Supplier certificate expiry tracking in the US: what to re-check, when, and against which register

Supplier certificate expiry tracking means recording the end date of every compliance document a vendor gave you and re-checking each against its source on a schedule, not only at onboarding. A certificate of insurance that was current when the vendor was set up says nothing about the day you cut the check, so the document date, the contract term and the public record all need to be compared again.

For vendors that sell to the federal government, registration in SAM.gov must be renewed every 365 days to stay active, and sources note that processing can take up to 10 business days, with a recommended start 45 to 60 days before expiration (SAM.gov). A lapsed registration can leave an entity ineligible for awards, so the expiry date is a field worth tracking, not a footnote.

Unlike some countries, the US has no single national "vendor compliance certificate". The checks are spread across state registries, the IRS, insurers and, for federal work, SAM.gov. That is why the cross-checks matter. This guide belongs to the wider industry verification guide.

What should be re-checked, and when?

Re-check at onboarding, at the expiry date on the document, and before large payments or contract renewals.

How do you cross-check a certificate of insurance?

Read four dates and names: effective date, expiration date, named insured and certificate holder. A COI issued last week can show a policy that expired last month, because the issue date of the certificate is not the policy period.

• Named insured vs. contracting entity. A policy issued to a parent or a "doing business as" name may not cover the LLC on your purchase order.
• Policy period vs. contract term. Cover must span the whole performance period, with margin for renewals.
• Limits vs. contract clause. Compare the per-occurrence and aggregate figures on the certificate with what your contract requires.
• Certificate holder vs. your legal entity. A COI naming another holder is a blank-form risk; ask for a corrected certificate.
• Insurer and policy number across renewals. Same number with a shifted date calls for a call to the broker.

A COI is an informational document issued by the broker, so confirming with the broker or insurer is the stronger check where the exposure is high. Set the reminder for the day after expiration; a 30-day reminder triggers the request, the day-1 check shows whether it worked.

How do you cross-check state good standing and the W-9?

Compare the entity ID and exact legal name first, then status. The entity ID in the state record is the join key, because trade names are reused and abbreviated.

1. Legal name on the W-9 vs. the state record. If they differ, ask for the filing that explains the change.
2. Status in the state record. Inactive, revoked or administratively dissolved means stop and escalate to legal before issuing new orders.
3. W-9 name vs. the bank account holder. A payee that differs from the W-9 name is a hold-and-confirm event.

Take the TIN from a W-9 the vendor supplied through your own onboarding channel, and store the date received. The state record confirms what the state holds; it does not prove the PDF in your folder is genuine. See also our guide to vendor compliance certificate verification.

How often should each document be re-checked?

This is an internal policy, not a legal rule. State licensing boards and contract terms set their own intervals and prevail.

What should the review log record?

Record what was compared, not only that a check happened. A useful entry has five parts: the document reviewed and its end date, the source consulted (for example the state business search or SAM.gov), the date of the lookup, the result (matches, differs, not found) and the reviewer's name. When something differs, add the follow-up: written request with a deadline, payment hold, or escalation to legal.

Keep proof of the lookup with the entity ID and date visible. A screenshot with no date or identifier is not evidence; a saved result page with both is. Set one internal retention period for all vendor documents, so a later audit can rebuild the chain from document to lookup to payment.

Once a year, sample the log to confirm the reminders actually produced requests. A list of expiry dates nobody works is only an archive.

What do buyers actually ask on forums?

"The COI says 'valid' with a date, do I really need to chase the renewal?" Yes, the expiration date on the policy is the limit. Chase the renewal certificate after the date, not only before it.

"The certificate holder is wrong. Is that a problem?" It is a contract compliance gap. Ask the broker for a corrected certificate.

"We have 400 vendors. How do we avoid a spreadsheet nobody opens?" One row per document, not per vendor, with the expiry in a machine-readable field, an owner per row and automatic reminders.

What changes when you automate the comparison?

Automation removes the retyping, not the decision. CheckFile reads the fields on a document (names, IDs, dates), compares them across documents in the same file and against the register values you configure, and flags mismatches and upcoming expirations. A field comparison shows consistency, not authenticity, and a check is a point in time. See the security page and pricing.

FAQ

How far ahead of expiry should I request a new certificate?

30 to 45 days ahead for documents the vendor must obtain from a third party. Run the actual check on the expiry date or the day after.

Is a good-standing record enough to show a vendor is compliant?

No. It confirms the entity and its status with the state. Insurance, licensing and tax paperwork come from separate sources.

What if a COI lapses mid-project?

Pause new work orders or milestone payments, request a renewal certificate in writing with a deadline, and log the gap. Escalate to procurement or legal before releasing payment.

Can I rely on the vendor's own PDF?

As a starting point. Confirm with the broker, insurer or state record where practical, and compare identifiers with the other documents on file.