Audit-Ready or Audit-Exposed: What Subcontractor Compliance Costs at a Workers' Comp Audit | bcs

A workers' compensation premium audit isn't a possibility. It is a certainty. Once a policy period closes, the carrier reviews your records to reconcile the premium you paid against the exposure you actually had. And for any general contractor or hiring company, the first thing the auditor wants to see is proof that the subcontractors you paid carried their own coverage while they were on your jobs.

That's the moment subcontractor compliance stops being paperwork and becomes money. If you can't produce a valid certificate of insurance showing a sub carried workers' compensation coverage during the period you paid them, the auditor doesn't shrug and move on. The sub's crew is treated as your own uninsured labor, and everything you paid that sub becomes premium-bearing payroll: yours. The coverage question gets settled at audit, and it gets settled against whoever can't produce the paper.

What "Picked Up at Audit" Actually Means

This isn't auditor discretion. It is written into the rating rules. Under the NCCI Basic Manual subcontractor rule in force across most states (Rule 2-H, as published by state rating bureaus), when a contractor can't show evidence of a sub's workers' comp coverage, the auditor charges premium on that sub's exposure as follows:

If the sub's complete payroll records happen to be available, that payroll is used. In practice, they almost never are (you're being audited, not the sub) and the rule's fallback is brutal: the full subcontracted price of the work is treated as payroll. Even with partial documentation, the rule imposes minimums:

NCCI Basic Manual Rule 2-H, Subcontractor Table 2. State rules vary, and some states apply their own versions, but the structure is broadly consistent.

Two more provisions of the rule do the real damage. First, that imputed payroll is classified as if the sub's workers were your own employees, so a roofing subcontract gets rated at the roofing class code, not at your office rate. Second, your own experience modification factor applies to the additional premium.

Put those pieces together and a "mostly compliant" project produces a bill that surprises people. Here's what that looks like with real numbers.

A 20-Sub Project at 70% Documented: What the Gap Costs

Consider a $20.77 million commercial project with 20 subcontractors. At audit, the GC produces valid workers' comp certificates for 14 of them, a 70% capture rate. In most organizations, 70% doesn't feel like a failure. It feels like a busy quarter.

Illustrative project. Subcontractors are identified by trade only; contract values are fictitious.

Now apply Rule 2-H to the six gaps

The six missing certificates represent $4,870,000 of subcontract value, 23% of the project. Each one gets converted to imputed payroll at the rule's minimum for its work type, classified at the trade's class code, and rated:

Rates are 2026 Florida manual rates per $100 of payroll, used because Florida requires every carrier to charge the same state-approved base rate, which makes the arithmetic reproducible. Rates vary substantially by state, class and carrier, so run your own. Sources: Florida class code rate table; basis percentages from NCCI Basic Manual Rule 2-H.

Three things this example is really showing

The gaps aren't priced by size. They are priced by work type. The framing and drywall sub alone accounts for $81,336 of the bill, nearly half the total, because labor-only work is picked up at 90%. The site grading sub, on a $340,000 contract, contributes just $3,706 because equipment-with-operator work is picked up at 33⅓%. Two subs, comparable enough on paper, twenty times apart at audit. You can't triage your COI chasing by contract value alone.

70% is not a passing grade. The GC in this example collected most of the certificates. The 30% they missed cost roughly 3.5% of the value of those subcontracts, in a single retroactive invoice. Compliance rates that look respectable on a dashboard translate into six figures at audit, and the relationship isn't linear, because one large labor-only sub can outweigh a dozen small documented ones.

The bill above assumes nobody got hurt. Every dollar in that table is pure premium arithmetic on a project with a clean loss record. If any worker on those six uninsured crews had been injured, the statutory employer exposure below stacks on top of it.

It's Not Just Premium: You Become the Statutory Employer

The audit pickup is the predictable cost. The contingent one is worse. Forty-four states and the District of Columbia statutorily regulate workers' compensation within the general contractor and subcontractor relationship, and under those statutory employer rules the general contractor is assigned responsibility for the benefits owed to an uninsured subcontractor's injured employee, regardless of how few people that subcontractor employs. If a worker on an uninsured sub's crew gets hurt on your project, that claim doesn't stay the sub's problem. It pays out of your policy.

And because it's your claim now, it flows into your experience mod and reprices every policy you buy for the next three years, across all your work, not just the project where it happened. For contractors bidding work where owners screen on the mod, that's not an insurance line item; it's lost eligibility. As the industry guidance puts it, the additional premium for these de jure employees is charged to the general contractor "even if no loss occurs." The claim exposure is what happens when your luck runs out too.

The Ramifications Flow Downhill to Your Subcontractors

Here's the part that doesn't get talked about enough: when a hiring company takes an audit charge like the one above because of a subcontractor's coverage gap, that charge rarely stays with the hiring company. Most subcontract agreements contain insurance and indemnity provisions that push the cost right back down the chain. A sub whose certificate lapsed mid-project, or who never produced an acceptable one, can find the resulting premium charge deducted from retainage, back-charged against final payment, or netted out of the next invoice.

And the ramifications outlast the audit. A hiring company that's been burned once starts making prequalification decisions differently. The subs whose compliance held up across the whole project are the ones who stay on the bid list. The subs who show up in the audit file as a gap, and as a charge, often don't get the call for the next job. Being audit-ready, in other words, isn't just the GC's problem. It's the quiet credential that determines which subcontractors keep getting work.

For compliant subs, the flip side is real: when their coverage history is documented continuously, there are no panicked calls two years after demobilization asking them to dig up a certificate from a broker who's since changed agencies. No disputes settled from memory. The record speaks, and it speaks in their favor.

Hiring companies that would rather not run this chase themselves can hand it to a dedicated bcs compliance team that pursues every subcontractor to full compliance by email, phone, and their insurance agent. The audit file gets built either way. The only question is who does the building.

What Audit Readiness Actually Produces

The Audit Readiness feature, available to all hiring company users in bcs, generates the two things an insurance auditor usually asks for, on demand, per location:

Reports are generated per location, so each audited project gets its own PDF and archive.

The timeline is the piece that changes the conversation. Instead of reconstructing a project's compliance history from email threads and file shares, you're handing the auditor a chronological record:

Illustrative example of an Audit Readiness timeline: compliant and non-compliant intervals per company, across the audit period.

Notice what that timeline does for everyone involved. For you, it scopes the audit conversation to exactly what happened. For your compliant subcontractors, it's affirmative proof: their names, their coverage, their dates, documented without them lifting a finger. And where a gap did exist, it's bounded: a defined stretch with defined dates, not an open question that swallows a whole year of payments to that sub.

Using It Well: Three Habits

Match the period to the audit, not the calendar

The Audit Readiness tab starts empty until you set a timeframe. Set it to your workers' comp policy period or the full project duration, whatever the carrier is actually reviewing, rather than defaulting to a calendar year. Alignment with the carrier's dates is what makes the export drop-in ready.

Don't purge the expired certificates

It's counterintuitive, but the expired COIs are evidence, not clutter. A continuous chain of certificates, each replaced as it expired, demonstrates that coverage was tracked throughout, not checked once at contract signing. Audit Readiness includes them in the archive on purpose.

Run it before the auditor asks

The feature works just as well as a mid-project health check as it does at audit time. If the timeline shows a non-compliant stretch forming now, that's a conversation to have with the sub today, while the fix is a corrected certificate, not a back-charge. That's the real ramification of audit-readiness for subcontractors: problems get surfaced while they're still cheap to solve, for both sides of the contract.

Compliance You Can Hand Across the Table

Most COI tracking is judged by what it prevents. Audit readiness is where it's judged by what it can produce: on demand, in a format an auditor accepts. If your current COI tracking software can't generate a per-location compliance timeline and a complete certificate archive in an afternoon, the audit will measure the difference, and your subcontractors will feel it.