Recruiting Agency Insurance and Liability Diligence: Certificates, Coverage, and Contract Gaps
Published September 24, 2026. This research note gives employers a reproducible way to examine a recruiting or staffing agency's insurance and liability posture against the terms the agency actually signed. It is a diligence protocol and evidence standard, not legal advice, an insurance opinion, or a finding that any agency is underinsured.
Research question and scope
Can an employer confirm that the insurance a recruiting agency promises in a master agreement exists, is current, and responds to the losses that matter for the assignment? The analytic unit is one agency engagement at one point in time: a signed agreement, the certificates of insurance (COIs) issued for it, the endorsements attached to those certificates, and the coverage limits and exclusions behind them.
The scope covers general liability, professional liability or errors and omissions, workers' compensation and employer's liability, cyber liability, and the contractual transfer devices that frequently accompany them, including additional-insured status, waiver of subrogation, and certificates naming the client. The review is a document audit. It cannot predict a claim outcome, interpret a policy authoritatively, or replace broker and counsel review.
Why insurance is a contract term, not a formality
A recruiting engagement places a third party's people into an employer's workflow, or hands the employer's candidate data to an outside team. That creates several distinct loss channels at once: a candidate may allege discrimination or mishandling, a placed worker may be injured, a data breach may expose personal information, or a client may suffer a loss the agency caused in the course of the search. A single generic liability certificate rarely addresses all of them.
The gap between what a contract promises and what a certificate proves is where disputes begin. Many agreements state that the agency will maintain "adequate insurance" without naming limits, or require a certificate but not the endorsements that make additional-insured status real. The employer then believes it transferred risk that it actually retained.
Predeclared diligence protocol CVR-2026-09-24
| Element | Frozen rule | Reproduction check |
|---|---|---|
| Lines of coverage | Which policies the contract requires | Each required line maps to a current certificate |
| Limits | Per-occurrence and aggregate, where stated | Limits meet or exceed the contract |
| Additional insured | Client named, with form language | Endorsement, not just a certificate line |
| Waiver of subrogation | Agency's carrier waives recovery against client | Endorsement attached |
| Claims-made dates | Retroactive date and extended reporting | Dates cover the engagement period |
| Certificates | Issuer, named insured, policy period | Certificate matches the legal entity that signed |
| Exclusions | Material exclusions read, not assumed | Exclusions confirmed against the work scope |
Request the signed agreement, the current COIs for every required line, the endorsement pages, and a written confirmation from the agency's broker that the certificates are authentic and in force. Read the named insured on each certificate against the legal entity that signed the contract. An agency that operates through a parent, a franchise, or a staffing subsidiary may carry coverage under a different entity than the one the employer hired.
Evidence requests and artifacts to obtain
The most useful artifacts are issued by third parties: certificates and endorsements come from the agency's carrier or broker, not from the agency's marketing material. Treat a certificate as a snapshot with an expiry date, and treat the endorsements as the operative language.
For each artifact, record the owner, the date, and the gap. A certificate that lists additional-insured status in the description box but attaches no endorsement is a declaration without execution. A professional liability policy on a claims-made basis with a retroactive date after the engagement began leaves earlier acts uncovered. A cyber policy with a sublimit for social engineering may not respond to a candidate-data breach the way the buyer assumes. Name each gap plainly.
Analysis plan: coverage mapping and gap scoring
Map each contractual insurance requirement to a certificate line, then score that mapping as evidenced, partial, ambiguous, or absent, and report counts beside the denominator of requirements reviewed. Recompute whether stated limits meet the contract's minimums, and flag any line that is required but missing.
Separate two kinds of findings. A missing or expired certificate is a compliance gap that can usually be cured quickly. A material exclusion or a claims-made date that does not reach back to the work is a risk-transfer gap that may require renegotiation, a different policy, or a decision to accept the exposure. Do not report a single blended "insured" verdict, because strong general liability can coexist with thin professional liability.
Worked example: the missing endorsement
Consider a staffing engagement where the agreement requires the agency to name the client as an additional insured on its general liability policy, to waive subrogation, and to carry professional liability of at least one million dollars. The agency returns a certificate showing general liability and workers' compensation, with "additional insured" typed into the description box and no endorsement attached, and no professional liability line at all.
Run the scenario through the protocol. The additional-insured element scores partial, because the certificate asserts status the carrier has not confirmed through form language. The waiver element scores absent. The professional liability element scores absent, since a required line has no certificate. The workers' compensation element scores evidenced. The durable issue is not the missing paper but the uncovered loss channel: a professional-liability claim arising from the search itself has no policy behind it.
The remedy is bounded: request the endorsements, bind or evidence the professional liability line, and re-check the named insured. If the agency cannot produce the endorsements, the employer is holding a promise the carrier has not agreed to honor.
Legal and standards context
The SBA business insurance guide describes the core coverage types a small business should consider. The DOL workers' compensation topic page explains how state workers' compensation systems operate. The NIST Cybersecurity Framework and the CISA Cyber Essentials frame the cyber-risk controls that a cyber policy is meant to sit behind. The SBA guide to hiring and managing employees provides employer-side context for the obligations a staffing arrangement can create.
These sources inform coverage questions. They do not certify a policy, interpret an exclusion, or establish liability. Coverage and enforceability vary with the policy, the jurisdiction, and the facts.
Failure modes and limitations
A certificate can be accurate on its issue date and stale a month later. Endorsement pages can be missing from a packet even when coverage exists. A broker letter can confirm a policy without confirming that a specific clause applies to a specific claim. Aggregate limits shared across projects can be exhausted by other work. Sampling coverage at one date can miss a mid-term cancellation or a non-renewal notice. A document review cannot observe how the agency's carrier would actually handle a claim, and it cannot price the residual risk the employer keeps.
Bounded conclusion
An agency's insurance posture is interpretable only for the engagement and the policy period examined, and only when every contractual requirement maps to a current certificate, the operative endorsements are attached, the named insured matches the signer, and material exclusions have been read rather than assumed. Where promises and proof differ, keep them separate. The defensible conclusion concerns the requirements that were actually evidenced, not a general claim that the agency is or is not well insured.
Frequently Asked Questions
Is a certificate of insurance enough to confirm coverage?
No. A certificate is evidence that a policy existed on an issue date. The endorsements and the policy language determine whether the coverage responds, so request both.
Why does the named insured matter?
Coverage follows the insured entity. If the certificate names a parent, franchise, or affiliate that did not sign the agreement, the employer may not have the coverage the contract promised.
What is the most common risk-transfer gap?
A claims-made professional liability policy whose retroactive date falls after the work began, combined with a missing waiver of subrogation. Both look fine on a summary and fail on examination. For placements into a physical work site, read it with the workplace safety and workers' compensation diligence guide.
Sources
Apply the research to your agency search
Tell us what you need to hire, and we will help you compare recruiting partners built for the assignment.
Get a researched shortlist