Deficiency Notice (Gap Letter)

Overview

A Deficiency Notice, also known as a gap letter, is a formal notification sent to a vendor (or their insurance agent/broker) when their certificate of insurance does not meet the contractual insurance requirements. It itemizes each compliance gap, explains what is needed to resolve it, and provides a deadline for remediation. Deficiency notices are the primary communication mechanism in the COI compliance workflow and their effectiveness directly impacts compliance rates.

How It Works

The deficiency notice process follows the compliance gap identification phase:

1. Gap identification: The compliance team reviews the COI against contractual requirements and identifies deficiencies.
2. Notice generation: A deficiency notice is created that lists each gap with specific details about what is required and what is currently in place.
3. Distribution: The notice is sent to the vendor and, when possible, directly to the vendor's insurance producer. Sending to the producer often accelerates resolution because the producer can take immediate action.
4. Follow-up cadence: If the vendor does not respond within the initial deadline (typically 15-30 days), follow-up notices are sent at increasing urgency levels.
5. Escalation: After multiple notices without resolution, the matter may be escalated to the vendor's primary business contact, account management, or contract enforcement.
6. Resolution: The vendor submits an updated COI that resolves the deficiency, and the compliance team verifies the correction.

Effective deficiency notices include:

• Specific gap descriptions: "The General Liability policy requires an Additional Insured endorsement naming [Entity Name]. This is not reflected on the current certificate." — not vague language like "insurance is deficient."
• Contractual reference: Citation to the specific contract section establishing the requirement.
• Current vs. required: What the certificate shows versus what the contract requires.
• Resolution instructions: Clear guidance on what the vendor needs to provide (updated COI, endorsement copy, policy change).
• Deadline: A specific date by which the deficiency must be resolved.
• Consequences: What happens if the deficiency is not resolved (work stoppage, withholding payment, contract termination).

Compliance Relevance

Deficiency notices are the engine of compliance remediation:

• Tone and clarity: Notices that are professional, specific, and actionable achieve higher resolution rates than generic or threatening communications. Vendors respond faster when they understand exactly what is needed.
• Automation: Modern compliance platforms auto-generate deficiency notices from gap analysis, pre-populated with specific requirement details and vendor information. This reduces manual effort and ensures consistency.
• Multi-channel delivery: Effective programs send notices via email, vendor portal notifications, and sometimes physical mail. Multiple channels improve visibility.
• Resolution tracking: Each deficiency is tracked individually, with timestamps for notice sent, follow-ups, and resolution. This data informs compliance metrics and vendor scorecard ratings.
• Vendor portal integration: Self-service vendor portals allow vendors to view their deficiencies, upload updated certificates, and track their compliance status — reducing back-and-forth communication.

Example

A property management company sends a deficiency notice to a cleaning vendor: "Your certificate of insurance dated 01/15/2026 has been reviewed against the requirements in your service agreement dated 06/01/2025. The following deficiencies were identified: (1) General Liability Each Occurrence limit is $500,000; the contract requires $1,000,000. (2) Workers' Compensation Waiver of Subrogation endorsement is not reflected. Please provide an updated certificate resolving these items by 02/15/2026. Failure to comply may result in suspension of services per Section 8.2 of your agreement."