COI Tracking Software: What to Look For Before You Buy
Karla, Founder · · 10 min read

COI tracking software collects certificates of insurance from vendors, reads the dates and limits, reminds the right people before anything expires, and shows which vendors are covered. Before you buy, check which fields the AI extracts and who confirms them, whether reminders go to the vendor with an easy way to upload, and whether dates are tracked per policy. Also remember that reading a certificate is not the same as verifying its endorsements.
On a pricing page, most tools look the same. The differences show up three months in, when a vendor ignores a renewal request or a certificate gets misread. This guide also covers the questions to ask in a demo and when you don’t need software at all.
This article is general information, not legal or insurance advice. Check your contracts and talk to your insurance broker or attorney about your situation.
What should COI tracking software do?
Strip away the marketing and a certificate of insurance tracking tool has four jobs:
- Collect certificates and other documents from vendors.
- Read them, so you are not typing every date and limit by hand.
- Remind the right people before something expires.
- Show you, at a glance, which vendors are covered and which are not.
Everything else is extra. If you are new to the process itself, start with the guide to certificate of insurance tracking, which covers what to collect and how to review a certificate. This post assumes you know the process and are deciding whether a tool will run it better than you do now.
What does the AI (or data entry) actually do?
The AI, or a person doing data entry, pulls the key fields from each certificate so nobody retypes them. Almost every tool now says it uses AI to read certificates. That claim covers a wide range. Ask exactly which fields it extracts and what happens when it is wrong.
Fields worth extracting
At minimum, a tool should pull these from each certificate:
- The insured’s name
- Each insurer, by name
- Each policy number
- Effective and expiration dates, per policy
- Coverage limits, per line
If it only reads one expiration date per certificate, you will miss the auto policy that renews in August while general liability renews in March.
Who confirms what it read
Extraction is never perfect. Scanned certificates, phone photos, and unusual layouts all cause misreads. A good tool shows you what it found next to the document and asks a person to confirm it. Be wary of any tool that treats its own reading as final without a review step.
What AI does not check
AI reading does not confirm endorsements, and that is the part demos tend to skip. Many contracts require endorsements: additional insured status, waiver of subrogation, primary and non-contributory wording. The ACORD 25 has small columns for some of these, but a checkmark on the certificate is not the endorsement. Confirming them means reading the endorsement pages or asking your broker.
Ask any vendor you are evaluating whether their tool reads endorsement wording, and if so, how it handles the many ways endorsements are written. Be honest with yourself about the answer. CertiTrack, for example, reads dates, policy numbers, insurers, and coverage amounts, and you confirm what it read. It does not verify endorsements or policy wording; that stays with a person. For more on why the distinction matters, see additional insured vs. certificate holder.
Reminders: to the vendor, or only to you?
Who receives the reminders is the single most useful question to ask, and the answers differ more than you would expect.
| Reminder style | What happens | The catch |
|---|---|---|
| Internal only | Your team gets an alert that a certificate is expiring | Someone still has to email the vendor, every time |
| To the vendor | The vendor gets an email asking for the renewal | Only helps if the email gives them an easy way to send it |
| To both | The vendor is asked directly, your team is copied | The copy can become noise if you have many vendors |
Internal-only reminders move the chasing from your memory to your inbox, but you are still the one chasing. Reminders that go straight to the vendor, with a link to upload the new certificate, take you out of the loop until someone fails to respond.
Also ask how many reminders go out and when. One email a week before expiry is rarely enough: the vendor needs time to get a new certificate from their agent. A sequence that starts months ahead gives them several chances. For more on timing, see how to track vendor document expiration dates.
How should vendors send documents?
Vendors should be able to upload through a secure link, from any device, without creating an account. Most vendors are not going to learn your software. If uploading a certificate means creating an account, picking a password, and confirming an email address, many of them will reply to your reminder with a PDF attachment instead, and you are back to filing by hand.
Look for:
- Upload without an account. A secure link in the email that opens an upload page.
- Works on a phone. Plenty of small vendors run their business from their truck.
- Lands in the right place. The upload should attach to that vendor and that document type, not to a general inbox.
Dates per policy, not per vendor
A vendor has one name but several policies, and they rarely all renew on the same day. Check that the tool tracks the expiration date of each document, and ideally each policy, separately. Ask to see a vendor with two policies expiring months apart and watch how the dashboard shows it.
How does the tool decide a vendor is compliant?
Tools usually decide compliance in one of two ways, so ask which one you are getting. You want to open the tool and see, in a few seconds, which vendors are fine and which need attention.
Some tools compare each certificate against limits you set and flag shortfalls. Others look at whether each required document is on file and current. Both are useful; they answer different questions. Know which one you are buying, and what it does not cover. A vendor can show 100 percent if every required document is current, and still be missing an endorsement nobody checked.
Does the software connect compliance to payments?
Not every tool connects compliance to payments, though the moment a vendor is most motivated to send a certificate is when they are waiting to be paid. If a tool does, ask exactly what triggers a warning (expired documents only, or also missing ones), whether it can be overridden, and whether the override is recorded.
Also ask what it does not do. A tracking tool that warns you is not the same as your bank or accounts payable system refusing to send money.
Security of the files
Vendor documents include certificates, licenses, and sometimes W-9s with tax identification numbers. Ask:
- Are files stored privately, or can anyone with a link open them forever?
- Do document links expire?
- Who on your team can see what?
CertiTrack stores files privately, and a document opens through a link that expires after 5 minutes.
How is COI tracking software priced?
Tools in this category are usually priced per vendor, per user, per project, or in flat tiers; there is no standard. The common models are:
- Per vendor. You pay based on how many vendors you track. Predictable if your vendor count is stable.
- Per user (seat). You pay for each person on your team who logs in. Can get expensive if several people need access.
- Per project or location. Common in construction and property management software.
- Flat tiers. A fixed monthly price up to a certain number of vendors or users.
Ask what happens when you go over a limit, whether inactive vendors count, and whether there is a setup or onboarding fee.
Contract length and trials
Ask whether you can pay monthly or must sign an annual contract, and how to cancel. Ask whether there is a free plan or trial long enough to run at least one real renewal cycle with a handful of vendors. Ask how you export your documents and data if you leave.
Setup time
Ask how long it takes to get your existing vendors in. Can you add a vendor with just a name and email and let them upload their own documents? Or does someone need to scan and enter every existing certificate first?
Questions to ask in a demo
Bring this list. Ask the person running the demo to show you, not tell you.
- Show me a certificate being read. Which fields do you extract, and where do I confirm them?
- What happens when the AI misreads a date?
- Do you read or verify endorsements? How?
- Who gets reminder emails, the vendor or my team? When, and how many?
- What does the vendor see? Do they need an account to upload?
- Show me a vendor with two policies expiring on different dates.
- How do you decide a vendor is compliant?
- Is there any connection to payments? What exactly triggers it?
- How are files stored, and do document links expire?
- What does the price depend on: vendors, users, projects?
- Monthly or annual? How do I cancel and get my data out?
- Do you integrate with any of the systems we already use? (Ask, and get a specific answer. Many tools, CertiTrack included, do not.)
When don’t you need COI tracking software?
Software is not always the right answer, and you may be fine without it if:
- You work with a handful of vendors and their policies rarely change.
- One careful person owns the process and has the time.
- You have never been caught by an expired certificate.
In that case a well-built spreadsheet with calendar reminders can do the job. The COI tracking spreadsheet post has a template and explains the signs that you have outgrown it.
You probably do need software when reminders depend on someone remembering to open a file, when certificates arrive by email to several people, or when you have dozens of vendors with renewals spread across the year.
How CertiTrack fits
To be plain about it, here is what CertiTrack does and does not do, measured against the criteria above:
- Reads: expiry and effective dates, policy numbers, insurers, and coverage amounts. You confirm what it read.
- Does not: verify endorsements or policy wording, and it doesn’t replace your broker. It has no integrations with other systems.
- Reminds: emails the vendor at 90, 60, 30, and 7 days before a document expires, with a secure upload link, and copies your team (you can switch the copy off).
- Vendor upload: from any device, no account needed.
- Compliance view: a score per vendor showing what share of their documents on file are currently valid (not expired, not expiring within 30 days, not awaiting review), plus a dashboard of what is expiring and expired. It does not flag documents a vendor never sent; you check those against your own requirements.
- Payments: a warning when you mark a payment as paid to a vendor with an expired document. It does not catch documents never collected, and it does not stop payments made outside CertiTrack.
- Pricing: by number of vendors. The Free plan covers up to 5 vendors; see pricing for the larger plans.
Whatever you choose, run a real test. Add three or four of your most important vendors, let one renewal cycle play out, and see whether the tool actually reduced the chasing.
Frequently asked questions
Can COI tracking software replace my insurance broker?
No. Software can collect certificates, read dates and limits, and send reminders. Deciding what coverage you need, and confirming endorsements and policy wording, is still work for your broker and your team.
Is AI extraction accurate enough to trust?
It saves a lot of typing, but it can misread scans, photos, and unusual layouts. Use a tool that shows you what it read and lets you correct it before it counts.
Should small businesses with few vendors pay for software?
Not necessarily. A spreadsheet works for a handful of vendors with one owner. Look at software when reminders are slipping or more people are involved. A free plan is a low-risk way to test the difference.
What should vendors need to do in a COI tracking system?
As little as possible. Ideally they get an email, tap a link, and upload a file from their phone, with no account to create.
CertiTrack keeps every vendor’s insurance, licenses, and renewal reminders in one place. Start free.