You signed the subcontract agreement two weeks ago. Rate is locked, start date is on the calendar, badge request is in the system. Then three days before you're supposed to show up, the vendor manager emails asking for your certificate of insurance — and your business doesn't have one yet.
This happens more often than any background check delay or drug screen hiccup. Insurance is the piece corp-to-corp consultants forget because W-2 consultants never had to think about it. If you're running your own LLC or S-corp and subcontracting into a prime vendor or client, insurance isn't optional paperwork. It's a gating item, and getting it wrong costs you a start date.
Here's what to actually have in place before you sign your next C2C agreement — not after.
Why the Certificate of Insurance Stalls More Start Dates Than Anything Else
Prime contractors and end clients carry their own liability exposure. When they bring in a subcontracted consultant, they push that risk downstream through insurance requirements written into the master services agreement or the subcontract itself.
The document that proves you meet those requirements is the Certificate of Insurance, almost always issued on an ACORD 25 form. Your insurance broker generates it, listing your coverage types, limits, and effective dates. Vendor compliance teams cross-check it against contract language before releasing a start date — sometimes automatically, sometimes manually, always slowly if something's missing.
The problem is timing. Binding a policy can take a same-day quote if you already have a business entity and clean history. But if you're forming a new LLC, adding a policy type you've never carried, or your carrier needs underwriting time for a higher limit, that can eat a week or more. Vendors don't extend start dates for insurance delays. They move to the next candidate.
General Liability: The Baseline Every Prime Vendor Requires
Commercial General Liability (CGL) covers third-party bodily injury, property damage, and advertising injury claims. For an IT consultant working on-site or remote, actual claims are rare — but it's still the first line item on nearly every subcontract insurance rider.
Typical limits requested:
- $1,000,000 per occurrence
- $2,000,000 aggregate
These are common client-requested figures, not a legal floor. Some staffing agreements ask for less; some ask for more if you're touching client hardware or working in a regulated facility. Read the actual contract language rather than assuming a standard number applies.
Professional Liability (E&O): The One That Actually Matters for IT Work
Errors and Omissions insurance — professional liability — covers claims that your work product caused a financial loss: a bad deployment, a missed deadline that cost the client money, a configuration error that took down a system. This is the coverage most directly tied to what you actually do as a technology consultant, and it's the one clients scrutinize hardest.
Typical limits: $1,000,000 per claim / $1,000,000 to $3,000,000 aggregate, depending on the engagement's risk profile. Data-heavy roles — architecture, security, DevOps with production access — tend to see requests at the higher end.
If you're new to running E&O insurance, know that carriers ask about your specific role, not just your industry. "IT consulting" as a category covers everyone from help desk to cloud architect, and underwriters price accordingly.
Workers' Compensation: Rules Vary by State — Check Yours
Workers' comp requirements depend on how your business is structured and which state you're operating in, so don't assume the rule from your last contract applies to this one.
- Many states exempt sole proprietors and single-member LLCs with no employees from carrying workers' comp on themselves.
- Some states — including a handful of monopolistic-fund states like Ohio, Washington, North Dakota, and Wyoming — require coverage through a state fund rather than a private carrier, with different rules for corporate officers.
- Vendors and end clients frequently require proof of workers' comp regardless of the exemption, simply because their own insurance rider demands it from every subcontractor on the chain.
Don't rely on secondhand advice here. Check your state's labor or workers' compensation board website, or confirm directly with your insurance carrier, before assuming you're exempt.
Cyber Liability: Increasingly Requested, Not Yet Universal
Cyber liability insurance covers data breach response, notification costs, and related liability if a security incident traces back to your work. It's not yet a standard line item on every C2C agreement, but it's showing up more often — particularly for consultants with access to production systems, PII, or client networks in finance, healthcare, and government-adjacent work.
Where requested, limits commonly run $1,000,000 per claim. If your engagement involves system access rather than pure advisory work, ask the vendor early whether cyber coverage is part of their rider. Adding it after the fact, mid-contract, is a slower process than adding it during initial underwriting.
Additional Insured Endorsements: The Detail That Trips People Up
A certificate showing you carry GL and E&O isn't always enough. Many subcontract agreements require the prime vendor and/or the end client to be named as an "additional insured" on your general liability policy — sometimes on your E&O policy too, though that's less common and less standard practice among carriers.
This isn't just a checkbox. It's a policy endorsement that your carrier issues, and it usually requires:
- The exact legal name of the entity to be added
- Sometimes the exact contract or project reference
- A short turnaround request to your broker — often same-day to 48 hours, but not always
Vendors will reject a certificate that lists the coverage but omits the additional insured endorsement they specifically asked for. This single detail is responsible for more delayed start dates than any coverage gap.
The Pre-Onboarding Insurance Checklist
| Coverage | Typical Client-Requested Limit | Common Gotcha |
|---|---|---|
| General Liability | $1M / $2M aggregate | Missing additional insured endorsement |
| Professional Liability (E&O) | $1M–$3M aggregate | Role description doesn't match underwriting application |
| Workers' Compensation | Statutory, state-dependent | Exemption rules vary by state and entity type |
| Cyber Liability | $1M per claim (if requested) | Not in original policy, requires separate binder |
Before you sign your next subcontract agreement, pull the insurance requirements section and match it line by line against your current certificate. If anything doesn't match — limit, endorsement, entity name — call your broker that day, not the week before your start date.
If you're weighing a new C2C opportunity and want a second set of eyes on the insurance clause before you sign, the team at Josh Pros LLC has seen these riders across dozens of vendor chains. Reach out at contact@joshpros.com or visit https://joshpros.com.
#C2CInsurance #CertificateOfInsurance #ITConsultant #ErrorsAndOmissions #GeneralLiability #WorkersComp #StaffingCompliance #ContractConsulting #TechContractors #CorpToCorp #InsuranceRequirements #ACORD25
Talk to a real recruiter, not a bot.
We'll tell you the rate, the client, and the terms before you interview. And if we're not the right fit, we'll say so.