A janitorial contractor at a downtown office building left a wet floor unmarked at 6:45 AM. A building tenant's employee slipped, broke her wrist, and missed six weeks of work. She sued the building owner and the janitorial company. The janitorial company's COI, collected 18 months earlier, showed $1 million in general liability coverage. The actual policy had been canceled six months prior due to non-payment. The building owner's insurer paid the $340,000 settlement and non-renewed the landlord's policy the following year.
The building owner had a COI. They didn't have compliance.
The Vendor Risk Problem in Commercial Real Estate
Commercial properties interact with dozens of vendors: HVAC technicians, electricians, plumbers, landscapers, elevator contractors, janitorial companies, security firms, parking operators, and more. Each one can create liability exposure that traces back to the property owner.
Industry data confirms the scale of the problem: 70% of certificates of insurance contain at least one material deficiency when compared against the underlying contract. For vendor COIs-which are often issued by smaller carriers for smaller businesses with thinner margins-that rate is higher.
What to Require from Every Vendor
Not every vendor requires the same coverage, but every vendor working at a commercial property requires a verified COI before work begins. Requirements should be calibrated to risk level:
Tier 1: Low-Risk Vendors (Landscaping, Janitorial, Pest Control)
| Coverage | Minimum Required |
|---|---|
| Commercial General Liability | $1M per occurrence / $2M aggregate |
| Workers' Compensation | Statutory limits |
| Employers' Liability | $500K per accident |
| Auto Liability (if vehicles used on-site) | $1M CSL |
Tier 2: Moderate-Risk Vendors (HVAC, Electrical, Plumbing, Roofing)
| Coverage | Minimum Required |
|---|---|
| Commercial General Liability | $1M per occurrence / $2M aggregate |
| Workers' Compensation | Statutory limits |
| Employers' Liability | $500K per accident |
| Commercial Auto | $1M combined single limit |
| Umbrella/Excess Liability | $2M over primary |
| Tools and Equipment | Per contract value |
Tier 3: High-Risk Vendors (Structural, Demolition, Environmental)
| Coverage | Minimum Required |
|---|---|
| Commercial General Liability | $2M per occurrence / $4M aggregate |
| Workers' Compensation | Statutory limits |
| Employers' Liability | $1M per accident |
| Commercial Auto | $1M combined single limit |
| Umbrella/Excess Liability | $5M over primary |
| Professional Liability (if design involved) | $1M per claim |
| Pollution Liability | $1M per occurrence (if hazardous materials) |
| Contractor's Pollution Liability | $1M per occurrence |
The Additional Insured Requirement for Vendors
Just as with tenants, every vendor working at your property must name the property owner and management company as additional insureds on their commercial general liability policy. The endorsement must specify:
- Primary and non-contributory coverage
- Your entity's exact legal name (not a DBA or abbreviation)
- The specific property address if required
Many small vendors resist this requirement because their carrier charges extra for AI endorsements. The answer is that it's a condition of working at your property-not a negotiation.
The Waiver of Subrogation for Vendors
Require a waiver of subrogation on the vendor's workers' compensation policy. Without it, if a vendor's employee is injured on your property and collects workers' comp, the workers' comp carrier can turn around and sue you for contributing to the conditions that caused the injury.
This is not hypothetical. Subrogation claims by workers' comp carriers against property owners are common in elevator accidents, loading dock incidents, and HVAC rooftop work.
Building a Vendor Compliance Program
An effective vendor compliance program has five components:
1. Pre-approval requirements. No vendor begins work without a compliant COI on file. This must be a hard stop, not a policy preference that gets waived when the HVAC breaks on a Friday afternoon.
2. Contract-to-COI verification. Your vendor agreements specify insurance requirements. Someone must compare those requirements to the COI-field by field-before approving the vendor. A COI that looks fine at a glance may show a $500K per-occurrence limit for a job your contract required at $1M.
3. Expiration tracking. Vendor COIs expire. Long-term service contracts-annual maintenance agreements, security services, parking management-require COI renewal at least annually. Spot vendors require fresh COIs for every engagement if their prior certificate has lapsed.
4. Incident-triggered review. Any time a vendor is involved in an incident at your property-however minor-immediately pull and review their current COI. Do not wait for a claim to be filed.
5. Audit trail maintenance. Every COI, every deficiency notice, every approval, and every work authorization should be documented. If litigation follows an incident, your paper trail is your defense.
The Hidden Risks in Vendor COIs
Beyond outright lapses, vendor COIs often contain subtle deficiencies that only surface in claims:
Exclusions buried in endorsements. A general contractor's CGL may exclude work at heights above 15 feet-relevant if they're doing window cleaning or signage work on your building's facade.
Subcontractor gaps. A general contractor's COI covers their own work. If they use uninsured subs, and a sub causes damage, the general's policy may not respond. Require subcontractor insurance requirements to flow down in your contracts.
Employee vs. independent contractor misclassification. A "one-man shop" vendor who carries no workers' comp because they classify themselves as independent contractors creates workers' comp liability for you if they're injured on your site and a court later reclassifies them as employees.
Carrier financial strength. A COI from an insurer rated below A- by AM Best is a red flag. A carrier that becomes insolvent between COI issuance and a claim may not pay.
Frequently Asked Questions
Q: Can we require vendors to carry higher limits than they currently have? A: Yes, and you should calibrate requirements to the actual scope of work. Most standard vendor agreements in commercial real estate are reasonable-vendors working in your market likely already carry compliant limits. If a vendor can't meet your minimums, that's a signal to evaluate whether they're adequately capitalized to cover their own mistakes.
Q: How do we handle emergency vendors when we don't have time to verify a COI? A: Maintain a pre-approved vendor list with verified, active COIs. For true emergencies, document the situation, get a verbal confirmation from the vendor that coverage is in force, and request the COI within 24 hours. Have a clear policy in writing for emergency exceptions.
Q: Do vendors working on a tenant's space fall under the landlord's requirements? A: Often yes. Your lease should specify that tenant contractors must meet the same insurance requirements as your direct vendors, and the tenant is responsible for enforcement. Request the tenant's contractor COIs before work begins.
Q: What's the liability exposure if a vendor's employee sues us directly? A: In most states, property owners can be named in a vendor employee's tort claim if the owner's negligence contributed to the injury. The additional insured endorsement on the vendor's CGL is what protects you in this scenario.
Bramble automates vendor insurance verification for commercial property teams-reading your vendor agreements, extracting requirements, comparing them to submitted COIs, and flagging every gap before work begins.