AI & Automation

Cut COI Request Time 80%: Agency Automation Guide 2026

Jun 20, 2026

Certificate of insurance (COI) requests are the most frequent high-urgency, low-complexity task in a commercial insurance agency. A client texts at 9am: "Need a COI for a new vendor by noon." The CSR must locate the policy in Applied Epic or Vertafore AMS360, verify coverage is current, generate the ACORD 25 or ACORD 28, customize the certificate holder and additional insured language, and email it — ideally in under 20 minutes.

In agencies handling 100+ COI requests per month, that process is entirely manual in the majority of offices. US P&C direct written premiums reached $1.07 trillion in 2024 according to Insurance Information Institute (2025) — a market size that makes the operational inefficiency of manual COI handling a meaningful drag on agency profitability and client experience simultaneously.

This guide shows you how to automate COI request handling from inbound request to delivered certificate, including a step-by-step workflow, a comparison of Applied Epic versus Vertafore AMS360 for automation readiness, and an honest assessment of where no-code tools fall short.

TL;DR: Automating COI request handling reduces average delivery time from 40–90 minutes to under 10 minutes, eliminates the risk of sending outdated certificate holder language, and frees CSR capacity for revenue-generating work. The full workflow requires a trigger layer, AMS integration, ACORD generation, and audit trail — four pieces that no single AMS does natively end-to-end.


Who This Is For

This guide is written for commercial insurance agency operators and operations managers at agencies with 5–75 staff handling 75+ COI requests per month. You are losing CSR capacity to repetitive COI work, clients are complaining about turnaround time, and your errors and omissions exposure is growing because some CSRs are sending certificates without verifying current endorsements.

Red flags: Skip if your agency handles fewer than 30 COI requests per month (manual delivery is faster at that volume), if you are a personal lines-only agency (COI is a commercial lines workflow), or if your agency gross revenue is below $600K annually.


The COI Handling Problem in Commercial Agencies

A certificate of insurance is a one-page summary of an insured's policy — carrier, policy number, coverage limits, expiration date, and certificate holder. It is not a policy document, but it is treated as one by the vendors, landlords, and general contractors who request it. That treatment creates an accuracy obligation: a COI that states incorrect limits or an expired policy exposes the agency to an E&O claim from both the certificate holder and the insured.

Most agencies use either Applied Epic or Vertafore AMS360 to generate certificates, both of which can produce ACORD forms natively — but only after a CSR manually retrieves the policy, verifies coverage, populates the certificate holder fields, and exports the PDF. That manual sequence takes 15–45 minutes per request in most agencies, depending on how complex the commercial account is. For an agency generating 150 COI requests per month, that is 37–112 CSR-hours per month of purely administrative work.

Independent agencies write 37% of commercial P&C premiums in the US according to Big I (2024). For those agencies, COI handling is a volume problem — commercial clients have multiple vendor relationships, each generating recurring COI requests on different schedules.

The automation opportunity is in collapsing the manual steps: request arrives → AMS lookup → coverage verification → certificate generation → delivery → audit log. Each of those steps is automatable; what the market lacks is a single layer that orchestrates all of them in one observable workflow.


Glossary

TermDefinition
COICertificate of Insurance — a one-page summary of an insured's active coverage
ACORD 25Standard COI form for commercial general liability and auto
ACORD 28Standard COI form for commercial property
Certificate HolderThe entity named on the COI as the intended recipient
Additional InsuredA party added to the policy coverage, named on the COI
AMSAgency Management System — Applied Epic or Vertafore AMS360 in most mid-size commercial agencies
E&OErrors and Omissions — professional liability coverage for the agency itself

Applied Epic vs. Vertafore AMS360: Automation Readiness

The choice of AMS is the single biggest determinant of how far you can take COI automation without custom development.

Applied Epic has a REST API and a native certificate generation module. It supports automated certificate creation via API call if you supply the policy ID and certificate holder data. Epic's API is well-documented and stable, which makes it a viable target for workflow automation. The limitation is that Epic's native COI workflow requires a licensed user to approve each certificate before it is transmitted — there is no automated transmission path without a third-party integration.

Vertafore AMS360 has a SOAP API and certificate generation through its ACORD library. AMS360's API is older and less consistently documented than Epic's, which makes direct API integration more fragile. AMS360 does support automated certificate generation through its CertificateAdd method, but the field mapping for certificate holders and additional insured endorsements requires careful configuration.

CapabilityApplied EpicVertafore AMS360
REST APIYesNo (SOAP)
Native ACORD generationYesYes
COI automation via APIYes (with approval gate)Yes (field mapping required)
Certificate holder libraryYesYes
Webhook outbound triggersLimitedLimited
Monthly API costIncluded in planVariable
Multi-carrier supportYesYes

Both platforms have robust certificate holder libraries — pre-saved certificate holder templates for repeat requestors (property managers, GCs, municipalities). Leveraging this library is the fastest ROI win in any COI automation project: instead of typing certificate holder language from scratch, the workflow matches the requestor's email domain or name against the saved template and populates the fields automatically.


Step-by-Step: Automating COI Request Handling

Step 1 — Standardize the Inbound Request Channel

COI requests arrive via text, email, phone, and client portal in most agencies. Automation starts with standardizing inbound to one channel. The most practical approach: a client-facing email alias (certificates@youragency.com) or a short web form linked from your client portal.

When the request arrives at that channel, the automation reads key fields: insured name, policy number or account name, certificate holder name and address, any special endorsements requested (additional insured, waiver of subrogation), and needed-by date.

Step 2 — AMS Policy Lookup and Coverage Verification

The automation queries Applied Epic or AMS360 via API to retrieve the active policy for the insured. It checks three things: policy is active (not expired or cancelled), the requested coverage type matches the policy (a CGL request against an auto-only policy should flag for human review), and limits meet any minimum requirements specified in the request.

If any check fails, the workflow routes to a CSR queue with a pre-filled exception summary rather than failing silently.

Step 3 — Certificate Holder Matching

The automation checks the certificate holder name and address against the agency's saved certificate holder library in Epic or AMS360. A match above 85% confidence populates the fields automatically. A match below 85% flags for CSR confirmation before proceeding.

This step eliminates the most common COI error: slight variations in certificate holder name or address that create coverage disputes later.

Step 4 — ACORD Form Generation and Quality Check

With policy data and certificate holder confirmed, the automation generates the ACORD 25 or ACORD 28 form. A quality check runs immediately: confirm the policy number printed matches the API lookup, limits are displayed correctly, and expiration date matches the active policy record.

Step 5 — Delivery and Audit Log

The completed certificate is emailed to the requestor from the agency's certificates address with the policy summary in the body. Simultaneously, the automation logs the certificate issuance to the insured's activity record in the AMS, with timestamp, certificate holder, and the CSR or system that generated it.

This audit log is your E&O protection: if a certificate holder later disputes coverage, you can show exactly what was on the policy at the time of issuance and who confirmed the certificate holder language.


Worked Example: Granite Commercial Insurance, 140 COI Requests per Month

Granite Commercial Insurance, a 12-staff agency in Columbus running Applied Epic, was generating 140 COI requests per month. Average handle time was 28 minutes per certificate — 65 CSR-hours per month. Two CSRs shared the workload, meaning COI requests consumed roughly 40% of their combined capacity.

After deploying an automation layer that triggered on emails to certificates@granitecommercial.com, queried Epic's REST API for the policy via policy.search by account name, matched the certificate holder against the saved library, generated the ACORD 25, and emailed the PDF — average handle time dropped to 4 minutes for matched certificate holders (representing 78% of requests) and 12 minutes for exceptions requiring CSR review. Total monthly CSR-hours for COI dropped from 65 to 14. The 2 CSRs redirected the recovered 51 hours toward policy review calls and cross-sell outreach, generating an estimated $38,000 in incremental premium in the first quarter.


DIY vs. No-Code vs. US Tech Automations

Make (formerly Integromat) can connect an email inbox to Applied Epic via API and trigger a basic ACORD generation flow. For agencies where 100% of certificate holders are in the saved library and no exceptions exist, Make handles the happy path at roughly $50–$100/month. The failure modes emerge at scale: Make has no native AMS field-mapping library, so when Epic changes a field name in an API update, your scenario breaks silently and CSRs start receiving exception queues without knowing why. Make also cannot retry a failed API call to Epic if Epic's API is briefly rate-limiting (common during peak renewal season).

n8n provides more control and lower per-task cost, but it requires a technical owner to maintain the self-hosted instance and debug AMS integration failures — overhead most agency operations teams do not have.

US Tech Automations maintains the Epic and AMS360 field mappings as managed integrations, handles API retry with exponential backoff, and routes exceptions to the CSR queue with a structured exception summary rather than a raw error log — which means your CSRs can resolve exceptions without calling the vendor's support line.

For more on automating certificate workflows, see automate certificate of insurance request generation.


Benchmarks: COI Handling Performance

MetricManual ProcessAutomated (80%+ match rate)Target
Average handle time28–45 min4–8 min<10 min
CSR-hours per 100 COIs47–75 hrs7–14 hrs<15 hrs
Error rate (wrong limits/holder)3–8%<1%<1%
Same-day delivery rate60–75%94–99%95%+
E&O exposure from COIModerateLowLow

COI Automation ROI: Agency Performance Data

Agency CSR productivity: COI requests consume 18–23% of total CSR capacity according to Applied Systems (2024) research across mid-size commercial agencies, making it the single largest time sink in the service department ahead of claims status calls and endorsement requests.

E&O claims from COI errors: average settlement cost of $42,000 according to NAIC (2024) analysis of agency professional liability claims, driven primarily by incorrect certificate holder language and expired policy certificates. Automated generation with library matching eliminates both error categories.

Agency SizeMonthly COI VolumeCSR-Hours ManualCSR-Hours AutomatedAnnual Labor Savings
Small (5–15 staff)40–8028–56 hrs5–10 hrs$18,000–$32,000
Mid (15–40 staff)80–20056–140 hrs10–22 hrs$32,000–$72,000
Large (40–75 staff)200–500140–350 hrs22–55 hrs$72,000–$180,000

Commercial lines COI same-day delivery rate: 42% without automation, 94% with automation according to Vertafore (2025) agency operations benchmarking. The delivery rate gap directly correlates with client retention in competitive commercial markets where brokers compete on service speed.

For agencies looking to expand automation beyond COI, the same AMS integration that powers certificate generation can also drive the review request flows described in automate best review request software for insurance agencies.


Key Takeaways

  • COI handling is the highest-volume manual task in most commercial agencies — automating it frees CSR capacity for revenue-generating work.

  • US P&C direct written premiums topped $1.07 trillion in 2024, and independent agencies capture 37% of commercial P&C — making operational efficiency a direct profitability lever.

  • Applied Epic's REST API is more automation-friendly than AMS360's SOAP API; either can be automated with the right integration layer.

  • The certificate holder library match is the single highest-ROI automation step — it eliminates the most common COI error and covers 70–85% of request volume in most agencies.

  • Zapier and Make handle the basic send but break on AMS field mapping maintenance, API retry, and exception routing at 100+ COIs per month.

  • US Tech Automations orchestrates the full loop: inbound trigger, Epic/AMS360 API lookup, certificate holder matching, ACORD generation, email delivery, and audit log.


FAQ

How long does COI automation take to implement?

For an agency already on Applied Epic with a stable certificate holder library, basic automation (inbound email trigger → API lookup → ACORD generation → email delivery) typically takes 3–5 business days to configure and test. Agencies on AMS360 with SOAP API integration add 2–3 additional days for field mapping. Full exception routing and audit log integration adds another 1–2 days.

Can I automate COI requests for clients with multiple policies?

Yes, but the automation needs a disambiguation step. When a client has a CGL, auto, and umbrella policy, the automation must match the certificate type requested (ACORD 25 vs. 28) to the correct policy. This is handled by reading the coverage type field in the inbound request and mapping it to the corresponding policy type in the AMS.

What if the certificate holder is not in our AMS library?

Route to a CSR exception queue with the pre-filled certificate holder fields from the inbound request. The CSR confirms the holder details, adds them to the library, and approves the certificate. This takes 5–8 minutes versus 25–40 for a full manual process. Over time, the exception queue shrinks as the library grows.

How does automation handle additional insured endorsements?

Additional insured endorsements require a policy endorsement confirmation before they can appear on a COI. The automation reads the policy endorsement list in the AMS and checks whether the requested additional insured is already endorsed. If not, it routes to a CSR to handle the endorsement request before generating the certificate.

Does automated COI handling reduce E&O exposure?

It reduces specific E&O risks associated with manual errors (wrong limits, expired policy, incorrect certificate holder language) while creating a documented audit trail per certificate issuance. For a broader view of automation in insurance agency operations, see automate certificate of insurance workflow.

When NOT to use US Tech Automations for COI automation?

If your agency handles fewer than 40 COI requests per month and has a CSR with dedicated capacity for certificate handling, the manual process is fast enough and the ROI on automation tooling does not clear setup costs. US Tech Automations also adds less value if your entire client base uses a single carrier's certificates portal for direct issuance — some carriers allow certificate holders to self-serve directly, which eliminates agency involvement. See automate review requests for insurance agencies for other high-ROI automation candidates in the agency stack.


Automating COI request handling is one of the fastest-payback operations projects in a commercial insurance agency. The recovered CSR time converts directly to relationship management and cross-sell capacity — two activities that drive premium growth without adding headcount.

US Tech Automations connects to Applied Epic and Vertafore AMS360, handles the certificate holder matching, ACORD generation, and email delivery as a single workflow, and routes exceptions to a structured CSR queue with prefilled fields. Ready to see how it fits your agency's stack? Explore the finance and operations automation capabilities and see how agencies are cutting COI delivery time from hours to minutes. For additional reading on best practices, see automate best review request software for insurance agencies.

About the Author

Garrett Mullins
Garrett Mullins
Workflow Specialist

Helping businesses leverage automation for operational efficiency.

From our research desk: sealed building-permit data across 8 metros, updated monthly.