What Happens When a Vendor's Insurance Expires? (And What to Do)

Last updated July 2026.

When a vendor's insurance expires, any claim arising from their work after the expiration date has no policy behind it, so the loss falls to whoever is left holding it, usually the business that hired them. Their certificate of insurance is now worthless as proof of coverage, your additional insured status ends with the policy, and your own general liability insurer may treat the uninsured subcontractor as your own exposure at audit. Stop the work, request a current certificate, and hold payment until it arrives.

Most compliance programs treat an expired certificate as a paperwork problem. It is not. The certificate is only the receipt. What actually expired is the financial backstop standing between a vendor's mistake and your balance sheet. Here is what that means in practice, and what to do the day you notice.

What happens if a vendor's certificate of insurance expires?

An expired certificate means the policy period shown on the document has ended. It does not automatically mean the vendor is uninsured, since most renew and simply never send you the new certificate. But you no longer have proof, and until you get it you have to treat the vendor as uninsured. If a claim occurs in that window and the policy really did lapse, there is no coverage to tender to and no additional insured protection for you.

The practical asymmetry is what matters. An expired certificate on a compliant vendor costs you one email. An expired certificate on a genuinely lapsed vendor can cost you a defense, a settlement, and a general liability premium increase at your next audit. You cannot tell which one you are looking at without asking.

Are you liable if a vendor's insurance lapsed?

Often, yes, in the practical sense that you end up paying. If an uninsured subcontractor injures someone or damages property while working for you, the injured party sues everyone in the chain, and you are the party with assets and coverage. Your indemnity clause gives you a claim against the vendor, but a contractual promise from a company with no insurance and no money is a piece of paper, not a recovery.

There is a second cost most businesses learn about later. General liability policies commonly charge premium on uninsured subcontractor cost. At your annual audit, if you cannot produce certificates showing your subcontractors carried their own coverage, the insurer can rate those payments as though the subs were your employees. Businesses have received five figure audit bills for missing certificates on jobs where nothing went wrong at all.

Expired certificate vs cancelled policy: what is the difference?

Why does a policy cancel mid term?

The most common reason is nonpayment of premium, which happens to small vendors under cash pressure, exactly the vendors least able to absorb a claim. Policies also cancel when a vendor changes carriers mid year, when an insurer non renews after a loss, or when the business simply stops paying and folds.

This is the failure mode that manual tracking cannot catch. A spreadsheet holding an expiration date of December 31 shows green all year, including through the four months after the policy actually terminated in March. Nothing about the document changes when a policy cancels, which is why the certificate on file is a snapshot of one day rather than a status.

Will the insurance company tell me if my vendor's policy is cancelled?

Almost certainly not. The cancellation box on the ACORD 25 says notice will be delivered in accordance with the policy provisions, which in most policies means notice goes to the named insured, not to certificate holders. The wording that once promised holders 30 days notice was removed from the standard form years ago. Assuming you will be told is one of the most expensive assumptions in vendor risk management.

The workable substitutes are asking for the renewal certificate before the expiration date rather than after, and requiring vendors to notify you of any change in coverage as a contract term. Neither is perfect. Both beat waiting for a letter that is not coming.

What should you do when a vendor's insurance expires?

Six steps, in this order.

1. Stop the work if the risk warrants it. A roofing crew on a customer property and a marketing consultant on a Zoom call are not the same exposure. Judge by what a claim would look like, not by how awkward the phone call is.

2. Request the renewal certificate directly from the agent. Ask the vendor for their broker's contact and request the certificate from the agency. The agent can confirm the policy is in force today, which the vendor's own copy of a PDF cannot.

3. Confirm continuity of coverage, not just a current date. If the new certificate shows an effective date after the old expiration date, there is a gap, and any incident inside that gap is uninsured no matter what the vendor holds today. Ask directly whether coverage was continuous.

4. Recheck the endorsements. A renewal is a new policy. Additional insured status, waiver of subrogation and primary and noncontributory wording do not carry over automatically. The distinction between the two is covered in additional insured vs certificate holder.

5. Hold payment until the certificate is current. This is the only lever that reliably works, because a vendor who ignores three emails answers within an hour when an invoice is on hold. Many teams gate it in the payment workflow itself, which is straightforward when invoice approvals already run through automated accounts payable software rather than an inbox.

6. Document what you did. Record the date you discovered the lapse, the date you stopped work, and the date coverage was restored. If a claim later falls in that window, the difference between a defensible program and a negligent one is the record.

Can a vendor's insurance still cover work done before it expired?

It depends on the policy trigger. An occurrence based general liability policy responds to damage that occurred during the policy period, even if the claim is made years later, so work completed while coverage was in force is generally still protected. A claims made policy, which is how professional liability and cyber are usually written, only responds if the claim is reported while a policy is active, which is why a lapse on a claims made policy can erase coverage for past work entirely.

That difference is the reason contracts require completed operations coverage to be maintained for a period after the work ends. A roof leak that appears eighteen months after installation is a completed operations claim, and a vendor who dropped their policy the week the job finished has left you holding it.

How do you prevent vendor insurance from lapsing?

Ask before the date, not after it. Requests sent 60, 30 and 15 days ahead of expiration land while the vendor's broker is already working on the renewal, which is when producing a certificate costs them nothing. Requests sent the week after expiration land on a vendor who is now embarrassed and defensive.

The rest is structural. Write the insurance requirement into the contract, including the obligation to maintain coverage and to notify you of any cancellation. Require a certificate before the first day of work rather than during it. And keep one live status per vendor instead of a folder of PDFs, so the question of who is covered right now has an answer. That is what COI renewal tracking software is for, and it is the same machinery behind broader vendor insurance compliance monitoring. How often to ask is covered in how often to collect certificates of insurance from vendors.

None of this requires a large program. It requires that the reminder does not depend on a person remembering. Upload a certificate at the top of this page to see what an automated check on your own vendor looks like.