Skip to content

For general contractors

Protect your downstream risk transfer on every project and trade.

Pikorua Security reads every subcontractor certificate and the endorsement pages behind it, checks them against the insurance exhibit in your subcontract, chases the sub's broker, and holds payment until the gaps close. Your PMs stop chasing paper. Your risk team stops guessing about tender acceptance.

Tender readiness
SC-2214-031

Ridgeline Roofing Inc.

Harbor Point Medical Office · GL 7741-0093-22 · exp 03/01/2027

4/6

verified

  • Each occurrence

    $1,000,000 required, $1,000,000 on policy

  • Per project aggregate

    $2,000,000 for Harbor Point scheduled

  • AI, ongoing operations

    Owner, GC and lender scheduled on page 3

  • AI, completed operations

    Not attached. Exhibit B section 4.2 requires completed ops for 3 years after turnover

  • Primary & non-contributory

    Found on page 5, owner and GC listed

  • Waiver of subrogation, GL

    Box checked on the certificate, endorsement not attached

Pay app #4 on holdFlagged 10/16/2026, 9:02 AM

The GC risk landscape

Risk transfer fails quietly, in tiers, and usually after turnover.

Your subcontract shifts risk to the trade doing the work. That transfer only holds if the sub's policy carries the right endorsements, at the right edition, naming the right parties, on the day the claim happens.

Multi-tier subcontracting

Additional insured status flows down by contract, not by default. A tier 2 hauler working for your excavator has no relationship with you or the owner unless the excavator flowed your exhibit down and the hauler's policy answers it. CG 20 38 can extend automatic status to the owner, but only when the written construction agreement says so.

  1. OwnerHarbor Point Health Partners LLC
  2. General contractorCalder Brooks Builders Inc.
  3. Tier 1Granite Valley Excavating
  4. Tier 2Delmar Hauling LLC

Action over claims

A sub's employee is hurt on your site, collects workers' comp, then sues you as the GC. You tender to the sub's carrier and implead the sub under the indemnity clause. The claim now runs back to the employer that workers' comp was meant to protect.

Carriers answer with manuscript action over exclusions, employer's liability limits, and CG 21 39, which strips the indemnity you thought you bought. In New York, Labor Law 240 and 241 claims make action over exposure especially severe.

Why carriers reject tenders

  • Completed operations claim, but only CG 20 10 (ongoing operations) was attached
  • AI box checked on the certificate, no endorsement issued
  • Named insured on the policy is a trade name, not the LLC that signed
  • 07 04 and later wording covers you only for injury caused, in whole or in part, by the sub
  • Policy carries CG 21 39 or CG 24 26 and the indemnity has nothing behind it

64%

of COIs claiming additional insured status fail to attach the CG 20 37 completed operations endorsement

IRMI Construction Risk Survey

$150,000+

average out-of-pocket litigation and SIR loss when an additional insured tender is rejected

IRMI Construction Risk Analysis

Project manager workflow

Eliminate 10+ hours per week of manual COI collection per project team.

A project team onboarding and renewing 30 subcontractors sees 15 to 20 certificate packets a week once resubmissions are counted. At 25 to 40 min per packet, that is roughly 6 to 13 hours of reading before anyone calls a broker. Pikorua Security takes the reading, the chasing and the renewal tracking off the PM entirely.

TaskManual, per project teamWith Pikorua Security
Request certificates from new subsPM emails the sub, attaches Exhibit B, follows up twice, forwards whatever arrives to the risk team.Invite goes to the sub and its broker the moment the commitment is created in Procore.
Read the endorsement pages25 to 40 min per packet (CFMA Time Study), usually by a project engineer who was hired to build.Form numbers, edition dates and schedules extracted and matched in about 15 seconds per packet.
Compare against the subcontract exhibitSide-by-side reading of Exhibit B and a 6 to 12 page PDF, repeated for every sub on every project.Exhibit B becomes a rule set once. Every upload runs against it, by project and by tier.
Chase the brokerPhone tag through the sub to its retail agent. 28 days average cycle (Pikorua Security Benchmark Data).Specific deficiency checklist to the sub and broker together, zero-login upload. 4.2 days average resolution.
Track renewalsExpiry column in a spreadsheet. 25% to 35% of policies lapse mid-project unnoticed (Pikorua Security Benchmark Data).60/30/15/0 day cadence starts on its own and stops when the renewal verifies.
Release paymentAccountant asks the PM, the PM searches email, the pay app waits.Hold set or cleared on the commitment automatically, with the reason visible to accounting.

Subcontractors never create an account. They and their brokers receive one link per request, upload the missing endorsement, and see exactly which line of your exhibit it satisfies. That keeps onboarding fast for trade partners who juggle a dozen GCs' portals.

Two different questions

Pre-qualification is not project compliance.

Pre-qualification asks whether a firm can carry the risk at all: carrier ratings, limits against your master subcontract agreement, employer's liability, safety record. It happens once a year, before the bid list goes out.

Project compliance asks whether this scope, for this owner, is insured today. The owner and lender must be scheduled, the project designated for its own aggregate under CG 25 03, completed operations attached, and the policy term must outlast the schedule. A sub can pass prequal in January and still be uninsured for your project in October.

Pikorua Security keeps both views on one vendor record, so a prequal approval never stands in for a project check.

Bidder pre-qualification · Q4 bid list
Master subcontract agreement rules
BidderGL carrier AM BestGL limitsEL each accidentEMRDecision
Summit Steel ErectorsStructural steelA+ XV$1M / $2M$1,000,0000.82Approved to bid
Keystone Mechanical LLCHVAC & mechanicalA XII$1M / $2M$1,000,0000.96Approved to bid
Ridgeline Roofing Inc.RoofingA- VIII$1M / $2M$500,0001.12Conditional: EL below MSA
Delmar Hauling LLCHaulingB++ IX$1M / $2M$1,000,0001.31Not approved: carrier below A- VII
Clearspan Glazing Inc.GlazingA X$1M / $2M$1,000,0000.88Approved to bid

Company-level answer to one question: can this firm carry the risk? Checked once a year against your master subcontract agreement minimums, carrier ratings (A- VII or better) and EMR you collect on the prequal form.

Project compliance board
Synced with Procore 4 min ago

Harbor Point Medical Office

Job 2214 · Baltimore, MD

2/6 compliant · 2 holds

Roofing

  • Ridgeline Roofing Inc.T1

    CG 20 37 missing; CG 24 04 not attached

    Deficient Payment hold
  • Cornerstone Sheet Metal LLCT2

    Under Ridgeline Roofing Inc.. Flow-down exhibit sent 10/12, awaiting first certificate

    Pending

Structural steel

  • Summit Steel ErectorsT1

    All 9 rules verified 09/22/2026

    Compliant
  • Ironbridge Welding Co.T2

    Under Summit Steel Erectors. GL expires 11/01/2026, day 30 renewal request sent

    Expiring

Electrical

  • Brightwire Electric Inc.T1

    Verified 10/02/2026, umbrella follows form

    Compliant

HVAC & mechanical

  • Keystone Mechanical LLCT1

    Named insured reads Keystone Mech. Services, not the contracting LLC

    Deficient Payment hold

Westfield Logistics Center Ph. 2

Job 2231 · Columbus, OH

2/4 compliant · 1 hold

Excavation & sitework

  • Granite Valley ExcavatingT1

    XCU exclusion removed by endorsement, verified

    Compliant
  • Delmar Hauling LLCT2

    Under Granite Valley Excavating. Auto $750,000 CSL, exhibit requires $1,000,000

    Deficient Payment hold

Concrete

  • Pioneer Concrete WorksT1

    Umbrella renews 10/31/2026, day 15 reminder queued

    Expiring

Fire protection

  • Sentinel Fire Protection Inc.T1

    Verified 10/08/2026

    Compliant

Cedar Row Apartments

Job 2240 · Raleigh, NC

2/5 compliant · 1 hold

Drywall & framing

  • Tri-State Drywall & FramingT1

    CG 21 39 contractual liability limitation on policy

    Deficient Payment hold

Plumbing

  • Northfork Plumbing Co.T1

    Verified 09/30/2026

    Compliant

Glazing & curtain wall

  • Clearspan Glazing Inc.T1

    Broker upload received 10/15, endorsements parsing

    Pending

Painting & coatings

  • Evergreen Coatings LLCT1

    Verified 10/05/2026

    Compliant
  • Precision Prep ServicesT2

    Under Evergreen Coatings LLC. AI shown in certificate remarks only, no endorsement

    Deficient

Project compliance board

Every project, trade and tier on one screen.

Filter by project, status or name, and switch tier 2 sub-subs on or off. Deficient subs with open pay applications show the hold that is protecting you. Project executives see the roll-up; PMs see the three items that need a call today.

  • Roll-ups by project, trade, region and entity
  • Holds mirrored from Procore commitments and CMiC subcontracts
  • Exports of the full audit trail for any sub, any date

Worked example

A $50M general contractor with 150 active subcontractors a year.

At the 71% first-review defect rate (AGC Risk Committee Audit), about 106 of those subs hold a defective certificate. Reviewing and chasing each one takes about 4 hours a year across initial review, renewals and follow-up: 600 hours of PM time. Any one of the 106 can turn into a rejected tender and $150,000+ of SIR exposure.

non-compliant subcontractors in active files
~106
non-compliant subcontractors in active files
150 subs at a 71% defect rate
a year of PM payroll spent reviewing and chasing
$27,000
a year of PM payroll spent reviewing and chasing
600 hours at $45/hr loaded
a year for Pikorua Security Professional
$8,388
a year for Pikorua Security Professional
$699/mo billed annually
administrative hours recovered every year
520
administrative hours recovered every year
Pikorua Security worked example

Construction systems

Holds live where your accountants already work.

Compliance status is written into the system that releases money. Nobody has to remember to check Pikorua Security before approving a pay application.
  • Procore logoProcore

    When a commitment is created in Procore, Pikorua Security invites the sub and its broker, attaches the project's exhibit rules and writes compliance status back to the company record. A deficient sub gets a hold on its commitment; the hold clears itself when the broker's upload verifies.

    • Directory companies
    • Commitments
    • Subcontractor invoices
    • Insurance expiry
    How the Procore sync works
  • CMiC logoCMiC

    Pikorua Security reads vendors and subcontracts from CMiC and writes compliance status and expiry dates back. Accounts payable sees the hold reason on the subcontract before the payment run, not after.

    • Vendors
    • Subcontracts
    • AP payment holds
    • Expiry dates
    How the CMiC sync works
  • Autodesk Construction Cloud logoAutodesk Construction Cloud

    Companies in an ACC project directory map to Pikorua Security vendors, so a sub added to a project is checked against that project's exhibit. Compliance status sits next to the company name for the project team.

    • Project companies
    • Project directory
    • Compliance status
    How the Autodesk Construction Cloud sync works
Pikorua Security found completed operations gaps in subs we had already approved. Our PMs stopped chasing brokers, and when a claim lands the tender packet is already built.
VP Risk ManagementENR Top 100 commercial general contractorRead the case study

FAQ

Questions GC risk teams ask first.

Pikorua Security is an automated compliance verification software platform. Pikorua Security does not provide legal advice, insurance underwriting, or claims adjusting services, and is not an insurance agency or broker. Receipt of a certificate of insurance does not guarantee coverage under the underlying policy.

Talk to sales
Does Pikorua Security read the endorsement pages or only the ACORD 25?
Both. The ACORD 25 states it is issued as a matter of information only and confers no rights on the certificate holder, so Pikorua Security reads every page behind it. It identifies each form by number and edition date (CG 20 10 04 13 is not CG 20 10 11 85), checks that your project, owner and lender are scheduled, and flags certificates that check the additional insured or waiver box with no endorsement attached.
How do you handle sub-subcontractors at tier 2 and below?
Each tier 1 sub gets a flow-down version of your exhibit for its own subcontractors. Tier 2 firms receive their own upload link, appear under their parent on the project board, and the parent sub is copied on deficiency notices. Where the sub's policy uses CG 20 38, Pikorua Security confirms the automatic status reaches the owner and other parties your contract requires.
Can Pikorua Security hold payment in Procore or CMiC?
Yes. On the Professional plan, a deficient sub gets a compliance hold on its Procore commitment so pay applications cannot be approved until the gap closes. CMiC subcontract and AP holds are part of Enterprise. Holds release automatically when the broker's upload verifies, and the accountant sees the exact reason in both systems.
What changes on an OCIP or CCIP wrap-up project?
Under a wrap-up, the sponsor's program usually provides general liability, workers' comp and excess for enrolled contractors' on-site work. You can mark a project as wrapped, record each sub's enrollment, and narrow the rules to what still sits with the sub: auto liability, off-site operations and any coverage the wrap excludes.
Does Pikorua Security decide whether a tender will be accepted?
No. Pikorua Security is software. It verifies documents against your contract requirements and assembles the tender packet: the subcontract exhibit, certificate, endorsement pages with edition dates and the notice log. It does not provide legal advice, is not an insurance agency or broker, and does not adjust claims. Coverage decisions belong to the carrier, and coverage disputes to your counsel.

14-day free production trial

Find the completed operations gaps before a claim does.

Upload a current project's subcontractor certificates. Pikorua Security shows every missing endorsement, wrong named insured and short limit in about 10 minutes.