GL vs. Umbrella Coverage Requirements for Vendors

When organizations set vendor insurance requirements, they typically think about commercial general liability as the primary protection - and umbrella coverage as a secondary layer that can be specified at round numbers without much analysis. In practice, this creates two common failures: inadequate total limits for high-hazard vendors, and umbrella policies that do not actually cover what the GL was supposed to cover.

Understanding how GL and umbrella interact - and how to structure requirements for both - is the difference between a vendor insurance program that provides real protection and one that looks complete on paper until a large claim exposes the gaps.

How Umbrella and Excess Policies Interact with Underlying Coverage

A commercial umbrella policy has two functions. First, it provides additional limits above the underlying policies - GL, auto, and employers liability - after those limits are exhausted. Second, and less commonly understood, it can provide coverage for exposures that fall outside the underlying policies but within the umbrella's coverage terms. This second function distinguishes a true umbrella from a pure excess policy.

A pure excess policy only pays when the underlying limits are exhausted. It follows the exact terms of the underlying policy - no broader, no narrower. If the GL excludes coverage for a specific hazard, the excess policy also excludes it. No exceptions.

A true umbrella policy also pays in excess of underlying limits, but it may provide coverage in scenarios where the underlying policy provides no coverage at all (subject to a self-insured retention, typically $10,000 to $25,000). This broader nature is why umbrella policies cost more than pure excess policies and why specifying "umbrella or excess" in vendor requirements without distinguishing between the two can leave you with narrower protection than intended.

In practice, most "commercial umbrella" policies sold today are hybrids, and the terms vary substantially by carrier. When setting requirements, the phrase to use is "umbrella/excess liability following form over the commercial general liability, commercial auto, and employers liability policies."

When to Require Umbrella vs. Higher GL Limits

The economics of insurance pricing mean that increasing GL limits from $1M/$2M to $2M/$4M costs significantly more than adding a $2M umbrella over a $1M/$2M GL. Umbrella coverage is cheaper per dollar of limit because claims that exhaust primary GL limits are relatively rare.

This means your vendor insurance requirements should generally be structured with a reasonable primary GL limit and a separate umbrella requirement, rather than requiring very high GL limits alone. Requiring $5M per occurrence on a primary GL policy will either be unavailable or prohibitively expensive for most vendors. Requiring $1M/$2M GL plus a $4M umbrella is financially achievable for most legitimate contractors and provides the same total capacity.

The exception is when you need additional insured status with specific endorsements - some endorsement forms apply only to the underlying policy, and you need to confirm that AI status extends through the umbrella. "Following form" language in the umbrella is the key: if the umbrella follows form over the GL, and the GL has your AI endorsement, the umbrella should also extend AI status to you. But confirm this explicitly - do not assume.

The "Follow Form" Concept Explained

When an umbrella policy is described as "following form" over an underlying policy, it means the umbrella adopts the same terms, conditions, exclusions, and endorsements as the underlying policy - including, importantly, any additional insured endorsements and waiver of subrogation provisions.

This is the condition you need to confirm when reviewing certificates that include umbrella coverage. If your GL has a CG 20 10 AI endorsement naming your organization, and the umbrella follows form over the GL, your AI status theoretically extends through the umbrella. If the umbrella does not follow form - or has an exclusion that overrides the underlying GL terms - you may have AI coverage up to $1M/$2M on the GL but no AI coverage for the incremental limits on the umbrella.

On a COI, follow-form language typically appears in the Description of Operations box: "Umbrella policy follows form over the underlying General Liability and Commercial Auto policies." If this language is absent and the umbrella limit is significant, request confirmation from the broker that the umbrella follows form over all required endorsements.

How Umbrella Limits Appear (and Often Don't Appear) on ACORD 25

The ACORD 25 has a dedicated section for Umbrella/Excess Liability, but it is frequently incomplete or misleading in practice. The form provides fields for:

• Type (Umbrella vs. Excess)
• Policy number and dates
• Each occurrence limit
• Aggregate limit
• Retention (deductible or SIR)

What the ACORD 25 does not clearly show: which underlying policies the umbrella sits over, whether it follows form, and whether AI status extends through the umbrella. The "Occurrence" and "Aggregate" fields show the incremental limit - meaning the umbrella's own limit, not the combined total of GL plus umbrella.

This creates a reading error that is worth being explicit about. A COI showing GL per occurrence of $1,000,000 and umbrella occurrence of $4,000,000 means the vendor has a total of $5,000,000 of combined protection per occurrence - but only if the umbrella actually sits over the GL and responds to the same claims. If those policies are with different carriers and the umbrella has exclusions that match the GL's covered territory, the effective combined limit may be lower.

Umbrella vs. Excess Coverage: The Practical Distinction

For most COI compliance purposes, the distinction between umbrella and excess matters in two specific situations:

Coverage gaps in underlying policies: If a vendor's GL has an exclusion - say, professional liability for design work on a design-build contract - a pure excess policy will also exclude it. A true umbrella might cover it (subject to the SIR) even if the underlying GL does not. For design-build, installation, or any vendor who both designs and executes, this distinction can matter significantly.

Endorsement carrythrough: As discussed above, excess policies do not independently carry endorsements - they piggyback on the underlying terms. True umbrella policies may have their own endorsement schedules. When requiring AI status on umbrella coverage, you need the umbrella's own AI endorsement or confirmation that it follows form over a GL that has the right AI endorsement.

In your vendor agreements and COI requirements, the safest language is: "Umbrella/Excess Liability with minimum limits of $[X] per occurrence / $[X] aggregate, following form over the Commercial General Liability, Commercial Auto Liability, and Employers Liability policies, including all endorsements required hereunder."

Minimum Umbrella Requirements by Industry

These are defensible baseline requirements based on typical exposure levels. Your specific situation may warrant higher limits depending on contract value, nature of work, and your own risk tolerance.

Construction and General Contracting

Minimum $5,000,000 umbrella for general contractors on projects over $1M in contract value. For smaller subcontractors on larger projects, $2,000,000 to $3,000,000 is common. For specialty subcontractors working in proximity to occupied spaces or existing infrastructure (electrical, demolition, excavation), $5,000,000 is standard. Some owner-controlled insurance programs (OCIPs) set umbrella requirements at $10,000,000 for prime contractors.

Landscaping and Grounds Maintenance

$1,000,000 to $2,000,000 umbrella over $1M/$2M GL. The primary exposure is property damage to third parties - damaged irrigation systems, vehicle collisions, equipment accidents. Fatality risk is lower than construction but not negligible, especially for tree removal or grading operations near structures.

Staffing and Temporary Labor

$3,000,000 to $5,000,000 umbrella is standard for staffing agencies providing workers to your facility. The exposure is significant: the staffing agency's workers are in your environment, using your equipment, interacting with your customers. A single serious injury or product liability claim involving a temp worker can exceed primary GL limits quickly. Many large employers require $5,000,000 combined for staffing vendors. For more detail on staffing-specific COI requirements, see our guide on vendor insurance verification for staffing agencies.

IT Services and Software Development

Umbrella requirements for technology vendors are lower because the bodily injury and property damage exposures are minimal. However, if the vendor has on-site access to your facilities (hardware installation, managed services), $1,000,000 to $2,000,000 umbrella over GL and auto is reasonable. The more significant coverage for technology vendors is professional liability (errors and omissions), which most umbrella policies do not cover.

Facility Services (Janitorial, HVAC, Plumbing, Electrical)

$2,000,000 to $3,000,000 umbrella for recurring facility service vendors. These vendors are in your space regularly, have unsupervised access to equipment rooms and utility systems, and create both injury and property damage exposure. Electrical and plumbing contractors should be at the higher end of this range given the potential severity of a mishap.

Common Coverage Gaps Between GL and Umbrella

The most damaging gaps are the ones that appear only when a claim exceeds primary limits - by which point the opportunity to require better coverage has passed. The most common structural gaps:

Completed operations excluded from umbrella: Some umbrella policies explicitly exclude products and completed operations liability, even where the underlying GL includes it. A contractor whose GL has completed operations coverage but whose umbrella excludes it is effectively capped at GL limits for post-completion claims. For construction projects with a multi-year exposure window, this is a serious gap.

Umbrella does not cover employers liability: Some umbrella policies list "employers liability" as an underlying policy but only follow form over GL and auto - effectively excluding EL from the umbrella. If a workplace injury claim exceeds the EL limits on the GL (typically $500K/$500K/$500K), there may be no umbrella layer to respond.

Self-insured retention not disclosed: A vendor's umbrella may have a $50,000 or $100,000 SIR. The vendor is essentially self-insuring that first layer of any claim that goes to the umbrella. For vendors without strong financial reserves, a $100,000 SIR can mean the umbrella effectively does not respond to many claims because the vendor cannot fund the retention.

Umbrella covers different named insured than GL: A vendor group with multiple entities may have GL written for the operating entity and umbrella written for the parent. If the operating entity is the one you contracted with and the one performing the work, a claim may flow to the operating entity's GL but not reach an umbrella that names only the parent.

Writing COI Requirements That Address Both GL and Umbrella Properly

The structure that works in practice is to specify GL and umbrella requirements separately in your vendor agreement and reference both in your COI requirements letter. Do not combine them into a single "total limits" number, because that makes it impossible to verify on the ACORD 25 where GL and umbrella are shown separately.

Commercial General Liability
- Per Occurrence: $1,000,000
- General Aggregate: $2,000,000
- Products/Completed Operations Aggregate: $2,000,000

Umbrella / Excess Liability
- Per Occurrence: $4,000,000
- Aggregate: $4,000,000
- Following form over GL, Auto, and EL
- Retention: not to exceed $10,000

This structure lets you verify each component independently on the COI and flag discrepancies precisely. When automated parsing is applied, the rules engine can check GL limits, umbrella limits, and follow-form language as separate conditions rather than treating them as a single combined number that can be gamed.

For organizations running a structured COI tracking program, the ability to enforce separate GL and umbrella limit requirements - and flag certificates where umbrella is missing or insufficient - is one of the more valuable compliance rule categories to build out.