General Contractor Subcontractor Insurance Checklist
A checklist organized by when each check actually has to happen — prequalification, before mobilization, mid-project, and closeout — not just a table of coverage limits.
A coverage table isn't a checklist
Search "subcontractor insurance checklist" and almost every result is the same document: a table of coverages, a column of dollar limits, maybe a row of endorsements. That's useful reference material, and insurance requirements for subcontractors already covers it on this site in depth — what to require, roughly what the numbers should be, and the three endorsements that actually decide whether a sub's policy protects you. This guide won't repeat that ground.
What a table doesn't tell you is when each check has to happen, and that's where subcontractor insurance programs actually fail. Nobody loses a claim because they didn't know general liability should be $1,000,000 per occurrence. They lose it because the certificate was checked once, at bid stage, and never again — or because a sub started demo work while their certificate was "on its way," or because a change order added electrical work to a sub who was only ever vetted for framing.
This checklist is organized by project phase instead of coverage type: what to check before you ever sign a subcontract, what has to be true before a sub sets foot on site, what changes mid-project, and what to hold onto after the job is done. Treat it as the sequence a compliance program actually runs on, with the coverage detail linked out rather than repeated.
Phase 1 — Prequalification, before you issue a subcontract
The cheapest place to catch an insurance problem is before a subcontract exists, when walking away costs nothing. A prequalification check should confirm, alongside the license and bonding checks most GCs already run, that the sub's current program can actually meet your requirements — not just that a policy exists.
- Ask for a specimen or sample certificate showing current limits before you issue the subcontract, not after — a sub who can't produce one quickly is telling you something about how the rest of the relationship will go.
- Confirm the carrier is one you'd accept a claim from. A sub insured through a surplus-lines carrier you don't recognize isn't automatically a problem, but it's worth a five-minute check rather than an assumption.
- For higher-risk trades — roofing, excavation, demolition, anything at height — ask about claims history. A sub who's had two prior general-liability claims in three years is a different underwriting conversation than one with none, even if their current certificate looks identical.
- Confirm in writing, before the subcontract is signed, that the sub can meet your specific limits and endorsement requirements — not just "we carry insurance." A sub who agrees informally and then can't get their broker to add primary-and-non-contributory wording is a problem to find out about now, not during mobilization week.
Phase 2 — Before mobilization: no certificate, no badge
This is the single highest-leverage rule in a subcontractor insurance program, and it's also the one that erodes fastest under schedule pressure: a subcontractor does not get site access until a current, verified certificate meeting your requirements is on file. Not "it's coming this week." Not a verbal confirmation from the sub's foreman. On file, checked, before the badge or the gate code is issued.
The reason this rule exists is that the pressure to break it is completely predictable. A sub's usual insurance contact is on vacation, the certificate is a few days late, and the schedule doesn't care — so someone lets the crew start with a promise that the paperwork will follow. It almost always does follow. The exposure is in the gap, and the gap is exactly when an uninsured or lapsed sub is most likely to cause the incident that makes the missing certificate matter.
Enforcing this consistently means the check can't depend on someone remembering to run it in the middle of a busy morning. It has to be built into whatever gates mobilization — the same way a missing safety orientation or an expired license would stop a crew at the gate. How to request a certificate of insurance from a vendor covers how to phrase the request so you get a usable document back on the first try instead of a declarations page or a screenshot.
Checking that a certificate exists isn't the same as checking that it's real. Certificates get altered, backdated, or generated from templates with limits that were never actually bound — see how to spot a fake certificate of insurance for what to look for, and call the broker listed on the certificate directly to confirm it's current rather than trusting the PDF alone for anything above routine, low-risk work.
The coverages and limits, tiered by trade
The full reasoning behind these numbers — including why your own limits should set the floor — is in insurance requirements for subcontractors; this section is the short version for the checklist itself. Every sub needs general liability, workers' compensation wherever they have employees on site, and commercial auto if they drive to the job or haul materials. Umbrella or excess liability layers on top once a single job or a higher-risk trade pushes past your base limits.
Contractor-insurance brokers publishing trade-specific guidance describe a common three-tier pattern worth using as a starting point rather than a standard: standardized, lower-risk trades — carpentry, painting, drywall — commonly carry around $1,000,000 general liability, workers' comp, and roughly $500,000 auto. Higher-risk trades that work with live systems — electrical, plumbing, HVAC — commonly run closer to $2,000,000 general liability, workers' comp, and $1,000,000 auto. Specialized and high-consequence trades — roofing, demolition, anything involving hazardous material — commonly sit at $2,000,000-plus general liability plus trade-specific coverage such as pollution liability. These are patterns reported by insurance brokers working this segment, not measured figures, and your contract with the property owner and your own broker should set the actual numbers for a given job.
A single blanket requirement across every trade is the most common structural mistake on this list — it over-insures the low-risk suppliers who never touch a building's structural or electrical systems, and under-insures the trades most likely to cause a six-figure loss.
The endorsements a certificate has to show, not just the limits
Limits are the easiest thing on a certificate to check and, on their own, the least protective. Three endorsements decide whether a sub's policy actually responds when you need it to. Additional insured status is what puts you inside the sub's policy — without it, their insurer defends the sub and owes you nothing, regardless of what limits the certificate shows. Being named certificate holder only means a copy was mailed to you; see additional insured vs. certificate holder if that distinction isn't already second nature, because it's the single most expensive misread on this entire checklist.
Waiver of subrogation stops the sub's own insurer from paying a claim and then suing you to recover it. Primary and non-contributory wording makes the sub's policy pay first, instead of splitting the loss with yours from the start. All three should be named explicitly in the subcontract, not assumed from a general "sub shall carry adequate insurance" clause — a certificate only proves a requirement was met, and there's no requirement to prove if the contract never stated one.
Why this checklist is a legal duty, not just paperwork — OSHA's multi-employer citation policy
Here's the piece that generic insurance-requirement content consistently leaves out, and it changes why this checklist matters: on a multi-employer job site, OSHA doesn't limit liability to the employer whose worker got hurt. Under the agency's Multi-Employer Citation Policy (directive CPL 02-00-124), a general contractor is typically treated as the "controlling employer" — the party with general supervisory authority over the site — and OSHA's own guidance holds that a controlling employer has a duty to exercise reasonable care to detect and prevent hazards created by other employers on the site, including subcontractors. That means a GC can be cited for a subcontractor's safety violation even when none of the GC's own employees were exposed to the hazard.
This is worth stating plainly because it reframes what a subcontractor insurance checklist is actually doing. It isn't just protecting your balance sheet if a sub's insurer has to pay a claim — a documented, consistently enforced prequalification and mobilization process is evidence that you exercised the reasonable care OSHA's controlling-employer standard requires, and that a court weighing a negligent-hiring claim would want to see. A checklist that exists on paper but wasn't actually followed for the sub involved in an incident does the opposite: it shows exactly what should have been caught and wasn't.
None of this is legal advice, and OSHA citation exposure and civil liability are governed by facts specific to your state, your contract, and the incident — talk to your attorney or safety consultant about what "reasonable care" means for your operation. What's verifiable is the standard itself and the categories it uses: OSHA's policy separates creating, exposing, correcting, and controlling employers by role, not job title, and general contractors are the party most consistently treated as the controlling employer on a construction site.
Phase 3 — During the project: renewals and scope changes
A certificate checked once at mobilization is a snapshot, not an ongoing guarantee. Two things change it mid-project, and both are easy to miss without a system watching for them.
- Policy renewal — every certificate has an expiration date, and a job that runs longer than a sub's policy term needs a fresh certificate before the old one lapses, not after. This is the step manual tracking most often fails at, since nothing about a spreadsheet actively reminds anyone a date is approaching.
- Scope changes — a change order that adds work outside a sub's original trade (a framing sub picking up temporary electrical, for instance) can move them into a higher-risk tier than the one they were originally vetted against. Re-check the tier, not just the expiration date, whenever the scope of a sub's work changes materially.
Phase 4 — Closeout: the completed-operations tail
The most commonly missed item at project closeout is the assumption that once a sub's work is done, their insurance stops mattering. It doesn't — a defect in work performed months earlier can still produce a claim long after the crew has left. The standard additional-insured endorsement, ISO form CG 20 10, covers claims tied to a sub's ongoing operations while work is underway; it does not, on its own, extend to a claim that surfaces after the work is complete. A separate endorsement, CG 20 37, covers completed operations specifically, and it's routinely absent from certificates that otherwise look compliant, because nobody asked for it by name.
For trades whose defects tend to surface later — roofing, waterproofing, structural, mechanical — confirm the completed-operations endorsement is in force, not just the ongoing-operations one, and keep the certificate on file well past the project's final walkthrough. How long depends on your state's statute of repose for construction claims, which varies and should be confirmed with your attorney rather than assumed from another state's rule — but "until the punch list closes" is almost always too short.
What subcontractor default insurance doesn't replace
Larger GCs sometimes ask whether subcontractor default insurance (SDI) removes the need to run this checklist at all. It doesn't, for most contractors, and it's worth being direct about why: SDI is a catastrophic policy the general contractor buys and controls, covering the GC's own financial loss if an enrolled subcontractor defaults on the work — it doesn't replace individual liability or workers' comp coverage for each sub, and it isn't priced or structured for most operations. Industry sources describe SDI programs as generally available to contractors with roughly $100 million or more in annual subcontract volume, with premiums around 0.4% to 0.85% of total subcontract value and deductibles that can start around $250,000 with significant co-pays on top. It's also generally not accepted as a substitute for statutory payment and performance bonds on publicly funded work.
For the overwhelming majority of general contractors, this checklist — not SDI — is the actual control. If your subcontract volume and organizational scale put SDI on the table, that's a conversation for your broker and CFO, not a reason to skip verifying individual sub insurance on a specific job.
Common mistakes
The patterns that show up repeatedly when a subcontractor's insurance file is reviewed after something has already gone wrong.
- Letting a sub mobilize on the promise that a certificate is on its way, with no hard gate stopping site access until it actually arrives.
- Checking a certificate once at bid or contract stage and never again for the life of a multi-month project.
- Requiring identical limits from every trade instead of tiering by risk, which over-insures low-risk suppliers and under-insures the trades most likely to cause a serious loss.
- Accepting an ongoing-operations-only endorsement (CG 20 10) for roofing, waterproofing, or structural trades with no completed-operations coverage (CG 20 37) behind it.
- Not re-checking a sub's insurance tier after a change order expands their scope into higher-risk work.
- Treating a general "sub shall maintain adequate insurance" contract clause as sufficient instead of naming specific coverages, limits, and endorsements.
- Discarding subcontractor certificates at project closeout instead of retaining them for as long as a completed-operations claim could plausibly surface.
Running this checklist on every subcontract, every job
Each item on this list is a simple check in isolation. The difficulty is running all of them, in the right order, for every subcontractor, on every job, without a mobilization deadline or a busy week talking someone into skipping one. That's precisely where manual tracking degrades quietly — a certificate gets filed because it looks official, not because anyone re-checked what the endorsement schedule actually said. What happens if a subcontractor doesn't have insurance and the real cost of a lapsed vendor policy cover what that failure actually costs when it's discovered after an incident instead of before one.
CoverSynx gives each sub a link to submit their certificate without creating an account, reads it against the tier and endorsements a given trade requires, and flags what's missing — an absent additional-insured endorsement, a completed-operations gap on a roofing sub, a certificate that's about to lapse mid-project — before it becomes the reason a claim doesn't get covered. It assists verification; it doesn't certify coverage or replace a call to your broker or attorney on anything that looks unusual for a specific sub or project. See how to track certificates of insurance for the full collection and renewal workflow, and COI tracking for general contractors for how this applies at the jobsite level.
FAQ
What should a general contractor check before letting a subcontractor start work?
A current certificate of insurance meeting your minimum limits, on file and verified — not promised — before mobilization, with general liability, workers' compensation, and auto (where applicable) all present, plus the additional-insured, waiver-of-subrogation, and primary-and-non-contributory endorsements your subcontract requires.
Can a general contractor be cited by OSHA for a subcontractor's safety violation?
Yes. Under OSHA's Multi-Employer Citation Policy (CPL 02-00-124), a general contractor is typically treated as the site's "controlling employer" and can be cited for a hazard created by a subcontractor's work, even if none of the GC's own employees were exposed to it. The policy requires controlling employers to exercise reasonable care to detect and prevent hazards across the whole site.
What does "no certificate, no work" actually mean in practice?
It means a subcontractor doesn't get site access — no badge, no gate code, no start date — until a current, verified certificate meeting your requirements is on file, with no informal exceptions for paperwork that's "on its way." The rule only holds if it's enforced automatically as part of mobilization, not left to a judgment call during a busy week.
Do all subcontractors need the same insurance limits?
No. A common pattern used by contractor insurance brokers is roughly $1M general liability for lower-risk trades like carpentry or painting, around $2M for higher-risk trades like electrical or plumbing, and $2M-plus plus specialty coverage for high-consequence trades like roofing or demolition. Requiring identical limits from every trade over-insures low-risk subs and under-insures the ones most likely to cause a serious loss.
What is subcontractor default insurance, and does it replace requiring insurance from each sub?
No. Subcontractor default insurance (SDI) is a catastrophic policy the general contractor buys to cover its own financial loss if an enrolled sub defaults on the work — it doesn't substitute for each subcontractor carrying its own liability and workers' comp coverage. SDI programs are generally available only to contractors with roughly $100 million or more in annual subcontract volume, so for most general contractors this checklist, not SDI, is the actual control.
How long should a GC keep subcontractor certificates after a project ends?
Well past the final walkthrough — a defect in completed work can produce a claim long after the crew has left, and the relevant coverage (ISO form CG 20 37, completed operations) has to have been in force at the time the work was done. Exactly how long depends on your state's statute of repose for construction claims, which varies; confirm the right retention period with your attorney rather than assuming another state's rule applies.
What's the difference between additional insured and certificate holder on a subcontractor's COI?
Being named certificate holder only means a copy of the certificate was sent to you — it grants no coverage. Additional-insured status, added by endorsement, is what actually puts you inside the subcontractor's policy so their insurer can defend and cover a claim arising from their work. A certificate can show your name in the certificate-holder box with no additional-insured endorsement anywhere on it.
About the author
Rehan Shah — Founder, CoverSynx
I build CoverSynx, software that helps property managers and contractors keep track of their vendors' certificates of insurance. I'm not an insurance broker or a lawyer. These guides summarise published industry guidance and cite their sources — for advice on your own situation, speak to your broker.
Stop tracking certificates in spreadsheets. CoverSynx collects vendor COIs, reads each one automatically, checks it against your requirements, and chases the vendor before a policy lapses.
Start free — no card required →