HOA Vendor Compliance Checklist

Why HOA Boards Get Exposed — and What the Checklist Fixes

When a vendor is injured on your community's property, the question your HOA's insurance carrier will ask is not whether the vendor had insurance. The question is whether the HOA took reasonable steps to verify it. If the answer is a folder of PDFs that nobody checked after the initial collection, the HOA — and in some states, individual board members — may be exposed to personal liability for the gap.

Most HOA boards treat vendor compliance as a paperwork exercise: collect a certificate of insurance, keep it in a binder, move on. That approach fails in at least three ways — documents expire while work is ongoing, vendors carry policies that don't actually name the HOA as an additional insured, and licenses lapse without anyone noticing. The seven documents below cover what matters, what to actually look for in each one, and the failure scenarios that catch boards off guard.

Document 1: Certificate of Insurance (COI)

A Certificate of Insurance is a one-page summary document issued by a vendor's insurance broker that shows active general liability and workers' compensation coverage. The key word is "summary" — the COI is not the actual policy. It is a snapshot of what the broker had on file when they generated it. That distinction matters more than most boards realize.

For HOA purposes, a COI is a minimum threshold document, not a compliance endpoint. General liability coverage should be at least $1 million per occurrence and $2 million aggregate for most trades; higher-risk work like roofing or pool construction typically warrants $2 million per occurrence. Workers' compensation is equally important — if a vendor's employee is injured on your property and the vendor carries no WC coverage, the injured worker's attorney may name the HOA in the claim.

Three things to check beyond the expiration date: First, the certificate holder field should name the HOA. Second, the description of operations box should reference the specific services being performed. Third, the document should confirm the HOA is listed as an additional insured — but a checkbox on the COI is not the same as an actual endorsement, which is covered in Document 5.

Document 2: State Contractor License — Verified Against the State Database

A state contractor license certifies that a vendor is legally authorized to perform specific categories of work in your state. The license is issued and maintained by a state licensing board — the Texas Department of Licensing and Regulation (TDLR), the Florida Department of Business and Professional Regulation (DBPR), or the California Contractors State License Board (CSLB). The license has a number, a classification, an expiration date, and a current status.

The problem most HOAs encounter is accepting a copy of the license document rather than verifying current status in the state database. A license document can be expired, suspended, or revoked — and it will still look like a license. A vendor whose license was revoked for prior code violations will hand you exactly the same paperwork as a vendor whose license is fully active. The only way to know the difference is to check the state database directly. Use our contractor license lookup to verify any TX, FL, or CA license instantly.

When you verify, confirm four things: the license status is Active (not Expired, Suspended, Delinquent, or Revoked); the license classification matches the actual scope of work (an HVAC license does not authorize electrical work); the name on the license matches the entity on your contract and COI; and the expiration date extends through the full period of work.

Document 3: W-9

A W-9 is an IRS form that collects a vendor's taxpayer identification number and certifies their entity classification. For HOAs that pay vendors $600 or more in a calendar year, IRS rules require issuing a Form 1099-NEC. Without a W-9 on file, that process breaks down — and HOAs that fail to file accurate 1099s face penalties.

The W-9 requirement is straightforward but has one failure point boards consistently overlook: the name on the W-9 must match the legal entity name on the vendor's contract. Vendors operating under a trade name or DBA often hand over a W-9 with the assumed business name rather than the registered legal entity name. That mismatch creates a problem at tax time. Require the W-9 before issuing any first payment — not before the project closes — and confirm the entity name matches your vendor agreement.

Document 4: Surety Bond

A surety bond is a three-party agreement between the vendor (the principal), a bonding company (the surety), and the HOA (the obligee). The bond provides financial recourse if the vendor fails to complete contracted work, causes damage, or violates the contract terms. It is not insurance — it does not cover vendor employee injuries or third-party liability. It is a performance and financial integrity guarantee.

Surety bonds are most important for higher-risk or higher-cost trades: roofing, pool construction and repair, electrical, and any project where the vendor has physical access to individual units or significant infrastructure. Required bond amounts vary by state and trade — in California, the CSLB requires a $25,000 contractor license bond as a condition of licensure; in Texas and Florida, bond requirements depend on the trade category and project scope.

When collecting a surety bond certificate, confirm the bond is currently active, the bond amount is sufficient for the scope and value of the work, the bond names the HOA as the obligee, and the bond period covers the full project duration including any warranty period.

Document 5: Additional Insured Endorsement

The additional insured endorsement is the document most HOA boards are missing — even when they believe they have it. The Certificate of Insurance will often contain a checkbox or a notation in the description of operations that says the certificate holder is an additional insured. That notation is informational. It is not the same as an endorsement issued by the insurance carrier that actually modifies the underlying policy.

An additional insured endorsement does two things a COI cannot: it extends the vendor's general liability coverage to the HOA for claims arising from the vendor's work, and it establishes that the vendor's coverage is primary and non-contributory relative to the HOA's own policy. "Primary and non-contributory" is critical language — without it, your HOA's insurer and the vendor's insurer may argue over which policy responds first, potentially delaying resolution and creating coverage gaps.

Require the endorsement as a separate document. It will typically be a CG 20 10 or CG 20 37 form and will name the HOA specifically. If a vendor or their broker tells you the COI is sufficient, that is incorrect. Store the endorsement alongside the COI — they are a pair, not alternatives.

Document 6: Business License / Entity Verification

A state contractor license confirms a vendor is authorized to perform specific work. A business license or entity verification confirms the vendor's business actually exists as a legal entity in good standing with the state. These are different documents. Both matter.

Business licenses are issued at the city or county level and typically require annual renewal. More importantly for HOAs: confirm with the Secretary of State that the vendor's business entity — LLC, corporation, or partnership — is active and in good standing, not dissolved or administratively revoked. A vendor operating under a dissolved entity cannot be sued as a company; claims against them revert to personal liability of the principals, which is far harder to collect. This verification is free in most states and takes under five minutes.

Document 7: Signed Contractor Agreement

A contractor agreement is the legally binding document that defines the relationship between the HOA and the vendor. Without one, every term of the engagement — scope, price, timeline, liability allocation, access rules, and dispute resolution — is governed by whatever each party claims was agreed upon verbally or implied by the work order.

A compliant HOA contractor agreement should cover at minimum: a defined scope of work with measurable deliverables; payment terms tied to milestones; an indemnification clause in which the vendor agrees to defend and hold harmless the HOA for claims arising from the vendor's work; property access rules specifying which areas the vendor is authorized to enter and resident notification procedures; insurance requirements consistent with what you have collected; and a termination clause specifying grounds and notice requirements.

The indemnification clause deserves specific attention. A generic indemnification that doesn't specify the standard — "arising from vendor's negligence" versus "arising from the vendor's work regardless of cause" — creates ambiguity that courts interpret differently. Boards that rely on a vendor's standard service agreement are accepting terms written by the vendor's attorney to protect the vendor.

Why Collecting Documents Isn't Enough

Collecting these seven documents before work begins is necessary. It is not sufficient.

Insurance policies expire. Contractor licenses come up for renewal — and not every vendor renews on time. Surety bonds lapse. Vendor entities get administratively dissolved. All of these events can happen mid-contract, while the vendor is actively on your property, without anyone notifying the HOA. The document you collected three months ago reflects what was true when you collected it. It says nothing about what is true today.

This is the gap that creates the most common HOA liability exposure: a vendor was compliant at onboarding and non-compliant at the time of an incident. The board can produce a COI dated eight months ago. The insurance carrier confirms the policy lapsed six months ago. The board is in a difficult position with no clear recourse, because the compliance check was a one-time event rather than an ongoing process.

Ongoing verification means two things in practice. First, expiration tracking: every document has an expiration date, and someone — or something — needs to monitor those dates and require renewals before coverage lapses. Setting calendar reminders for 25 vendors across a dozen document types is not a sustainable system. Second, license status monitoring: unlike insurance, a contractor license can be suspended or revoked at any point without an expiration date triggering an alert. The only way to know is to check the state database regularly, not just at onboarding. For an overview of the full HOA contractor compliance process, see our HOA compliance guide.

Frequently Asked Questions