A major E&P operator in the Permian Basin managed over 600 active contractors across their producing assets. Every contractor was required to have a current COI on file before they could access a location. The compliance team was diligent: certificates were collected, expiration alerts sent, records maintained.
An OSHA inspection following a serious injury found that 22% of the contractors on-site had certificates on file - but upon detailed review, 38% of those certificates had at least one gap relative to the company's MSA requirements. The most common: pollution liability limits below the MSA threshold, and umbrella policies with pollution exclusions that nobody had caught.
Having COIs on file and maintaining a compliant contractor program are two different things. In oil and gas, the gap between them has regulatory, contractual, and financial consequences.
The Vendor Compliance Challenge in Oil & Gas
Oilfield contractor programs are complex in ways that other industries don't encounter:
High contractor turnover. Production assets cycle through contractors as work scopes change. New contractors are added frequently; each requires MSA execution and COI collection before accessing locations.
Multiple MSA templates. Operators often have different MSA versions for different contractor categories - drilling, completions, production services, construction, professional services. Each may carry different insurance requirements.
Multi-state operations. A single operator may run assets across Texas, New Mexico, Colorado, Wyoming, North Dakota, and Oklahoma simultaneously. Workers' compensation, environmental regulations, and other state-specific requirements vary.
Scope-dependent requirements. A catering company delivering meals to a well site has different insurance requirements than a perforating crew. A single MSA with blanket limits that doesn't account for scope variation creates either overrequirement (driving away small vendors) or underrequirement (leaving gaps for high-risk scopes).
Joint venture complexity. Many upstream assets are operated by one company but owned by multiple parties. JV agreements may specify insurance requirements that exceed the operator's standard MSA - or require all JV owners to be named as additional insureds.
Insurance Requirements by Contractor Category
| Contractor Type | Key Coverage Requirements | Special Considerations |
|---|---|---|
| Drilling contractor | GL, auto, WC, umbrella $10M+, control of well | XCU exclusion removal, USL&H if offshore |
| Well services (wireline, cement, frac) | GL, auto, WC, umbrella $10M+, pollution $2M+ | Well control coverage, pollution retroactive date |
| Construction / facility | GL, auto, WC, builders risk, umbrella | Standard construction + pollution if excavation |
| Professional services | GL, auto, WC, E&O/professional liability | Professional liability min $1M-$5M |
| Environmental / remediation | GL, auto, WC, pollution $5M+, umbrella | Occurrence-form pollution preferred |
| Catering / support | GL, auto, WC | Reduced requirements; still verify limits |
| Transportation | GL, auto $1M-$2M, cargo, WC | MCS-90 if interstate; cargo per commodity |
Building a Vendor Compliance Program for Oil & Gas
Start with the MSA, not the COI. Every compliance decision begins with the MSA insurance exhibit. The exhibit should specify coverage types, limits, endorsements, and special provisions by contractor category. Ambiguous MSA language is the root cause of most compliance disputes.
Classify contractors before onboarding. Assign each contractor to a risk category - high, medium, standard - before collecting COIs. High-risk contractors (subsurface operations, hot work, explosives) may require pre-qualification reviews and higher insurance limits. Standard service contractors (administrative, catering) may qualify for reduced requirements.
Use pre-qualification as a compliance gate. Many operators use pre-qualification systems (ISNetworld, Avetta, Veriforce, Browz) as a first pass on contractor compliance. These platforms provide useful document collection and safety prequalification. However, they typically do not compare COIs against the specific MSA insurance exhibit - they use their own templates.
Compare against the specific MSA, not the pre-qual template. Pre-qualification systems confirm a COI exists and check against a generic template. They do not know what your MSA says. A contractor who is "approved" in a pre-qual system may still have gaps relative to your specific MSA requirements. The MSA comparison is your compliance burden - not the pre-qual vendor's.
Verify policy-level details manually or with a contract-aware platform. XCU exclusion removal, pollution policy retroactive dates, umbrella follow-form status, and control of well scope cannot be verified from the COI face alone. These require either policy declarations review or direct agent confirmation - at scale, a contract-aware platform like Bramble automates the flagging and routing of these checks.
Maintain asset-level access control. A contractor approved at one asset may not be appropriate for a different asset with higher-risk operations. Link compliance status to specific assets or operation types - not just to the contractor entity overall.
The Cost of Compliance Gaps in Oilfield Contractor Programs
| Gap Type | Typical Cost if Incident Occurs |
|---|---|
| Pollution liability below MSA minimum | $100K-$5M+ direct operator exposure |
| Missing additional insured on pollution | Loss of defense coverage; full defense cost to operator |
| Umbrella with pollution exclusion | Umbrella limit effectively zeroed for environmental events |
| Workers' comp gap for multi-state ops | Direct employer liability for injured worker |
| XCU exclusion in GL | Blowout, explosion, underground damage not covered |
Against these exposures, the cost of a robust compliance program - even at premium pricing - is a fraction of one uncovered incident.
Frequently Asked Questions
Should I rely on pre-qualification systems (ISNetworld, Avetta) as my COI compliance program? Pre-qualification systems provide valuable data on contractor safety records, training, and general insurance status. However, they do not compare COIs against your specific MSA requirements. They are a useful input to a compliance program - not a substitute for MSA-specific comparison.
How do I handle contractors who claim their coverage is sufficient but provide COIs that don't match my MSA? The MSA governs. If a contractor's COI doesn't meet the MSA requirements, the contractor is not in compliance regardless of their characterization of the coverage. Either require remediation before allowing site access, or document the exception with a specific risk acceptance decision by the appropriate authority.
What happens when a JV partner has different insurance requirements? The most conservative requirement typically governs. If your JV partner's agreement requires higher limits than your standard MSA, you should require those higher limits from all contractors on the jointly operated asset. Coordinate with JV partners early in contractor selection - resolving insurance requirement conflicts mid-project is expensive.
Can I waive insurance requirements for small or specialty contractors? Technically yes - but any waiver should be documented, approved by a risk manager or legal counsel, and evaluated against the actual exposure the contractor creates. Blanket waivers for "small" contractors are a common source of uninsured exposure.
Oilfield vendor insurance compliance at scale requires a program - not just a process. The complexity of upstream insurance requirements demands systematic comparison against actual MSA language, not generic templates.
Learn how Bramble handles Oil & Gas vendor compliance or understand contract vs. COI comparison.
Build a vendor compliance program that actually holds. Book a demo at getbramble.com.