Skip to content
Keelstar

Guide

How to Set Vendor Insurance Requirements

By Keelstar Team · Updated June 1, 2026

The short answer

Document required coverage types, minimum limits, additional insured status, waiver of subrogation, and notice of cancellation in your master agreement — then translate those requirements into a checklist your team validates on every ACORD 25. Requirements should match the risk of the work: a janitorial vendor on a healthcare campus needs different limits than a crane operator on a construction site.

Start with the risk, not a template

Generic one-size-fits-all insurance schedules create two problems: you over-require low-risk vendors and under-protect high-risk work. Map vendors by what they do on your premises — construction trades, HVAC and electrical maintenance, cleaning crews in a hospital, security guards, IT installers with physical access — and assign tiers with escalating limits.

Coverage types to specify

Most U.S. vendor programs require commercial general liability at minimum. Add automobile liability when vehicles enter your sites. Workers compensation is mandatory in most states for employers; require it even when your contract is with a sole proprietor where permitted. Umbrella or excess liability bridges gaps for catastrophic claims. Professional liability applies when vendors give design, engineering, or consulting advice.

  • Commercial general liability — per occurrence and general aggregate
  • Automobile liability — owned, hired, and non-owned if applicable
  • Workers compensation and employers liability
  • Umbrella or excess — often $1M–$5M+ for construction and healthcare
  • Professional / E&O — for design-build and IT services

Contract language beyond limits

Limits alone do not protect you. Standard U.S. construction and property contracts also require additional insured status, primary and non-contributory wording where applicable, waiver of subrogation on workers comp and general liability, and 30-day notice of cancellation. Spell these out in the agreement so reviewers know what to verify on the certificate and endorsements.

Build a review checklist from your contract

Turn contract insurance exhibits into a repeatable intake checklist: named insured match, each policy expiration, limit comparison by line, endorsement references, certificate holder address, and description of operations. Operations teams should not re-interpret the contract on every certificate — the checklist encodes the decision.

Communicate requirements before work starts

Send insurance requirements with the vendor packet at onboarding — alongside W-9 and banking details. Include sample endorsement language and your certificate holder address. Vendors who understand requirements upfront renew faster; vendors surprised at the job trailer often delay projects.

Review requirements annually

Limits that made sense three years ago may not match current project values, lease requirements, or customer audit standards. Healthcare systems responding to payer audits and general contractors managing owner-controlled insurance programs should revisit tiers when contracts renew or when you enter new states.

Frequently asked questions

Where should insurance requirements live?
In the master services agreement, lease exhibit, or subcontract — not only in a COI request email. Contract language is what you enforce; the certificate is evidence of compliance.
Should all vendors have the same limits?
No. Tier requirements by risk: low-risk office suppliers, medium-risk trades on premises, and high-risk construction or life-safety work should carry different minimums.

Related guides

Put this into a monitored workflow

COI Tracker handles this continuously — with reminders and an audit trail.