Vendor Risk Management for Property Managers
A landscaper and an elevator contractor are both "vendors", but they don't carry the same risk — and treating them the same either buries your team in paperwork for low-risk vendors or under-protects the owner on high-risk ones. Vendor risk management for property managers starts by sorting vendors by what their work can go wrong, then setting requirements, vetting and monitoring to match, property by property.
Vendor risk management for property managers means making sure every vendor is insured, licensed where the trade requires it, and contractually responsible for their own work. Tier vendors by risk — roofers, elevator, electrical, restoration and security at the top — and set requirements to match. Meet the owner's and lender's requirements, check for red flags before the work order goes out, and monitor every policy and license across the portfolio, not just at onboarding.
In this guide
What vendor risk means for a property manager
You manage someone else's asset, with residents or tenants living and working in it, and vendors coming and going every day. When a vendor causes an injury or damage, three parties are exposed: the owner whose property it is, the management company that hired the vendor, and the residents who were there.
"Vendor risk management" means something else in corporate IT — data security and software suppliers. For a property manager it is concrete: is this vendor insured, licensed and on a contract that makes the loss theirs, today, for this property?
The controls are the same four that apply to any contractor — verify, transfer by contract, monitor, document — set out in the construction and vendor risk management guide. What changes for property managers is scale: many vendors, many properties, and a different owner behind each one.
Tier your vendors by risk
Not every vendor needs the same file. Sort them by what their work can do, and require accordingly:
| Tier | Typical vendors | What can go wrong | What to require |
|---|---|---|---|
| High | Roofers, elevator contractors, tree work, electrical, restoration and mold remediation, security companies | Falls, fire, structural or water damage, injuries to residents, incidents involving guards | Higher GL limits and umbrella, workers' comp, owner and management company as additional insured, waiver of subrogation, license check, signed service agreement |
| Medium | HVAC, plumbing, painting, pest control, appliance repair, flooring | Water damage, property damage inside units, injuries on site | GL and workers' comp at your standard limits, auto if they drive on site, additional insured, license check for licensed trades |
| Low | Landscaping maintenance, janitorial, window washing at ground level, deliveries | Minor property damage, slips and trips | GL and workers' comp (or exemption), W-9, a standard service agreement |
Tier by the work, not the vendor's name: a landscaping company that also does tree removal is a high-risk vendor for that job. For the specific coverages and limits, see vendor insurance compliance for property managers.
Owner and lender requirements
Your requirements aren't only yours. The management agreement usually obliges you to make vendors carry specific coverage, and each owner can set it differently:
- Additional insureds. Most owners want to be named alongside the management company on each vendor's general liability; lenders sometimes add themselves.
- Different floors per owner. An institutional owner may require higher limits than the small portfolio next door — the same vendor can be compliant on one property and not on another.
- Proof on request. Owners and lenders ask for the vendor file at audits and after incidents. If assembling it takes a week, it is not really a file.
Being listed as certificate holder is not the same as additional insured: only the endorsement gives the owner rights under the vendor's policy.
How TrackMyVendor automates this
- A management-company default sets the minimums and documents every vendor is checked against.
- Each property carries its owner's requirements on top of the default, and vendors who fall short on that property are flagged on it. Pro
- A dated compliance report per property exports as PDF or Excel for the owner or the lender. Pro
Red flags before you hire a vendor
Any one of these is a reason to stop before the work order goes out:
The certificate came from the vendor, not their agent
Certificates are issued by the insurance agent or broker. A PDF the vendor "made" or edited is the most common route to a fake one — request it from the agent directly.
The named insured doesn't match the business
The certificate is for a related company, an individual, or a trade name that isn't on your service agreement. The policy covers who it names.
No workers' comp, and no exemption
"It's just me" is fine only if your state issues an exemption and the vendor has it. Otherwise an injured helper becomes your claim.
The license can't be found, or isn't active
For licensed trades, an inactive, expired or suspended license on the state board is a hard stop — and a clean certificate won't tell you.
Reluctance to name the owner and you as additional insured
Usually a sign the vendor's policy can't or won't do it. The endorsement is standard for commercial vendors; resistance is information.
No signed service agreement
Without one, there is no indemnity and no obligation to keep coverage in force. Insurance requirements need a contract to stand on.
To check a license yourself, see how to verify a contractor license.
Monitoring vendors across a portfolio
Vetting happens once; vendor risk keeps moving. Across a portfolio, three things make monitoring hard by hand: vendors work on several properties at once, each owner has different requirements, and every vendor's policies renew on their own dates.
What works: one record per vendor shared across properties, each property's requirements checked against it, renewals requested 30–60 days ahead, licenses re-checked rather than trusted from onboarding, and a weekly look at everything expiring across the whole portfolio.
How TrackMyVendor automates this
- Vendors upload through a one-time link from their phone — no account, no portal — and the link lists exactly what they still owe.
- Reminders at 90, 60, 30 and 7 days go to your team and to the vendor, whose copy carries the upload link. Starter and above
- Every plan gets the Monday summary: one digest of every vendor with something expired or expiring, across every property.
- Licenses are re-checked against the state board daily, so a suspension shows up on the vendor's record, not at the next audit.
Every vendor, every property, on the record
Vendors upload certificates, endorsements and W-9s through a one-time link. Every policy is tracked on its own dates, licenses are re-checked daily, and each property's file is ready when the owner asks. Your first 25 vendors are free.