ACORD 25 Certificate of Insurance Explained (2026 Guide)

If you manage vendors, subcontractors, or tenants, you've seen an ACORD 25 form — probably hundreds of them. It's the single most common certificate of insurance (COI) in commercial business, and it's the document that stands between your organization and significant liability exposure.

But most people who handle ACORD 25 certificates every day don't fully understand what they're looking at. They check a few boxes, glance at the dates, and file it away. That's how coverage gaps go undetected for months.

This guide breaks down every section of the ACORD 25 form, explains how to read it properly, and covers the mistakes that create real liability risk.

What Is an ACORD 25?

The ACORD 25 is a standardized certificate of liability insurance created by the Association for Cooperative Operations Research and Development (ACORD). It provides a snapshot of a party's insurance coverage at a specific point in time.

The key phrase there is "snapshot." An ACORD 25 is not an insurance policy. It doesn't grant coverage, modify coverage, or guarantee that coverage will remain in effect. It's a summary document — evidence that certain policies existed on the date the certificate was issued.

This distinction matters because a certificate can be valid when issued and completely meaningless two weeks later if the underlying policy is cancelled. That's why ongoing COI expiration tracking is critical for any compliance program.

The ACORD 25 specifically covers liability insurance — general liability, auto liability, umbrella/excess liability, and workers' compensation. For property insurance, you'd use an ACORD 28 (evidence of commercial property insurance) instead.

ACORD 25 vs ACORD 28

These two forms get confused frequently. Here's the simple distinction:

The ACORD 25 covers liability insurance — protection against claims made by third parties for bodily injury, property damage, or other covered losses. This is what you request from vendors, subcontractors, and service providers.

The ACORD 28 covers property insurance — protection for physical buildings and their contents. This is what you request from tenants or verify for your own properties.

If you're a property manager, you'll use both forms regularly. You'll request an ACORD 25 from every vendor working on your properties, and an ACORD 28 from tenants to verify they carry adequate property coverage per their lease requirements.

For a detailed breakdown of the ACORD 28, see our complete ACORD 28 guide.

How to Read an ACORD 25: Field by Field

The ACORD 25 form is divided into several distinct sections. Here's what each one contains and what you should verify.

Producer Section (Top Left)

The Producer is the insurance agent or broker who issued the certificate. This section includes their name, address, phone number, and contact information.

Why it matters: If you ever need to verify coverage or request changes, the producer is your point of contact — not the insured party. Legitimate certificates come from licensed agents and brokers, not from the insured themselves. If a vendor sends you a certificate they generated on their own, that's a red flag for potential fraud.

Insured Section (Below Producer)

The Insured is the party that holds the insurance policies listed on the certificate. This should match the legal entity name of the vendor, subcontractor, or tenant you're doing business with.

What to verify: The insured name should match the entity name on your contract exactly. "ABC Plumbing LLC" is not the same as "ABC Plumbing Inc." — a name mismatch can create problems during a claim. Also check the address to confirm it matches your records.

Coverage Sections (Center of Form)

This is the most important part of the certificate. The ACORD 25 lists several types of liability coverage:

Commercial General Liability (CGL): This is the core coverage that protects against third-party bodily injury and property damage claims. You'll see two limit columns — "Each Occurrence" and "General Aggregate." The occurrence limit is the maximum paid for any single claim. The aggregate is the maximum paid for all claims during the policy period.

Typical limits to look for: $1,000,000 per occurrence / $2,000,000 aggregate for most commercial work. Higher-risk operations may require $2,000,000 per occurrence or more.

Automobile Liability: Covers claims arising from vehicle use. Look for "Any Auto" in the coverage description — this means all owned, hired, and non-owned vehicles are covered. If it only says "Owned Autos," the vendor isn't covered when using rented or personal vehicles for your work.

Umbrella/Excess Liability: Provides additional limits above the underlying GL and auto policies. If your contract requires $5,000,000 in total liability protection and the GL policy is $1,000,000/$2,000,000, an umbrella policy bridges the gap.

Workers' Compensation: Covers employee injuries on the job. The statutory limits section should show the state(s) where work is being performed. The employer's liability section shows per-accident and per-employee limits.

Certificate Holder Section (Bottom Left)

The Certificate Holder is the party requesting the certificate — typically your organization. Your organization's legal name and address should appear here exactly as specified in your contract or compliance requirements.

This is one of the most commonly failed compliance checks. Vendors often list an abbreviated name, an old address, or a parent company name instead of the specific entity that requires the certificate.

Additional Insured Status

If your contract requires additional insured status, look for two things on the certificate:

First, check whether the "Additional Insured" box is marked in the CGL section. Second — and this is critical — check the Description of Operations section at the bottom of the form for language referencing additional insured endorsements such as CG 20 10, CG 20 37, or blanket additional insured language.

A checked box alone is not sufficient. The actual endorsement must be attached to the policy. Without verifying the endorsement document, you're relying on a producer's representation rather than confirmed policy language.

Description of Operations (Bottom Section)

This free-text area describes the work being performed and contains critical endorsement language. Look for:

• References to your project, property, or contract
• Additional insured endorsement numbers (CG 20 10, CG 20 37)
• Waiver of subrogation language
• Primary and non-contributory language
• Any limitations or exclusions specific to your work

Don't skip this section. It's where the most important compliance details live, and it's where mistakes are most common.

What Property Managers Need to Check on Every ACORD 25

If you manage a commercial property portfolio, here are the eight verification points that matter most:

1. Entity name match: The insured name matches your vendor/contractor agreement exactly.

2. Certificate holder accuracy: Your property entity or management company is listed correctly as the certificate holder.

3. Additional insured status: The CGL section shows additional insured is included, AND the description section references a valid endorsement (CG 20 10 or CG 20 37).

4. Coverage limits meet lease or contract requirements: Compare the per-occurrence and aggregate limits against the minimums in your vendor agreement. A $500,000 GL limit when your contract requires $1,000,000 is a compliance gap, even if a certificate is on file.

5. Workers' comp is active: Any vendor sending workers to your property should carry workers' compensation. If they claim an exemption, verify it's valid in your state.

6. Auto liability for mobile vendors: Landscapers, delivery services, snow removal — any vendor bringing vehicles onto your property needs auto liability with adequate limits.

7. Dates are current: Check both the policy effective date and the expiration date. A certificate from last year's policy period is worthless.

8. Waiver of subrogation: If your contract requires it, verify waiver of subrogation language in the description section. This prevents the vendor's insurer from pursuing your organization after paying a claim.

Checking all eight points across dozens or hundreds of vendors is exactly why COI tracking software exists. SmartCOI's AI extraction reads every field on the certificate and checks it against your requirements automatically — upload your COIs free and your first compliance report is on us.

Common Mistakes That Create Liability Risk

These are the errors we see most often when reviewing ACORD 25 certificates. Each one represents a real compliance gap that can leave your organization exposed.

Accepting certificates without verifying endorsements

The most dangerous mistake. A certificate can list additional insured status with a checkbox, but if the actual CG 20 10 or CG 20 37 endorsement was never added to the policy, you have no coverage. Always request endorsement pages and verify they're attached.

Not catching entity name mismatches

"Smith Properties LLC" and "Smith Property Management Inc." are different legal entities. If the certificate holder name doesn't match your exact legal entity, the coverage may not extend to you during a claim. This is especially common for management companies operating under multiple entity names across a portfolio.

Ignoring the gap between occurrence and aggregate limits

A vendor with $1,000,000 per occurrence but a $1,000,000 aggregate (instead of the standard $2,000,000) has already exhausted their annual coverage after one major claim. The aggregate limit matters as much as the per-occurrence limit.

Relying on blanket additional insured without confirmation

"Blanket additional insured" language in the description section sounds comprehensive, but it only applies if the underlying policy actually has a blanket endorsement. The certificate itself doesn't confirm this — the endorsement does.

Not tracking umbrella policy alignment

An umbrella policy should sit on top of the GL and auto policies. If the umbrella policy has a different effective period than the underlying policies, there can be coverage gaps during the misaligned dates. Check that all policy dates align.

Filing certificates without checking limits against requirements

This happens constantly with manual tracking. A vendor submits a certificate, someone confirms it exists and files it, but nobody actually compares the $500,000 GL limit against the $1,000,000 requirement in the contract. The certificate is "on file" but compliance is an illusion.

Accepting expired or soon-to-expire certificates

A certificate that expires in two weeks will create a coverage gap that might go undetected for months if you're not actively tracking expirations. Automated expiration tracking and renewal reminders prevent this entirely.

Not verifying workers' compensation for all on-site workers

Some vendors claim workers' comp exemptions that may not be valid in your state, or they carry coverage in one state but send workers to properties in another. Verify the workers' comp coverage applies to the state where work is actually being performed.

How SmartCOI Automates ACORD 25 Verification

Manually checking every field on every certificate across a portfolio of vendors is tedious, error-prone, and expensive. That's exactly why we built SmartCOI.

Upload an ACORD 25 certificate — or have your vendor upload it through a free self-service portal — and SmartCOI's AI extracts every data point: coverage types, limits (both per-occurrence and aggregate), effective dates, carrier information, certificate holder, additional insured status, and endorsement details across all pages of the document.

The system then automatically checks the extracted data against your compliance requirements and flags any gaps: insufficient limits, missing endorsements, incorrect certificate holder names, and upcoming expirations.

No manual data entry. No spreadsheets. No hoping someone catches a $500,000 limit that should be $1,000,000.

Start your free 14-day trial — upload up to 50 certificates at no cost.

Frequently Asked Questions

What is the difference between an ACORD 25 and an ACORD 28?

The ACORD 25 is a certificate of liability insurance covering general liability, auto liability, umbrella, and workers' compensation. The ACORD 28 is evidence of commercial property insurance covering the building and its contents. You'd request an ACORD 25 from a vendor or contractor and an ACORD 28 from a tenant or for your own property coverage.

Does an ACORD 25 certificate guarantee coverage?

No. An ACORD 25 is a snapshot showing coverage existed when the certificate was issued. It does not modify, extend, or guarantee the underlying insurance policy. Coverage can be cancelled or changed after the certificate is issued without the certificate holder being notified, unless specific endorsements require notice of cancellation.

How often should ACORD 25 certificates be updated?

Certificates should be renewed annually at minimum, aligned with the underlying policy renewal dates. Best practice is to request updated certificates 30 days before expiration and track compliance continuously rather than relying on annual spot-checks.

Who issues an ACORD 25 certificate?

ACORD 25 certificates are issued by licensed insurance agents and brokers — not by the insured party. If a vendor sends you a certificate they created themselves, it should be considered unreliable. Always verify that the producer listed on the certificate is a legitimate, licensed agent or broker.

What does "additional insured" mean on an ACORD 25?

Additional insured status means your organization is added to the vendor's liability policy, giving you coverage under their policy for claims arising from their work. On the ACORD 25, this is indicated by a checkbox in the CGL section and endorsement language in the description section. The actual protection comes from the endorsement (such as CG 20 10 or CG 20 37), not from the checkbox alone. Learn more in our additional insured guide.

Can an ACORD 25 be forged?

Yes. Because the ACORD 25 template is freely available, fraudulent certificates can be created with basic PDF editing tools. This is why verifying that certificates come from licensed producers — and cross-checking policy details with the carrier when in doubt — is important for any compliance program.