Commercial liability COI audit: what every property manager should verify before a contractor sets foot on site.
A certificate of insurance is only useful if you read it the way a claims adjuster would — and most COIs hide their gaps in the endorsements, not the headline limit.
Quick answer
A certificate of insurance audit for a GTA property manager goes deeper than checking the headline liability number. Limits vs. aggregates change what's available across multiple properties. Additional-insured endorsements come in two flavours — blanket and per-project — and the difference matters at claim time. Pollution, mould, and subcontractor exclusions create surprise gaps on water-damage and remediation work. Auto coverage, expiry tracking, and renewal workflows round out the file. A single MSA collapses the burden into one auto-renewing certificate.
The headline limit is not the audit
Most GTA property managers run a compliance routine that involves collecting a contractor's certificate of insurance, glancing at the per-occurrence liability number, confirming it meets the building's minimum, and filing it. That catches the worst-case scenarios — uninsured or obviously underinsured contractors — but misses most of the failure modes that show up at claim time. The real commercial liability COI audit is about what's behind the headline number: the aggregate, the endorsements, the exclusions, and the named-insured language.
A certificate of insurance is a summary document. It tells you what the policy claims to cover; it doesn't tell you the conditions under which coverage applies or how the policy will respond when a claim hits. The actual policy wording — which the contractor's broker can issue on request — is where the answers live. For high-value or higher-risk work, requesting the policy wording in addition to the COI is reasonable practice. For routine work, the COI is enough if you know which fields to scrutinize.
This guide walks through that field-by-field audit: limits versus aggregates, additional-insured endorsements (blanket vs. per-project), pollution and mould exclusions on water-damage work, subcontractor coverage extension, automobile policy reach, and the expiry-tracking workflow. For a broader vendor-side framing of the consolidation argument, see vendor consolidation in practice.
Limits versus aggregates: why the difference matters across a portfolio
A commercial general liability policy carries two important numbers: the per-occurrence limit and the aggregate limit. Per-occurrence is the maximum the insurer pays for a single claim event. Aggregate is the maximum the insurer pays across all claims during the policy term — typically twelve months. The two numbers sit side-by-side on the COI, and the gap between them matters operationally.
Consider a contractor with a $5M per-occurrence limit and a $5M aggregate. If one claim consumes the full per-occurrence limit, nothing is left in the aggregate for any other claim that policy year. For a single-building manager, that scenario is unlikely but possible. For a portfolio manager whose contractor services five, ten, or twenty properties, an aggregate-equal-to-per-occurrence structure is a real exposure: a claim at one site can leave every other site effectively uninsured for the rest of the term.
The audit step is to confirm the aggregate is at least double the per-occurrence limit for any contractor servicing multiple properties. Master Building Services carries Fully Insured ($5M Liability) coverage with aggregate structures appropriate to multi-property exposure. If a contractor's aggregate matches their per-occurrence limit and they service multiple sites under your management, that's worth raising at COI review.
Additional-insured endorsements: blanket vs. per-project
Being listed as a certificate holder on a COI is not the same as being an additional insured. Certificate holders receive notification if the policy changes; additional insureds have coverage extended to them under the contractor's policy. For property managers and building corporations, additional-insured status is the meaningful protection — it's what brings the contractor's policy in to defend and indemnify if a claim is brought against the management company arising from the contractor's work.
Additional-insured endorsements come in two common forms: blanket (which automatically extends coverage to any party the contractor has a written contract with) and per-project or scheduled (which lists specific entities by name). Blanket endorsements are convenient but only trigger if you have a written contract or service agreement with the contractor. Per-project endorsements are narrower but unambiguous: your organization is named on the endorsement and there is no question about whether coverage extends.
Look at the COI for the endorsement form number, confirm whether it's blanket or scheduled, and confirm the trigger condition is in place. If you're listed as certificate holder only — no additional-insured endorsement — the contractor's policy does not extend coverage to your organization at all, regardless of the per-occurrence limit. That's the single most common gap on a poorly-audited COI.
Pollution and mould exclusions: the surprise gaps on water work
Standard commercial general liability policies in Canada commonly include exclusions for pollution and for fungi/mould-related claims. For routine work — window cleaning, painting, repairs — those exclusions rarely matter. For water-damage response, sewer backup cleanup, leak remediation, or anything involving wet building materials, they create a significant coverage gap.
The pollution exclusion is broadly written and can be triggered by remediation chemistry, fuel leaks from contractor equipment, or runoff from pressure-washing work. The mould exclusion is broader still and can be triggered by any claim where mould is alleged as part of the damages — even if the contractor's work is upstream of the mould. Ask specifically whether the policy carries pollution and mould carve-backs or buy-back endorsements. The Insurance Bureau of Canada maintains consumer-facing background on commercial policy structures worth bookmarking as a reference.
For 24/7 emergency and disaster recovery work, the question is not academic. A contractor responding to a major water-damage event without pollution or mould coverage may have no insurance response available at all — which means the exposure runs back to the property management company. The practical answer is to either confirm the buy-backs or to bundle emergency recovery into a master service agreement with a contractor whose coverage profile is structured for it. See the emergency and disaster recovery scope for how that fits into the maintenance agreement.
Subcontractors, autos, and the expiry-tracking workflow
Most CGL policies cover the named insured and their employees. They do not automatically extend coverage to subcontractors brought on site. If your contractor regularly uses subs for specialty work — roofing, glazing, electrical, HVAC — the COI audit should confirm whether the policy includes subcontractor coverage extension, and whether the subs carry their own coverage naming your organization as additional insured. The risk is that work performed by an uninsured sub generates a claim, and the contractor's policy does not respond because the work wasn't performed by a covered party.
Automobile coverage is the other commonly-missed field. Any contractor whose vehicles operate on the property — entering loading docks, parking on common areas, manoeuvring equipment trailers — should carry commercial auto in addition to general liability. The COI lists this as a separate line; if it's absent, the general liability policy will not respond to vehicle-related incidents on site.
The final layer is expiry tracking. Across a roster of contractors, expiry dates are spread across the year and renewal compliance becomes a chase: who's expiring next month, who's already expired, who renewed but hasn't sent updated documentation. Property managers running this manually almost always have at least one expired COI in their file at any given time. The mitigation is either compliance software or a contractor whose certificate updates automatically before expiry without being asked.
How a single MSA simplifies the entire workflow
The audit framework above is the right answer for property managers running multiple separate contractors. The gaps are real, and skipping any audit step creates exposure that doesn't show up until a claim. The question is whether the workflow needs to scale linearly with vendor count — or whether the structure of the vendor relationship itself can collapse the burden.
Under a single master service agreement covering the full scope of building services, the COI is one document, the WSIB clearance is one document, additional-insured endorsements are included at signing as standard practice, and the renewal cycle is one cycle. Auto-renewal happens before expiry without prompting. The aggregate structure is appropriate to multi-property exposure. The pollution and mould exclusion questions are resolved at scoping. Subcontractor coverage extension and commercial auto are confirmed in the single onboarding set. Master Building Services delivers all of this under the standard MSA — Fully Insured ($5M Liability), WSIB Covered, Working at Heights Trained, with photo-verified completion on every visit and a 48-Hr Quote Guarantee on new scopes.
For portfolio managers, this is the difference between maintaining an active audit calendar across five to ten contractor relationships and having one compliance file that maintains itself. The audit framework still matters — it's how you know what to ask at signing — but the operational burden is off the calendar.
Frequently asked questions
What's the difference between being listed as a certificate holder and being an additional insured?
Certificate holder status means you receive notification if the contractor's policy changes or is cancelled. Additional insured status means the contractor's policy actually extends coverage to your organization — meaning the contractor's insurer will defend and indemnify you if a claim is brought against your organization arising from the contractor's work. For property managers and building corporations, additional insured is the meaningful protection. Certificate holder alone is not enough. Look for the specific additional-insured endorsement form attached to the COI; if it's absent, request it before authorizing any on-site work.
Why does the aggregate limit matter for portfolio property managers?
The aggregate is the maximum the insurer pays across all claims during the policy term. If the aggregate equals the per-occurrence limit, one claim at one site can consume the entire annual coverage — leaving every other property under the same contractor relationship effectively uninsured for the rest of the term. For portfolio managers, confirm the aggregate is at least double the per-occurrence limit. Master Building Services carries Fully Insured ($5M Liability) with aggregate structures suited to multi-property exposure.
Do standard commercial liability policies cover mould and water damage remediation?
Most standard CGL policies in Canada include exclusions for pollution and for fungi/mould-related claims. For routine work this rarely matters, but for water-damage response, sewer backup cleanup, leak remediation, or anything involving wet building materials, those exclusions can create significant coverage gaps. Ask specifically whether the policy carries pollution and mould carve-backs or buy-back endorsements before authorizing any remediation work. Without them, the contractor's insurer may decline the claim entirely.
What happens if my contractor's COI expires and they don't tell me?
If a contractor is operating on your property with an expired COI, your compliance file is out of date — and depending on your management agreement and the building corporation's requirements, you may be in technical breach of compliance obligations. If a claim event occurs during the lapsed window, the insurance response may be unavailable. Most expired-COI scenarios are honest oversights — the contractor renewed but forgot to send updated documentation — but the property manager still carries the file-keeping obligation. A single MSA with auto-renewing certificates removes the chase and the exposure. Contact us for compliance documentation that updates automatically.
Tired of chasing certificates of insurance?
One MSA. One auto-renewing COI. One compliance file that stays current. Full quote in 48 hours, guaranteed.
Serving Toronto, Mississauga, Brampton, Vaughan, Markham, Richmond Hill and the entire GTA.