The short version
- A certificate of insurance grants nothing. The ACORD 25 form says on its own face that it is issued "as a matter of information only" and "confers no rights upon the certificate holder".
- Additional insured status comes from an endorsement to the policy, not from a tick in the certificate's ADDL INSD column. Ask for the endorsement page.
- The 2013 ISO additional insured forms cap what you get at what your own contract asked for: the most the insurer pays for you is the amount required by the contract or the policy limit, whichever is less.
- A general liability policy pays for bodily injury and property damage. Most indemnities also cover breach, IP infringement and confidentiality, which no general liability policy responds to at all.
Two documents are involved in every insurance requirement, and they do opposite things. The certificate is evidence. The endorsement is the grant. Almost every dispute about insurance in a commercial contract comes from someone collecting the first and believing they have the second.
What a certificate of insurance actually proves
The standard form is the ACORD 25, Certificate of Liability Insurance, and it disarms itself in its own heading: "THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER", and it "does not affirmatively or negatively amend, extend or alter the coverage afforded by the policies below". It also says it does not constitute a contract between the insurer, the producer and the certificate holder. That is the whole document telling you what it is not.
Two lines below that disclaimer do real work and are almost never read. The limits panel is footnoted "limits shown may have been reduced by paid claims" — a shared aggregate can already have been spent on somebody else's claim. And the cancellation box promises nothing: notice will be delivered in accordance with the policy provisions, meaning according to whatever rights you have under the policy, and if you have none, none.
The ACORD 25, region by region
Certificate of Liability Insurance (ACORD 25)
"Certificate holder" and "additional insured" are different boxes
The certificate holder is whoever the paper was addressed to. An additional insured is a person added to the policy's "Who Is An Insured" section, with a right to be defended and indemnified under someone else's cover. The form spells the difference out in its own IMPORTANT block: if the certificate holder is an additional insured, the policy "must have ADDITIONAL INSURED provisions or be endorsed", and a statement on the certificate "does not confer rights to the certificate holder in lieu of such endorsement(s)".
So the practical move is not to argue about the certificate but to ask for the endorsement page, or for the blanket additional insured wording that grants the status automatically where a contract requires it. Three ISO forms cover most situations: CG 20 10 for ongoing operations, CG 20 37 for completed operations, and CG 20 26 for a designated person or organisation.
The failure mode is the split between those first two. Take only the ongoing-operations form and your status ends when the work does. The claim that matters usually arrives afterwards — the installation that fails a year later, the product that injures someone after handover — and by then you are not an insured under that endorsement at all. Say "ongoing and completed operations" in the clause.
The endorsement reads your own contract back to you
Since the 2013 editions, the ISO additional insured forms measure themselves against your contract. CG 20 37 04 13 is explicit: coverage applies "only to the extent permitted by law", and "if coverage provided to the additional insured is required by a contract or agreement, the insurance afforded to such additional insured will not be broader than that which you are required by the contract or agreement to provide".
The limits paragraph goes further: where the contract requires the coverage, the most the insurer will pay for the additional insured is the amount required by the contract or the amount available under the declarations, whichever is less. Three counter-intuitive consequences follow.
- A modest number in your clause becomes your ceiling. Ask a supplier carrying $5m for $1m and you have contracted yourself down to $1m. If you want the limits they actually carry, say so.
- A vague clause produces vague status. If the contract requires additional insured cover only for the supplier's vicarious liability, that is all the endorsement grants, whatever the policy would otherwise have done.
- "To the extent permitted by law" imports local anti-indemnity rules. California Civil Code § 2782 voids construction indemnity for the promisee's sole negligence or wilful misconduct, and for private construction contracts made after 1 January 2013, provisions relieving the owner from its own active negligence. Several states have comparable limits.
See the clause in a full agreement
The service agreement template carries the insurance, indemnity and liability paragraphs in their usual positions, so you can compare them against the wording you have been sent.
Four moments when the cover you checked is not there
Day 0
Certificate issued
A snapshot from a broker. True that afternoon.
Month 3
Aggregate erodes
Another claimant is paid out of the same shared limit.
Renewal
New policy year
New policy, new endorsements. The old ones do not carry across.
Year 2
Claim arrives
Ongoing-operations status ended when the work did.
Where the indemnity and the policy stop matching
A general liability policy pays, under Coverage A, for bodily injury and property damage caused by an occurrence — an accident. Property damage means physical injury to tangible property, or loss of use of it. Now read the indemnity two paragraphs above the insurance clause. It probably covers breach of the agreement, infringement of third-party intellectual property, breach of confidentiality, mishandled personal data and regulatory penalties. None of that is bodily injury or property damage, and requiring higher limits does not change it.
Above that sits the contractual liability exclusion, which removes liability taken on "by reason of the assumption of liability in a contract", subject to two exceptions: liability the insured would have had anyway, and liability assumed in an "insured contract". It is narrower than insurers once argued. In Ewing Construction Co. v. Amerisure Insurance Co. (Tex. 2014) the Texas Supreme Court held that a contractor promising to work in a good and workmanlike manner does not "assume liability" at all, because the promise adds nothing to the ordinary duty of care. Agreeing to be careful is not an assumption. Agreeing to carry someone else's liability is.
The indemnity you gave against the policy you bought
Indemnity only
- Breach of the agreement
- IP infringement claims
- Confidentiality and data
- Regulatory penalties
Both
- Third-party injury
- Damage to their property
- Defence, where assumed in an insured contract
Policy only
- Your own negligence, no contract involved
- Claims by people outside the deal
Defence is the sharpest edge. A contractual duty to defend bites the moment a claim is pleaded and it is yours to fund; your insurer's duty runs on the policy's own terms. Where the two do not line up you spend real money before anyone decides whether the policy answers for it. Draft the indemnity and the insurance clause as one exercise — indemnify, defend and hold harmless sets out what each verb costs, and the liability cap usually carves the indemnity out of the very limit that made the deal tolerable.
Waiver of subrogation, and the timing that voids it
Subrogation is the insurer's right to pay its own policyholder and then step into their shoes to sue whoever caused the loss. A waiver is the policyholder giving that up in advance, so their insurer cannot come after the other party. In practice it stops a fire on a site turning into a two-year fight between insurers with both parties as witnesses.
Two things go wrong. Timing: the waiver has to be given before the loss, because giving up rights after your insurer has paid interferes with rights that are by then the insurer's, and policies commonly treat that as a breach of the recovery condition. Form: the waiver usually has to be endorsed onto the policy — which is exactly what the certificate warns. Workers' compensation waivers are typically a scheduled endorsement carrying extra premium, so a blanket demand across every supplier is a demand that costs them money.
Professional liability does not work the way general liability does
Errors and omissions cover is written claims-made: the trigger is the date the claim is made, not the date the mistake happened. Two drafting consequences follow. The retroactive date has to predate the work, or the policy never sees it. And the cover has to outlive the contract, because problems with advice surface after the engagement ends — hence the requirement to maintain the policy for a stated period after completion, not only during the term.
Asking to be an additional insured on a professional liability policy, meanwhile, is a request you should hope is refused. Most insurers decline it, for a reason that runs against the person asking: these policies exclude claims between insureds. Sonoma County's contracting guidance puts it plainly — if the client is an additional insured on the consultant's policy and then sues the consultant, the consultant is not covered, and there is nothing left to recover from. The endorsement destroys the asset you were trying to reach.
| Policy | What it responds to | Additional insured? |
|---|---|---|
| General liability | Injury and property damage caused by an occurrence | Yes — by endorsement, ongoing and completed operations |
| Professional liability / E&O | Negligent acts in performing services; claims-made | No — the claims-between-insureds exclusion defeats the point |
| Workers' comp and employer's liability | Employee injury; the route back to you is subrogation | No — ask for a waiver of subrogation instead |
| Commercial auto | Owned, hired and non-owned vehicles used in the work | Yes — by endorsement |
Writing a clause that can actually be complied with
A supplier who cannot comply sends a certificate and hopes. A clause specific enough to be checked is also specific enough to be met, which is why the precise version usually signs faster. The same wording belongs in a vendor agreement or a consulting agreement, adjusted for which policies matter.
What to put in, and what to ask for
- Name each policy and its limit, and say whether the limit is per occurrence or in the aggregate.
- Require additional insured status for ongoing and completed operations, naming the forms or their equivalent.
- Say the cover applies for the full limits carried, not merely the minimum stated — otherwise your own figure is the ceiling.
- Ask for primary and non-contributory cover in words. The endorsement does not add it on its own.
- Require the endorsement pages, not only the certificate.
- For claims-made policies, fix the retroactive date and a run-off period after completion.
- Diary the expiry date. A deadline tracker beats a promise that next year's certificate will arrive.
The insurance clause is not the most important paragraph in a contract. It is the one where the ratio of effort to consequence is most lopsided: two extra sentences, one about endorsements and one about limits, cost nothing to negotiate and decide whether a six-figure claim lands on your balance sheet or someone else's policy. On a freelance contract or an independent contractor agreement they are the cheapest items on the list. The document everybody collects grants nothing; the document that grants everything is the one nobody asks for.
Sources
- ACORD 25 (2025/12) Certificate of Liability Insurance — NY Dept of Financial Services approved forms
- Certificates of Insurance — New York Department of Financial Services
- NCOIL Certificates of Insurance Model Act (2012, re-adopted 2017)
- ISO form CG 20 37 04 13 — Additional Insured, Completed Operations
- Ewing Constr. Co. v. Amerisure Ins. Co. (Tex. 2014) — FindLaw
- California Civil Code § 2782 — California Legislative Information
- Additional insured endorsements — Sonoma County contract insurance requirements guide
General information, not legal advice. This guide explains how these documents and rules generally work. Law varies by jurisdiction and changes, and none of it is applied to your circumstances here. For anything consequential, consult a licensed attorney where you are.
Frequently asked
What does "additional insured" mean in a contract?
It means being added to somebody else's liability policy so that their insurer will defend and indemnify you for claims arising out of their work. The status comes from an endorsement to the policy, not from being listed as certificate holder. Standard ISO endorsements cover ongoing operations, completed operations, or a designated organisation. Without one of those, or blanket wording already in the policy, you are simply someone who received a piece of paper.
A client wants a certificate of insurance. What do I actually send?
Ask your broker to issue an ACORD 25 naming the client as certificate holder, and forward the specific endorsements the contract requires alongside it. Send the contract's insurance clause to the broker rather than paraphrasing it, because the endorsement wording is measured against what the contract requires. Do not ask the broker to certify that your cover complies with the contract; in several states they are not permitted to write that on a certificate.
What is a waiver of subrogation, and does it cost me anything?
It is your agreement that your insurer will not pursue the other party to recover what it paid you. Given before a loss it is routine and usually free on liability policies. Given after a loss it can prejudice your own claim, because the recovery right has already passed to the insurer. On workers' compensation it is normally a scheduled endorsement with additional premium, so it is worth asking for only where the exposure justifies it.
Does my liability policy cover the indemnity I signed?
Partly, at best. A general liability policy pays for bodily injury and property damage caused by an accident. Indemnities routinely extend to breach of contract, intellectual property infringement, confidentiality failures and data incidents, none of which is bodily injury or property damage. The contractual liability exclusion then removes liability assumed by contract unless it falls within the policy's "insured contract" definition. Read the two clauses together before agreeing either.
What insurance should a service contract require?
Match the requirement to the risk rather than copying a construction schedule. Commercial general liability is the baseline wherever people or premises are involved. Professional liability belongs in any contract for advice or design. Cyber cover belongs wherever personal data is handled. Workers' compensation is required by law where there are employees. Limits should reflect the plausible worst case for that engagement, not a habit.