Vendor Certificate Expiry Tracker

The ones whose lapse creates risk or breaches a requirement: quality and management-system certs (ISO 9001/14001/45001/27001), the certificate of insurance (general liability, sometimes professional or product liability), regulatory/product compliance (RoHS, REACH, food-safety like FSSC 22000, GMP for pharma/cosmetics), business licenses and permits, and contractual documents (NDAs, signed terms, tax forms like W-9). Which matter depends on your industry — but anything you'd be embarrassed to find expired during an audit belongs on the matrix.

Because it removes a financial backstop you assumed you had. If a supplier's product causes a loss, or their work damages your property, their liability insurance is what pays — and a lapsed policy means that protection is gone, potentially shifting the loss to you or leaving it uncovered entirely. Many contracts require suppliers to maintain insurance precisely for this reason, so an expired COI can also be a contract breach. Tracking COI expiry (and re-collecting the renewed certificate) is basic supply-chain risk hygiene that's easy to overlook.

60 days suits most — recertification audits, insurance renewals and license renewals take weeks of lead time, and chasing a supplier's renewal often requires several follow-ups. High-stakes certificates (a sole-source supplier's critical food-safety or GMP cert) may warrant a longer window so a renewal delay never threatens supply. The principle: flag early enough that a slow renewal can't create a gap. An amber alert that fires the week before expiry is too late to do anything but worry.

Compounding exposure: uninsured liability (lapsed COI), breach of your own customer commitments (if you promised ISO-certified suppliers), shipment holds (expired food-safety or product-compliance certs rejected at customs or customer receiving), failed audits, and reputational damage. Each is individually avoidable with a current matrix; collectively they're why supplier-certificate management is a standard part of supply-chain risk programs. The cost of tracking is minutes; the cost of a discovered gap can be a halted shipment, a denied claim, or a lost customer.