Every compliance document expires eventually. The question is not whether expirations will happen — it is whether you have a defined process for handling them or whether you will discover the lapse at the worst possible moment.
This guide covers the complete expiration management process: advance notice, vendor communication, grace period decisions, work authorization, and what to do when vendors do not respond.
Step 1: Know Before It Happens
The only acceptable way to manage document expirations is to know about them in advance. A compliance program that discovers expirations after the fact is not a compliance program — it is an audit trail for how a risk was missed.
Set expiration alerts at 60 and 30 days. Sixty days gives you time to make contact and still have buffer if the vendor is slow to renew. Thirty days is the action deadline — if you do not have a renewed document by 30 days before expiration, you need to make a work authorization decision.
Track every expiration date in a single system. COI expiration, license renewal, contract term end, tax exemption certificate expiration — all in one place, visible at a glance. If this information lives in multiple spreadsheets, multiple inboxes, or multiple systems, some expirations will fall through the gaps.
Step 2: Notify the Vendor Early
When a document is 60 days from expiration, send the vendor a notice. The communication should:
- Identify the specific document and expiration date
- State clearly what you need from them (a renewed certificate, an updated license, a new authorization)
- Provide instructions for how to submit the renewal
- State the consequence if the document is not renewed before expiration (work hold, payment hold, or both)
Most vendors do not intentionally let documents lapse — they forget, or they are waiting for their insurer or licensing board to process the renewal. An early notice gives them time to act before the expiration creates a problem.
Keep the notice factual, not threatening. The goal is renewal, not confrontation. A tone of "here is what we need and when we need it" works better than "failure to comply will result in..."
Step 3: Define Your Grace Period Policy
Most compliance programs include a grace period — a window after expiration during which a vendor remains authorized while the renewal is in process. Grace periods are a practical necessity because document renewals are not always instantaneous.
Reasonable grace periods by document type:
- COI: 7–14 days. Insurance certificates are typically issued within 24–48 hours of policy renewal. A two-week grace period is generous.
- Professional license: 30 days. License renewals involve a licensing board and can take longer.
- Business license: 30 days. Similar to professional licenses.
- Contracts: No grace period. An expired contract is an uncontrolled engagement.
Document your grace period policy. It should not be a judgment call made differently by different people — it should be a written policy that is applied consistently.
Step 4: Make a Work Authorization Decision
When a document expires without renewal, you need to make an explicit decision about work authorization. Your options:
Hold new work but allow work in progress to complete. This is often the right call for short-term lapses when the vendor has indicated renewal is in process.
Hold all work and payment. Appropriate when the lapse is significant, when the vendor has not responded to renewal requests, or when the nature of the work creates meaningful liability exposure.
Document the exception and continue. Only appropriate in very limited circumstances — for example, when you have direct confirmation from the vendor's insurer that the renewal is being processed and coverage is continuous. Document the exception, who approved it, and the basis for the decision.
Whatever you decide, document it. A compliance program without documentation of decisions does not exist from an audit perspective.
Step 5: Communicate the Decision to the Vendor
When you make a work hold decision, tell the vendor:
- What the hold is
- What triggered it
- What they need to do to resolve it
- How to submit the renewal when it is ready
Avoid surprise work holds if you can. A vendor who received a 60-day notice and did not act was warned. A vendor who received no notice and discovers they are on hold when their invoice is rejected will be frustrated and may escalate the issue.
Step 6: Process the Renewal
When the vendor submits a renewed document:
- Validate it against your requirements (coverage types, limits, expiration date, certificate holder)
- Record the new document and expiration date in your compliance system
- Update the vendor's compliance status
- Lift any work or payment holds
- Notify the relevant stakeholders that the hold has been resolved
This step should be fast — within 24 hours of receiving a valid renewal document, the hold should be lifted. Slow renewal processing damages vendor relationships and operations for no compliance benefit.
Handling Non-Responsive Vendors
Some vendors will not respond to renewal notices. After multiple attempts:
- Escalate internally — the relationship owner for this vendor should be making direct contact
- Send a formal notice that work will be suspended on a specific date if no renewal is received
- Follow through on the suspension if the date passes without response
- Document every communication attempt
A vendor who cannot maintain required compliance documents is a vendor risk in itself — they may be experiencing financial difficulty, license suspension, or operational problems. Non-responsiveness on compliance is worth investigating.