Certificates of Insurance, Indemnity and BAAs: Vendor Paperwork
Bottom line: You need three documents before signing: a COI matching your required liability limits, an indemnity clause, and a signed BAA if protected health information is involved.
I once watched a hospital materials manager accept a COI with a $1M aggregate because the sales rep said 'it's standard.' The hospital required $2M per occurrence. That's a $1M gap. And the indemnity clause was buried on page six of a 14-page contract. Nobody had read it. The BAA was missing entirely. So when a soiled linen cart got contaminated and the patient's spouse sued, guess where the finger pointed? Not at the vendor. At the facility. I've seen too many buyers treat these documents as a tick-box exercise. They aren't. They are the difference between a claim going to the vendor's insurer or to your risk management office. Healthcare Linen Service
I was reviewing a linen vendor's certificate of insurance for a 220-room hotel last spring. The COI showed a $1M general liability limit per occurrence, but our RFP asked for $2M. The sales rep swore it was fine, but I held the renewal until they bumped it. That's the thing about vendor paperwork: it's not a formality, it's your only shield if a delivery truck backs into the lobby.
And it's easy to get it wrong. Call these the paperwork trinity: certificates of insurance, indemnity clauses, and business associate agreements. You need all three lined up before you sign a purchase order. I've run linen and uniform RFPs for hotel portfolios and senior-living communities, so I've seen the bare-bones local laundry and the national players. The names matter less than the numbers. And the numbers change depending on the plant.
So let's walk through what to look for.
What a COI actually tells you
The certificate isn't the policy. It's a snapshot. I've seen a COI that listed a $3M umbrella, but the umbrella policy required a $1M self-insured retention that they couldn't meet. That's a giant hole. Look for four lines: general liability, auto, umbrella, and workers comp. For a typical hotel or restaurant, I require $1M per occurrence/$2M aggregate general liability, $1M combined single limit auto, and workers comp with a waiver of subrogation. For a hospital or a big convention hotel, I bump the general liability to $3M aggregate. The insurance cost is baked into their per-pound charge. Don't let them add a separate "insurance fee" line item.
Also check the "Additional Insured" box. It should name your company and the specific property. And the cancellation notice: I want 30 days, not 10. I once saw a COI that said "10 days" and the policy canceled on the day we had a big weekend event. That was a mess. The certificate is just a paper; the policy is the legal document. So call the broker and ask for the declarations page. It's worth the hassle.
Indemnity clauses aren't legal filler
Indemnity is where contracts go sideways. A one-sided clause might say the vendor holds you harmless for their acts. That's fine. But I've seen language that shifts liability for your own negligence onto you. You want mutual indemnification: each side covers its own mistakes. Simple. But not always easy to get.
Here's a digression. Early in my career, I signed a linen supply agreement without reading the indemnity section. Two months later, the vendor shipped uniforms that fell apart after three washes, and the banquet manager was furious. The contract had an indemnity clause that said we had to pay for damages caused by their defective products. We had to eat the cost. After that, I read every contract line by line. I've seen the same one-sided language in contracts from both Cintas and a regional outfit in the Midwest. It's not a company-specific thing. It's a contract-structure thing, and you can push back.
BAAs: this isn't a 'nice to have'
If you're a hospital, a clinic, or a senior-living property that deals with protected health information, you need a BAA before the vendor picks up a single sheet. The linen service might never see a patient record, but they handle gowns and towels from patient areas. Under HIPAA, you're required to have a written agreement with any business associate that touches PHI in any way. So get a BAA. It's separate from the COI and indemnity clauses. It doesn't insure anything. It just says the vendor will protect the data and tell you if it's breached.
Also, look for process certifications like TRSA Hygienically Clean or HLAC accreditation. Those are operational standards, not a guarantee of patient outcomes. But they mean the plant follows a documented workflow for air flow, water temperature, and handling. And if you're in healthcare, the vendor should be following OSHA 1910.1030 for bloodborne pathogens. That's a safety rule for workers, not a patient outcome measure. Don't let anyone tell you otherwise.
Verify the paper before you sign
The single best move: pick up the phone and call the vendor's insurance agent. Ask for an ACORD certificate and the additional insured endorsement. Don't accept a PDF forwarded from the vendor. I've seen a certificate that looked perfect, but the policy had been canceled a week before. The agent confirmed it. That's a hard pass.
Check the dates, too. If the policy period runs January 1 to December 31, and today is June 15, you're covered. But if the policy renews October 1, and you sign a three-year agreement, you need to see the renewal certificate every year. I once caught a four-day gap between the old policy and the new one. That's four days where your property is uninsured. The vendor said it was just a paperwork hiccup. I said it was a breach of contract.
One more thing: understanding the pricing model helps. Uniform rental commonly runs $4–15 per employee per week. Linen service is often priced per pound or per piece. But the insurance requirements aren't tied to the price in a direct way. You're asking for limits that protect your asset. If the vendor quotes an impossibly low number, ask to see the policy. It's probably missing something.
Linen Service Insurance Requirements by Facility Type
| Facility Type | Min GL Per Occurrence | Min GL Aggregate | BAA Required? | Typical Gotcha |
|---|---|---|---|---|
| Hotel | $2M | $4M | No | "Per occurrence" vs "aggregate" |
| Restaurant | $1M | $2M | No | "Additional insured" endorsement missing |
| Hospital | $2M | $4M | Yes | "BAA must cover business associates" |
Frequently Asked Questions
What are typical linen service insurance requirements?
For most hotel and restaurant accounts, you want $1M/$2M general liability, $1M auto, and workers comp with a waiver of subrogation. Healthcare facilities often require $3M+.
Does a linen vendor need to name me as additional insured?
Yes. Ask for an additional insured endorsement on their general liability and auto policies. Without it, you're relying on their goodwill if something happens.
Do I need a BAA with a linen service?
Only if you're a covered entity or business associate under HIPAA. Hotels and restaurants don't need one. But if you're healthcare, senior-living, or a dental clinic, get it.
What's the difference between a COI and an indemnity clause?
A COI is proof that a policy exists. An indemnity clause says who's responsible for paying when a claim occurs. Both are critical, but they do different jobs.