The certificate of insurance is one of the most collected and least monitored documents in real estate operations. Every operator collects them. Very few operators track them after collection. The gap between those two practices is where the most significant operational risk in real estate investing lives in 2026.
An expired COI does not send a notification. It does not trigger an alert in a property management system. It does not announce itself during a routine property inspection. It sits quietly in a folder, looking identical to its valid predecessor, while the coverage it represents no longer exists. The vendor continues working. The properties remain occupied. And the operator carries an exposure they cannot see.
How Expired COIs Create Liability
The mechanics of COI expiration risk are straightforward but widely underappreciated:
- Vendor insurance policies have defined terms. A general liability policy issued in January 2025 with a one-year term expires in January 2026. The vendor may or may not renew it. They are under no obligation to notify the operator either way.
- The certificate of insurance is a snapshot, not a guarantee. The COI on file proves that coverage existed on the date the certificate was issued. It does not prove that coverage exists today. The only way to verify current coverage is to request a current certificate or to monitor the policy's status through the insurer.
- Work continues after coverage lapses. Unless the operator has a system that flags expirations and restricts vendor access, the vendor continues performing work across all associated properties. Every day of work performed without coverage is a day of uninsured exposure for the operator.
- Incidents do not wait for compliance. A slip-and-fall, a water damage event, a fire caused by faulty electrical work. These incidents happen on their own timeline. If they occur while the vendor's insurance has lapsed, the operator may be the only party with assets available to satisfy the claim.
The Scale of the Problem
For a single property with a handful of vendors, expired COI risk is manageable through manual attention. For a portfolio, the math is different.
Consider a portfolio of 25 properties, each with an average of 8 active vendor relationships. That is 200 insurance policies, each with its own expiration date, coverage limits, and endorsement requirements. If 15% of those policies lapse in a given year without the operator's knowledge, that is 30 vendors performing work across the portfolio without valid insurance at any given time.
Now consider that many vendors serve multiple properties. A landscaping company that serves 10 of those 25 properties has one insurance policy. If it expires, 10 properties are simultaneously exposed. The concentration effect means that a single vendor lapse can create portfolio-wide risk.
Most operators have no visibility into this exposure. They collected the COI at onboarding. They have no process for monitoring what happens after that.
Why Property Management Software Does Not Solve This
Operators who use property management platforms sometimes assume that vendor management features include insurance compliance monitoring. In most cases, they do not.
Property management platforms are designed to manage the relationship between the operator and the vendor: work orders, payments, contact information, and basic documentation. They may provide a place to store a COI, but they typically do not:
- Track expiration dates and send alerts before coverage lapses
- Verify that coverage limits meet minimum requirements
- Monitor whether additional insured endorsements are current
- Provide a portfolio-level view of vendor compliance status
- Generate an audit trail of compliance verification actions
The COI sits in the system as a static document. The system does not know or care whether the coverage it represents is still active. This creates a false sense of security: the operator believes they are managing vendor insurance because they have a document on file. In reality, they are storing a record of past compliance, not monitoring current compliance.
The Financial Exposure
The financial consequences of expired COI exposure fall into several categories:
Direct Liability
If a vendor causes property damage or bodily injury while their insurance has lapsed, the operator may be held responsible. Depending on the nature of the incident, damages can range from property repair costs to multi-million dollar personal injury settlements. Without vendor insurance to absorb the claim, the operator's own insurance, or the operator's assets, are the only remaining sources of recovery.
Insurance Coverage Disputes
The operator's own insurance policy may include provisions that require the operator to verify vendor insurance as a condition of coverage. If the insurer determines that the operator failed to maintain vendor compliance, they may deny coverage for claims arising from vendor negligence. The argument is simple: the operator had a duty to verify, and they did not exercise it.
Loan Covenant Violations
Many commercial real estate loan agreements require the borrower to maintain insurance compliance across all vendors performing work on the property. An expired vendor COI can constitute a technical default under the loan agreement, even if no incident has occurred. This gives the lender the right to accelerate the loan, increase the interest rate, or impose additional requirements.
Reputational and Capital Raising Impact
Institutional investors conducting operational due diligence will ask about vendor compliance processes. An operator who cannot demonstrate a systematic approach to COI monitoring signals governance immaturity. In a competitive capital raising environment, this can be the difference between winning an allocation and losing it to a better-organized competitor.
What Effective COI Monitoring Looks Like
The operators who have closed the expired COI gap share a common approach:
- Centralized tracking. All vendor insurance information is stored in a single system that is the authoritative source for compliance status. Property managers do not maintain separate files or spreadsheets.
- Automated expiration alerts. The system generates alerts 90, 60, and 30 days before a policy expires. If the vendor does not provide a renewal, the system changes their status to noncompliant and notifies the appropriate personnel.
- Coverage verification. When a new COI is received, the system verifies that coverage limits, policy types, and endorsements meet the operator's minimum requirements. Policies that fall below the threshold are flagged for follow-up.
- Portfolio-level visibility. Leadership can see the compliance status of every vendor across every property at any time. The dashboard shows how many vendors are compliant, how many are approaching expiration, and how many have lapsed. This visibility transforms COI compliance from an administrative task into a management metric.
- Audit trail. Every compliance event is documented with a timestamp and attribution. When a COI is received, verified, flagged, or expired, the system records what happened and who was involved. This documentation is what protects the operator when a claim arises.
The Real Cost
The cost of implementing systematic COI monitoring is a fraction of the cost of a single uninsured vendor incident. A slip-and-fall claim with a six-figure settlement. A property damage event that the operator's insurance declines to cover. A loan covenant violation that triggers a default review. Any one of these scenarios costs more, in both money and management attention, than the compliance infrastructure that would have prevented it.
The expired COI is the most preventable form of operational risk in real estate investing. The information needed to prevent it exists. The policies have expiration dates. The vendors have contact information. The coverage requirements are defined. The only thing missing, in most portfolios, is a system that connects these pieces and monitors them continuously.
That is not a technology problem. It is a decision. And in 2026, operators who have not made that decision are carrying more risk than they realize.