A mower throws a rock through a window, a porter slips on a wet clubhouse floor, a ladder comes down on the pool deck — and all three end at the same question. Whose insurance pays? Three things on a current certificate decide the answer: general liability at the limit your association requires, workers' compensation, and your association named on it as an additional insured. Confirm all three before anyone sets foot on the property.
If the answer to that question turns out to be "the association's," you had a problem you could have prevented. Here is what a board should confirm before a company starts work, and why a certificate in a folder is a weaker thing than it looks.
The coverage that protects your community
Not all insurance is equal, and companies sometimes carry the cheapest policy that lets them say "we're insured." These are the coverages that matter for HOA work:
General liability. This is the policy that pays when the mower breaks a window or the pressure washer cracks a walkway — property damage and bodily injury the company causes while working. The limit is your association's to set, and most boards use the number their own insurer or lender already asks for. Your own insurance agent has that number. Put the per-occurrence and aggregate figures into your written insurance requirement, then hold every certificate against them. Until that number is written down, there is nothing for a certificate to fail against.
Workers' compensation. If a company's employee is hurt on your property, workers' comp covers their medical care and lost wages. Where a company has employees and no policy, an injured worker can come after the association directly, which is why most states make it a legal requirement in the first place.
Commercial auto. This matters for any company driving trucks and trailers onto the property. If their vehicle damages a gate, a car, or a resident, this is the policy in play.
Professional or pollution coverage. Situational. Worth asking about for a pool company handling chemicals, or any company doing specialized work where a mistake causes contamination.
"Additional insured" is the phrase that matters
Here is the detail most boards miss. A company can be fully insured and your association can still be exposed. What closes that gap is being named as an additional insured on the company's general liability policy.
Being an additional insured means that policy extends to defend and protect your association if a claim arises from their work. Without it, you are relying entirely on the company to handle the claim. If they lapse, dispute it, or go under, the exposure lands back on the community.
Ask for a certificate of insurance (COI) that lists your association by name as an additional insured. If the certificate does not say it, you do not have it, whatever anyone tells you over the phone.
A certificate on file is a snapshot, not a guarantee
This is the trap that catches even diligent boards. You collect a COI when you sign the company. It looks great. You file it. Eighteen months later, that policy has been canceled for non-payment for four months and nobody noticed, because nobody was looking.
Insurance is not a one-time check. Policies lapse, get canceled, downgrade at renewal, or quietly drop the additional-insured endorsement. A certificate proves coverage existed on the day it was issued and says nothing about today.
So the real job is a standing watch on dates:
- Track every company's policy expiration date
- Re-check the policy at each renewal, not just at signing
- Confirm the additional-insured endorsement survives the renewal
- Have a plan for what happens the day a policy lapses
Most self-managed boards cannot realistically do this for every company, every renewal cycle. It is tedious, and it only pays off on the day something goes wrong.
Where VendoRFP fits
This monitoring problem is a big part of why VendoRFP exists. Three documents are on file and current before a company can propose at your community: general liability, workers' compensation, and the credential its own trade requires. That last one is a CPO card for pool, auto liability for landscaping, and a background check for porter and amenity staffing. A person here opens each certificate and verifies the limits and the expiration date against what your community requires. Insurance is held to a 30-day renewal window; a trade credential has none, because an expired credential is not a credential. Once that window closes, the vendor cannot propose on new work, or be awarded any, until the document is current again.
So "is this company covered right now" becomes a screen your board can read, rather than a phone call to an agent and a folder of PDFs that were true in March.
The buying side sits in the same place. You post the work. Local vendors propose against it, and your board reads the proposals together before it signs one. Your community contracts with that vendor directly. If a company's coverage falls out of the window, your board reopens the scope and can be under contract with a replacement in as little as 10 days at no additional cost, picking the next company itself. The invoices come from the companies themselves, and they land in one place next to the records of the visits they cover.
Check the policies, insist on additional-insured status, and check again at every renewal. Get that much right and the next board inherits a file it can trust instead of one it has to re-verify from scratch.