Your HOA Approved Vendor List Is Quietly Expiring

The word 'approved' on your vendor roster has a shelf life nobody tracks. A freshness audit re-verifies credentials before the bid goes out, not after something goes wrong.

The short answer

Keep an HOA approved vendor list current by re-verifying each vendor's license status, insurance certificate expiration, and business standing on a rolling schedule, not once at onboarding. Check COIs at every renewal date, confirm state licenses stay active, and re-qualify any vendor before inviting them to bid so 'prequalified' still means verified.

The vendor you just invited to bid lost their license 8 months ago

You pulled up the approved vendor roster, saw the roofer you liked from two years ago, and sent them the RFP. What the spreadsheet did not tell you: their state license went inactive last fall, their general liability certificate expired in March, and the owner sold the company to his nephew who kept the name.

None of that shows up in a cell that says Approved. The word looks the same whether the vendor was verified this morning or during the last board president's term. That is the quiet failure at the center of most vendor rosters: the label is permanent, but the qualifications behind it are not.

This is not a rare edge case. On any roster older than a year, a meaningful share of vendors have a lapsed COI, an expired or downgraded license, or a changed entity. You just cannot see which ones without re-checking, and re-checking is exactly the dull, deadline-driven work that never makes it to the top of anyone's day.

Why 'approved' rots silently

The core problem

An approved vendor list is treated as evergreen, but every credential behind it has an expiration date. Insurance certificates lapse annually, state licenses require renewal, and companies get sold, dissolved, or restructured. Nobody sends you a notice when a vendor stops being qualified, so the roster keeps saying 'approved' long after it stopped being true.

Prequalification is a snapshot, not a status. When you first onboarded a vendor, you probably collected a W-9, a certificate of insurance, a license number, and maybe references. That verification was accurate the day you did it. The problem is that you filed it as if it were a permanent fact.

Three things drift after onboarding, and they drift on their own clocks. COIs expire every 12 months, and unless your community is listed as a certificate holder, the insurer never tells you when coverage drops. Licenses lapse or get disciplined, and a contractor mid-project rarely volunteers that news. Companies change hands, so the EIN, the insured entity, and the people doing the work may all be different from what you approved.

The uncomfortable part: the risk is highest exactly when you feel safest. A vendor you have used for years feels trusted, so nobody re-checks. That familiarity is precisely what lets an expired COI sit unnoticed until a worker gets hurt on your property and the certificate you have on file turns out to have lapsed 14 months ago.

At that point the community's own insurance absorbs a claim it should have never carried, and the board asks why a vendor without valid coverage was on an 'approved' list.

What needs re-verification, and how often

Re-verification is not one task on one schedule. Each credential has its own expiration rhythm, and treating them all as an annual chore means you catch lapses late. Match the check to the clock.

Vendor credential re-verification schedule
CredentialWhat lapsesRe-check cadence
Certificate of insurance (GL + workers' comp)Coverage expires annually, or gets cancelled mid-termTrack exact expiration date; re-collect 30 days before
State contractor / trade licenseRenewal missed, license suspended or disciplinedEvery 6 to 12 months and before any bid invite
Business entity statusCompany sold, dissolved, or renamed on SunbizAnnually and on any name or contact change
Additional insured / certificate holder statusCommunity dropped from the endorsementAt each COI renewal
W-9 / tax IDNew ownership, new EINOn any entity change
References / performanceQuality declines, complaints accumulateAnnually or after any incident

The single highest-value check is the COI expiration date, because that is where a lapse converts directly into uninsured liability on your community's balance sheet. According to the Insurance Information Institute, homeowners insurance exists to cover exactly the kind of on-property injury and property damage a lapsed vendor certificate leaves exposed, and a claim that should have been the vendor's becomes the association's problem.

The second highest is license status, because an unlicensed contractor can void warranties, fail inspections, and expose the board to a claim that it approved someone it never should have.

The roster freshness checklist

Run this before any RFP goes out, and on a rolling quarterly pass across the whole roster. It takes minutes per vendor when the data is already organized and hours when it is not, which is why most teams skip it until something breaks.

Checklist

0/11

Before this vendor gets invited to bid again

How an agent monitors expirations continuously

The reason this work slips is not that managers do not know it matters. It is that credential expiration dates are scattered across PDFs, portals, and email attachments, and nothing surfaces them until an RFP forces the question. A software field that says 'approved' does no monitoring at all.

This is the kind of documented, deadline-driven busywork an AI agent absorbs cleanly, because every input is a date on a document and every trigger is a calendar. At One Home Agent we built Victor Vendors for exactly this: he reads each COI, extracts the expiration date and coverage limits, tracks license renewal windows, and flags anything drifting toward lapse before it becomes a problem.

  1. 01

    Ingest every credential document

    The agent reads each COI, W-9, and license record, pulling the expiration dates, coverage limits, insured entity name, and certificate holder status into a structured record instead of a filing cabinet.

  2. 02

    Watch the calendar continuously

    Instead of a once-a-year audit, expirations are monitored daily. When a COI or license enters its 30-day window, the vendor is flagged and an updated document is requested automatically.

  3. 03

    Cross-check for entity drift

    The agent compares the name on the insurance certificate, the W-9, and the state license. A mismatch, a dissolution, or a new EIN gets surfaced as a re-qualification task, not silently ignored.

  4. 04

    Escalate the judgment calls to a human

    The agent does not remove vendors or approve exceptions on its own. It presents the flag with the evidence, and the manager or board decides whether to re-qualify, sub out, or accept a documented exception.

That last step is the line that matters. The agent handles the tracking, the reading, and the chasing. A human still owns the decision to keep a vendor on the list, waive a requirement, or pull someone off. The busywork is automated; the judgment is not.

What happens at RFP time when the roster is actually fresh

The payoff

When the roster is continuously verified, sending an RFP is a clean action instead of a gamble. Every vendor you invite has a current COI, an active license, and a matched entity on the day the bid opens. You are not discovering lapses mid-project, and the board is not approving someone who quietly stopped being qualified two renewals ago.

On a stale roster, RFP day starts a scramble. You send invites, half the bidders come back with expired paperwork, and you burn a week re-collecting documents while the board's timeline slips. Worse, you sometimes do not catch the lapse at all and award work to a vendor whose coverage is a fiction.

On a fresh roster, the invitation list is already the qualified list. The vendors who were drifting were flagged and either updated their documents or dropped off weeks earlier. You bid apples to apples among vendors who are provably current, and the board packet can show that every bidder was verified as of the RFP date. That documentation is what protects the board if a decision is ever questioned.

Bottom line

An approved vendor list is only as trustworthy as its last verification date. Treat prequalification as a snapshot that expires, run a freshness audit before every RFP, and let an agent handle the continuous date-watching so the roster you bid out is qualified on the day it matters, not the day you onboarded someone.

Make your approved list actually approved

Put a freshness audit on autopilot

We build custom AI operations agents trained on your communities, and the first one is free. Victor Vendors tracks every COI, license, and entity change so your roster is verified before the RFP goes out, not after a claim comes in.

See PM ops agents

Frequently asked questions

Re-verify certificates of insurance at each annual renewal and track exact expiration dates. Check state licenses every six to twelve months and again before any bid invitation. Confirm business entity status annually and on any name or ownership change. The safest rule is to re-verify any vendor before inviting them to bid.

Sources & further reading

  1. Insurance Information Institute, Homeowners insurance facts & statistics
  2. National Association of Residential Property Managers (NARPM)
  3. Florida DBPR, Condominiums (milestone inspections)

Keep reading

Property ManagementAI Vendor COI Tracking: The Job Nobody Does Well8 min readProperty ManagementMaintenance Vendor Management for Property Managers8 min readProperty ManagementVendor Onboarding: Fixing the W-9 and COI Bottleneck8 min read