An ACORD Certificate of Liability Insurance is a standardized one-page document that proves your business has active liability insurance coverage. The certificate shows your policy types, coverage limits, effective dates, and the insurance company backing your protection. It does not provide actual insurance coverage—it only confirms that coverage exists at the time of issuance.
ACORD, which stands for the Association for Cooperative Operations Research and Development, created these standardized forms in 1970 to solve a major industry problem. Before ACORD existed, every insurance company used different forms, making it confusing for businesses to compare coverage and verify insurance requirements. Today, over 90% of U.S. property and casualty insurers use ACORD forms as the industry standard.
A striking 92% of small businesses now invest in some form of business insurance, up 20% from 2023. For every 10 small businesses, 4 will file a claim within their first 10 years of operating. Knowing how to read, request, and verify these certificates protects your business from working with uninsured vendors.
In this article, you will learn:
- 📋 How to read every section of an ACORD 25 certificate and what each field means for your protection
- ⚠️ The critical difference between being a certificate holder and an additional insured—and why it matters for claims
- 🔍 How to spot fraudulent certificates that could leave you exposed to uninsured losses
- 💰 What coverage limits you should require from contractors and vendors before signing any contract
- ✅ Step-by-step guidance on requesting, verifying, and managing certificates for your business
Why ACORD Created Standardized Insurance Certificates
Before 1970, the insurance industry operated in chaos. Each insurance company created its own forms, certificates, and documents for every type of coverage. Agents, brokers, and businesses struggled to compare policies or understand what protection they actually had.
The Association for Cooperative Operations Research and Development formed as a non-profit organization with one goal: make insurance documentation consistent across the entire industry. Insurance carriers and agents worked together to build standardized forms that anyone could read and understand. The first ACORD paper form appeared in 1971, launching a new era of insurance transparency.
ACORD now maintains over 850 different form variants and more than 1,200 standardized transaction types. The organization operates globally, with Lloyd’s of London using ACORD standards for messaging between trading partners. These forms remain voluntary—insurers don’t have to use them—but the vast majority do because standardization benefits everyone.
The Most Common ACORD Certificate Forms and Their Purposes
Different situations require different ACORD certificates. The ACORD 25 is the most widely used form for proving liability insurance coverage. Other forms exist for property insurance, commercial property, and supplemental information.
| ACORD Form | What It Covers |
|---|---|
| ACORD 25 | Certificate of Liability Insurance—general liability, auto, workers’ comp, umbrella |
| ACORD 27 | Evidence of Property Insurance—personal property and residential coverage |
| ACORD 28 | Evidence of Commercial Property—business property and commercial buildings |
| ACORD 101 | Additional Remarks Schedule—extra space for special provisions |
The ACORD 25 certificate organizes liability insurance information into clearly defined sections. You’ll find general liability, automobile liability, umbrella/excess liability, and workers’ compensation coverage all on one page. Contractors, vendors, and service providers use this form daily to prove they carry adequate protection.
The ACORD 27 form focuses on personal property insurance verification. Mortgagees and loss payees typically request this form when they need proof that a residential property or its contents are insured. The form includes building coverage limits, deductible amounts, and policy periods.
The ACORD 28 serves businesses needing commercial property verification. Landlords, lenders, and business partners request this form to confirm adequate protection for commercial buildings and business assets. It includes building values, equipment coverage, and business interruption insurance details.
Breaking Down Every Section of the ACORD 25 Certificate
Producer and Date Information
The top portion of the ACORD 25 lists the date of issuance and producer information. The producer is the insurance agency or broker who issued the certificate. You’ll find their name, address, phone number, fax number, and email address in this section.
This contact information becomes essential when you need to verify coverage or request changes. If you’re a third-party recipient reviewing a certificate, the producer’s details let you follow up with questions. Always check that the issue date is current—missing or old dates may signal a forged certificate.
Named Insured and Insurer Details
The insured section identifies the policyholder receiving coverage. The named insured owns the insurance policy and has paid for the protection. This must match the legal name of the business you’re contracting with—a mismatch creates serious problems during claims.
The insurers section lists up to six different insurance companies providing coverage. Each insurer has a letter designation (A through F) and an NAIC number. The National Association of Insurance Commissioners assigns these identification numbers to verify you’re working with legitimate, authorized insurers.
Coverages Section Explained
The coverages section contains the heart of the certificate—detailed information about each type of insurance the business carries. Each coverage type has its own row with specific data points you must review carefully.
| Coverage Type | What to Look For |
|---|---|
| Commercial General Liability | Per occurrence limit, general aggregate, products/completed operations |
| Automobile Liability | Combined single limit, bodily injury limits, property damage limits |
| Umbrella/Excess Liability | Per occurrence and aggregate limits, whether claims-made or occurrence |
| Workers’ Compensation | Statutory limits, employer’s liability limits, any excluded parties |
For Commercial General Liability, you’ll see whether the policy is claims-made or occurrence. The “INSR LTR” column shows which insurance company (A, B, C, etc.) provides each coverage type. Policy numbers and effective dates appear in dedicated columns.
The limits column breaks down coverage amounts. Each Occurrence shows the maximum paid for a single incident. General Aggregate caps total payments during the policy period. Products-Completed Operations Aggregate covers claims from finished work or products sold.
Description of Operations Section
This box is critically important for understanding exactly what the certificate covers. Here, producers enter specific details requested by certificate holders such as project locations, job descriptions, and special endorsement language.
When someone is added as an additional insured, that status appears in this section. Waiver of subrogation language, primary and noncontributory endorsements, and specific endorsement form numbers (like CG 2010) get noted here. Pay close attention to this section—it tells you whether you actually have the protection the contract requires.
Certificate Holder and Cancellation Notice
The final section identifies who requested the certificate and how they’ll receive cancellation notices. The certificate holder’s complete name and mailing address appear here. This is typically the client, landlord, or general contractor who required proof of insurance.
The cancellation clause underwent a significant change in recent years. Old ACORD certificates stated insurers would “endeavor to mail” notice to certificate holders. New certificates simply say notice will be delivered “in accordance with the policy provisions.” Unless the actual policy requires certificate holder notification, you may not receive any warning before coverage ends.
Certificate Holder vs. Additional Insured: The Critical Distinction
Many business owners confuse these two terms, but the difference determines whether you have actual protection or just documentation. A certificate holder simply receives proof that insurance exists. An additional insured actually receives coverage under someone else’s policy.
| Status | Protection Level |
|---|---|
| Certificate Holder | Receives NO coverage under the policy; only holds proof insurance exists |
| Additional Insured | RECEIVES coverage and CAN file claims for liabilities from insured’s work |
Being named as a certificate holder does nothing to protect you if something goes wrong. You simply have a piece of paper showing the other party has insurance. If their employee injures someone at your job site, their insurance has no obligation to cover you unless you’re an additional insured.
An additional insured receives defense and indemnity coverage under the named insured’s policy. When an additional insured endorsement is in place, the insurance company will defend you in court and pay claims resulting from the named insured’s operations. This protection extends your safety net significantly.
A property manager who requires a contractor to provide proof of insurance should always request additional insured status. Simply being a certificate holder means the contractor has insurance—but if the contractor’s work causes injury on your property, you have no coverage under their policy. Requesting additional insured status protects your business from third-party claims.
Understanding Per Occurrence Limits vs. Aggregate Limits
These two limit types work together to cap your coverage in different ways. Per occurrence limits set the maximum amount paid for any single claim or incident. Aggregate limits cap total payments during the entire policy period.
A typical general liability policy might show $1,000,000 per occurrence and $2,000,000 aggregate. If a fire damages a client’s property and causes $1.3 million in losses, the insurance pays only up to $1 million for that single occurrence. The business owner becomes responsible for the remaining $300,000.
| Limit Type | What It Covers |
|---|---|
| Per Occurrence | Maximum paid for ONE incident or claim |
| General Aggregate | Maximum paid for ALL claims during policy period |
| Products/Completed Operations Aggregate | Maximum for claims from finished work |
The aggregate limit protects insurance companies from paying unlimited claims. If a construction company has three separate incidents costing $800,000 each, a $2,000,000 aggregate means only the first two claims get fully covered. The third claim receives only $400,000, leaving $400,000 unpaid.
When reviewing certificates from vendors, per occurrence limits matter more for evaluating their protection level. If someone asks “how much coverage do you carry?” they’re asking about occurrence limits. Most contracts specify minimum per occurrence amounts, typically $1 million for general work.
Claims-Made vs. Occurrence Policies: Why Timing Matters
Insurance policies trigger coverage in two fundamentally different ways. An occurrence policy covers incidents that happen during the policy period, regardless of when someone files a claim. A claims-made policy only covers claims actually reported while the policy remains active.
Occurrence coverage provides broader, long-term protection. If a customer slips and falls in 2024 but doesn’t file suit until 2027, an occurrence policy from 2024 still provides coverage. The triggering event—the injury—happened during the policy period. This makes occurrence policies more expensive but offers peace of mind.
| Policy Type | Coverage Trigger |
|---|---|
| Occurrence | Incident happens during policy period (claim can come later) |
| Claims-Made | Claim must be reported during active policy period |
Claims-made policies create what insurers call “tail exposure.” Once you cancel a claims-made policy, you lose protection for future claims arising from past incidents. Extended reporting periods—also called “tail coverage”—can be purchased separately but add significant cost.
Commercial general liability policies typically use occurrence forms. Professional liability and medical malpractice policies often use claims-made forms. When reviewing certificates, check the claims-made box versus the occurrence box in each coverage section to understand exactly when coverage applies.
What a Waiver of Subrogation Means for Your Business
Subrogation is the insurance company’s right to recover money from parties responsible for a loss after paying a claim. When your insurer pays for damage caused by a third party, they can sue that party to get their money back. A waiver of subrogation prevents this recovery process.
Business contracts frequently require subrogation waivers because they protect working relationships. If a subcontractor accidentally damages your property and your insurance pays the claim, your insurer could sue the subcontractor. A waiver prevents that lawsuit, keeping business relationships intact.
| Endorsement Type | What It Does |
|---|---|
| Scheduled Waiver | Insurer explicitly names specific parties it won’t sue |
| Blanket Waiver | Insurer waives subrogation against any party required by contract |
Critical warning: signing a contract with a waiver of subrogation without insurer approval can void your coverage. Insurance policies typically prohibit actions that limit the insurer’s subrogation rights. If you sign such a contract without telling your insurer, they may deny your claim entirely.
Always contact your insurance company before agreeing to waive subrogation. Most insurers will add an endorsement allowing the waiver for an additional premium—typically up to 15% depending on coverage scope. This small cost protects you from devastating coverage denial.
Primary and Noncontributory Endorsements Explained
These endorsements clarify which insurance policy pays first when multiple policies could cover a claim. A primary endorsement means that policy responds before any other applicable insurance. A noncontributory endorsement means that policy won’t seek contributions from other insurers.
Construction contracts commonly require primary and noncontributory status. A property owner hiring a general contractor wants the contractor’s insurance to pay first, without involving the owner’s policy. This protects the owner’s loss history and prevents premium increases.
| Feature | Standard Additional Insured | Primary Noncontributory |
|---|---|---|
| Order of Coverage | May be excess or shared | Named insured’s policy responds FIRST |
| Contribution | Carrier can seek contribution from other policies | Carrier does NOT call on other policies |
| Contract Compliance | May not meet strict requirements | Often fulfills stricter contractual terms |
Without these endorsements, insurance companies might fight over who pays. One carrier might argue the other should contribute equally or respond first. This delays claim resolution and can leave injured parties waiting for compensation.
The sample endorsement language typically states: “The insurance provided is primary and noncontributory. This means that in the event of a covered loss, this policy shall be the first and sole insurer responsible.” Verify this exact wording appears in the Description of Operations section or through a separate endorsement form.
How Fraudulent Certificates Put Your Business at Risk
Certificate fraud is easier than most people realize. Fraudsters can create convincing fake certificates in under five minutes using freely available ACORD templates and basic PDF editing software. A single fraudulent certificate can leave you holding an uninsured claim worth hundreds of thousands of dollars.
One client discovered the hard way when their vendor’s fake certificate slipped through, resulting in a $162,000 uninsured claim. The vendor had created a certificate from a downloaded template, inserted fake policy numbers, and submitted it as legitimate documentation. Traditional visual review failed to catch the fraud.
| Fraud Method | How It Works |
|---|---|
| Self-editing | Contractor modifies their own expired or inadequate certificate |
| Complete fabrication | Creating entirely new certificate with invented policy numbers |
| Date manipulation | Taking expired certificate and changing effective dates |
| Business name swap | Changing insured name on someone else’s valid certificate |
Red flags indicating potential fraud include:
- Certificates submitted by vendors rather than insurance agents
- Generic email addresses (Gmail, Yahoo) instead of company domains
- Policy numbers that don’t follow carrier-specific formats
- Issue dates falling outside policy period
- Producer contact information that doesn’t match official agency listings
The strongest protection against fraud is requiring certificates directly from licensed agents—never accept certificates submitted by the vendor themselves. Call the phone number listed on official agency websites (not the certificate) to verify coverage. Legitimate agents can confirm policy details and resend certificates from verified email addresses.
Three Real-World Scenarios: When ACORD Certificates Save (or Sink) Your Business
Scenario 1: The Contractor Who Lost the Big Contract
Maria operates a small electrical company. A general contractor offers her a $200,000 commercial project but requires proof of $2 million general liability coverage. Maria’s policy only shows $1 million per occurrence.
| Requirement | Maria’s Certificate |
|---|---|
| $2,000,000 per occurrence | $1,000,000 per occurrence |
| Additional insured endorsement | Not listed |
| Primary and noncontributory | Not included |
Maria’s current certificate fails to meet contract requirements. The general contractor rejects her bid because inadequate limits create liability exposure for their project. Maria contacts her broker, increases limits, adds the required endorsements, and requests a new certificate. The updated certificate costs an additional $800 annually but secures the $200,000 contract.
Scenario 2: The Property Manager Who Wasn’t Actually Protected
James manages a commercial building and requires all vendors to provide certificates naming him as certificate holder. A cleaning company’s employee is injured in his building and sues James personally.
| James Expected | Reality |
|---|---|
| Cleaning company’s insurance covers him | Certificate holder has NO coverage rights |
| Their insurance defends the lawsuit | James must use his OWN insurance |
| No impact on his loss history | Claim appears on HIS record |
James made a common mistake—he thought being a certificate holder provided protection. In reality, he should have required the cleaning company add him as an additional insured. Without that endorsement, their insurance has no obligation to defend him. His own policy now carries the claim, raising his premiums.
Scenario 3: The Subcontractor With the Expired Policy
A roofing subcontractor provides a certificate showing coverage through December 2026. In March 2026, they cancel their policy for nonpayment. Nobody notifies the general contractor. In April, a worker falls and sustains permanent injuries.
| Expected Protection | Actual Status |
|---|---|
| Active policy through December | Cancelled in March |
| Insurance pays injury claim | NO COVERAGE EXISTS |
| General contractor protected | General contractor sued directly |
Modern ACORD certificates only promise cancellation notice “in accordance with policy provisions”—which typically means no notice to certificate holders. The general contractor had no warning the subcontractor’s coverage lapsed. Without active insurance, the injured worker’s attorney sues the general contractor directly. Requiring periodic certificate updates and automated tracking systems prevents this scenario.
Common Mistakes That Expose Your Business to Uninsured Losses
Mistake 1: Accepting Certificates Without Verification
Many businesses file certificates without calling to confirm coverage. Nine out of 10 certificates provided to one client contained material misrepresentations about actual coverage. Simply having a certificate in your files provides zero protection if the information is inaccurate or outdated.
Mistake 2: Confusing Certificate Holder With Additional Insured
Holding a certificate only proves insurance exists—it doesn’t extend any coverage to you. The difference matters enormously when claims arise. Request additional insured status in your contracts and verify the endorsement appears on the certificate or policy.
Mistake 3: Missing Required Endorsement Language
Contracts often require specific endorsement forms (like CG 2010 for additional insured status). Generic language like “additional insured per contract” doesn’t guarantee proper coverage. Request the specific endorsement form numbers and verify they appear in the Description of Operations section.
Mistake 4: Ignoring Expiration Dates
Certificates are only valid during the policy period shown. Coverage automatically ends when policies expire, typically annually. Set calendar reminders 30 days before vendor certificates expire and request updated documentation before starting new work.
Mistake 5: Not Matching Legal Names
If the insured name on the certificate doesn’t match your contract, coverage disputes become harder to resolve. Verify the certificate shows the exact legal entity you’re contracting with—not a parent company, subsidiary, or DBA that might not be covered.
Do’s and Don’ts for Managing ACORD Certificates
| Do | Why |
|---|---|
| Verify certificates with the producer directly | Prevents accepting fraudulent documents |
| Request additional insured endorsement | Provides actual coverage, not just documentation |
| Check NAIC numbers | Confirms insurance companies are legitimate |
| Set expiration reminders | Prevents working with lapsed coverage |
| Keep certificates organized by vendor | Speeds verification during claims |
| Don’t | Consequence |
|---|---|
| Accept vendor-submitted certificates only | Highest fraud risk; demand agent verification |
| Assume certificate holder means coverage | Zero protection without additional insured status |
| Ignore mismatched business names | Claims may be denied due to coverage gaps |
| Sign subrogation waivers without insurer approval | May void your own coverage |
| File certificates without reading them | Exposes business to inadequate or expired coverage |
Pros and Cons of ACORD Standardized Certificates
| Pros | Cons |
|---|---|
| Industry-wide consistency—same format across 90%+ of insurers | No actual coverage—certificate only proves insurance exists |
| Easy comparison—quickly verify coverage meets requirements | Fraud vulnerability—templates freely available for manipulation |
| Quick issuance—most insurers provide same-day certificates | Cancellation gaps—new forms don’t require certificate holder notice |
| Comprehensive information—all key coverage details on one page | Technical complexity—many business owners misunderstand terms |
| Recognized everywhere—universally accepted proof of insurance | Static document—doesn’t automatically update when coverage changes |
State-by-State Certificate Requirements: What You Need to Know
Insurance is regulated at the state level, creating different requirements across jurisdictions. While ACORD forms are nationally standardized, the information required and legal implications vary by state.
| State | Key COI Requirements |
|---|---|
| California | Name and address of certificate holder, policy number, effective dates |
| Texas | Description of coverage provided, effective dates, named insured |
| New York | Certificate holder address, coverage description, effective dates |
| Florida | Limits of liability must appear, effective dates required |
| Ohio | Certificates must be issued by insurer or authorized representative |
Some states have passed laws specifically regulating certificates of insurance. These laws typically prohibit agents from issuing certificates that misrepresent coverage or create rights not in the policy. Agents who issue misleading certificates may face fines, license suspension, or professional liability claims.
Certificate requirements can change at any time. Before relying on certificates for important contracts, verify current state regulations with an insurance professional. The requirements listed above reflect general guidelines—specific situations may require different documentation.
How to Request and Obtain an ACORD Certificate
Getting a certificate is straightforward once you understand the process. If you’re the business owner needing to provide a certificate, contact your insurance agent or broker. Most insurers offer same-day certificate issuance through online portals.
To request a certificate, provide your agent with:
- The certificate holder’s complete legal name
- The certificate holder’s mailing address
- Any specific coverage requirements from your contract
- Whether additional insured status is required
- Any special endorsements needed (waiver of subrogation, primary/noncontributory)
If you’re requesting a certificate from a vendor or contractor, send a written request specifying exactly what coverage you require. Include minimum limits, required endorsements, and the correct way to list your company as certificate holder or additional insured. Give vendors at least five business days to obtain certificates from their insurers.
Modern agency management systems auto-populate many fields from existing policy data, making certificate issuance fast and accurate. Some insurers like The Hartford, Progressive, and NEXT Insurance offer instant certificate access through customer portals. Small businesses can typically access, print, email, or text their certificates 24/7.
How Much Does Business Insurance Cost That Backs These Certificates?
Understanding insurance costs helps you evaluate whether vendors carry adequate coverage. General liability insurance costs small businesses between $400 and $3,000 annually, with industry type creating the largest premium differences.
| Business Type | Average Annual Premium |
|---|---|
| Professional services (accounting, consulting) | $675-$780 |
| Retail stores | $1,200-$1,800 |
| Restaurants | $1,500-$2,500 |
| Construction | $2,400+ |
Total small business insurance averages $341 monthly or $4,090 annually when combining general liability, commercial property, workers’ compensation, and other common coverages. General liability alone averages just $30 monthly, while cyber liability costs approximately $124 monthly due to increasing digital threats.
Standard coverage limits of $1 million per occurrence with $2 million aggregate cost between $500-$800 annually for most small businesses. Doubling these limits to $2 million per occurrence typically increases premiums by 25-35%. Higher-risk industries and larger revenue businesses pay proportionally more.
FAQs
Is an ACORD certificate the same as insurance coverage?
No. An ACORD certificate only proves coverage exists at issuance. It does not provide insurance protection or grant rights under the policy.
Can I file a claim using someone else’s ACORD certificate?
No, unless you’re named as an additional insured. Certificate holders have no claim rights—only additional insureds can file claims under another’s policy.
How long is an ACORD certificate valid?
Certificates are valid during the policy period shown, typically one year. Coverage ends on the expiration date regardless of when you received the certificate.
Who can issue an ACORD certificate?
Only the insurance company or its authorized representative (agent or broker) can issue legitimate certificates. Never accept certificates created by the insured party.
Does a certificate holder receive cancellation notice?
Not automatically. Modern ACORD certificates only promise notice “in accordance with policy provisions.” Most policies don’t require certificate holder notification.
What’s the difference between ACORD 25 and ACORD 28?
ACORD 25 covers liability insurance (general liability, auto, workers’ comp). ACORD 28 covers commercial property insurance for business buildings and contents.
Can I download a blank ACORD 25 form?
Yes, but filling it yourself constitutes fraud. Legitimate certificates must be issued by authorized insurers or their representatives—not by the insured.
How quickly can I get an ACORD certificate?
Most insurers provide same-day issuance, often instantly through online portals. Complex endorsement requests may take several business days.
Should I require $1 million or $2 million in coverage from vendors?
Minimum $1 million per occurrence is standard for most work. Higher-risk projects or contracts involving significant liability should require $2 million or more.
What happens if a vendor provides a fraudulent certificate?
You bear the loss for any uninsured claims. Fraudulent certificates offer zero protection—always verify with the issuing agent directly.