Insurance Compliance
-
15 minute
Sonant AI

Here's a stat that should stop every CSR mid-keystroke: industry compliance data suggests the majority of COIs are noncompliant on first submission or review. Many of those failures trace directly back to form-selection errors or incomplete fields on property evidence forms. When a lender rejects a certificate because you used the wrong ACORD form - or left a critical field blank - your agency absorbs the rework, your insured absorbs the frustration, and the transaction stalls.
The ACORD 28 is the standardized certificate that provides evidence of commercial property insurance coverage, acting as proof that a property used in the conduct of business carries active insurance. As SmartCompliance explains, ACORD - a nonprofit founded in 1970 - created these forms to simplify the process of proving insurance coverage to a third party. Today, ACORD forms remain the industry standard by which insureds prove Certificates of Insurance.
One critical distinction before we go further: an ACORD certificate of insurance is not an insurance policy. It simply certifies that a policy exists. This article serves as a practical, field-by-field reference that agents and CSRs can bookmark and use every time they issue an ACORD 28 form. For broader context on the full ACORD form family, visit our ACORD forms master guide.
The ACORD 28 - formally titled "Evidence of Commercial Property Insurance" - is a verification document that assures the certificate holder that the property in question carries active coverage. According to Click-Vision's industry analysis, that certificate holder is often a landlord, lender, or business partner who needs written proof before finalizing a transaction.
The form is intended for companies or organizations that need to provide proof that their commercial properties are insured. This stands in direct contrast to the ACORD 27, which pertains to personal property coverage. The current ACORD 28 (2016/03) version has typically been used for larger commercial properties, as Seyfarth Shaw notes in their lease transaction guide.
The form does not outline policy exclusions. Those details live exclusively in the full insurance policy document. Since 2006, both ACORD 27 and ACORD 28 certificate forms have explicitly stated that they are issued as a matter of information only and confer no rights upon the certificate holder.
You will encounter ACORD 28 requests from several parties:
The form typically includes details about the insurance provider, the policyholder, and the policy's coverage limits. It applies across real estate, construction, and commercial transactions. Agencies that handle high volumes of these requests can benefit from tools that boost agency efficiency and reduce manual processing time.
Research shows that ACORD 25 and ACORD 28 forms alone cover 80%+ of all certificates used in commercial real estate, construction, and vendor management. Understanding when to use each form eliminates the most common cause of certificate rejections.
Each form serves a fundamentally different insurance line. The ACORD 25 certificate covers liability, while the ACORD 27 addresses personal or residential property, and the ACORD 28 evidence of property insurance handles commercial property. Mixing these up creates delays, compliance gaps, and frustrated clients.
ACORD 25 vs. ACORD 27 vs. ACORD 28 Decision Table
| Criteria | ACORD 25 | ACORD 27 | ACORD 28 |
|---|---|---|---|
| Form Full Name | Certificate of Liability Insurance | Evidence of Property Insurance | Evidence of Commercial Property Insurance |
| Insurance Type | General Liability | Personal Property | Commercial Property |
| Primary Use Case | Proves liability coverage | Proves personal property coverage | Proves business property coverage |
| Typical Requestor | Vendors / Contractors | Mortgage lenders | Commercial lenders |
| Target Insured | Businesses / Individuals | Homeowners / Renters | Companies / Orgs |
| Common Industries | Construction, CRE | Residential lending | CRE, Vendor mgmt |
| Coverage Scope | Bodily injury & property damage liability | Dwelling & personal contents | Buildings & business personal property |
Sources: Form assignments per ACORD. Current ACORD 28 version: 2016/03.
Ask yourself three questions when a certificate request arrives:
When a single transaction requires both liability and property evidence - common in commercial leases - you will issue both an ACORD 25 and an ACORD 28. The ACORD 125 commercial application may also come into play during the initial placement process, so understanding how these forms interconnect prevents downstream errors.
Manual COI review takes 15 to 30 minutes per certificate. Completing the form accurately the first time saves everyone that review cycle. Here is a section-by-section breakdown of what to enter and where errors commonly occur.
The top-left block captures your agency's details. Enter the full legal name of the producing agency, complete mailing address, phone number, fax number, and email. This section also includes the producer's contact name. Double-check this information against your agency management system (AMS) - a surprising number of rejections stem from outdated phone numbers or misspelled agency names.
Directly below the producer block, enter the named insured exactly as it appears on the policy declarations page. This means matching capitalization, punctuation, and legal entity type (LLC, Inc., LP). If the insured operates under a DBA, include it only if the policy lists it.
Identify the insurance company providing coverage. Include the carrier's full name, the NAIC (National Association of Insurance Commissioners) code, and any assigned company letter. Agencies handling multiple carriers should verify the NAIC code against the ACORD 126 supplemental form data when applicable. An incorrect NAIC code triggers an automatic rejection from many lender compliance systems.
This section captures the policy number, effective date, and expiration date. Enter dates in MM/DD/YYYY format. Common errors here include:
Agencies that manage high volumes of renewals benefit from renewal automation tools that pre-populate these fields from existing policy data.
This is where the ACORD 28 form earns its keep. You must identify each covered property location with its full street address, city, state, and ZIP code. Describe the property (e.g., "three-story brick office building"), construction type, and year built. Enter the building value, business personal property value, and any business income coverage amount.
If the policy covers multiple locations, list each one. When space runs short, use the remarks section or attach a supplemental schedule. The ACORD 140 commercial property form provides additional detail for complex property submissions.
Indicate the type of coverage form - basic, broad, or special (also called "open perils"). Check the appropriate boxes for covered causes of loss. Enter the coverage limit for each category: building, personal property, business income, and extra expense. All ACORD forms must include policy numbers, coverage types, limits, and effective dates - this section is where reviewers spend the most time.
Enter the deductible amount and whether it applies per occurrence, per location, or as an aggregate. Lenders pay close attention to deductible levels. A deductible that exceeds the lender's threshold will trigger a request for revision, so verify the lender's requirements before issuing.
This section identifies the party with a financial interest in the insured property. Enter the full legal name and mailing address of each mortgagee or loss payee. Specify the interest type - mortgagee, loss payee, or additional insured. We cover mortgagee requirements in detail below.
Use this section for any additional information required by the certificate holder, such as loan numbers, special endorsement language, or waiver of subrogation notations. Agencies that handle complex customer service requests know this section often determines whether a certificate passes or fails review.
ACORD 28 Field-by-Field Reference
| Field Name | What to Enter | Common Errors |
|---|---|---|
| Agency/Producer Info | Name, address, phone, and license number of the issuing agent or broker | Leaving fields blank or using outdated agency contact info |
| Insured Name & Address | Full legal name and mailing address of the policyholder (business entity) | Using a DBA or abbreviated name instead of the full legal entity name |
| Policy Number | The exact policy number assigned by the insurance carrier | Transposing digits or entering a prior-term policy number |
| Policy Effective & Expiration Dates | Start and end dates of coverage in MM/DD/YYYY format | Listing expired dates or mismatching the actual policy term |
| Insurance Company Name | Full legal name and NAIC number of the carrier providing coverage | Omitting the NAIC number or listing the MGA instead of the carrier |
| Property Coverage & Limits | Covered perils (e.g., Special, Basic, Broad) and dollar coverage limits | Understating limits or failing to specify the correct cause-of-loss form |
| Additional Interest / Loss Payee | Name and address of any mortgagee, lender, or additional interest party | Misspelling the lender name or omitting required loss payee language |
The single most common mistake: issuing an ACORD 27 for a commercial property. Remember, the ACORD 27 is designed for residential or small commercial properties. A strip mall, office building, or warehouse requires the ACORD 28. According to myCOI, an attempt to fill out a business COI without the correct insurance provider information is considered invalid and illegal.
Lenders require specific language - typically a "standard mortgagee clause" or "lender's loss payable clause." If you omit this language or enter a generic description, the lender will reject the certificate. We address this in the mortgagee section below.
Entering the market value instead of the insured replacement cost value creates a mismatch that raises red flags during review. Always pull values directly from the policy declarations page, not from tax assessments or appraisals.
When a policy covers five locations but the certificate only shows three, the certificate holder assumes the missing locations lack coverage. List every relevant location or reference the attached schedule in remarks. Agencies with AI-powered admin support can cross-reference location schedules automatically to avoid this oversight.
An outdated phone number or email address in the producer block means the certificate holder cannot reach your agency for verification. This minor error causes disproportionate delays in time-sensitive transactions. Agencies using AI phone answering ensure that even if a certificate holder calls outside business hours, someone picks up.
Lenders do not simply want their name on a certificate. They require specific protective language that defines their rights in the event of a claim or policy cancellation. Understanding the differences between clause types prevents the most frustrating category of certificate rejections.
Mortgagee Clause Types and Language
| Clause Type | Protection Level | Typical Use | Key Language |
|---|---|---|---|
| Standard Mortgagee | High | Commercial Loans | Loss payable to mortgagee as interest appears |
| Loss Payee | Moderate | Equipment/Property | Loss payable to named loss payee |
| Additional Insured | Low | Lease Agreements | Coverage extends to named additional insured |
When a lender reviews your ACORD 28, they check these items in order:
Fail any one of these checks, and the certificate bounces back. Agencies that track these requirements systematically - whether through their AMS or through AI-powered qualification workflows - dramatically reduce revision cycles.
Most lenders require 30 days' written notice of cancellation (10 days for non-payment). The ACORD 28 includes a section for this, but the form's standard language states that the insurer will "endeavor to" provide notice - a phrase lenders often find insufficient. Check whether the carrier offers an endorsement that provides guaranteed notice, and reference that endorsement number in the remarks section.
Sonant's AI Receptionist handles routine ACORD form calls so your CSRs can focus on getting every field right the first time.
Schedule a DemoThe ACORD 28 provides evidence of commercial property insurance - a confirmation that coverage exists. The ACORD 75, titled "Insurance Binder," serves a different purpose: it provides a temporary summary of coverage bound before the formal policy is issued.
Some CSRs confuse these forms because both relate to commercial property. The distinction is timing. Use the ACORD 28 after the policy is in force. Use the ACORD 75 during the binding period before the policy documents arrive. Once the policy is issued, replace any ACORD 75 with a proper ACORD 28.
In fast-moving real estate closings, a lender may accept an ACORD 75 binder initially and then require an ACORD 28 within 30 days. Document this requirement in your AMS and set a follow-up task. Agencies that manage high transaction volumes can use AI scheduling assistants to automate these follow-up reminders and ensure nothing slips through the cracks.
A mid-size commercial agency might process dozens of ACORD 28 requests per week. Each one takes 8 to 12 minutes to complete manually. Multiply that across a book of business, and certificate processing consumes a significant portion of CSR time - time that could go toward relationship building and account rounding.
At Sonant AI, we see the certificate request process begin well before a CSR opens the form. It starts with a phone call. A lender calls to request evidence of property insurance. A landlord calls to verify a tenant's coverage. These inbound requests carry specific details - loan numbers, property addresses, coverage requirements - that must transfer accurately to the person completing the certificate.
AI receptionists capture these details during the initial call, route them to the appropriate CSR with all required information attached, and eliminate the back-and-forth that adds days to the process. This approach complements AI call assistant technology already transforming how agencies handle customer interactions. Agencies exploring these tools can review our guide to AI receptionists for insurance.
Modern AMS platforms can auto-populate many ACORD 28 fields from existing policy data. If your system supports this, take advantage of it - but always verify the output against the current policy declarations page. Outdated data in your AMS creates the same errors as manual entry. Agencies evaluating technology investments can explore 100+ AI tools for agencies to find solutions that integrate with their existing workflows.
Before sending any ACORD 28 evidence of property insurance to a certificate holder, verify these items:
Major lenders have specific requirements for ACORD 28 submissions. Some require minimum coverage limits. Others mandate specific deductible thresholds or cancellation notice periods. Maintain a reference database of your most frequent lender requirements. This saves research time on every subsequent certificate and reduces rejection rates. CSR teams that handle these requests alongside other remote customer service functions find this database especially valuable.
Every CSR on your team should complete the ACORD 28 the same way. Create a standard operating procedure that covers field-by-field instructions, common requestor requirements, and escalation paths for unusual situations. Agencies that invest in 24/7 support infrastructure extend this consistency beyond business hours.
The ACORD 28 provides evidence of commercial property insurance for business properties like offices, warehouses, and retail spaces. The ACORD 27 provides evidence of property insurance for residential or small commercial properties. As Insureon clarifies, the ACORD 25 covers general liability, while the ACORD 28 covers commercial property. Always match the form to the property type.
No. Since 2006, both ACORD 27 and ACORD 28 forms explicitly state that they are issued as a matter of information only and confer no rights upon the certificate holder. The certificate holder's rights come from the policy itself and any applicable endorsements - not from the certificate.
No. The authorized representative of the insurance company or the producing agent must sign the form. Issuing a certificate without proper authorization creates errors and liability exposure. Your agency's workflow tools should include authorization verification as a required step.
List each location in the property information section. If the form lacks sufficient space, note "See attached schedule" in the remarks section and attach a complete location schedule. Every location the certificate holder cares about must appear explicitly.
Reissue whenever the policy renews, when coverage changes materially, or when the certificate holder requests an updated copy. Many lenders require a new certificate within 30 days of policy renewal. Agencies using AI phone agents can handle renewal-triggered reissuance requests without pulling licensed staff off higher-value work.
The ACORD 28 itself is not a contract or policy. It serves as evidence that a policy exists with the stated coverages and limits. The insurance policy document remains the binding legal instrument. However, inaccurate certificates can create errors and omissions (E&O) liability for the issuing agency.
Automated systems typically check the named insured, policy dates, coverage limits, deductible amounts, and mortgagee/loss payee information. They flag mismatches against stored requirements instantly. Agencies that invest in AI-powered virtual assistants and lead quality processes tend to approach certificate accuracy with the same systematic rigor.
The ACORD 28 form is one of the most frequently issued documents in commercial insurance, yet agencies continue to lose time and credibility to avoidable errors. By mastering the field-by-field requirements, understanding the distinctions between ACORD 25, 27, and 28, and building systematic processes around lender requirements, your team transforms certificate processing from a bottleneck into a competitive strength.
Bookmark this guide. Share it with every CSR on your team. And if your agency handles high volumes of inbound certificate requests, consider how Sonant AI's AI receptionist captures caller details - property addresses, loan numbers, lender names - and routes them directly to the right person with everything needed to complete the ACORD 28 accurately on the first attempt. When every interaction counts, getting the details right from the first phone call makes all the difference.
Sonant's AI Receptionist handles routine certificate and evidence of property inquiries automatically, so your CSRs focus on getting ACORD 28 forms right the first time.
Schedule a DemoThe AI Receptionist for Insurance
Our AI receptionist offers 24/7 availability, instant response times, and consistent service quality. It can handle multiple calls simultaneously, never takes breaks, and seamlessly integrates with your existing systems. While it excels at routine tasks and inquiries, it can also transfer complex cases to human agents when needed.
Absolutely! Our AI receptionist for insurance can set appointments on autopilot, syncing with your insurance agency’s calendar in real-time. It can find suitable time slots, send confirmations, and even handle rescheduling requests (schedule a call back), all while adhering to your specific scheduling rules.
Sonant AI addresses key challenges faced by insurance agencies: missed calls, inefficient lead qualification, and the need for 24/7 client support. Our solution ensures you never miss an opportunity, transforms inbound calls into qualified tickets, and provides instant support, all while reducing operational costs and freeing your team to focus on high-value tasks.
Absolutely. Sonant AI is specifically trained in insurance terminology and common inquiries. It can provide policy information, offer claim status updates, and answer frequently asked questions about insurance products. For complex inquiries, it smoothly transfers calls to your human agents.
Yes, Sonant AI is fully GDPR and SOC2 Type 2 compliant, ensuring that all data is handled in accordance with the strictest privacy standards. For more information, visit the Trust section in the footer.
Yes, Sonant AI is designed to integrate seamlessly with popular Agency Management Systems (EZLynx, Momentum, QQCatalyst, AgencyZoom, and more) and CRM software used in the insurance industry. This ensures a smooth flow of information and maintains consistency across your agency’s operations.