OnComply

We use cookies to improve your experience and analyze site usage. Privacy Policy

Back to Blog
Best Practices·4 min read

What to Do When a Vendor's Compliance Document Expires

A step-by-step process for handling vendor document expirations: from first notice through renewal collection to work authorization decisions.

By
OnComply
Published
Updated

Many policies, licenses, certifications, and agreements have renewal or end dates. A defined process helps teams identify those events before they affect work or payment decisions.

This guide covers the complete expiration management process: advance notice, vendor communication, grace period decisions, work authorization, and what to do when vendors do not respond.

Step 1: Know Before It Happens

Record the relevant end date and source when a document is accepted, and test that the reminder process works.

Set risk-based reminder intervals. Work backward from the issuer's renewal process, project needs, contract notice, review time, and consequence of a lapse. Sixty- and thirty-day reminders can be useful defaults, but they are not legal standards.

Track every expiration date in a single system. COI expiration, license renewal, contract term end, tax exemption certificate expiration, all in one place, visible at a glance. If this information lives in multiple spreadsheets, multiple inboxes, or multiple systems, some expirations will fall through the gaps.

Step 2: Notify the Vendor Early

At the first policy-defined reminder, send the vendor a notice. The communication should:

  • Identify the specific document and expiration date
  • State clearly what you need from them (a renewed certificate, an updated license, a new authorization)
  • Provide instructions for how to submit the renewal
  • State the consequence if the document is not renewed before expiration (work hold, payment hold, or both)

An early notice gives the vendor time to act before the expiration creates an operational problem.

Keep the notice factual, not threatening. The goal is renewal, not confrontation. A tone of "here is what we need and when we need it" works better than "failure to comply will result in..."

Step 3: Define Your Grace Period Policy

A grace period is a risk decision, not a universal entitlement. A document's printed end date, a statutory renewal grace period, continuous insurance coverage, and an internal exception are different things. Verify any issuer or regulator grace period at the authoritative source. Define whether work or payment may continue, who may approve an exception, what evidence is required, and when it ends.

Step 4: Make a Work Authorization Decision

When a document expires without renewal, you need to make an explicit work authorization decision. Your options:

Hold new work but allow work in progress to complete. This is often the right call for short-term lapses when the vendor has indicated renewal is in process.

Hold all work and payment. Appropriate when the lapse is significant, when the vendor has not responded to renewal requests, or when the nature of the work creates meaningful liability exposure.

Document an approved exception. If policy and law permit continued work, record who approved it, the evidence, conditions, and expiration. Confirmation that a renewal is being processed is not necessarily proof of continuous coverage or active licensure.

Whatever you decide, document it. A compliance program without documentation of decisions does not exist from an audit perspective.

Step 5: Communicate the Decision to the Vendor

When you make a work hold decision, tell the vendor:

  • What the hold is
  • What triggered it
  • What they need to do to resolve it
  • How to submit the renewal when it is ready

Avoid surprise work holds if you can. A vendor who received a 60-day notice and did not act was warned. A vendor who received no notice and discovers they are on hold when their invoice is rejected will be frustrated and may escalate the issue.

Step 6: Process the Renewal

When the vendor submits a renewed document:

  1. Validate it against your requirements (coverage types, limits, expiration date, certificate holder)
  2. Record the new document and expiration date in your compliance system
  3. Update the vendor's compliance status
  4. Lift any work or payment holds
  5. Notify the relevant stakeholders that the hold has been resolved

Set and monitor a review target appropriate to operational urgency and review complexity. Lift a hold promptly after the required evidence is verified and approvals are complete.

Handling Non-Responsive Vendors

Some vendors will not respond to renewal notices. After multiple attempts:

  1. Escalate internally: the relationship owner for this vendor should be making direct contact
  2. Send a formal notice that work will be suspended on a specific date if no renewal is received
  3. Follow through on the suspension if the date passes without response
  4. Document every communication attempt

A vendor who cannot maintain required compliance documents is a vendor risk in itself; they may be experiencing financial difficulty, license suspension, or operational problems. Non-responsiveness on compliance is worth investigating. Our guide to handling non-compliant vendors covers the escalation playbook in detail.

Authoritative references


All posts
W-9 CollectionCOI TrackingACH AuthorizationDocument Fill & SignAutomated ValidationRenewal RemindersCan-Work / Can-Pay ControlsVendor PortalCompliance DashboardWebhook IntegrationsEligibility APIAudit-Ready ExportsLicense TrackingGrace Period ManagementCustom FormsW-9 CollectionCOI TrackingACH AuthorizationDocument Fill & SignAutomated ValidationRenewal RemindersCan-Work / Can-Pay ControlsVendor PortalCompliance DashboardWebhook IntegrationsEligibility APIAudit-Ready ExportsLicense TrackingGrace Period ManagementCustom Forms