Resource · Framework

The COI compliance matrix.

A certificate of insurance only protects you if the right vendor carries the right coverage and it's still in force. A COI compliance matrix is the grid that proves it — mapping every vendor to what they must carry and whether they actually do. Here's how to build one.

When a vendor causes damage or injury and their coverage has lapsed, the claim lands on you. A COI compliance matrix turns "we collect certificates" into "we can prove, at a glance, which vendors are covered and which are exposed." It's a grid: one row per vendor, one column per requirement, and a status that's either green or it isn't.

What the matrix looks like

VendorGen. liabilityAutoWorkers' compAdd'l insuredExpiresStatus
HVAC contractor$1M$1MYesYes2026-11-02Current
Cleaning service$1MYesYes2026-07-14Expiring
Delivery partner$1M$1MYesNo2026-04-30Lapsed

The columns to include

  1. 1Required coverage types. General liability, auto, workers' compensation, umbrella/excess, professional or pollution liability where the work demands it.
  2. 2Required limits. The minimum dollar limit per coverage — and a check that the certificate on file actually meets it, not just that a certificate exists.
  3. 3Additional insured status. Whether you're named as additional insured, the detail that determines whether their policy responds for you at all.
  4. 4Expiration date. The policy period end. A certificate from last year is just paper.
  5. 5Status. Current, expiring (inside your renewal window), or lapsed — the one column you scan first.

How to use it

Set each requirement from the underlying contract or lease, not from whatever the vendor happened to send. Flag any row where the certificate on file falls short of the requirement — a missing additional-insured endorsement or a limit below your minimum is a gap whether or not a certificate exists. Re-check every certificate 30 to 45 days before it expires so you can chase the renewal before there's a coverage gap, not after.

Why this breaks at scale

A handful of vendors fit on one screen. Hundreds of vendors across dozens of locations — each with their own renewal cycle and a stack of PDFs that all look alike — is where the matrix stops being maintainable by hand. AllureTrak reads each certificate, checks coverage and limits against the requirement, and flags lapses and gaps automatically. See COI tracking software and the related COI tracking buyer's guide.

This is general information for operators, not insurance or legal advice. Confirm your specific coverage requirements with your broker or counsel.

Close the COI gaps you can't see.

Send us a sample of your vendor certificates and we'll show you which ones are current, which are short on coverage, and which have lapsed — before a claim does it for you.

  • Coverage & limits checked against the requirement
  • Lapses and gaps flagged automatically
  • No credit card required

Two ways to start

Pick whichever fits where you are today.

No credit card. Your information is secure and never shared.