise on your client’s own program, and does not contact your client’s carriers. Remediation runs through the third parties’ brokers and agents.

What the broker gets is the record. Where access is enabled, a documented and current third-party compliance file is evidence you can put in front of your client’s underwriter at renewal, and a client whose third-party compliance is current is a client whose program you can present properly.

Bring us an account and we will walk its third-party population with you.