Supplier certificate expiry tracking: what to re-check, when, and against which register

Supplier certificate expiry tracking means recording the end date of every compliance document a supplier gave you, then re-checking each one against its source on a schedule, not only when the file is opened. A certificate that was valid at onboarding proves nothing about the day you pay the invoice, so the date on the document, the contract period and the official register all have to be compared again.

A supplier file is only as current as its oldest document. In the UK, Companies House lets you read a company's status and filing history for free, and a company can show as "Active" while its accounts or confirmation statement are overdue (GOV.UK, get information about a company). The register tells you about the company; the certificate in your folder tells you about a past moment. The work is in comparing the two.

This guide is built around cross-checks: which field on which document is compared with which field elsewhere, what a mismatch looks like, and what the reviewer does next. It belongs to the wider industry verification guide.

What should be re-checked, and when?

Re-check a document at three moments: at onboarding, at the expiry date printed on it, and before any high-value payment or contract renewal. Everything else is a refinement of those three triggers.

The table is deliberately about fields, not file types. A PDF named "certificate" is not a check; reading the validity end and the entity name is.

How do you cross-check a registration extract against the register?

Compare the company number first, then the exact legal name, then the status. The company number is the join key: names are reused, abbreviated and changed, numbers are not.

In the UK the Companies House record shows the registered name, number, registered office, officers and a filing history in date order. The status field can read Active, Proposal to strike off, Dissolved, or insolvency-related values such as liquidation. Active only says the company exists and is not being struck off; it does not say the company is trading. Guides to the register also note that a Proposal to strike off often follows overdue accounts or a confirmation statement, so the filing history is worth reading next to the status.

What a mismatch looks like, and the next step:

• Name on the contract differs from the register by more than punctuation. Ask the supplier for the change-of-name filing. Do not edit the vendor master until the register explains it.
• Registered office on the invoice differs from the register. Usually a late address update. Ask for confirmation in writing and re-check the filing history for a pending change.
• Status is Proposal to strike off or in liquidation. Stop onboarding or put new orders on hold, and escalate to procurement and legal. Companies House offers free email alerts for changes to a company's details, which is cheaper than re-reading the page each quarter.
• Accounts or confirmation statement overdue. Not a legal bar to trading, but a reason to ask why and to shorten the re-check interval for this supplier.

A register lookup confirms that an entity exists and what the register says about it. It does not confirm that the PDF in your folder is genuine or that the person sending you documents acts for that entity.

How do you track insurance certificate expiry?

Read three dates and one name: cover start, cover end, the date the certificate was issued, and the insured entity. A certificate issued last week can still show cover that ended last month, so the issue date is not the validity date.

Compare these fields:

1. Insured entity vs. contracting entity. A policy in the name of a parent company or a trading name does not automatically cover the legal entity on your purchase order.
2. Period of cover vs. contract period. The cover must run across the whole performance period, with margin for renewals.
3. Limits vs. the contract clause. If your contract asks for a minimum public liability limit, compare the figure on the certificate, not the broker's cover email.
4. Insurer and policy number vs. later renewals. A new certificate with a different insurer is normal; one with the same policy number and a shifted date deserves a call to the broker.

Set the reminder on the day after cover ends, not before. A reminder at 30 days tells you to ask; a check at day 1 tells you whether the supplier answered. When the renewal certificate does not arrive, the reviewer's next step is a written request with a deadline, a pause on new work orders, and a note in the supplier file.

What do tax and social-security certificates prove, and for how long?

They prove the position of a supplier at the date of issue, and only that. Countries differ on where the check lives and how long a certificate remains acceptable, so read the validity end printed on the document and use the issuer's own check when one exists.

Practical rules that hold across markets:

• Treat the expiry printed on the document as the limit, not the issue date plus a rule of thumb from a forum.
• Where the authority offers an online check, run it with the identifiers on the certificate and compare name, tax ID and result with the PDF. A mismatch means: do not accept the copy, request a fresh one directly from the supplier's account with the authority.
• Where no online check exists, keep the certificate, the date you received it, and who reviewed it. That is your audit trail.
• Link the re-check to payment. Many contract managers re-check at every invoice above a threshold rather than on a calendar.

Local mechanisms differ strongly (a German exemption certificate, a French vigilance certificate, a Spanish tax-status certificate, a Portuguese non-debt certificate), and each has its own rules. See our guide to vendor compliance certificate verification for the certificate-by-certificate detail.

How often should each document be re-checked?

Use a risk-based interval, shortest for documents that expire fastest and that carry the most exposure if wrong.

These intervals are a working policy, not a legal rule. Where a law fixes its own interval (for example a periodic vigilance check in a particular country), the law wins over this table.

What do buyers actually ask on forums?

Practitioners in procurement and accounts-payable forums keep asking the same few things.

"The certificate says valid for a year. Do I really have to check again?" Yes if anything depends on the supplier's current status. The certificate is evidence of the day it was issued; the register is where changes appear first. A cheap register check before payment closes the gap.

"Supplier sent a renewed certificate with the same number but a new date. Is that suspicious?" Not necessarily, since some insurers extend policies in place. It is a reason to compare the insurer's name, the entity and the period, and to confirm with the broker or issuer directly.

"We have 400 suppliers. How do we avoid a spreadsheet nobody opens?" Store one row per document, not per supplier, with the expiry date as a machine-readable field. Sort by expiry. Assign each row an owner. Automate reminders, then automate the comparisons.

What changes when you automate the comparison?

Automation does not replace the reviewer; it removes the transcription step. CheckFile reads the fields on a document (names, IDs, dates, validity end), compares them across documents in the same file and against the register values you configure, and flags the ones that do not match or are about to expire. The reviewer then decides, with the evidence in one place.

Two honest limits. A field comparison shows consistency, not authenticity: a well-made PDF with the right name and number can still be false, which is why the official online check, where it exists, stays in the loop. And a check is a point in time, so the schedule matters as much as the tool. Details on how files are processed are on the security page, and plans are on the pricing page.

FAQ

How far ahead of expiry should I ask a supplier for a new certificate?

Ask 30 to 45 days before the printed end date for documents that take the supplier time to obtain, such as authority-issued certificates. Run the actual check on the expiry date itself or the day after, because that is when you learn whether the renewal happened.

Is a company registration extract enough to confirm a supplier is in good standing?

No. It confirms identity and status on the register at the time you look. Good standing for tax, social security or insurance comes from separate certificates, each checked against its own issuer.

What should I do if a certificate expires while an order is in progress?

Pause new orders or milestone payments, send a written request with a deadline, and record the gap in the supplier file. If the supplier cannot produce a fresh certificate, escalate to procurement or legal before releasing payment.

Can I rely on a supplier's own PDF copy?

Use it as a starting point. Where an authority offers an online check, verify it there; where it does not, record the date received and compare identifiers with other documents in the file.