COI Provisions That Make or Break Compliance

Limits get the attention. Provisions determine the outcome. You can have a vendor with $5 million in General Liability coverage, and it means nothing to you if the right provisions are not in place. Provisions are the contractual mechanisms that connect a vendor's insurance to your protection. Without them, you are a spectator to someone else's coverage — watching from the outside while claims get paid to everyone except you.

This guide covers the four provisions that define real COI compliance: Additional Insured, Waiver of Subrogation, Primary and Noncontributory, and Notice of Cancellation. Each one serves a distinct purpose. Each one has specific endorsement forms, verification methods, and failure modes. Understanding them is the difference between a compliance program that transfers risk and one that merely creates paperwork.

Why Provisions Matter More Than Limits

Coverage limits establish ceiling amounts. A $1 million per-occurrence limit means the policy will pay up to $1 million for a single covered claim. That is important, but it only answers the question of how much.

Provisions answer the questions that matter more:

• Who is covered? Without an Additional Insured endorsement, you are not covered under the vendor's policy regardless of its limits.
• Who pays first? Without Primary and Noncontributory language, your own insurance may be required to contribute to a loss caused entirely by the vendor.
• Can the insurer come after you? Without a Waiver of Subrogation, the vendor's carrier can pay a claim and then sue you to recover what it paid.
• Will you know if coverage disappears? Without an endorsed Notice of Cancellation, you may learn that a vendor's policy was cancelled only after a claim is denied.

A vendor with $1 million in General Liability and all four provisions in place provides better real-world protection than a vendor with $5 million and none of them. Limits without provisions is insurance that belongs to someone else.

Additional Insured: The Foundation of Risk Transfer

What Additional Insured Status Actually Does

When you are named as an Additional Insured on a vendor's General Liability policy, you gain coverage under that policy for claims arising from the vendor's work. This is the core mechanism of contractual risk transfer. The vendor's insurer will defend you and pay claims on your behalf — as if you were one of the insureds on the policy — for liability arising out of the named insured's operations.

Without Additional Insured status, the only coverage available to you is your own insurance. The vendor's $2 million GL policy exists, but it exists exclusively for the vendor. You are outside the circle.

The Endorsement Forms

The Insurance Services Office (ISO) publishes standardized endorsement forms that modify CGL policies to add Additional Insured status. These endorsements are not interchangeable. Each one provides different scope of coverage, and understanding the differences is essential.

CG 20 10 — Additional Insured, Owners, Lessees or Contractors, Scheduled Person or Organization (Ongoing Operations)

This is the most commonly required endorsement. CG 20 10 adds a scheduled person or organization as an Additional Insured, but only for liability arising out of the named insured's ongoing operations performed for the Additional Insured. Once the work is complete, coverage under CG 20 10 ends.

Key details about CG 20 10:

• Coverage is limited to bodily injury or property damage caused by the named insured's ongoing operations
• The 2004 and later editions restrict coverage to liability "caused, in whole or in part, by" the named insured's acts or omissions — earlier editions were broader
• The endorsement does not cover the Additional Insured's own negligence — it covers liability arising from the named insured's work
• Coverage ceases when the named insured completes operations at the job site

CG 20 37 — Additional Insured, Owners, Lessees or Contractors, Completed Operations

CG 20 37 extends Additional Insured status for liability arising out of completed operations. This fills the gap that CG 20 10 leaves. Once a contractor finishes a project, CG 20 10 stops providing coverage. CG 20 37 picks up from that point forward, covering claims that arise after the work is done.

This matters enormously in construction. A roofing contractor finishes a project in January. In July, the roof leaks and causes $200,000 in water damage. CG 20 10 provides no coverage because operations are complete. CG 20 37 does.

This is why sophisticated compliance programs require both CG 20 10 and CG 20 37. Together, they provide Additional Insured coverage for claims arising during and after the vendor's work.

CG 20 33 — Additional Insured, Owners, Lessees or Contractors, Automatic Status When Required in Construction Agreement

CG 20 33 is an automatic (blanket) Additional Insured endorsement specifically for construction. It grants Additional Insured status to any person or organization that the named insured is required to add by written construction agreement. The key advantage is that no schedule of specific Additional Insureds is needed — coverage flows automatically from the contract requirement.

CG 20 33 covers both ongoing and completed operations, making it a powerful single endorsement. However, it is limited to construction agreements, so it is not appropriate for all vendor relationships.

CG 20 26 — Additional Insured, Designated Person or Organization

CG 20 26 is the broadest Additional Insured endorsement. It adds a designated person or organization as an Additional Insured without limiting coverage to operations performed by or on behalf of the named insured. This means it can provide broader coverage than CG 20 10 because the triggering connection to the named insured's operations is less restrictive.

However, CG 20 26 is less commonly used in vendor compliance because most organizations want the Additional Insured coverage tied specifically to the vendor's work — not to unrelated operations.

Blanket vs. Scheduled

Additional Insured endorsements come in two forms:

Scheduled endorsements list specific persons or organizations by name. "ABC Property Management, LLC" appears on the endorsement page. The advantage is certainty — you can see your name on the policy document. The disadvantage is administrative burden. Every time the named insured needs to add another Additional Insured, the insurer must issue a new endorsement.

Blanket endorsements do not list specific names. Instead, they use language such as "any person or organization that the named insured is required to add as an Additional Insured by written contract or agreement." This means your Additional Insured status exists automatically, as long as your contract with the vendor requires it.

Blanket endorsements are standard practice in modern commercial insurance. They reduce administrative friction and ensure that Additional Insured status is granted wherever a contract requires it. When you see "as required by written contract" language on a certificate, this indicates a blanket endorsement.

Where to Verify on the ACORD 25

Additional Insured status appears in two locations on the ACORD 25 certificate:

1. The coverage line items. In the General Liability section, there is a checkbox or column for "Addl Insd." If marked, it indicates the named insured's policy includes Additional Insured coverage.

2. The Description of Operations box. This is where the detail lives. Look for language such as: "[Your organization] is included as Additional Insured with respect to General Liability as required by written contract per endorsement CG 20 10 (07/04) and CG 20 37 (07/04)."

The Description of Operations is the most important section of the certificate for provisions verification. Endorsement form numbers, blanket language, and provision-specific details all appear here.

Waiver of Subrogation: Preventing the Carrier from Suing You

What Subrogation Is

Subrogation is an insurer's legal right to recover claim payments from a third party who may be responsible for the loss. When an insurer pays a claim to its insured, it "steps into the shoes" of the insured and can pursue anyone who may have caused or contributed to the loss.

Here is the scenario without a waiver: A vendor's employee is working in your building. The employee is injured due to a condition on your property — a wet floor, an equipment malfunction, a structural defect. The vendor's Workers' Compensation carrier pays the employee's medical bills and lost wages, totaling $350,000. The carrier then exercises subrogation and sues you to recover that $350,000, arguing that your property condition caused the injury.

You now face a lawsuit for $350,000 even though the vendor's insurance paid the claim. The vendor's insurance, far from protecting you, has become the mechanism through which you are sued.

What the Waiver Does

A Waiver of Subrogation endorsement eliminates the insurer's right to pursue subrogation against specified parties. With the waiver in place, the insurer pays the claim and cannot sue you to recover. The claim is absorbed by the vendor's policy as intended.

This is a contractual provision. It must be endorsed onto the vendor's policy, and it must name you (either specifically or through blanket language) as a party against whom subrogation is waived.

Which Coverages It Applies To

Waiver of Subrogation should be required on every applicable coverage line:

• General Liability: Endorsement CG 24 04 (Waiver of Transfer of Rights of Recovery Against Others to Us). Prevents the GL carrier from pursuing subrogation for property damage or bodily injury claims.

• Workers' Compensation: Endorsement WC 00 03 13 (Waiver of Our Right to Recover From Others). This is the single most important Waiver of Subrogation endorsement. Workers' Comp claims — workplace injuries — are the most common source of subrogation actions. Without this waiver, the WC carrier will routinely sue the property owner after paying an injury claim.

• Commercial Auto: Endorsement CA 04 44 (Waiver of Transfer of Rights of Recovery Against Others to Us). Covers auto-related claims.

• Umbrella/Excess Liability: The umbrella policy should follow the provisions of the underlying policies. If the underlying GL and WC policies include waivers of subrogation, the umbrella should as well.

Property insurance is the exception. Waiver of Subrogation is generally not required or available on commercial property policies, because property claims involve the insured's own property rather than third-party liability. The subrogation dynamic is different — property insurers subrogate against parties who damaged the insured's property, not against parties the insured injured.

How to Verify on the ACORD 25

Look in the Description of Operations for language such as:

"Waiver of Subrogation applies in favor of the Certificate Holder as required by written contract with respect to General Liability, Workers' Compensation, and Commercial Auto."

Also check the coverage line items — there is a "Subr WVD" (Subrogation Waived) checkbox for each coverage type. If marked, it indicates the waiver is present.

For Workers' Compensation specifically, look for a reference to WC 00 03 13 or equivalent state-specific form. Workers' Comp forms vary by state, so the endorsement number may differ in monopolistic state-fund states.

Primary and Noncontributory: Who Pays First

The Problem It Solves

When two insurance policies potentially cover the same loss, insurers use "other insurance" clauses to determine who pays. Most CGL policies contain "other insurance" provisions that can result in the insurers sharing the loss on a pro-rata or equal-share basis.

Without Primary and Noncontributory language, the following scenario unfolds: A vendor's employee causes $500,000 in property damage at your building. Both the vendor's GL policy and your GL policy potentially cover the loss (you are an Additional Insured on the vendor's policy, and the claim also triggers your own policy). The two carriers negotiate contribution, and your carrier ends up paying 50% — $250,000. Your loss history takes a hit, your premiums increase at renewal, and you have effectively subsidized the vendor's liability.

What Primary and Noncontributory Means

Primary means the vendor's policy pays first, before your policy is triggered. The vendor's carrier cannot demand that your carrier share the loss or contribute to the defense.

Noncontributory means your policy does not contribute at all. It is not merely secondary (paying after the primary exhausts) — it is completely removed from the equation for claims arising from the vendor's operations.

Together, these terms ensure that the vendor's insurance bears the full cost of liabilities arising from the vendor's work. Your insurance remains untouched.

The CG 20 01 Endorsement

ISO form CG 20 01 (Primary and Noncontributory — Other Insurance Condition) is the standard endorsement. It modifies the "other insurance" conditions in the CGL policy to make coverage primary and noncontributory when required by written contract.

Watch for Contradictory Language

Some policies contain "contributory" or "excess" language in their other insurance clauses that can conflict with Primary and Noncontributory endorsements. If a policy's base language states that coverage is "contributory" with other insurance, and the Primary and Noncontributory endorsement modifies that language, the endorsement typically controls. However, ambiguity in policy language is a litigation invitation.

When reviewing certificates, look for clear, unambiguous language:

"Coverage afforded under this policy is primary and noncontributory as required by written contract."

Be cautious of hedged language such as "coverage is primary but contributory with other insurance available to the Additional Insured." The word "contributory" in that sentence negates the entire purpose of the provision. If you see contradictory language, flag it and request clarification.

Where to Find on the Certificate

Primary and Noncontributory language appears in the Description of Operations box on the ACORD 25. It is often combined with Additional Insured language:

"[Your organization] is included as Additional Insured with respect to General Liability. Coverage is Primary and Noncontributory as required by written contract per endorsement CG 20 01."

There is no dedicated checkbox for Primary and Noncontributory on the standard ACORD 25 form. It lives entirely in the Description of Operations.

Notice of Cancellation: The 30-Day Myth

Standard ACORD Language

Every ACORD 25 certificate includes standard cancellation language in the bottom section. The current standard reads:

"Should any of the above described policies be cancelled before the expiration date thereof, notice will be delivered in accordance with the policy provisions."

This language replaced the older version that included the infamous "endeavor to mail" phrase. The previous version stated the insurer would "endeavor to" provide 30 days' written notice of cancellation — language that sounds like a commitment but is legally meaningless. The word "endeavor" means "try" — it imposes no binding obligation. Courts have consistently held that "endeavor to" language creates no duty to notify.

The current standard language is even less protective. It simply says notice will be delivered "in accordance with the policy provisions." Since the policy provisions typically require notice only to the named insured (not to certificate holders or Additional Insureds), this means you get no guaranteed notice.

Endorsed Cancellation Notice: CG 02 24

To get actual, binding notice of cancellation, you need the CG 02 24 endorsement (Notice of Cancellation or Nonrenewal to Others). This endorsement is added to the vendor's policy and requires the insurer to provide written notice of cancellation or nonrenewal to a specified person or organization — you.

Key details:

• CG 02 24 specifies the number of days' notice (typically 30 days for cancellation, 10 days for non-payment of premium)
• The notice goes directly from the insurer to you, not through the named insured
• This is a binding contractual obligation on the insurer — not an "endeavor to" suggestion
• The endorsement must be specifically requested and is typically added at an additional premium

The 10-Day Exception for Non-Payment

Even with endorsed cancellation notice, most policies include a shorter notice period — typically 10 days — for cancellation due to non-payment of premium. This is standard practice across the industry. The rationale is that non-payment is a voluntary act by the named insured, and the insurer should not be required to maintain coverage for an extended period without being paid.

When reviewing cancellation notice provisions, verify:

• The number of days for standard cancellation (30 is standard)
• The number of days for non-payment cancellation (10 is standard)
• That your organization is named as the notice recipient
• That the endorsement form (CG 02 24 or equivalent) is referenced

How to Verify

On the ACORD 25, look in the Description of Operations for language such as:

"30 days' notice of cancellation will be provided to the Certificate Holder per endorsement CG 02 24, except 10 days for non-payment of premium."

If the only cancellation language you see is the standard boilerplate at the bottom of the certificate, you do not have binding cancellation notice. You must rely on your own tracking system — monitoring expiration dates and proactively requesting updated certificates — rather than waiting for notice that may never arrive.

Signature Requirements

The ACORD 25 includes a signature line for the "Authorized Representative" — typically the insurance producer or broker who issues the certificate. The signature question generates considerable confusion.

When the signature matters:

• The signature authenticates that the person issuing the certificate has authority to do so
• Unsigned certificates should be questioned because they may have been generated by unauthorized personnel or altered after issuance
• Some compliance programs require signatures as a matter of policy, and this is reasonable

When the signature is less critical:

• The signature does not create, extend, or alter coverage — a signed certificate with incorrect information is still incorrect
• Digital certificates issued through carrier portals may not include traditional wet signatures
• The legal weight of the certificate is the same regardless of the signature — it remains an informational document

The practical recommendation is to require signatures on all certificates but to understand that the signature authenticates the document, not the coverage. Verification of actual coverage requires reviewing the provisions, endorsements, and when warranted, the underlying policy documents.

The Description of Operations Box

The Description of Operations / Locations / Vehicles section of the ACORD 25 is the single most important area for provisions verification. This is where producers include provision-specific language that indicates what endorsements exist on the underlying policy.

A well-documented Description of Operations box for a fully compliant vendor looks like this:

"RE: Contract #12345. [Your Organization Name] is included as Additional Insured with respect to General Liability per endorsement CG 20 10 (07/04) and CG 20 37 (07/04). Coverage is Primary and Noncontributory per CG 20 01. Waiver of Subrogation applies to General Liability per CG 24 04, Workers' Compensation per WC 00 03 13, and Auto Liability per CA 04 44, all as required by written contract. 30 days' notice of cancellation (10 days for non-payment) per CG 02 24."

When the Description of Operations is blank or contains only a generic project description, you have no documented evidence of any provisions. The coverage line checkboxes (Addl Insd, Subr WVD) may provide some indication, but the Description of Operations is where the detail lives.

How Provisions Interact

The four key provisions work as a coordinated system of risk transfer. Each one addresses a different aspect of protection, and they are most effective when all four are present.

Additional Insured + Primary and Noncontributory: Additional Insured status puts you on the vendor's policy. Primary and Noncontributory ensures that when you use that status, the vendor's policy pays first and your policy stays out of it. Without PNC, your AI status still helps you — but your insurer may end up sharing the cost.

Additional Insured + Waiver of Subrogation: AI status gives you coverage for claims arising from the vendor's operations. The waiver prevents the vendor's carrier from turning around and suing you for those same claims. These provisions protect you from two different directions — AI protects you as a defendant, and the waiver prevents you from becoming a defendant in a subrogation action.

Waiver of Subrogation + Notice of Cancellation: The waiver protects you from subrogation while coverage is in force. The cancellation notice alerts you if coverage is about to end. Together, they ensure you are both protected and informed.

All four together: The vendor's insurance covers you (AI), pays first (PNC), cannot be used against you (WoS), and you will be notified before it disappears (NoC). This is complete risk transfer. This is what a compliance program should achieve for every vendor relationship.

When any single provision is missing, the risk transfer is incomplete. The severity varies:

Building a Provisions Checklist

For every COI you review, verify these provisions in order of priority:

1. Additional Insured — Is your organization named or covered by blanket language? Are the correct endorsement forms referenced (CG 20 10 + CG 20 37 for both ongoing and completed operations)?

2. Waiver of Subrogation — Is the waiver present for GL, WC, and Auto? Are the endorsement forms referenced (CG 24 04, WC 00 03 13, CA 04 44)?

3. Primary and Noncontributory — Is the language clear and unambiguous? Is CG 20 01 or equivalent referenced? Is there any contradictory "contributory" language?

4. Notice of Cancellation — Is there endorsed notice beyond the standard ACORD boilerplate? Is CG 02 24 or equivalent referenced? What are the notice periods?

5. Description of Operations — Does the box contain all required provision language? Is your organization name correct? Is the project or contract referenced?

Provisions in Practice

Understanding provisions in theory is necessary. Applying them consistently across hundreds or thousands of vendor relationships is the real challenge. The most common failure mode is not ignorance — it is inconsistency. Organizations that verify provisions carefully for their first 50 vendors let standards slip as volume increases.

This is where technology makes the difference. Manual verification of provisions requires reading the Description of Operations on every certificate, cross-referencing endorsement forms, and making judgment calls about ambiguous language. At scale, this is unsustainable with manual processes alone.

Whether you verify provisions manually or with technology, the non-negotiable requirement is that every certificate is checked for every required provision, every time. Provisions are not optional items on a compliance checklist. They are the mechanisms that make insurance compliance actually work.

A certificate without the right provisions is not a compliant certificate. Full stop.