Is a general contractor liable for a subcontractor's mistake? In 45 states, the indemnification clause in your subcontract may not protect you the way you assume, and OSHA was never going to ask whose crew caused the problem before it cited you.
The Contract Says One Thing. Forty-Five States Say Another.
Most subcontract agreements include an indemnification clause: the subcontractor agrees to defend and cover the general contractor for claims arising from the sub's own work. It's standard language, and most GCs treat it as a settled matter once it's signed.
It isn't settled. Forty-five states have enacted anti-indemnity statutes that limit or prohibit enforcing indemnification agreements in construction contracts, according to a 50-state legal survey by Gordon Rees Scully Mansukhani, corroborated by a separate all-states survey from Matthiesen, Wickert & Lehrer. Many of these statutes specifically void indemnification for the indemnitee's own negligence. That means if the GC's own supervision, site conditions, or safety program contributed to the incident in any way, the clause protecting the GC can become unenforceable in exactly the state where the job is being built. That's the reason so many subcontracts now hedge with “to the fullest extent permitted by law”: the phrase exists because the drafting attorneys already know the clause won't always survive.
The practical effect: a GC who reads the indemnification clause once at contract signing and files it away is relying on language whose enforceability depends on a state-specific legal test that changes the outcome, not a guaranteed transfer of risk.
OSHA Doesn't Care Whose Crew Made the Mistake
Even where the subcontract holds up, OSHA doesn't wait to find out. Under the agency's Multi-Employer Citation Policy (Directive CPL 02-00-124, in effect since December 10, 1999), more than one employer on a shared worksite can be cited for the same hazardous condition, regardless of whose crew caused it or whose employee got hurt.
OSHA sorts employers on a multi-employer site into four categories: the creating employer (caused the hazard), the exposing employer (whose own workers were exposed), the correcting employer (responsible for fixing it), and the controlling employer (has general supervisory authority over the site). A general contractor is almost always the controlling employer. That status alone is enough for OSHA to issue a citation directly to the GC for a hazard a subcontractor created and that only injured the subcontractor's own worker. The GC doesn't have to have touched the hazard at all.
The Certificate of Insurance You're Holding Isn't What You Think It Is
Most GCs manage subcontractor risk with a certificate of insurance on file and an additional insured request in the subcontract. A June 2026 Rochester Business Journal report on third-party risk, featuring a construction attorney, an insurance partner, and a risk management consultant, is direct about the gap in that approach: a certificate of insurance is not legally binding on the insurer. A broker can generate one without it guaranteeing the underlying policy is active, accurate, or actually sufficient for the GC's contract requirements.
As construction attorney Lauren R. Mendolera of Harter Secrest & Emery put it: “Never does the roofer just sue the subcontractor. He always sues the contractor and the owner, and then everybody fights over liability.”
The professionals quoted in that report identify what actually protects a GC. Review the subcontractor's policy endorsements, not just the certificate's face page. Verify that additional insured status is actually written into the policy, not just requested on paper. And track coverage continuously through the life of the project, since a certificate that was current at contract signing can lapse mid-project without anyone noticing until a claim arrives. Eighty-seven percent of executives surveyed by Deloitte in 2025 said third-party risk matters more today than it did three years ago, and the Ponemon Institute puts the average cost of a third-party compliance failure at $14.82 million.
Why the Stakes Keep Getting Bigger
Even where liability is clearly established, the size of the exposure has changed. Marathon Strategies' “Corporate Verdicts Go Thermonuclear: 2025 Edition” (February 2026) found that 2024 produced 135 nuclear verdicts (jury awards of $10 million or more), the highest number on record, spread across 34 states and 77 courts. Thermonuclear verdicts, those above $100 million, nearly doubled in 2024. Since 2020, nuclear verdicts are up 309% in number, 273% in total dollars, and 143% in median size.
A job-site injury case that might once have settled inside a GC's primary and excess liability limits is now being tried in front of juries willing to award far beyond what those limits were sized for a few years ago. The indemnification clause, the OSHA citation exposure, and the certificate-of-insurance gap all existed before this shift. What's changed is what it costs when one of them fails.
What a Captive Actually Underwrites
A captive doesn't replace the GC's primary general liability and excess/umbrella program, and it shouldn't try to. It's a structure the business owns that underwrites the layer standard commercial coverage assumes away: the gap between what a subcontract's indemnification clause is supposed to do and what a state's anti-indemnity statute actually allows, the controlling-employer exposure OSHA can assign regardless of contract language, and the excess capacity a GC needs in a market where a single job-site verdict can now run into nine figures.
The business writes the terms because the business owns the insurer. Premiums that would otherwise fund a commercial excess layer priced for the whole market's loss experience instead build reserves the GC controls directly, with the 831(b) tax treatment applying: premiums paid to a qualifying captive are deductible by the parent company, and captive underwriting income accumulates tax-deferred. As a general guideline, this structure tends to make the most economic sense above roughly $250,000 in annual premium, though that's a guideline and not a hard rule. In higher-tax states, the 831(b) benefit can justify formation at a lower premium level.
What This Means for How You Manage Risk
- Get your subcontract indemnification language reviewed against your state's anti-indemnity statute. “To the fullest extent permitted by law” is not the same thing as full protection, and most GCs have never had that gap quantified.
- Verify additional insured endorsements are actually on the policy for your top subcontractors, not just requested on the certificate. Track it continuously through the project, not only at contract signing.
- Loop in your CPA before a captive is formed, not after. This only works as legitimate risk transfer when the underwriting, claims process, and governance are real, not a structure assembled around a tax outcome.
Contact 3F Captive Services for a no-cost policy analysis of your excess liability, subcontractor risk transfer, and job-site coverage structure.
This post is for informational purposes only and does not constitute insurance, legal, or tax advice. Coverage requirements, indemnification enforceability, and captive structures vary by state and project. Consult qualified insurance, legal, and tax advisors regarding your specific situation.
Sources
1. Occupational Safety and Health Administration, “Multi-Employer Citation Policy,” Directive CPL 02-00-124, effective December 10, 1999.
2. Gordon Rees Scully Mansukhani, “50 State Legal Matrix: Anti-Indemnity Statutes,” 2023. Corroborated by Matthiesen, Wickert & Lehrer, S.C., “Anti-Indemnity Statutes in All 50 States.”
3. Rochester Business Journal, “Third party risk grows as businesses expand vendor networks,” June 24, 2026, quoting Kirsten Shepard (OneGroup), Lauren R. Mendolera (Harter Secrest & Emery), and Mark S. Verdi (Lawley), as reported in Billy, “Third Party Risk Is Construction's Fastest Growing Liability,” July 2026. Deloitte Third Party Risk Management Survey, 2025, and Ponemon Institute Cost of Noncompliance Report figures as cited therein.
4. Marathon Strategies, “Corporate Verdicts Go Thermonuclear: 2025 Edition,” February 9, 2026.
Discover Tailored Insurance Solutions
Unlock the potential of customized captive insurance designed specifically for your unique business needs.