How to Outsource Certificate of Insurance Processing

Can Non-Licensed Staff Handle COI Requests?

Yes — for standard requests. Issuing a Certificate of Insurance, whether ACORD 25 for general liability or ACORD 28 for commercial property, is an administrative act. In most states it does not require a P&C license. What requires a license is advising on whether existing coverage meets a contract’s requirements or approving changes to policy terms.

The line is between administrative issuance — completing the ACORD form, delivering the certificate, logging it in your AMS — and coverage decisions. The first is delegable. The second stays with a licensed CSR.

State regulations vary. Before delegating COI work to a remote hire, confirm the rules for your state with your E&O carrier or your state’s Department of Insurance. The Independent Insurance Agents & Brokers of America maintains guidance on unlicensed employees and E&O exposure. For a broader look at how agencies structure remote support roles, see our insurance staffing overview.

What COI Processing Actually Involves

A standard COI request has three stages: verify the current policy meets the certificate holder’s requirements, complete the ACORD form with the correct holder details, and deliver the certificate. The verification step — comparing existing policy limits against what’s being requested — is where professional judgment is needed. The rest is administrative.

The full lifecycle:

• Receive the request (email, phone, or AMS task)
• Pull the policy in your AMS (Applied Epic, EZLynx, HawkSoft, or QQCatalyst)
• Verify that current coverage matches the certificate holder’s requirements
• Complete ACORD 25 or 28 with the correct holder information and limits
• Review the certificate for accuracy before delivery
• Deliver to the certificate holder by email or client portal
• Log the issuance in your AMS with the holder name, date, and reviewing CSR

Steps 1, 4, 5, 6, and 7 are administrative and delegable. Step 3 requires licensed judgment. A well-scoped VA handles everything around that review — and flags Step 3 to a licensed CSR when limits are borderline or the holder has non-standard requirements.

Why a Dedicated VA Outperforms a BPO for This Work

BPOs process certificates cheaply at scale but build no institutional knowledge of your agency. A dedicated VA learns your AMS, your recurring certificate holders, and your clients’ policy structures over time. For an independent agency processing 20–50 COIs a week, that pattern recognition translates into faster turnaround and fewer escalations as the engagement matures.

The difference is visible by month three:

BPO: Still working through your runbook line by line. Every non-standard holder goes back to the licensed queue.

Dedicated VA: Knows your construction clients’ general contractors typically request Additional Insured status on a specific endorsement — flags and packages the exception before you ask.

BPOs make sense for very high-volume, highly standardized work — a national brokerage running thousands of identical certificates for one program. For a commercial lines agency with varied clients, a dedicated hire builds compounding value. Learn how agencies structure insurance support roles when delegating high-volume admin work.

What SLAs to Set From Day One

Same-day delivery for standard requests received before 2 PM. Next business morning for complex requests or holders with non-standard requirements. A licensed CSR reviews every certificate before it goes out — the VA owns everything from receipt to that handoff.

Define “standard” before the pilot begins:

• Standard: Existing certificate holder, no endorsement exceptions, current policy in good standing
• Complex: New holder with unusual requirements, Additional Insured or Waiver of Subrogation not already on the policy, or a policy expiring mid-cycle

Build the escalation path in writing from day one: the VA flags any complex request to a named licensed CSR within 30 minutes. No certificate goes out without that sign-off.

How to Set Up the Pilot

Start with a 30-day parallel pilot on inbound COI requests only — no new policy work, no endorsements. Keep your current CSR running the same queue so you can compare output before handing off. If you need to find a vetted remote candidate to pilot with, Sourced handles the search at $299 flat per open role, typically delivering three screened candidates within a week.

1. Document your five most common COI types with a screenshot walkthrough in your AMS. This is the VA’s starting runbook.
2. Create a dedicated AMS login with certificate issuance permission and read-only policy access — no write access to coverage terms.
3. Set up a shared tracker — a spreadsheet or AMS tag — to log every certificate the VA issues, with the reviewing CSR’s sign-off and timestamp.
4. Run in parallel for two weeks: your CSR handles all real requests; the VA issues duplicates you compare for accuracy.
5. Review 100% of certs in week one, 20% in week two, 10% monthly afterward. Aim for 98%+ accuracy before transferring the queue completely.