← Back to Blog
Vendor ComplianceCOI Verification

Insurance Compliance for Small Businesses: What You Need to Know

Bramble·March 23, 2026

Insurance compliance for small businesses involves two distinct obligations that are often conflated:

  1. Your own coverage: Maintaining the insurance your contracts, leases, and lenders require you to carry
  2. Your vendors' coverage: Verifying that the contractors and vendors you hire have the insurance that protects you from their actions

Both matter. Failing on either exposes you to real financial risk.

Your Own Insurance Compliance Obligations

Most small businesses face insurance requirements from multiple sources:

Lease requirements: If you lease commercial space, your landlord's lease contains an insurance exhibit. You're required to maintain specified coverage and name your landlord as additional insured. Most small business owners know they have business insurance - fewer know whether it meets the specific requirements of their lease.

Client contracts: If you perform services for other businesses, their contracts frequently include insurance requirements. A client may require $2M in professional liability and that they be named as additional insured on your GL policy. If you're operating with a $1M professional liability policy, you're in breach before the engagement begins.

Lender requirements: Business loans, equipment financing, and commercial mortgages typically require the borrower to maintain specified insurance and name the lender as loss payee or additional insured on property policies.

State licensing: Many professional licenses (contractors, healthcare providers, financial advisors) require proof of insurance as a condition of licensure.

Small Business Insurance Compliance Checklist - Your Own Coverage:

  • General Liability: meets limits required by your lease and client contracts
  • Professional Liability / E&O: meets client contract minimums if applicable
  • Workers' Compensation: maintained if you have any employees (required by state law in most states)
  • Commercial Auto: if vehicles are used for business purposes
  • Additional insured endorsements: all required entities named (landlord, clients, lender)
  • Certificates issued and on file with all parties who require them
  • Annual review: coverage reviewed at every renewal to confirm adequacy
Two Sides of Small Business Insurance
Your Own Coverage
  • Meeting lease requirements
  • Satisfying client contract minimums
  • Maintaining lender-required coverage
  • State licensing insurance obligations
Your Vendors' Coverage
  • Collecting COIs before work begins
  • Verifying limits meet your requirements
  • Confirming additional insured status
  • Tracking renewal expiration dates

Verifying Your Vendors' and Contractors' Insurance

The second compliance obligation - one that many small businesses overlook - is verifying that the vendors and contractors you hire are adequately insured.

If you hire a contractor who causes harm and they're uninsured, the risk doesn't disappear. It may transfer to you as the engaging party. If a customer is injured by an uninsured caterer at your event, if an uninsured maintenance contractor damages a client's property while working under your supervision, the exposure can land on your business.

Who you should collect COIs from:

  • Contractors performing physical work at your location or on your behalf
  • Vendors who interact directly with your customers
  • Service providers whose professional errors could create liability (IT, legal, financial)
  • Anyone whose work failure could result in a claim against you

What to collect: At minimum, a current certificate of insurance showing GL coverage, workers' comp (if applicable), and your business named as additional insured.

The Small Business Insurance Gap

The specific problem for small businesses is scale. Large organizations have risk management teams and automated systems for COI collection and verification. Small businesses often have a single person - an office manager, a bookkeeper, the owner - who is responsible for getting and filing COIs alongside dozens of other duties.

The result is that COIs often exist but aren't properly verified. A COI on file doesn't mean:

  • The coverage is still current
  • The limits meet your contract requirements
  • Your business is named as additional insured
  • The waiver of subrogation is in place

70% of COIs are non-compliant at first receipt. This applies to small businesses too - the certificates you receive may not satisfy your actual requirements.

The Small Business Gap
70%
of COIs are non-compliant at first receipt
20+
vendor relationships = time to consider COI software

Practical Insurance Compliance for Small Businesses

Small businesses don't need enterprise-level risk management programs. They need a defensible, functional process:

Step 1: Know what you need. Read your leases and client contracts. Find the insurance exhibit or insurance requirement clause. Write down the specific requirements - limits, coverage types, endorsements.

Step 2: Verify your own coverage meets those requirements. Your business insurance broker should review your leases and contracts and confirm your coverage is compliant. This takes about 30 minutes and should happen at every renewal.

Step 3: Collect COIs from vendors and contractors before they start work. Not after - before. Build this into your vendor onboarding process.

Step 4: Verify COIs against your contract with that vendor. Check limits, check additional insured status, check expiration. File everything.

Step 5: Track expiration dates. Set calendar reminders for each vendor's policy renewal, 60 days out.

For small businesses managing 5-20 vendor relationships, this process is manageable manually with discipline. For 50+ vendor relationships, consider a COI management tool.

When to Invest in COI Software

COI management software starts making sense for small businesses when:

  • You manage 20+ active vendor or contractor relationships
  • You have commercial leases requiring tenant or vendor COI compliance
  • You've had an incident or near-miss involving an uninsured vendor
  • Your contracts require you to verify your vendors' insurance (some enterprise clients require this)

The ROI calculation is simple: the labor cost of manual COI management vs the software subscription, plus the reduction in uninsured incident exposure.

Related Resources


Bramble helps small businesses manage vendor COI compliance without a full-time risk management team - automating collection, verification, and renewal tracking. Book a demo at getbramble.com.