A claim lands on your desk for a building finished six years ago. Someone needs the subcontractor's certificate of insurance from the job, and the hunt begins through old email threads and a shared drive nobody organized.
If that scene feels familiar, you've probably wondered how long should you keep certificates of insurance in the first place. The short answer is longer than most people think, and in many cases permanently. Let's walk through why these documents matter after a project closes, how state law shapes your timeline, and how to keep old records organized.
What Does a Certificate of Insurance Actually Prove, and Why Does That Matter Later?
A certificate of insurance proves that a specific policy was active on the date the certificate was issued. It's a snapshot of the insurer, coverage types, limits, and effective dates at that moment.
That snapshot is what becomes valuable later. If someone files a claim tied to work a third-party partner did in 2021, your team needs to show what coverage was in place in 2021, not what that partner carries today. Only the certificate you collected back then can answer that.
That's why meeting your certificate of insurance requirements at the start of a project is only half the job. The other half is being able to find that certificate years from now. So how many years are we talking about?
How Long Should You Keep Certificates of Insurance After a Project or Contract Ends?
Plan to keep certificates of insurance for at least three years past your state's statute of repose, or keep them permanently. A statute of repose sets the outer limit for bringing certain claims, like construction defect claims, counted from when a project is completed.
Those windows vary a lot by state. According to PBMares' record retention guide for construction contractors, the statute of repose is 5 years in Virginia, 6 years in North Carolina, 10 years in Washington, D.C., and 20 years in Maryland (even though claims against contractors are cut off at 10 years). The same guide recommends keeping project documentation for at least three years after the statute of repose ends and lists insurance records among those to keep permanently.
That gives you a simple certificate of insurance retention rule. Find your state's statute of repose, add three years as a buffer, and treat the total as your minimum. Working across several states? Use the longest window so one rule covers every project. Repose periods can differ by claim type, so confirm the details with your legal counsel.
Why Do Experts Recommend Keeping Insurance Records Permanently?
Insurance records get permanent treatment because liability can surface long after most business documents stop mattering. A paid invoice is done once the tax year closes. A certificate tied to a building can matter for as long as that structure stands.
Repose periods also have exceptions. In some states, fraud or willful misconduct can extend or remove the deadline, and contract terms like indemnification clauses can create timelines of their own. When you can't predict when a question might come up, keeping the record forever means you'll always have the answer. That's why how long to keep insurance records has a different answer than how long to keep routine paperwork.
Of course, keeping everything forever raises a fair question: what do you do with it all?
What Should You Do With COIs for Vendors You No Longer Work With?
Archive them digitally, and organize them so you can find any certificate by partner, project, and date. A vendor COI after contract ends still carries value, but only if someone can pull it up when it's needed.
Scan paper certificates and store everything in one central location instead of individual inboxes. Name files consistently with the partner, project, and policy period so search works the way you expect. Keep endorsements alongside the certificates they belong to, since an additional insured endorsement can matter just as much as the certificate itself in a dispute.
Then document it in an insurance document retention policy. A short, shared policy solves the problem of different people keeping records for different lengths of time, and nobody has to wonder whether a former partner's files are safe to delete.
With that structure in place, the next step is making sure it holds up as people and partners come and go.
How Does illumend Help You Keep a Complete Compliance Record?
illumend, powered by myCOI, keeps every certificate and endorsement Lumie™ reviews on file and retrievable by third-party partner. When a partner relationship ends or a team member moves on, the history of who was covered, and when, stays put.
Built on 16 years of insurance compliance expertise, illumend is a single compliance platform that can read hundreds of coverage lines and endorsements, including the four core coverage types: General Liability, Workers Compensation, Auto Liability, and Umbrella/Excess Liability. If you're comparing COI tracking software with long-term retention in mind, that complete history matters. illumend keeps your compliance record organized and accessible, while your legal team still decides how long your business needs to hold it.
What Should You Do Next With Your Old Certificates of Insurance?
Check your current COI record retention practice against your state's statute of repose plus three years. If the answer is "it depends who you ask," that's your starting point. Schedule a demo with illumend to see how a complete compliance record empowers your team to answer the next old-certificate question in seconds.
