How to Master Setting Vendor Insurance Minimums in Your Agency

Setting vendor insurance minimums is one of the highest-stakes decisions a business makes when building a vendor program. Set them too low and a vendor loss becomes your client's problem. Set them arbitrarily high and qualified vendors walk away from contracts. The right minimums are not guesswork - they follow a defensible framework tied to exposure, contract value, and industry standards.

This guide gives agencies and their commercial clients the complete picture: how to calculate appropriate minimums, standard benchmarks by vendor type, and what to do when a vendor cannot meet requirements.

Key Takeaways

1. GL limits should be set at a minimum of 2x the contract value for most service vendor categories, according to ISO 2024 underwriting guidance for commercial lines.
2. General contractors should carry at least $1M per occurrence/$2M aggregate GL, per IRMI 2025 contractor insurance benchmarks for projects under $10M in contract value.
3. IT vendors need both $1M cyber liability and $1M professional liability as separate minimum requirements - GL does not cover technology errors, per IIABA 2025 commercial lines guidance.
4. Cleaning and janitorial services represent the most commonly underinsured vendor category, with 41% carrying less than $500K per occurrence, per myCOI 2025 COI compliance data.
5. Vendors that cannot meet minimum limits must be risk-reviewed before contract execution. NAIC 2025 reports that businesses accepting underinsured vendors without documented exceptions face an average additional claims cost of $180,000 per incident when losses occur.
6. Legal review of vendor insurance requirements is recommended for any contract exceeding $500,000 in annual value, per AGC 2025 construction contract risk management guidelines.

Why Setting the Wrong Minimums Creates Hidden Exposure

Businesses typically set vendor insurance minimums in one of three ways: copying limits from an old contract, asking their broker for a round number, or looking at what other vendors in their network carry. None of those approaches ties the minimum to actual exposure.

When minimums are set too low, the vendor's policy pays out, hits its limit, and stops. The remaining loss lands on the business - either through their own GL policy or through direct litigation. The business assumed they had transferred the risk. They had not.

Per NAIC 2025, undercollateralized vendor losses add an average of $180,000 in additional claims costs per incident compared to losses where vendor coverage was adequate. That number does not include the time, legal fees, and premium impact from the claim on the business's own policy.

Setting vendor insurance minimums correctly is not a procurement formality. It is a direct financial decision about how much risk the business retains.

The Framework: Five Steps to Setting Defensible Minimums

Step 1: Assess Scope of Work and Exposure Type

The vendor's scope of work determines the primary exposure categories. A general contractor working on a job site creates bodily injury, property damage, and completed operations exposure. An IT vendor providing managed services creates technology errors and data breach exposure. A delivery company creates auto liability exposure. Each exposure type requires a different coverage line with different minimum limits.

Start by categorizing the vendor's work: does it create physical contact with the business's premises? Does it involve professional advice or technical services? Does it involve vehicles? Each "yes" adds a coverage line to the minimum requirements.

Step 2: Tie GL Minimums to Contract Value

ISO 2024 underwriting guidance recommends GL per-occurrence limits of at least 2x the annual contract value for most service vendor categories. For a $250,000 janitorial services contract, that suggests a $500K per-occurrence minimum. For a $1M construction management contract, the minimum should be $2M per occurrence.

This ratio is a floor, not a ceiling. High-hazard operations (roofing, excavation, electrical) warrant limits above the 2x ratio because a single incident can exceed the contract value by a large multiple.

Step 3: Apply Industry Standard Minimums by Vendor Category

Standard minimums by vendor category give a defensible baseline that adjusts for industry norms. The table later in this article provides a reference framework by vendor type. Where the contract-value calculation produces a higher number than the category standard, use the higher number.

Step 4: Align with Umbrella and Excess Layers

The primary GL limit is only part of the picture. Verify that the vendor's umbrella or excess policy follows form over the primary GL and auto policies. A vendor carrying $1M primary GL and $4M umbrella/excess has $5M of total available coverage - but only if the umbrella follows form and does not exclude the relevant operations.

Per IRMI 2025, umbrella policies with exclusions for specific operations (e.g., "professional services," "pollution," "completed operations") are common and frequently misread as providing broader coverage than they actually do. Request the umbrella declarations and review the exclusions page.

Step 5: Get Legal Review for High-Risk Vendors

For any vendor category that creates significant exposure - contractors working on your client's premises, IT vendors with access to sensitive data, vendors handling hazardous materials - legal review of the insurance requirements and indemnification clause is worth the investment. Per AGC 2025, businesses that get legal review of vendor contracts for projects exceeding $500,000 in annual value reduce their net claims exposure by an average of 35% compared to those using standard-form contracts without review.

Legal review is also where contractual risk transfer tools (indemnification clauses, hold harmless agreements) get aligned with the insurance requirements. The two work together: the indemnification clause creates the obligation, and the insurance requirement funds it.

Standard Minimum Requirements by Vendor Category

CSL = Combined Single Limit. These are baseline minimums. Adjust upward based on contract value using the 2x rule per ISO 2024.

Handling Vendors Who Cannot Meet Minimums

Some vendors - particularly small businesses, sole proprietors, and specialty trades - cannot obtain coverage at the required minimums or cannot afford the premium. This happens. The question is how to handle it without exposing your client.

Option 1: Require the gap to be filled through the client's own umbrella. If the vendor carries $500K GL and the requirement is $1M, the client's umbrella can be required to drop down and fill the gap. This shifts the cost and complexity to the client but allows the vendor to continue. Document this decision explicitly.

Option 2: Reduce the contract scope to match the vendor's coverage. If the vendor carries $500K GL, limit their contract to activities where the maximum possible loss is below $500K. This requires honest exposure analysis, not assumption.

Option 3: Require the vendor to be listed as an additional insured on the client's umbrella. Some umbrella policies permit this for scheduled vendors. Verify with the carrier before advising this approach - blanket additional insured extensions on umbrellas are not universal.

Option 4: Accept the risk with documented board or management approval. For low-value vendors with limited exposure, documented management acceptance of the risk gap is sometimes the right answer. The documentation matters: it demonstrates that the decision was made knowingly, which is relevant if a loss occurs later.

What agencies should not advise: do not tell clients to waive insurance requirements without documenting the exception and having management sign off. Verbal waivers create the worst outcome - the requirement technically exists, the vendor does not meet it, and the client has no documented decision trail.

How Umbrella and Excess Layers Affect Minimum-Setting

Most businesses focus on primary GL limits when setting vendor minimums. The umbrella and excess layers deserve equal attention.

A vendor carrying $1M primary GL and a $5M umbrella has more effective coverage than a vendor carrying $2M primary GL with no umbrella. But the umbrella only helps if it follows form over the primary GL without significant exclusions.

IRMI 2025 identifies these common umbrella exclusions that undermine vendor coverage:

• Professional services exclusions (removes technology and advice errors from the umbrella)
• Pollution exclusions (relevant for contractors working with chemicals, fuel, or waste)
• Completed operations exclusions (removes coverage for losses that manifest after project completion)
• Aircraft/watercraft exclusions (relevant for vendors operating near water or air access)

When reviewing vendor COIs, request the umbrella declarations and exclusions page for any contract where the primary GL limit is below twice the contract value. The umbrella limit is only meaningful if it actually covers the relevant exposure.

What Legal Review of Vendor Insurance Requirements Actually Covers

Legal review of vendor insurance requirements is not the same as having your client's attorney read the contract. Effective review aligns three documents: the contract, the indemnification clause, and the insurance requirements.

The indemnification clause determines which losses the vendor agrees to absorb. The insurance requirements determine whether the vendor's policy can actually fund those losses. When the two are misaligned - the indemnification clause is broader than the insurance requirements - the vendor accepts a liability they cannot pay.

Per AGC 2025, contracts where indemnification and insurance requirements are aligned produce 35% lower net claims costs than contracts where they are drafted independently and never reconciled. This is particularly relevant for construction contracts, where completed operations losses can occur years after project completion and the vendor's policy may have lapsed.

Agencies that facilitate this alignment provide genuine risk management value that goes well beyond standard COI collection. This is the type of service that generates referrals and multi-year client retention.

Frequently Asked Questions

What does setting vendor insurance minimums mean in practice? Setting vendor insurance minimums means determining the minimum insurance coverage amounts a vendor must carry before a business will contract with them. This includes specifying coverage types (GL, auto, workers compensation, professional liability), per-occurrence and aggregate limits for each type, and any endorsement requirements such as additional insured status or waiver of subrogation.

How are GL minimums calculated for vendors? ISO 2024 underwriting guidance recommends GL minimums of at least 2x the annual contract value. For a $500,000 contract, that means at least $1M per occurrence. For contracts involving high-hazard activities - roofing, electrical, excavation - limits above the 2x floor are appropriate because a single incident can exceed the contract value by a large multiple.

What is the standard GL minimum for general contractors? IRMI 2025 benchmarks show $1M per occurrence/$2M aggregate as the standard minimum for general contractors on projects under $10M in contract value. For larger projects or high-hazard trades, $2M per occurrence/$4M aggregate is common. Completed operations coverage should always be specified separately and maintained for at least two years after project completion.

Do IT vendors need different minimums than contractors? Yes. IT vendors require both cyber liability and professional liability (errors and omissions) coverage that standard GL policies do not include. IIABA 2025 recommends a minimum of $1M per occurrence for each of these lines, in addition to standard GL. A GL-only minimum for an IT vendor leaves technology errors, data breaches, and professional negligence claims entirely uncovered.

How should agencies advise clients when a vendor cannot meet minimums? The agency should present the options in writing: fill the gap through the client's umbrella, reduce the contract scope to match the vendor's coverage, or obtain documented management approval to accept the risk exception. Never advise waiving requirements without documentation. NAIC 2025 data shows undercollateralized vendor losses add an average of $180,000 in additional claims costs per incident.

Does the umbrella limit count toward vendor insurance minimums? It depends on whether the umbrella follows form over the primary GL without excluding the relevant operations. A vendor with $1M primary GL and $4M umbrella has $5M effective coverage - but only if the umbrella covers the specific activities involved in the contract. Request the umbrella exclusions page for any vendor where the primary limit is below the required minimum and you are relying on umbrella coverage to close the gap.

Ready to track vendor insurance minimums automatically across your entire book of business? Explore COI Manager

Written by Javier Sanz, Founder of BrokerageAudit. Last updated April 2026.