Supplier certificate expiry tracking in Canada: what to re-check, when, and against which register
WSIB clearance certificates, corporate registry status, insurance certificates: which fields to compare between document, contract and public record, what a mismatch looks like, and the next step.

Summarize this article with
Supplier certificate expiry tracking means recording the end date of every compliance document a vendor gave you and re-checking each against its source on a schedule, not only at onboarding. A clearance certificate that was current when the vendor was set up says nothing about the day you release payment, so the document date, the contract term and the public record must be compared again.
In Ontario, a principal can obtain a WSIB clearance certificate, or validate one a contractor provides, through the WSIB eClearance system, using the contractor's legal business name or WSIB account number (WSIB). Sources describe a 90-day validity window with fixed expiry dates, but they do not fully agree on the mechanics, so the expiry printed on the certificate is the limit to apply. A valid clearance protects the payer from the contractor's unpaid premiums during its validity period.
Canada has no single national vendor certificate. Workers' compensation, tax, corporate status and licensing sit with provinces and federal bodies, which is why cross-checks matter. This guide belongs to the wider industry verification guide.
What should be re-checked, and when?
Re-check at onboarding, at the expiry date on the document, and before significant payments or contract renewals.
| Document | Field to read | Compare against | Re-check trigger |
|---|---|---|---|
| WSIB clearance certificate (Ontario) | Legal business name, account number, issue and expiry dates | WSIB eClearance validation; contract | Before each payment on the project; at expiry |
| Provincial workers' compensation equivalent | Employer name, account number, status, date | Issuing board's online check, where offered | Same |
| Corporate registry record | Legal name, corporation number, status, registered office | Federal registry (Corporations Canada) or provincial registry; contract | Onboarding; yearly; on name change |
| GST/HST and business number | Business number, legal name | CRA; invoice | Onboarding; when invoice details change |
| Certificate of insurance | Insurer, policy number, policy period, limits, named insured, certificate holder | Contract insurance clause | Day after the policy end date |
| Bank details letter | Account holder, institution, transit, account number | Legal name on registry record; invoice | Every change |
| Trade licence or certification | Holder, scope, expiry | Issuing body | Before expiry |
How do you cross-check a WSIB clearance certificate?
Compare the contractor's legal name and account number on the certificate with the contract and invoice, then validate it in eClearance. A clearance obtained for a different legal name than the one invoicing you does not protect you.
Typical mismatches and the next step:
- Account number or name differs from the contract. Common with holding-company structures. Ask for the clearance of the contracting entity.
- Expiry date passed at the date of payment. Pause and ask the contractor to renew; per sources, renewal opens a few days before expiry.
- Project longer than the certificate. Guides note that longer projects need an updated clearance; diarize the next one.
- Validation does not match the PDF. Do not accept the copy; ask the contractor to generate a new certificate from their own account.
Validation confirms the certificate against the issuing board's data; it does not prove that the person sending the file acts for the contractor. For other certificate types see our guide to vendor compliance certificate verification.
How do you cross-check the corporate registry record?
Compare the corporation number first, then legal name, then status. The corporation number is the join key, because trade names are reused and abbreviated.
- Legal name and number vs. contract and invoices.
- Directors or signing authority vs. the contract signatory.
- Registered office vs. billing address; a persistent gap across invoices is resolved before payment.
The registry confirms what it holds; it does not prove the PDF in your folder is genuine, and a trade name is not a legal entity.
Ready to automate your checks?
Free pilot with your own documents. Results in 48h.
Request a free pilotHow do you track insurance certificate expiry?
Read the effective date, expiry date, named insured and certificate holder. A certificate issued last week can show a policy that ended last month. Compare the named insured with the contracting entity, the policy period with the contract term, limits with the contract clause (the number on the certificate, not the broker's email), and the policy number across renewals. Set the reminder for the day after the policy ends.
How often should each document be re-checked?
| Risk tier | Example | Registry status | Insurance | WSIB / tax certificates |
|---|---|---|---|---|
| High | On-site labour, hazardous work, single source | Every 6 months | At expiry, plus day 1 | Before each payment |
| Medium | Recurring services | Yearly | At expiry | At expiry |
| Low | Occasional low-value goods | Onboarding and on alert | At expiry | Onboarding |
This is an internal policy, not a legal rule; provincial law and contract terms prevail where they set an interval.
What should the review log record?
Record what was compared, not only that a check happened. A useful entry has five parts: the document reviewed and its end date, the source consulted (for example WSIB eClearance or the corporate registry), the date of the lookup, the result (matches, differs, not found) and the reviewer's name. When something differs, add the follow-up: written request with a deadline, payment hold, or escalation to legal.
Keep proof of the lookup with the account or corporation number and the date visible. A screenshot with neither is not evidence; a saved result with both is. Set one internal retention period for all vendor documents so a later audit can rebuild the chain from document to lookup to payment.
Once a year, sample the log to confirm that reminders actually produced requests. A list of expiry dates nobody works is only an archive. On multi-province projects, log which province's board issued each certificate, since a clearance from one board does not stand in for another's.
What do buyers actually ask on forums?
"The clearance is valid, do I need to check again before final payment?" Guides advise treating it as a payment-release check, especially for final payment. Validate it again on the day.
"The expiry dates I read online don't match my certificate." Use the date printed on the certificate and confirm with the board.
"We have 400 vendors. How do we avoid a spreadsheet nobody opens?" One row per document, expiry in a machine-readable field, an owner per row, automatic reminders.
What changes when you automate the comparison?
Automation removes the retyping, not the decision. CheckFile reads the fields on a document (names, account numbers, dates), compares them across the file and against the register values you configure, and flags mismatches and upcoming expirations. A field comparison shows consistency, not authenticity, and a check is a point in time. See the security page and pricing.
FAQ
How far ahead of expiry should I request a new certificate?
30 to 45 days ahead. Run the actual check on the expiry date or the day after.
Is a corporate registry record enough to show a vendor is compliant?
No. It confirms identity and status. Workers' compensation, tax and insurance come from separate sources.
What if a certificate lapses mid-project?
Pause new work or milestone payments, request renewal in writing with a deadline, log the gap, and escalate before releasing payment.
Can I rely on the vendor's own PDF?
As a starting point. Validate with the issuing body where an online check exists, and compare identifiers with other documents on file.
Stay informed
Get our compliance insights and practical guides delivered to your inbox.