Vendor and Contractor Insurance Requirements: Protecting Your Supply Chain

India's rapid infrastructure expansion, manufacturing scale-up, and services outsourcing boom have created complex supply chains where principal employers routinely engage dozens, sometimes hundreds, of vendors, subcontractors, and service providers on a single project or across ongoing operations. This layered contracting structure introduces a critical risk management challenge: when an incident occurs on your premises or in connection with your project, who bears the financial consequences?

The answer under Indian law is often the principal employer, regardless of how many contracting layers separate the employer from the worker who suffered the injury or the third party who sustained damage. The Factories Act, 1948, under Section 2(n) read with Section 7, designates the occupier of a factory, typically the principal employer, as the person responsible for worker safety on the premises. The Contract Labour (Regulation and Abolition) Act, 1970, under Section 20, imposes direct obligations on the principal employer to ensure that contract labour receives welfare amenities and safe working conditions. When a contractor fails to meet these obligations, the principal employer becomes directly liable.

The Building and Other Construction Workers (Regulation of Employment and Conditions of Service) Act, 1996, extends similar obligations to construction project owners and developers. Under the Real Estate (Regulation and Development) Act, 2016 (RERA), developers are accountable for structural defects for five years post-delivery, even when the actual construction was executed by subcontractors.

The Employees' Compensation Act, 1923 (formerly Workmen's Compensation Act), creates another layer of exposure: if a contractor's worker suffers injury or death in the course of employment and the contractor lacks adequate insurance or financial resources, the injured worker or their dependents can, and frequently do, pursue the principal employer for compensation.

Structuring effective insurance requirements for every vendor and contractor in your supply chain is not administrative overhead; it is the primary mechanism for ensuring that contractual counterparties carry their fair share of risk, and that the principal employer's own balance sheet is not exposed to liabilities generated by parties over whom they have limited operational control.

The contractual framework governing vendor and contractor relationships is the foundation upon which insurance requirements must be built. Without properly drafted liability clauses in the underlying contract, insurance requirements become unenforceable aspirations rather than binding obligations.

The indemnity clause is the cornerstone provision. Under Indian law, indemnity is governed by Sections 124 and 125 of the Indian Contract Act, 1872. An indemnity clause in a vendor or subcontractor agreement should clearly specify: (a) the scope of indemnification, whether it covers bodily injury, property damage, third-party claims, regulatory fines, and consequential losses; (b) the trigger, whether the contractor indemnifies the principal for all claims arising out of the contractor's work, or only for claims arising from the contractor's negligence or breach of contract; and (c) the survival period, ensuring the indemnity obligation survives contract termination for a specified number of years.

Hold-harmless agreements, while conceptually similar to indemnity clauses, serve a distinct function under Indian law. A hold-harmless clause goes beyond indemnification by requiring the contractor to defend the principal employer against claims, not merely reimburse losses after the fact. Indian courts have upheld hold-harmless clauses where they are clearly drafted and do not contravene public policy under Section 23 of the Indian Contract Act. However, a hold-harmless clause that attempts to absolve the principal employer of liability for its own gross negligence may not withstand judicial scrutiny, as Indian courts have consistently held that parties cannot contract out of liability for wilful misconduct.

The insurance procurement clause should be drafted as a condition precedent to contract commencement, meaning the contractor cannot begin work until they have furnished evidence of compliant insurance coverage. This clause should specify: the types of insurance required (Contractors' All Risks, Workmen's Compensation or Employees' Compensation, Commercial General Liability, and Professional Indemnity where applicable), the minimum limits of indemnity for each policy, the requirement for the principal to be named as an additional insured, the obligation to provide certificates of insurance and policy copies, and advance notice of cancellation or material modification of any required policy.

Finally, the contract should include a right-to-cure provision allowing the principal employer to procure insurance on the contractor's behalf and deduct the cost from contract payments if the contractor fails to maintain required coverage.

Requiring contractors to carry insurance is meaningless without a rigorous verification process. The certificate of insurance (COI) is the standard document used to evidence coverage, but in India's commercial insurance market, COI verification presents unique challenges that principal employers must address systematically.

A certificate of insurance is a summary document issued by the insurer or the contractor's broker, confirming that specific policies are in force as of the certificate date. The COI should identify the named insured (confirming it matches the contracting entity), the insurer and policy number, the policy period, the types of coverage in force, the limits of indemnity for each coverage, any additional insureds endorsed on the policy, and details of deductibles or self-insured retentions.

However, a COI is not a guarantee of coverage. Indian insurers typically include a disclaimer stating that the certificate is issued as a matter of information only and confers no rights upon the certificate holder. The COI does not amend, extend, or alter the terms of the underlying policy. A contractor may present a valid COI at contract commencement, only for the policy to lapse two months later due to non-payment of premiums. Without ongoing verification, the principal employer remains unaware that their risk transfer mechanism has evaporated.

Best practice for Indian principal employers involves implementing a multi-layered verification framework. First, at the pre-qualification stage, require contractors to submit COIs along with full policy copies (not just schedules) for review by the principal's insurance or risk management team. Second, verify the authenticity of the COI directly with the insurer: a process that has become easier as Indian insurers increasingly issue digitally verifiable certificates. Third, implement a calendar-based tracking system that flags policy renewal dates at least 30 days before expiry and triggers automatic notifications to the contractor requesting updated COIs.

For large projects with multiple contractors and subcontractors, technology-enabled solutions are emerging in the Indian market. Platforms that centralise COI collection, parse policy details, flag coverage gaps, and send automated renewal reminders can transform what was historically a manual, error-prone process into a systematic risk management function. Principal employers should insist on contractual provisions that require contractors to authorise their insurers to provide coverage confirmation directly to the principal upon request. Eliminating reliance on potentially outdated or fraudulent certificates.

Naming the principal employer as an additional insured on the contractor's insurance policies is one of the most effective risk transfer mechanisms available, yet it remains underutilised in Indian commercial contracting practice. An additional insured endorsement modifies the contractor's policy to extend coverage to the principal employer for liabilities arising out of the contractor's operations, effectively giving the principal a direct right to claim under the contractor's policy without having to first pursue the contractor for indemnification.

The mechanics are straightforward: the contractor requests their insurer to add the principal employer's name to the policy via an endorsement. The endorsement typically specifies that coverage for the additional insured is limited to liabilities arising out of the named insured's (contractor's) operations or work performed on behalf of the additional insured. This is important: the endorsement does not convert the contractor's policy into a general liability policy for the principal employer; it only responds to claims connected to the contractor's scope of work.

In the Indian market, additional insured endorsements are available on Commercial General Liability (CGL) policies, Contractors' All Risks (CAR) policies, and Erection All Risks (EAR) policies. Under a standard CAR policy, the project owner is typically already a named insured for the property damage section (Section I), but the additional insured endorsement becomes critical for the third-party liability section (Section II), which covers bodily injury and property damage claims from parties outside the project.

There are several practical considerations for Indian principal employers. First, ensure the endorsement uses language that provides coverage for the principal's vicarious liability arising from the contractor's operations, not merely coverage for the contractor's direct liability. Second, verify whether the additional insured endorsement includes completed operations coverage. Meaning the principal remains covered after the contractor has finished their work and demobilised. Construction defect claims frequently arise months or years after project completion, and without completed operations coverage, the additional insured endorsement provides no protection during this critical exposure period.

Third, understand the impact on limits. In most policies, the additional insured shares the contractor's policy limits. If the contractor has a CGL policy with a limit of INR 5 crore, a claim by the principal as additional insured reduces the limit available for the contractor's own claims. For high-value projects, principal employers should specify minimum contractor insurance limits that account for this shared limit structure, or require contractors to carry dedicated limits for additional insured coverage.

Subrogation (the insurer's right to step into the shoes of the insured and recover claim payments from the party responsible for the loss) is a fundamental principle of Indian insurance law, recognised under Section 79 of the Marine Insurance Act, 1963, and applied by analogy across all classes of non-life insurance. While subrogation serves an important function in preventing unjust enrichment, it can create significant complications in the context of principal-contractor relationships.

Consider a scenario: a contractor's negligent welding operation causes a fire that damages the principal employer's warehouse. The principal's property insurer pays the claim and then exercises subrogation rights against the contractor. The contractor, facing a recovery action from the principal's insurer, may have to claim against their own liability policy, creating litigation between the parties despite both being insured. More problematically, the subrogation action strains the commercial relationship between the principal and contractor, potentially disrupting ongoing or future projects.

A waiver of subrogation endorsement prevents this outcome. When the principal employer's insurer agrees to waive subrogation rights against a specified contractor, the insurer cannot pursue the contractor for recovery even if the contractor's negligence caused the loss. This preserves the commercial relationship and avoids the cost and disruption of inter-party litigation.

In the Indian market, waivers of subrogation are available on most property insurance policies (Standard Fire and Special Perils, Industrial All Risks, and CAR/EAR policies) and on some liability policies. The principal employer must request the waiver from their own insurer, specifying the contractors to whom the waiver applies. Insurers may charge a nominal additional premium for the waiver, reflecting the fact that they are relinquishing a recovery right.

Principal employers should also require contractors to obtain reciprocal waivers of subrogation on their policies, ensuring that the contractor's insurer similarly cannot pursue recovery against the principal. This creates a bilateral waiver structure where each party's insurer bears its own loss without pursuing the other party or their insurer.

There are important limitations. Indian insurers are unlikely to grant waivers of subrogation where the loss results from wilful misconduct or criminal acts. The waiver must be in place before the loss occurs: attempting to obtain a post-loss waiver is impractical and may constitute a material alteration of the policy terms. In addition, the waiver should be documented in the underlying contract between the principal and contractor, with each party undertaking to procure the waiver from their respective insurers. This contractual obligation ensures that the waiver is not merely an insurance technicality but a binding commercial commitment.

One of the most complex aspects of vendor and contractor insurance management is understanding how the principal employer's own insurance policies interact with the contractor's policies. Gaps in coverage leave both parties exposed, while overlaps create disputes over which insurer bears primary responsibility; disputes that can delay claim settlements and strain commercial relationships.

The principal employer typically maintains a suite of insurance policies covering their own operations: property insurance (Standard Fire and Special Perils or Industrial All Risks), Commercial General Liability (CGL), Marine Cargo for raw materials and finished goods, and potentially an umbrella or excess liability policy. The contractor, in turn, should carry Contractors' All Risks (for project works), Employees' Compensation (for their workforce), CGL (for third-party liabilities), and professional indemnity (if providing design or consultancy services).

The first potential gap arises at the boundary between property and project insurance. The principal's property policy may exclude property in the course of construction or erection — a standard exclusion in SFSP and IAR policies. If the contractor's CAR policy defines the insured property narrowly as the contract works only, any pre-existing property of the principal that is damaged during the contractor's operations may fall into a coverage gap. Principal employers should either procure a specific extension to their property policy covering construction-related exposures or ensure the contractor's CAR policy includes an existing property extension covering the principal's adjacent assets.

The second gap frequently occurs in workers' compensation coverage. The Employees' Compensation Act, 1923, holds the principal employer liable if the contractor fails to compensate an injured worker. If the contractor's Employees' Compensation policy has lapsed or carries inadequate limits, the principal employer must respond, but the principal's own Employees' Compensation policy only covers the principal's direct employees, not contract labour. The solution is two-fold: verify that the contractor's Employees' Compensation policy is current and adequate, and consider extending the principal's own policy to cover contract labour as a contingent employer.

Contribution disputes arise when both the principal's and contractor's policies potentially respond to the same claim. Under the principle of contribution in Indian insurance law, where two policies cover the same risk, each insurer contributes proportionally. However, most contractor liability policies contain an other insurance clause specifying that the contractor's policy is primary and the principal's policy is excess — or vice versa. Conflicting other insurance clauses between the two policies can result in both insurers denying primary responsibility, leaving the insured parties to resolve the dispute before obtaining claim payment. Principal employers should review the other insurance clauses in both their own and their contractors' policies, ensuring the hierarchy of coverage is clearly established and contractually documented.

Insurance requirements for vendors and contractors are not one-size-fits-all. The appropriate coverage structure varies significantly across India's major industry sectors, reflecting differences in statutory obligations, operational hazards, and contractual practices.

In the construction sector, the Building and Other Construction Workers Act, 1996, and RERA 2016 impose specific obligations on developers and project owners. A developer engaging a principal contractor and multiple subcontractors for a residential or commercial project should require: a Contractors' All Risks (CAR) policy with a sum insured covering the full contract value plus materials on site, Section II third-party liability cover of at least INR 10 crore per occurrence, an Employees' Compensation policy covering all workers engaged on site (with the developer named as additional insured), and professional indemnity insurance if the contractor also provides structural or MEP design services. RERA's five-year structural defect liability makes completed operations coverage in the contractor's CGL policy essential for developers.

In the manufacturing sector, principal employers engaging contract labour under the Contract Labour (Regulation and Abolition) Act, 1970, face direct liability under Section 20 for the welfare and safety of contract workers. Insurance requirements for vendor-supplied labour should include: Employers' Liability or Employees' Compensation insurance at limits reflecting the statutory compensation schedule under the Employees' Compensation Act, 1923, Commercial General Liability covering the vendor's operations on the principal's premises, and product liability insurance if the vendor supplies components or raw materials that are incorporated into the principal's finished products.

The IT and business process outsourcing sector presents a different risk profile. Vendors providing software development, data processing, or managed services should carry: professional indemnity insurance covering errors, omissions, and negligent acts in service delivery, cyber liability insurance covering data breach costs (particularly important under the Digital Personal Data Protection Act, 2023), and Commercial General Liability for any on-premises operations. Technology services contracts should specify minimum PI limits of INR 10-25 crore, reflecting the high consequential loss exposure from software failures or data breaches.

The energy and petrochemical sector requires the most stringent insurance requirements, given the catastrophic loss potential. Contractors working on refineries, chemical plants, or pipeline projects should carry: CAR or EAR policies at full contract value, CGL with limits of INR 50-100 crore or higher per occurrence, pollution liability coverage (given the Environmental Protection Act, 1986, and the National Green Tribunal's strict liability approach), and Employees' Compensation at enhanced limits reflecting the hazardous nature of operations. Principal employers in this sector should require contractors to carry limits that are adequate not only for individual incidents but for aggregated exposures across the policy year.

Translating insurance requirements from contractual provisions into operational reality requires a structured vendor insurance management programme. Indian principal employers who treat vendor insurance as a one-time procurement exercise, checking certificates at contract signing and never revisiting them, expose themselves to the very risks they sought to transfer.

The first step is developing a tiered vendor classification framework. Not all vendors warrant the same level of insurance scrutiny. A vendor supplying office stationery presents a fundamentally different risk profile than a vendor providing structural fabrication services. Classify vendors into risk tiers based on: the nature of work performed (on-premises versus off-premises, hazardous versus non-hazardous), the number of workers deployed, the contract value and duration, access to sensitive data or critical systems, and historical claims experience. Each tier should have a defined insurance requirements matrix specifying required coverages, minimum limits, and endorsements.

The second step is integrating insurance compliance into the vendor onboarding process. Insurance requirements should be communicated during the RFP or tender stage, not introduced after contract award. The vendor's insurance submission should be evaluated alongside their technical and commercial proposals. A vendor who cannot demonstrate adequate insurance is not a qualified bidder, regardless of their technical capabilities or price competitiveness.

The third step is establishing a centralised insurance tracking system. For organisations managing hundreds of vendor relationships, manual tracking using spreadsheets is error-prone and unsustainable. The tracking system should maintain a database of all vendor insurance policies, automatically flag policies approaching renewal, generate non-compliance reports for vendors whose coverage has lapsed or whose limits fall below contractual minimums, and trigger escalation workflows that can result in work suspension orders for persistently non-compliant vendors.

The fourth step is conducting periodic audits of vendor insurance compliance. At least annually, the principal employer's risk management or procurement team should conduct a wide-ranging review of vendor insurance status. This audit should verify not only that policies are in force but that the coverage terms remain appropriate; a contractor who has expanded their scope of work may need higher limits or additional coverages than those required at contract inception.

Finally, engage with an insurance broker who understands supply chain risk management. A skilled broker can assist in drafting insurance specifications for vendor contracts, reviewing contractor insurance submissions for adequacy, identifying coverage gaps in the principal's own programme that interact with vendor exposures, and negotiating Owner Controlled Insurance Programmes (OCIPs) for large projects where centralised insurance procurement is more efficient than requiring each contractor to arrange their own coverage separately.