How Can Real Estate Risk Teams Reduce Liability From Non-Compliant Vendors?

Why does vendor non-compliance become the owner’s liability?

When a vendor’s employee is injured on a property or a vendor’s work damages a tenant’s space, the owner and the property manager are named in the claim because they control the premises. The contract shifts that exposure to the vendor through indemnity, and the vendor’s insurance funds the indemnity through additional insured status, which is routinely paired with an indemnity agreement between the two parties.

Non-compliance breaks the chain at the insurance step. If the vendor’s policy has lapsed, excludes the work, names a different entity, or never granted the owner additional insured status by endorsement, the indemnity promise has no insurance behind it. The owner’s own policy responds, the claim enters the owner’s loss history, and the vendor’s promise becomes a collection problem. Landlords and property managers require additional insured status precisely to avoid that outcome: to be defended by the vendor’s policy and to keep their own loss history and premiums stable.

Which requirements actually move liability?

Five requirements do most of the work, and each has a failure pattern that leaves the certificate looking compliant.

Additional insured status on general liability, granted by endorsement and covering both ongoing and completed operations. The endorsement is the evidence; wording on the certificate describes the broker’s understanding and grants nothing.

Waiver of subrogation on every required line, not just general liability. Each policy line has its own waiver checkbox on the ACORD 25, and a waiver evidenced on general liability does nothing to stop the vendor’s workers’ compensation or auto carrier from pursuing the owner.

Primary and noncontributory wording, so the vendor’s policy pays first and the owner’s policy is not asked to share. The endorsement typically grants this only where a written contract requires it, which means the requirement has to be in the vendor agreement itself.

Adequate limits and the right aggregate basis. A vendor serving many properties carries one general aggregate; a claim at another site reduces what is left for yours unless the contract requires a per-project or per-location aggregate.

Notice of cancellation by endorsement. The certificate’s cancellation clause defers to the policy, and most insurers will not send notice unless an endorsement obligates them.

What does a non-compliant vendor cost beyond the claim?

The claim is the visible cost. The quieter costs accumulate earlier. A vendor working without verified coverage is uninsured exposure on every day of work, whether or not a loss occurs. A deductible or self-insured retention on the vendor’s policy that the contract never capped can leave the owner waiting for the vendor to fund its share before the carrier responds. An exception granted by email to keep a job moving becomes a liability nobody can explain when the file is audited.

There is also the cost of the process itself. Chasing certificates by email, storing them in shared drives and reviewing them when someone has time consumes property team hours and still leaves the gaps above unaddressed.

What operating model keeps vendor coverage current?

Liability reduction is an operating discipline, not a document. The model that works has four parts.

Standard requirements written into every vendor and tenant agreement, tiered by the risk of the work, so the compliance team is verifying against a known standard rather than a negotiated one.

Verification of the endorsements and, for higher-risk trades, the policy schedule of forms, before the vendor is approved. The certificate holder box provides no protection; the review has to reach the documents that grant coverage.

Continuous tracking of expirations across the portfolio, with renewal requests sent before coverage ends and every renewal re-reviewed, because renewals are where endorsements change.

Enforcement tied to access and payment. A vendor whose coverage is not verified is not onboarded, and a vendor whose coverage has lapsed is not paid, with the exception process documented when the business decides otherwise.

How do risk teams run this across a portfolio?

At the scale of hundreds of properties and thousands of vendors and tenants, the model above is a workflow problem. Jones automates it for property management teams and owners and asset managers: requirements are configured once, certificates and endorsements are collected from vendors and tenants, each submission is reviewed against the requirements with gaps flagged and instructions sent, expirations are tracked with automated renewal requests, and compliance status flows into the property management systems where onboarding and payments happen. The result is a portfolio view of who is compliant, who is not, and why. The step-by-step verification procedure for tenant and vendor certificates is covered in our guide to verifying tenant and vendor certificates.