Most conversations about HOA risk start with money: levy arrears, budget shortfalls, reserve fund adequacy. All real concerns. But ask any risk-aware property manager what actually keeps them up at night, and a different answer comes up just as often: an uninsured or non-compliant contractor working on the property when something goes wrong.

A gardener falls off a ladder trimming a tree on common property. A security company's guard is involved in an incident at the gate. A plumber's work causes water damage to three units. In every one of these scenarios, the first question that matters isn't "whose fault was it," it's "was this contractor properly insured and compliant when the incident happened." If the answer is no, the liability doesn't disappear. It typically lands on the body corporate or HOA, and by extension, on the trustees who approved that contractor.

Why this is harder than it sounds

In principle, vendor compliance is simple: don't use contractors without valid insurance, tax clearance, and any relevant certificates of compliance (CoCs). In practice, most schemes struggle with it for a structural reason: compliance documents expire, and nobody is watching the calendar.

A gardening contractor might have had valid public liability insurance when they were onboarded two years ago. Whether that policy is still active today is a different question entirely, and it's one that typically only gets asked after an incident, when it's too late to matter.

The other structural problem is fragmentation. Contracts, insurance certificates, tax clearance letters, and CoCs tend to live in whatever format they arrived in: a PDF emailed three years ago, a paper copy in a filing cabinet, a WhatsApp photo of a certificate someone forwarded once. There's rarely a single place a trustee can go to answer, with confidence, "is every contractor currently working on our property compliant right now?"

What good vendor compliance tracking looks like

A proper system for tracking service providers needs to cover a few things consistently:

A central record per vendor. Every contractor, whether it's the gardening service, the security company, the pool maintenance contractor, or a one-off electrician, should have a single record covering their contract terms and every compliance document that applies to them.

Live compliance status, not a filing cabinet. At any given moment, a trustee should be able to see, at a glance, which vendors are currently compliant and which aren't, rather than having to dig through email history to check.

Automated expiry reminders. Insurance policies and tax clearance certificates have expiry dates. A system that flags an upcoming expiry weeks in advance, rather than the board discovering a lapse after an incident, is the difference between a manageable admin task and a genuine liability event.

A record trustees can point to. If a claim or dispute ever arises, the board needs to be able to demonstrate that reasonable diligence was applied, that the contractor was compliant at the time they were engaged, and that the board had a system for monitoring ongoing compliance rather than a one-time check that was never revisited.

The resident side of this

Vendor compliance isn't only a board-level concern. Residents benefit from it too, just less visibly. An approved-providers directory, contractors the scheme has already vetted for compliance, saves residents from hunting for a plumber they can trust, and gives them access to emergency contacts (security, after-hours maintenance) without having to ask around the WhatsApp group at 2am. Done well, vendor compliance tracking is both a risk-management tool for the board and a convenience for residents, which is a rare combination in HOA administration.

A realistic compliance checklist

For any active vendor, contractor, or service provider working on common property, it's worth being able to answer:

Is their public liability (and, where relevant, other) insurance currently valid, and when does it expire?
Do they have a current tax clearance certificate, if your scheme requires one for procurement purposes?
Are any required certificates of compliance (electrical, gas, etc.) current for the work they're doing?
Who last verified this, and when?
Is there a clear owner on the board responsible for following up before anything expires?

If the honest answer to more than one of these is "we'd have to go and check," that's a gap worth closing before it becomes an incident rather than after.

What this looks like in Votera

Votera's service provider and vendor compliance module tracks every vendor's contract terms and required compliance documents, insurance, tax clearance, CoCs, in one place, with a live compliance status visible to the board and automated expiry reminders sent before a lapsed policy becomes the board's problem. It also includes an optional resident-facing directory of approved providers and emergency contacts, so residents get a vetted plumber or the security company's after-hours number without the board fielding the same question repeatedly.

Because compliance tracking sits in the same platform as maintenance requests, a job that needs a contractor can be routed directly to a provider the board already knows is compliant, rather than the two processes running in separate silos.

The bottom line

Vendor compliance is one of those governance tasks that generates zero visible benefit right up until the day it prevents a serious problem, which is exactly why it's so easy for volunteer trustees, already stretched across budgets, maintenance, and resident relations, to let it slide. Treating it as a live, monitored record rather than a folder of PDFs checked once at onboarding is the difference between a board that's actually managing this risk and a board that's hoping nothing goes wrong before someone happens to notice a lapsed certificate.

Votera is an HOA and body corporate management platform built for South African community schemes, covering vendor compliance, maintenance, governance, and resident communication in one dashboard. See how vendor compliance tracking works or start a free 30-day trial.