Certificate Of Insurance Vs Policy: What Insurance Agencies Must Know

The certificate of insurance vs policy distinction is the most operationally important concept in commercial lines servicing. Every agent issues hundreds of certificates per year. Far fewer take the time to explain to clients and certificate holders what a COI actually does and does not do. That gap creates E&O exposure, client misunderstandings, and coverage disputes that could be avoided entirely.

This post covers the legal authority of each document, the six operational differences brokers must understand, and the disclosure practices that protect your agency.

Key Takeaways

• The ACORD 25 itself states on every form: "This certificate is issued as a matter of information only and confers no rights upon the certificate holder." That language is not boilerplate. It is a legal limitation on the document's authority.
• Courts have consistently held that a COI cannot expand or restrict coverage beyond what the underlying policy provides, regardless of what the Description of Operations field says (NAIC 2024).
• Seeing "additional insured" on a COI does not confirm AI status. The certificate holder is an AI only if there is an actual endorsement on the policy naming them. IIABA 2025 identifies this as the most common COI misunderstanding in commercial lines.
• A COI is a snapshot as of the date issued. Mid-term endorsements, coverage changes, and policy modifications are not reflected in previously issued certificates.
• The cancellation notification clause on an ACORD 25 does not guarantee notice. The enforceability of this clause varies by state and has been the subject of active litigation (NAIC 2024).
• For contracts over $1M, construction projects, or any transaction requiring verified endorsement coverage, request the declarations page and endorsement schedule rather than relying on the COI.

What a Certificate of Insurance Actually Is

The ACORD 25 is a summary document. It confirms that a policy exists, identifies the insurer, and lists the coverage types and limits in place as of the date the certificate was issued. That is the full scope of what it does.

The ACORD 25 does not define what the policy covers. It does not list exclusions. It does not describe how endorsements apply, how limits interact, or what triggers a covered claim. The form itself makes this explicit in the disclaimer printed on every certificate: "This certificate is issued as a matter of information only and confers no rights upon the certificate holder."

That language is not an administrative formality. It defines the legal weight of the document. A COI is evidence that coverage existed at the time of issuance. It is not a contract, it is not a guarantee of coverage, and it is not a substitute for reading the underlying policy (ACORD 2025).

What the ACORD 25 Does Include

• The named insured's name and address
• The insurer's name and NAIC number
• Policy numbers for each coverage line
• Effective and expiration dates for each policy
• Coverage limits (per occurrence and aggregate)
• Any additional insured or waiver of subrogation notations the agent enters in the Description of Operations field

What the ACORD 25 Does Not Include

• Exclusions of any kind
• The text of any endorsement
• How limits apply to specific claim scenarios
• Whether the named insured has been issued any mid-term endorsements since the certificate was generated
• Whether the policy has been modified since issuance

What an Insurance Policy Actually Is

The insurance policy is the complete contract between the insurer and the named insured. It governs every question that a COI cannot answer. Courts, carriers, and regulators all look to the policy when there is a dispute. The COI is not part of that analysis.

A standard commercial policy includes five components:

1. Declarations page: the summary page listing the named insured, policy period, coverages, and limits. This is the one page that resembles a COI, but it includes the policy number and is the authoritative source for limit verification.
2. Insuring agreement: the section that defines what the insurer agrees to pay and under what conditions. This is where occurrence vs. claims-made trigger language lives.
3. Conditions: the obligations of both parties, including notice requirements, cooperation clauses, and how the claim process works.
4. Exclusions: what the policy does not cover. Pollution, professional services, fungus and mold, and employment practices are examples of standard GL exclusions that never appear on a COI.
5. Endorsements: modifications to the base policy that add, remove, or change coverage. Additional insured endorsements, primary and noncontributory language, and waiver of subrogation all live here.

The policy governs. The COI summarizes. When the two conflict, the policy controls (ISO 2024).

The 6 Key Differences: Certificate of Insurance vs Policy

1. Legal Authority

The policy is the insurance contract. The COI is a summary document with no legal authority over coverage terms. Courts in every state have held that language in a Description of Operations field cannot create coverage that does not exist under the policy. If a COI says "additional insured as required by written contract" but no AI endorsement is on the policy, there is no AI coverage.

This distinction matters when a certificate holder files a claim expecting coverage that the COI appeared to confirm. The carrier will look at the policy. If the endorsement does not exist, the claim will be denied.

2. Endorsements

The COI may note endorsements in the Description of Operations field. That notation does not activate the endorsement. It does not prove the endorsement exists. Only the actual policy endorsement creates coverage.

This is a common source of E&O claims. An agent notes "AI included per CG 20 10" in the Description of Operations. The endorsement was never actually attached to the policy. The certificate holder relies on the COI notation. A claim arises and the AI endorsement is nowhere in the policy file.

Verify the endorsement exists on the policy before noting it on the certificate. This is not optional for E&O protection.

3. Exclusions

COIs do not list exclusions. A certificate showing $1,000,000 per occurrence GL coverage tells the certificate holder nothing about what is excluded from that coverage. Standard commercial GL policies routinely exclude:

• Pollution liability
• Professional services liability
• Fungus, mold, and bacteria
• Employment practices liability
• Cyber liability
• Completed operations (if not separately scheduled)

A general contractor reviewing a subcontractor's COI and seeing $1M GL limits may assume broad coverage. If the subcontractor's policy excludes completed operations or professional services, the GC as additional insured has no coverage under those exclusions.

Brokers must disclose relevant exclusions in writing when issuing certificates, particularly in construction, professional services, and environmental risk contexts.

4. Claims Triggers

The policy defines what triggers coverage. The COI lists limits but not how those limits apply. Two of the most consequential trigger distinctions are:

Occurrence vs. claims-made: an occurrence policy covers claims arising from events during the policy period, regardless of when the claim is filed. A claims-made policy covers claims filed during the policy period. A COI showing dates does not tell the certificate holder which trigger applies.

Per-occurrence vs. aggregate: the COI shows both limits, but it does not explain how the aggregate erodes across the policy period. If a named insured has already exhausted 80% of their aggregate on other claims, the remaining limit available to the additional insured is a fraction of what the COI shows.

5. Currency

A COI is a snapshot in time. It reflects the policy as it existed on the date the certificate was issued. Policies change throughout their term via endorsements and mid-term modifications. An outstanding COI from six months ago may not reflect the current policy terms.

This is particularly relevant for:

• Certificates issued before a named insured requested coverage reductions
• Certificates issued before a mid-term exclusion endorsement was added
• Certificates issued on a policy that has since been cancelled or non-renewed

Certificate holders relying on COIs without requesting updated versions may believe coverage exists that no longer does.

6. Cancellation Notice

The cancellation clause on an ACORD 25 typically reads: "Should any of the above described policies be cancelled before the expiration date thereof, notice will be delivered in accordance with the policy provisions." Older certificates used the phrase "30 days advance written notice."

Neither version guarantees notice. Carriers interpret these clauses differently. The enforceability of COI-based cancellation notice commitments has been litigated in multiple states, with inconsistent outcomes (NAIC 2024). The only reliable source of cancellation notice rights is the policy itself and any applicable state statute.

The Additional Insured Confusion

The "additional insured" notation on a COI is the single most misunderstood element in commercial lines certificate processing. IIABA 2025 identifies this as the most common COI misunderstanding among certificate holders in commercial lines.

Here is the misunderstanding: a certificate holder sees their name listed in the Description of Operations with the notation "additional insured." They assume this means they have AI status under the policy. This assumption is wrong.

AI status exists only if there is an actual endorsement on the named insured's policy that names or includes the certificate holder as an additional insured. The COI notation is placed there by the agent based on what is supposed to be on the policy. If the endorsement was never issued, never attached, or was issued on the wrong endorsement form, the certificate holder has no AI coverage.

The COI cannot create endorsement coverage. The ACORD 25 disclaimer makes this explicit. But certificate holders do not read the disclaimer. They read "additional insured" in the Description of Operations and assume coverage.

Agents must verify that the AI endorsement exists on the policy before noting AI status on any certificate. This verification should be documented in the agency management system or COI management platform.

COI vs Policy: Side-by-Side Comparison

What Agents Should Tell Certificate Holders

Many certificate holders do not understand what a COI does and does not confirm. This is not their fault. Most people assume a document listing their name and coverage limits means they are covered. Your job as their agent or the issuing agent is to correct that assumption before a claim creates a problem.

A brief written disclosure sent with every outgoing COI serves two purposes: it protects the agency, and it educates the client and the certificate holder.

That disclosure should state:

• The COI confirms that a policy existed as of the date issued. It does not guarantee that coverage is in force at the time of a claim.
• The COI does not list exclusions. Coverage under the policy may be narrower than the limits on the certificate suggest.
• Additional insured status confirmed on the COI is based on endorsement information available at the time of issuance. Verify directly with your broker if you need written confirmation of the endorsement form and its terms.
• The cancellation notice clause on the COI does not guarantee advance notice. Contact your broker for the specific cancellation notice terms under the policy.

This disclosure does not need to be long. One paragraph. Sent every time. Documented in your file.

When to Request the Actual Policy

For standard vendor relationships and routine certificate requests, a COI is sufficient for most purposes. But there are situations where requesting the actual policy documents is the right call:

• High-value contracts (generally over $1 million in contract value)
• Construction projects requiring verification of both CG 20 10 (ongoing operations) and CG 20 37 (completed operations) endorsements
• Transactions where specific endorsement language is required by contract (primary and noncontributory, waiver of subrogation with specific wording)
• Any situation where a claim is reasonably likely and endorsement coverage would be at issue
• When you receive a COI from a new vendor and have no prior relationship with the issuing agency

In these situations, request the declarations page and the endorsement schedule. A responsible agent will provide these without objection. If they push back, that is itself a signal worth noting.

Frequently Asked Questions

What is the difference between a certificate of insurance and an insurance policy?

A certificate of insurance (ACORD 25) is a one-page summary document that confirms a policy exists, lists the coverage types and limits, and identifies the insurer and named insured. It has no legal authority over coverage terms. An insurance policy is the complete contract between the insurer and named insured. It defines what is covered, what is excluded, how claims are triggered, and what conditions apply. When there is a dispute, courts look to the policy, not the certificate.

Does a certificate of insurance prove that an endorsement exists on the policy?

No. An endorsement notation in the Description of Operations field on a COI reflects what the issuing agent entered at the time of issuance. It does not confirm that the endorsement was actually issued and attached to the policy. The only way to confirm an endorsement exists is to request the endorsement itself from the insurer or the named insured's agent.

Can a certificate of insurance expand coverage beyond what the policy provides?

No. Courts have consistently held that a COI cannot expand or restrict coverage beyond what the underlying policy provides (NAIC 2024). If a COI states coverage terms or AI status that are not supported by an actual policy endorsement, the COI language is unenforceable. The policy controls.

What does the cancellation notice clause on an ACORD 25 actually guarantee?

It guarantees very little. The standard language on the ACORD 25 states that notice will be delivered "in accordance with policy provisions." This means cancellation notice rights depend on the actual policy language and applicable state statute, not the COI. Older certificates using "30 days advance written notice" language have been the subject of litigation in multiple states with inconsistent outcomes (NAIC 2024). Do not rely on COI language for cancellation notice rights.

When should a certificate holder request the actual policy instead of just a COI?

For routine vendor relationships, a COI is generally adequate. For contracts over $1 million, construction projects requiring specific endorsement forms, or any situation where coverage terms will be disputed if a claim arises, request the declarations page and endorsement schedule directly. This is standard practice for sophisticated certificate holders and responsible brokers should expect and accommodate such requests.

Why does the ACORD 25 say "this certificate confers no rights upon the certificate holder"?

Because the certificate is not a contract. ACORD 2025 designed the form as an evidence document, not a coverage instrument. The disclaimer exists specifically to prevent certificate holders from arguing that the COI itself creates rights or coverage. This language has been upheld by courts across multiple states. Certificate holders who believe the COI gives them coverage rights are relying on a document that explicitly disclaims those rights.

BrokerageAudit's COI Manager tracks the difference between what certificates state and what underlying policies actually contain, so your agency never relies on COI language to define coverage. See how it works →

Written by Javier Sanz, Founder of BrokerageAudit. Last updated April 2026.