Collect Supplier Insurance Evidence at the Right Gate

A closed off-white folder with a pink tab, a blank access card on a lanyard and a white hard hat on a navy surface, in front of a metal site gate standing open to daylight.
“Software can read every certificate the day it arrives, but deciding which insurance gap can wait and which one stops work stays with the person who owns that risk.”
— Stan Moskovtsev, Co-Founder & U.S. CEO
What official records and research say about supplier insurance evidence
StatisticSource
UC Irvine's internal audit found that 4,725 of the 4,784 insurance policies recorded in its tracking system had expired.UC Irvine Internal Audit, 2025
The University of Houston-Downtown requires a vendor's certificate of insurance with the required coverage before work starts.University of Houston-Downtown, 2025
Caltrans makes no payment to an emergency contractor until all insurance documents for the project are approved.Caltrans CPD 24-4, 2024
Richmond's city auditor found certificates had expired before the work was completed on 13 of 17 reviewed milling and overlay contracts.City of Richmond Auditor, 2021
A construction safety study describes the Experience Modification Rate as an insurance measure of an employer's past workers' compensation claims and future risk.Dennerlein et al., 2020

The sources cover different organizations, periods and purposes. The audit figures describe two public bodies' own records, not how often suppliers lapse in general, and the rules apply only within their stated scope.

Why shouldn't insurance checks block supplier intake?

In this guide's view, the exposure supplier insurance covers mostly starts when a supplier's people, vehicles, system access or work arrive, not when the supplier is invited to bid. Asking every invited supplier for full certificates and endorsements adds documents someone must review and refresh, for suppliers who may never win. In a 2025 internal audit at UC Irvine, the campus risk office cited insufficient staff to keep up with certificates that regularly expire, and it saw only the contracts that Procurement brought to it.

A lighter intake check keeps the decision honest without that load. In a structured RFQ workflow, state the coverage tier in the invitation, ask each supplier to confirm it can carry that tier, and for high-risk tiers ask for a broker's letter confirming insurability. State the tier before bidders quote, so the requirement does not change after the price is agreed. Collect the evidence itself from the supplier you intend to award.

What insurance limits should a supplier be asked to carry?

No single minimum fits every purchase, so tie the limits to the work's risk and value. For emergency construction contracts, the Caltrans directive sets umbrella or excess liability at $5,000,000 for bids up to $1,000,000 and at $25,000,000 for bids above $25,000,000. For its vendors in general, Cal State San Bernardino asks for general liability of $2,000,000 for each occurrence and $4,000,000 in aggregate, according to its vendor insurance requirements.

Treat published limits as one buyer's view of its own risk, not a market standard. Match cover types to the category too: ask suppliers that hold your data or run your systems for cyber cover, and professional services firms for professional liability. Agree the tiers with your risk owner and insurance adviser, and re-check the tier when a contract's scope or value changes.

What evidence shows a supplier's insurance meets the contract?

Ask for the documents that create the buyer's protection, not only the summary. For contractors that are not prequalified for insurance, the Caltrans directive requires the certificate, full copies of the primary general liability and umbrella policies, and additional insured endorsements for both ongoing and completed operations. In the same list, the directive's remaining items are a primary noncontributory endorsement, a workers' compensation waiver of subrogation and a per-project aggregate endorsement. If full policy copies are hard to obtain, take the endorsements and declarations pages with a contractual right to inspect the policy.

Additional insured status and a waiver of subrogation do different jobs, so check for each one the contract requires. According to an IRMI commentary by Mark Bell, an additional insured can tender a defense to the named insured's insurer, while a waiver of subrogation stops an insurer from suing the party that caused a loss to recover what it paid. In the same commentary, the author explains that an effective waiver needs two agreements: one between the parties and one between the insured and its insurer.

When should proof of insurance be required: award, start of work or payment?

Several public buyers set the hard stop at the start of work. According to FAR 52.228-5, a contractor working on a government installation must notify the contracting officer in writing, before commencing work, that the required insurance has been obtained. At the University of Houston-Downtown, the waiver guidelines require a certificate with the required coverage before the start of work. At Cal State San Bernardino, the vendor insurance procedure attaches the certificate to the purchase order request, and no work can begin until the order is issued.

Payment is a second lever. Under its 2024 directive, Caltrans makes no payment to an emergency contractor without full approval of all insurance documents, and in rare cases where work cannot wait for approval, the documents are due by the next business day. Even then, keep a certificate or binder in hand before work starts and let only the review lag. A payment hold is leverage to get the paperwork in; it pays nothing on a loss that happens while cover is missing.

How should teams handle supplier insurance waivers?

Treat a waiver as a documented risk decision, not a convenience. At Cal State San Bernardino, the exception rule considers a waiver only with a written, risk-based justification and never solely for cost, convenience or a vendor's competitive advantage. At the University of Houston-Downtown, the waiver request comes from the contractor, asks whether its staff will enter university property and needs a justification, and the department may have to carry costs the contractor's insurance would have covered and the university's own insurance does not.

At a larger scale, after its 2025 audit UC Irvine's risk office said it would formally accept the risk of non-compliant or missing certificates for lower-risk vendors rather than pursue retroactive compliance, and make certificates mandatory for all high-risk contract renewals. Whatever the scale, give each exception an end date, a compensating control and a named approver who is not the requester.

How do teams keep supplier insurance current after award?

Certificates can expire while contracts run, and the lapse is easy to miss. In an audit of 17 milling and overlay contracts, Richmond's city auditor found that coverage on the certificates had expired before the work was completed on 13 of them. At UC Irvine, the 2025 audit found that 4,725 of the 4,784 policies recorded in the tracking system had expired, but also that the system was incomplete, so the figure may reflect stale records as well as lapsed cover. To keep the list useful, chase renewals and close records when contracts end.

Contract terms can make a lapse visible sooner. According to FAR 52.228-5, policies for work on a government installation must carry an endorsement that delays any cancellation or adverse change until 30 days after written notice, or longer where state law says so, and the contractor must keep copies of its subcontractors' proof of insurance. Private buyers may not obtain that policy wording, so also require the supplier by contract to report any cancellation, non-renewal or material change, and keep your own expiry tracking as the main control.

Does proof of insurance show a supplier can work safely on site?

Keep site-access approval as its own check, because insurance evidence shows how a loss would be paid, not whether a crew works safely. According to a 2020 study of construction safety prequalification, the Experience Modification Rate long used in such screening is an insurance measure of an employer's past workers' compensation claims and future risk. According to the same study, such lagging indicators assume every injury was reported, and underreporting is frequent in smaller construction companies.

In that study, the survey of leading safety indicators, given to 43 subcontractors on 24 construction sites, linked higher average scores with better safety climate and fewer days-away injuries at the worksite level, but not within subcontracting companies. For site access, check the site plan, induction and supervision for the work, and treat the EMR and recordable injury rates as context.

What should a supplier insurance gate register contain?

Use the register below to agree, gate by gate, which evidence is requested, what it cannot prove and what is held until it arrives. Set the tiers with your risk and legal owners, keep each requirement proportionate to the work, and fold the coverage tier into a tiered supplier risk assessment rather than running it as a separate track.

A proposed register of supplier insurance evidence gates
GateEvidence to requestWhat it does not proveHold while missing
Intake and invitationConfirmation that the supplier can carry the stated tier, plus a broker's letter for high-risk tiers; the work, its location and whether staff will enter your sitesThat any policy is in force or will name youNothing; screen out suppliers that cannot meet the tier
Award and contractClause with limits, additional insured, primary and noncontributory, subrogation waiver, notice of cancellation, subcontractor terms, insurance as a condition of payment and a right to suspend workThat the insurer has issued those termsSignature until the clause is complete
Before work or site accessCertificate plus every endorsement the contract requires; a binder if a renewed policy is not yet issuedThat the crew will work safelyNotice to proceed, site entry, badges and system access
Site safety approvalSite plan, induction and supervision, with the EMR and recordable injury rates as contextFuture injury ratesSite entry
First invoiceRecorded approval of all required insurance documentsThat coverage stays in forcePayment
During the contractUpdated certificate and any renewed endorsements, or a binder while a renewed policy is issued, before each expiry; subcontractor proof held by the prime supplierThat no unannounced cancellation has happenedAt expiry without renewal evidence: site entry, system access, new work orders and payment, unless a named risk owner records a time-limited exception
Exception or waiverWho raised it, scope, risk-based reason, approver, end date, compensating control and who carries uncovered lossesThat the exception suits other suppliersWork until approval
Scope or value changeRe-check of the tier against the new scope or valueThat the original tier still fitsThe change order
Contract closeCompleted-operations or claims-made cover the contract requires after completion, with its end date recordedThat a later claim will be paidFinal payment or retention release

Authored expert analysis. Adapt the gates, tiers and holds to your categories, contracts and risk appetite. It is not legal or insurance advice and does not by itself make coverage adequate.

How do AI agents change supplier insurance verification?

Frequently asked questions

When should a buyer ask a supplier for a certificate of insurance?

Ask for proof once you intend to award, and require it before work starts. For work on a government installation, FAR 52.228-5 requires written notice that the required insurance has been obtained before work begins. At intake, this guide recommends asking only for confirmation that the supplier can meet the required tier, backed by a broker's letter for high-risk tiers.

Is a certificate of insurance enough to show additional insured status?

Ask for the endorsement as well when the contract requires additional insured status. For contractors that are not prequalified for insurance, the Caltrans directive requires additional insured endorsements alongside the certificate and full policy copies.

How often do supplier insurance certificates lapse?

No source here measures a market-wide rate, but lapses are common enough to plan for. In Richmond's 2021 audit, certificates had expired before the work was completed on 13 of 17 contracts. In UC Irvine's 2025 internal audit, 4,725 of 4,784 recorded policies had expired, though the auditors also found that tracking system incomplete.

Who should approve a supplier insurance waiver?

Someone with the authority to accept the risk, after a written, risk-based justification. At the University of Houston-Downtown, the waiver form goes to Risk Management for approval and asks whether contractor staff will enter university property.

Sources

  1. IT Contract Approval Processes, Internal Audit Report No. I2024-104 — Internal Audit Services, University of California, Irvine (UC audit reports portal), 2025. Current empirical evidence (official report): Expired-policy share in the tracking system and the audit's own tracking-system reliability caveat, risk office staffing and visibility limits, class-level risk acceptance for lower-risk vendors and mandatory certificates for high-risk renewals.
  2. Construction Policy Directive CPD 24-4: Insurance Approval for Emergency Contracts — Division of Construction, California Department of Transportation (Caltrans), 2024. Contextual evidence (official report): Documents required before work for contractors not prequalified for insurance, the next-business-day exception, the payment condition and the umbrella limits tiered by bid amount.
  3. FAR 52.228-5 Insurance-Work on a Government Installation — FAR Council (General Services Administration, Department of Defense, NASA), Acquisition.gov (U.S. General Services Administration), 2026. Contextual evidence (official report): Written notice of required insurance before work begins, the cancellation-notice endorsement and the prime contractor's copies of subcontractor proof of insurance.
  4. Guidelines for Requesting a Waiver/Deviation of Insurance Requirements for Standard Agreements — Risk Management, University of Houston-Downtown, 2025. Contextual evidence (official report): Certificate required before the start of work, vendor-originated waiver requests sent to Risk Management for approval, the property-entry question and the department's possible cost responsibility.
  5. Vendor Insurance Requirements — Risk Management, California State University, San Bernardino, 2026. Contextual evidence (official report): General liability limits for vendors, certificate attached to the purchase order request, no work before the purchase order and the risk-based exception rule.
  6. Associations between a safety prequalification survey and worker safety experiences on commercial construction sites — Jack T. Dennerlein and colleagues, American Journal of Industrial Medicine (author manuscript in PubMed Central), 2020. Foundational evidence (peer reviewed journal): The Experience Modification Rate as an insurance measure of past workers' compensation claims, the limits of lagging indicators, and worksite-level versus company-level associations.
  7. Audit Report 2022-03: Department of Public Works Milling and Overlay Contract Audit — City of Richmond, Virginia, Office of the City Auditor, City of Richmond, Virginia, 2021. Historical evidence (official report): Certificates whose coverage expired before contract work was completed.
  8. Additional Insured Status and Waivers of Subrogation — Mark Bell, International Risk Management Institute (IRMI), 2022. Contextual evidence (practitioner article): What additional insured status gives the buyer, what a waiver of subrogation does, and the two agreements an effective waiver needs.

Global Procurement Brief

Procurement news, briefed

The market moves, supplier signals, and cost levers that matter — curated by the team behind this Journal. Daily or weekly, your call.

We respect your privacy. No spam. Your data is never sold.

Related procurement resources

Request a demo
Request a demo