Your Franchisees Send You a Certificate of Insurance. Does It Actually Cover Anything?

You make every franchisee carry insurance. You probably require a lot of it. General liability. Workers' comp. Commercial auto. Maybe professional liability, an umbrella, cyber, EPLI. Then you collect a certificate for each one, drop it in a folder, and check the box. So here is the question that matters. Do you actually know if any of that insurance would pay when something goes wrong?

Most franchisors do not. They have a stack of certificates and almost no idea what is behind them. That feels like compliance. It is not. A certificate of insurance tells you a limit exists. It tells you nothing about whether the policy responds when a claim hits. And the gap between the paper and the money only shows up on the worst possible day, after the loss, when somebody reads the actual policy for the first time.

This is not a small problem. It is the difference between a certificate that says one million dollars and a franchisee, plus a brand, paying a six-figure loss out of pocket because the coverage everyone assumed was there was never there. The work changes faster than the requirement does. A window-cleaning brand starts working on two-million-dollar homes. A salon adds laser treatments. A home-services brand starts sending crews inside people's houses. The exposure moves. The certificate looks exactly the same the whole time.

Below are the specific ways a clean certificate of insurance leaves a franchise brand holding the bill, and what to actually check instead.

KEY TAKEAWAYS

• A certificate of insurance promises nothing, and says so in writing. The ACORD form states on its own face that it confers no rights and does not change the coverage in the policy. You are filing a document that disclaims itself. Paper in a folder is not risk off your balance sheet.

  
  

• The biggest losses are the ones the standard policy was never built to pay. General liability covers damage your franchisee does to other people and their other property. It is not a warranty on the work itself. The certificate shows a clean limit and says nothing about that hole.

  
  

• Additional insured on a certificate can be worth zero. The wrong form, no written contract, or a subcontractor exclusion sitting in the same policy can make the brand's coverage disappear at the exact moment it is needed.

  
  

• The certificate is typed by a person into a system anyone can change. It is entered into an agency management system, not pulled live from the carrier. It is a copy of a copy, passed through several hands. Compliance you cannot verify is not compliance.

  
  

• Collecting certificates catches the cheap failures, not the expensive ones. It will show you the franchisee with no workers' comp. It will not show you the exclusion that eats a three-hundred-thousand-dollar claim.

  
  

• You do not fix this with more paper. You fix it by reading the policy. Forms, endorsements, exclusions, limitations, warranties. That is where coverage actually lives or dies, and none of it is on the certificate.

YOUR FRANCHISEE HANDED YOU A CERTIFICATE. WHAT DOES THAT PAPER ACTUALLY PROMISE?

Almost nothing, and the document admits it. An ACORD certificate of insurance is an information form, and it says so right at the top: it is issued "as a matter of information only and confers no rights upon the certificate holder," and it "does not affirmatively or negatively amend, extend or alter the coverage afforded by the policies" listed on it. Read that again. The thing you are collecting to prove coverage tells you, in writing, not to treat it as proof of coverage.

So where does it even come from? A person types it into an agency management system. That system is software at the agency. It is not the insurance company. Anyone with access can go in and change what it says, at any time, with no checks and no balances. Sometimes that system pulls data straight from the carrier. A lot of the time it does not, and everything has to line up perfectly for it to be right. So the certificate that lands in your inbox is a human-entered summary, copied and passed along through a few different hands before it ever reaches you. It is error-prone by design.

And the one box everybody trusts, the additional insured line, is just text in a box. The ACORD form even spells this out in its own fine print: if the holder is an additional insured, the policy itself has to be endorsed, and "a statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement." The form is telling you that the words on it are not the coverage. The words on it are a description of coverage that may or may not exist behind them.

If the only thing standing between your brand and a six-figure loss is a box on a certificate, you do not have coverage you can count on. You have a piece of paper that told you not to count on it.

A WINDOW CLEANER SCRATCHED A $300,000 WINDOW. WHY DID TWO INSURANCE COMPANIES BOTH SAY NO?

Because the loss landed in the exact spot that standard policies are built to exclude: damage to the work the contractor was hired to do. This is a real one. A window-washing franchise required all the right-looking coverages. General liability. Contractors errors and omissions. Workers' comp. Commercial auto. Umbrella. Cyber. EPLI. On the surface, a clean program. A franchisee was cleaning a high-end home and scratched the glass. The damage came in over three hundred thousand dollars.

They filed on the general liability policy. Denied. The carrier pointed at the "damage to property" exclusions, the ones the industry knows as j.(5) and j.(6), and the related "damage to your work" exclusion. Here is what those mean in plain terms. General liability is meant to pay when your operations hurt someone else or damage someone else's other property. It is not built to pay for damage to "that particular part" of the property your franchisee was actually working on. Scratch the window you were hired to clean, and that is your work. Excluded. The carrier was not being cute. That is how the standard ISO general liability form has read for decades.

So they filed on the contractors E&O policy instead. Denied again. Contractors E&O is built for professional mistakes, and most of these forms carry an exclusion for the cost to repair or replace the faulty work itself. The very thing that happened, damaging the item being serviced, fell straight into the hole in both policies. Two carriers, two different exclusions, same answer. No.

Then comes the part that stings. The carrier's posture is basically that the franchisee should have had a better process for checking windows after cleaning them. The franchisee negotiated the homeowner down to something more reasonable, but still paid out of pocket. And the franchisor got pulled in and paid too. Both of them ate part of a loss that everyone assumed was insured. None of this was visible on a certificate. You cannot see a form, an endorsement, an exclusion, a limitation, or a warranty on a certificate of insurance. You see a coverage name and a limit, and you assume the rest.

To be fair, this is form-dependent. A small but growing group of carriers now offers faulty-workmanship or "your work" coverage by separate endorsement. The point is not that the coverage is impossible to get. The point is that the certificate never tells you whether your franchisee bought the policy that actually has it.

YOU REQUIRED ADDITIONAL INSURED. WHY IS THE BRAND STILL UNPROTECTED WHEN THE CLAIM COMES?

Because additional insured status depends on the exact endorsement form, the wording in the contract, and the other exclusions sitting in the same policy. None of those three things show up on the certificate. Additional insured is not one thing. It is a family of forms, and the differences decide whether the brand has coverage or a coupon.

Start with the form. The common scheduled endorsement, CG 20 10, covers ongoing operations only. Once the job is finished, that coverage ends. To be covered for a problem that surfaces after the work is done, you need a second, separate form, CG 20 37, the completed operations version. Plenty of brands require additional insured, never specify which, and end up with the ongoing-operations form. Then a claim shows up months later on finished work, and the coverage they were counting on already switched off.

Now the contract. A blanket additional insured endorsement only grants the brand status when a written contract requires it. A handshake does not trigger it. A verbal "yeah, we will add you" does not trigger it. If your arrangement is built on a promise instead of a written agreement, the form can give you nothing. Even the newer scheduled forms cap the coverage at whatever the written contract required and limit it "to the extent permitted by law." So the contract language is quietly doing all the work, and the certificate shows none of it.

Here is where it gets worse. Even a real, correctly written additional insured endorsement can be gutted by another exclusion in the same policy. In franchising, the big one is a subcontractor or independent-contractor exclusion. Picture it. Your franchisee 1099s a crew. The crew causes the damage. The brand gets pulled into the lawsuit on vicarious liability, because the brand is the one that built the operations manual. And the policy that named the brand as an additional insured excludes the loss, because it arose out of subcontracted work. You did everything you were supposed to. You required additional insured status. You got it on paper. And it pays nothing. Courts have a word for an endorsement that looks like coverage but delivers none: illusory. One federal appeals court said an additional insured endorsement that only covers vicarious liability "may be illusory and provide no coverage at all."

If you require additional insured status but never check the form, the contract, and the exclusions behind it, you did not require coverage for your brand. You required a box on a certificate.

IF THE CERTIFICATE CAN'T BE TRUSTED, WHY DOES THE WHOLE INDUSTRY STILL RUN ON IT?

Because nobody has built the thing that replaces it yet, so everyone keeps passing around a document that even its own language tells you not to rely on. I will say it plainly. The certificate of insurance is a silly document. It is a stupid document. It should not exist. It does almost nothing for anyone. It survives because the industry has not built real, direct, real-time data coming straight from the insurance company.

Think about why it persists. When you are contractually obligated to carry insurance, because of a lender, a franchisor, a contract, you go buy it from the big carriers. The Hartford, Travelers, Liberty Mutual, Nationwide, AmTrust, and a handful more. They exist to fill that obligation, and right now they only have to keep up with each other. Their attention is on premium and on the loss side of the ledger. Top-line revenue and combined ratio. When you try to talk to them about back-end data access, post-bind APIs, real-time policy status, it is not a fun conversation and it is not where their focus is. So the whole market is stuck running coverage through a manual, paper process. Humans typing things back and forth, reading forms by hand, going round and round with an underwriter. It is slow, it is painful, and it is wrong a lot.

And because nobody trusts the document, everyone asks for more. More language. More legalese stuffed into the description of operations box at the bottom of the certificate. More attachments. None of it helps. You cannot fix a document that disclaims itself by piling more words on top of it. You are just asking a person to hand-type more text that still is not the policy.

Necessity is the mother of innovation. The real fix is infrastructure. A way for an authorized third party to pull real coverage data directly from the carrier, in real time, for every situation that needs it. That is what should exist. Until it does, the paper stays, and the only smart move is to stop treating the paper as the truth.

SO WHAT SHOULD A FRANCHISOR ACTUALLY DO RIGHT NOW?

Start by collecting certificates from everyone, because most brands are not even doing that, then layer in real checks: limits matched to each franchisee's actual exposure, and then a read of the policy forms themselves. Do it in that order. Each step solves a different problem, and you get value at every stage instead of waiting for a perfect system.

First, collect. Most franchisors are gathering nothing. Just getting a certificate from every single franchisee does maybe fifty to sixty percent of the heavy lifting on day one. It surfaces the obvious failures fast. The franchisee with no workers' comp. The wrong commercial auto. The missing or wrong general liability. The cyber requirement that simply was never bought. This is the lowest-effort, highest-payoff move there is, and it is where COI monitoring starts earning its keep immediately.

Second, run a real compliance check. Now you stop counting boxes and start checking limits. Are the limits right for that franchisee's size, revenue, and exposure? A single kiosk operator and a thirty-truck operator should not be held to the same number. Match the requirement to the actual business. This is also where your FDD insurance requirements get tested against reality, because a requirement nobody can verify is just a sentence in a document.

Third, read the policy. This is where the industry is headed and where the real protection lives. Go past the certificate to the policy documents. Check the forms. Check the endorsements. Check the exclusions, the limitations, the warranties. Confirm the additional insured form is the right one, and the completed-operations version is there if you need it. Confirm there is no subcontractor exclusion sitting in the policy that cancels the coverage you required. Confirm the work the franchisee actually does is covered, not excluded.

Part of doing this right is on the placement side, and it is a line a lot of people will not draw. If a carrier cannot produce the correct forms for an industry, you do not place that industry's business with them. You walk away. It is not worth saving a few dollars to put a franchisee on a policy that will not respond. The goal was never to satisfy a requirement and check a box. The goal is coverage that actually pays.

FAQ

Is a certificate of insurance legally binding proof that a franchisee is covered?

No. The ACORD 25 certificate states on its face that it is issued for information only, confers no rights on the holder, and does not amend or alter the policy. It is a snapshot of what someone typed, not a contract and not proof the coverage will respond.

We require additional insured. Doesn't that protect the brand?

Only if the correct endorsement is on the policy, a written contract triggers it, and no other exclusion cancels it. The wrong form (ongoing operations only), a handshake instead of a written agreement, or a subcontractor exclusion can each leave the brand with additional insured status that pays nothing.

We require contractors E&O. Doesn't that cover property damage?

Often not the damage people assume. Most contractors E&O forms exclude the cost to repair or replace the faulty work itself. Damage to the exact item your franchisee was servicing can fall into that gap, which is how a policy that looks right still denies the claim.

Should we just require copies of the actual policies instead of certificates?

That is the direction this is going. Certificates catch the easy gaps. The policy forms are where coverage actually lives or dies, so reviewing forms, endorsements, and exclusions is the real check. It is heavier work, but technology is making it possible to do at scale.

We collect nothing today. What is the fastest first step?

Start collecting a certificate from every franchisee. It is the lowest-effort move with the highest immediate payoff, and it surfaces missing or wrong coverages right away, before you ever get to the deeper policy review.

How often does a compliant certificate misrepresent the real coverage?

One multi-year audit of contractor certificates by ARMR, published by IRMI, found a material misrepresentation rate above ninety percent when the certificates were compared against the actual policies and the contract requirements. That study looked at construction and artisan contractors, not franchising, but the mechanism is identical: the certificate said one thing and the policy said another.

CONCLUSION

A certificate of insurance was never built to tell you the truth about coverage. It was built to move information quickly, and it disclaims itself in writing while it does it. The brands that get hurt are the ones that treated a folder full of certificates as proof they were protected. The window did not care that the limit said a million dollars. Two carriers read their forms, found the exclusion, and said no. The coverage a franchise system actually has is sitting in the policy language nobody opened, and that is the one place the certificate will never show you.

ABOUT THE AUTHOR

Wade Millward is the founder and CEO of Rikor, a technology-enabled insurance and risk management company focused on the franchising industry. He has spent his career working with franchisors, franchisees, and private-equity-backed platforms to uncover hidden risk, design scalable compliance systems, and align insurance strategy with how franchise systems actually operate. Wade writes from direct experience building systems, navigating claims, and helping brands scale without losing visibility into risk.