An umbrella policy only helps if it sits over the right underlying coverage

Your requirement is $2,000,000 in general liability. The vendor sends a certificate with $1,000,000 GL and a $5,000,000 umbrella, and asks whether that satisfies it.

Usually yes. Sometimes no, and the difference is not visible on the certificate.

Umbrella and excess are not the same word

Two distinct products get written in the same box, and the distinction decides your answer.

Excess liability sits on top of a specific scheduled policy and follows its terms exactly. If the underlying general liability excludes something, the excess excludes it too. The only thing it adds is limit.

A true umbrella adds limit and can also broaden coverage, dropping down to cover claims the underlying policy would not, subject to a self-insured retention. Fewer policies sold today are true umbrellas in that sense, and many products labeled umbrella are functionally excess.

For a certificate review, the practical question is which underlying policies the excess or umbrella actually sits over.

The schedule of underlying insurance is the document that answers the question

An umbrella does not float above everything. It schedules specific underlying policies, and it responds only over those.

So a $5,000,000 umbrella scheduled over general liability and auto does nothing for an employer liability claim, because employer liability is not on the schedule. A vendor with a $100,000 employer liability limit and a $5,000,000 umbrella that does not schedule comp has a $100,000 employer liability limit.

That schedule is not on the ACORD 25. The certificate has an umbrella line with a limit and checkboxes for occurrence or claims-made, and it does not tell you what sits underneath.

Which means for any vendor where the umbrella is doing real work to meet your requirement, you need the schedule. Requesting it is a reasonable ask and most brokers produce it in a day.

Additional insured status has to extend upward too

This is the failure that costs the most and gets caught the least.

You are an additional insured on the vendor's general liability by endorsement. Good. That does not automatically make you an additional insured on the umbrella.

A true follow-form umbrella will generally extend the same additional insured status upward, because following form means adopting the underlying policy's insured definitions. A non-follow-form excess policy may define insureds independently and may not include you.

The result is a claim where you have $1,000,000 of additional insured protection and the extra $4,000,000 belongs to the vendor alone. Your defense stops when the primary exhausts.

Requiring that the umbrella be follow-form, and that additional insured status extend to all excess layers, is one line in a contract and it is the line that makes a high-limit requirement mean what you think it means.

Read the underlying limit before accepting the total

A vendor can meet a $2,000,000 requirement two ways, and they are not equally good.

$2,000,000 primary general liability, or $500,000 primary with a $1,500,000 umbrella.

The second one has a lower attachment point, which means the umbrella carrier is involved in small claims, which means slower claim handling and more disputes about which layer pays. It also means a series of moderate claims can exhaust the primary early in the policy year and leave the vendor operating on umbrella-only for months.

Setting a minimum primary limit alongside the total is worth doing. Requiring $1,000,000 primary plus whatever excess reaches your total is the common formulation and it is better than a total with no floor.

Aggregates are where the year gets used up

Occurrence limits get all the attention. Aggregates are what run out.

A general liability policy with $1,000,000 per occurrence and $2,000,000 aggregate has two full-limit claims in it per policy year. A vendor doing high-risk work across forty properties for six different management companies is sharing that aggregate with everyone.

Per-project aggregate endorsements exist and solve exactly this. For any vendor doing substantial work for you, requiring one means your claim is not competing with claims from properties you do not own.

Whether the aggregate has been eroded already is not something a certificate tells you. It is a question you can ask, and almost nobody does.

What IDCore reads and what needs the broker

The AI extracts the umbrella line, its limit, and the occurrence or claims-made designation, and matches the combined total against your requirement. Requirements are configurable per trade, so a $5,000,000 total for roofing and $1,000,000 for a consultant is a setting rather than two programs.

Where it stops, stated plainly. The schedule of underlying insurance, the self-insured retention, whether additional insured status extends to excess layers, and whether the umbrella is genuinely follow-form are all in the policy rather than on the certificate. No document-reading platform, ours included, can extract what the document does not contain.

What that means practically: automate the certificate review, then escalate the small number of vendors where the umbrella is load-bearing to a real coverage review. A platform that reports those vendors as compliant with no caveat is telling you something it cannot know.

Pick your three highest-limit requirements

For each, check whether the vendor meets it primarily or with an umbrella. For the umbrella ones, ask the broker for the schedule of underlying insurance and whether additional insured status extends to the excess layers.

Three emails. It is the highest-value hour available in a vendor compliance program.

How many of your high-limit vendors are actually leaning on an umbrella?