Subcontractor Prequalification: How General Contractors Vet Subcontractors for Payment Risk

Subcontractor prequalification is the process a general contractor uses to decide whether a subcontractor is financially and operationally sound enough to hire, before that sub ever appears on a bid list. Done well, it's a credit decision. Done as most firms do it, it's a form somebody fills out and nobody reads again.

Vetting now runs in both directions. Rabbet's 2025 Construction Payments Report found that 91% of general contractors say payment reputation influences who they choose to bid with, and 88% declined to bid on a project in the last 12 months because of a slow-pay reputation. The sub you're evaluating is evaluating you.

The question here is whether to hire a given sub at all, and what payment exposure comes with them if you do. That's separate from how you actually pay subcontractors once they're on the job, and it assumes you already have a working view of construction payment management across the project.

Key Takeaways

• Prequalification is owned by preconstruction but consumed by finance. The people who assemble the bid list rarely carry the write-off when a sub walks off a job.

• Annual financial statements describe where a subcontractor stood twelve months ago. Payment behavior is current-state data, and it lives in your AP system.

• A usable prequalification checklist covers capacity, capital, and character, with a defined threshold for each rather than a yes or no box.

• You can hire a sub you have real questions about, as long as the payment controls match the risk. Retainage, waiver gating, joint checks, and validated banking all cap the downside.

• The prequalification record and the vendor master have to be linked. When they're separate systems, the risk assessment never reaches the person cutting the check.

Why is subcontractor prequalification really a payment decision?

Subcontractor prequalification is a structured review of a sub's finances and past performance, run to decide whether they can bid and at what contract size. Bonding capacity, insurance limits, and safety history ride along in the same packet. Most firms run it once a year through a form, a set of financial statements, and a bonding letter.

Framing it as a preconstruction task hides where the consequence lands. Preconstruction adds a sub to the list; accounts payable inherits the vendor record, the payment terms, and the phone calls from that sub's unpaid suppliers eighteen months later. The base rate is not comfortable reading. Construction businesses fail at a rate of 20.3% within the first year, 43.5% within five years, and 57.4% within ten years, according to LendingTree's study of Bureau of Labor Statistics business employment dynamics data, updated April 2026 with data through March 2025.

Read that as a planning input, not a scare statistic. On a bid list of thirty subs, the arithmetic says several won't be in business when your warranty period ends. Nobody can reliably pick which ones. The job is sizing your exposure to each so a failure costs you a schedule delay instead of a lawsuit.

What is subcontractor default risk?

Subcontractor default risk is the chance that a sub fails to complete its scope, whether from insolvency, walking off, or being terminated for cause, leaving the general contractor to finish the work and absorb the cost difference. It's distinct from performance risk, which is about quality, and from credit risk in the lending sense, because a defaulting sub usually takes unpaid suppliers and second-tier subs down with it.

The cost of a default is rarely just the completion premium. There's the replacement sub's markup on a job already in progress, the schedule impact and any associated liquidated damages, the lien claims from the defaulted sub's suppliers, and the internal cost of managing all of it. A default on a $1.5 million subcontract routinely costs a GC well north of the remaining contract balance.

Macro conditions are worth watching without over-reading. Business bankruptcy filings totaled 25,960 for the 12 months ending March 31, 2026, an 11.4% increase from 23,309 the prior year, per the Administrative Office of the U.S. Courts. That's an economy-wide figure, not a construction one, and it should inform how conservative your thresholds are this year rather than how you evaluate any particular firm.

Why does finance usually find out about a failing sub last?

Finance finds out last because the earliest warning signals surface in the field and in the mailroom, and neither of those reports to the controller. A superintendent notices manpower dropping. Their project manager fields a call from the sub asking whether the pay app can go out early this month. A supplier sends a preliminary notice that lands in a general inbox.

None of those events triggers anything in the accounting system. By the time the signal becomes financial, in the form of a lien claim or a bounced check to a second-tier sub, the sub is usually weeks or months into real trouble and the GC's leverage is gone.

An accounting manager at a general contractor described the staffing side plainly in a public forum. "I work in an accounting department for a General Contractor. Our AP person is at capacity and we are on the verge of having to hire another." That's the constraint most of this runs into. The signals exist, but nobody has the hours to watch for them, and a stretched AP function processes invoices rather than reading them.

What should a subcontractor prequalification checklist cover?

A subcontractor prequalification checklist should cover capacity, capital, and character, the three-Cs framing the Construction Financial Management Association has long used for subcontractor evaluation. Each one needs a defined threshold rather than a checkbox, because a form that collects documents nobody scores is an administrative ritual, not a control.

The eight criteria below are the working set. For each, the question is not whether the sub provided the document, but what the document says relative to the size of the work you're about to give them.

1. Financial statements. Ask for the most recent fiscal year plus a current interim. What good looks like: positive working capital of at least 10% of your intended contract value, a current ratio above 1.2, and equity that hasn't declined year over year.

2. Bonding capacity. Request a letter from the surety stating single-job and aggregate capacity, plus current usage. What good looks like: remaining aggregate capacity comfortably above your contract, and a surety relationship older than three years.

3. Insurance. General liability, auto, workers' compensation, and umbrella limits, with your entity properly listed as additional insured. What good looks like: limits that meet the contract without a last-minute endorsement scramble.

4. Backlog and concentration. Total contracted backlog, the largest single job as a share of it, and the share of backlog with any one general contractor. What good looks like: no single project above roughly a third of backlog, and no single GC above half of it.

5. Lien and litigation history. Search public records in every state where they've worked, not just yours. What good looks like: no pattern of mechanics liens filed against their own suppliers.

6. Safety record. EMR, OSHA recordables, and any citations in the last three years. What good looks like: EMR under 1.0 and a real safety program rather than a binder.

7. Trade and supplier references. Call the suppliers, not the GCs. Suppliers know who pays on time.

8. Banking relationship and payment behavior. How long with their bank, whether they carry a line of credit, and how they pay their own subs and vendors.

Publish the thresholds internally so a project executive can't quietly wave through a sub who missed three of them because the bid came in low. That single act of writing the numbers down does more for consistency than any software purchase.

What financial statements should you ask a subcontractor for?

Ask for audited or reviewed statements when the contract value justifies it, and understand which of the four types you actually received. The distinction matters more than most preconstruction teams realize, because the four levels carry very different assurance:

• Audited: a CPA tests the underlying records and issues an opinion. The highest assurance, and the most expensive for the sub to produce.

• Reviewed: analytical procedures and inquiry, no testing. Limited assurance, and the practical standard for most mid-size subs.

• Compiled: a CPA formats management's numbers without verifying them. Essentially no assurance.

• Internally prepared: what came out of their accounting software. Useful as a data point, not as evidence.

For a work-in-progress schedule, which is the single most informative document a construction subcontractor can hand you, look at underbillings first. A large or growing underbilled balance means they've performed work they haven't billed, which is a cash-flow problem developing in real time. Overbillings that exceed cash on hand mean they're financing operations with your money, which becomes your problem if they stop.

Set the assurance level by contract size and hold to it. A reviewed statement for anything over a threshold you define, audited above a higher one, and internally prepared statements only for small, short-duration scopes where your total exposure is capped anyway.

How do you read bonding capacity and backlog together?

Read them together because either one alone will mislead you. Bonding capacity tells you what a surety, which has underwritten this firm's finances in detail, is willing to stand behind. Backlog tells you how much of that capacity is already spoken for.

A sub with $30 million in aggregate bonding capacity and $28 million in backlog is not a $30 million sub. They're a $2 million sub for your purposes, and their surety knows it even if their bid says otherwise. Ask for both numbers on the same date, and ask the surety directly rather than accepting a copy of last year's letter.

The concentration question sits underneath both. Suppose a sub's backlog is 60% one project. They're exposed to that project's owner, that owner's lender, and that GC's payment behavior. If any of those falter, the sub's cash position deteriorates regardless of how well your job is going. That's the mechanism by which a healthy-looking sub becomes a problem on your site for reasons that have nothing to do with you.

What does lien and litigation history actually tell you?

Lien history tells you how a subcontractor behaves when money gets tight, which is exactly the behavior you're trying to predict. Liens filed against a sub by their own suppliers are the strongest signal on the list, because a supplier lien means the sub collected money for material and didn't pass it through.

Distinguish the direction of the claim. A sub who files liens to collect from deadbeat owners is doing normal business, and in a bad market it may indicate nothing worse than a difficult customer. A sub who has liens filed against them by suppliers has a cash problem. Litigation follows a similar logic, where contract disputes with owners are routine and judgments from suppliers or tax authorities are not.

Market-level lien activity is a useful backdrop. The NCS Credit Lien Index registered 48 in Q4 2025, falling below the neutral 50 mark for the first time since Q1 2023 and down from a revised 55 in Q3 2025, which suggests filing activity and the credit conditions behind it were softening rather than tightening at the end of that year. Treat it as context for how much weight to put on a single lien, not as a substitute for checking.

Public-record searches are also where you'll catch the entity games, the sub who dissolved one LLC with judgments against it and reappeared under a new name with the same principals and the same address. Search by principal name as well as by entity, and note that construction payment fraud red flags overlap heavily with this territory.

How do you spot a subcontractor heading for trouble mid-project?

You spot it in payment behavior, weeks or months before it shows up in a financial statement. The annual statements you collected at prequalification describe a company that existed twelve months ago. What a sub does with money this week is current, and most of it passes through your own systems.

This is the part of subcontractor risk management that ranking guides on prequalification tend to skip. They treat vetting as a gate you pass through once a year, when the actual failures happen in month seven of an eighteen-month job, long after the form was filed.

Which payment-behavior signals show up in your AP system first?

Six signals show up in accounts payable before they show up anywhere else:

• Their suppliers start calling your AP team directly to ask when the sub is getting paid. Suppliers only do this when they've stopped believing the sub.

• Joint check requests increase, especially from suppliers who never asked before.

• Preliminary notices arrive from second-tier subs and material vendors on the sub's scope.

• Lien waiver returns slow down, or come back with exceptions and carve-outs that weren't there in earlier cycles.

• The sub asks to accelerate terms, requests early release of retainage, or starts calling about payment timing before the pay app is even certified.

• Change-order disputes rise, because a sub short on cash starts monetizing every deviation from the base scope.

Any one of these is noise. Three of them on the same sub inside a quarter is a pattern, and the useful move is to look at all six together rather than reacting to each in isolation. Routing preliminary notices and supplier calls to one owner, instead of letting them scatter across project managers, is what makes the pattern visible at all.

The honest limitation is that none of this is predictive in a statistical sense. I've seen subs exhibit four of these signals and finish the job fine because a single slow-paying owner resolved. The signals tell you when to tighten controls and ask direct questions, not when to terminate.

Protect cash flow on every project

Modernize AP to cut costs, speed approvals, and reduce payment risk — with the real-time visibility construction finance teams need to scale without adding headcount.

Download the whitepaper

When should a joint check agreement replace a direct payment?

Use a joint check when a sub's supplier or second-tier sub is at genuine risk of nonpayment on your project, and you'd rather control where the money lands than deal with a lien later. It's a mitigation, not a punishment, and framing it that way with the sub matters for the working relationship.

The mechanics are straightforward, but joint check agreements carry real legal consequences in some states, including arguments that issuing one creates a direct obligation to the supplier. Get the agreement papered before the first check rather than improvising one under pressure, and know your state's rule.

The moment to reach for it is when preliminary notices start arriving on a sub's scope and the sub can't produce evidence they've paid. Waiting until a lien is filed costs you the negotiating position.

How often should you re-prequalify an active subcontractor?

Annually as the baseline, with an off-cycle review triggered by events rather than dates. A calendar-driven process alone will always be stale for the sub who deteriorates in month four.

Reasonable triggers for an immediate re-review:

1. Any of the payment-behavior signals above appearing more than once in a quarter.

2. A change in ownership, principals, or bonding company.

3. A new award that pushes their backlog materially past what you last verified.

4. A lien or judgment filed against them anywhere.

5. A request from the sub to change banking details, which should trigger verification regardless.

For high-volume subs you use across many jobs, quarterly interim financials are a fair ask and most established firms will provide them. Subs who refuse routine financial updates after you've been feeding them work for two years are telling you something, and it's worth hearing.

What payment controls contain the risk once you've hired the sub?

Payment controls let you hire a sub you have real questions about without taking the full downside. That's the practical value of the whole exercise, because the alternative, refusing to work with anyone whose balance sheet isn't pristine, would shrink most bid lists to the point of uncompetitiveness.

Fraud risk sits alongside credit risk here and uses the same controls. The Association for Financial Professionals found 79% of organizations were victims of attempted or actual payments fraud activity in 2024, per its 2025 AFP Payments Fraud and Control Survey Report. A vendor master full of subcontractors, with banking details changing as firms move banks and get acquired, is exactly the surface that gets attacked.

How do retainage and lien-waiver gating cap your exposure?

Retainage and waiver gating cap exposure by keeping a portion of the money on your side of the table until the obligations behind it are provably satisfied. Retainage is the blunt instrument, holding back a percentage of each progress payment as security against non-completion, and how retainage works and when it's released is worth getting exactly right in the subcontract rather than defaulting to whatever the prime contract says.

Waiver gating is the sharper tool. Requiring conditional waivers from the sub and their suppliers for the current period, and unconditional waivers for the prior period, before releasing a payment means you're never more than one cycle exposed to money that didn't flow through. The difference between conditional and unconditional lien waivers is the whole control, and teams that treat waivers as filing rather than as a gate get no protection from them.

Milestone-tied release adds a third layer for higher-risk subs. Rather than paying on percentage complete, tie releases to verifiable events, and handle scope changes through a disciplined change-order payment workflow so a cash-hungry sub can't use change orders as a financing mechanism.

How does validated vendor banking stop a fake-subcontractor payment?

Validated vendor banking stops it by confirming that the account number on file belongs to the legal entity you contracted with, before any payment is released to it. The attack it defeats is simple and extremely common. An email arrives, apparently from a sub you've been paying for months, saying the bank has changed and here's the new routing information.

Business email compromise was the top payments-fraud method in the AFP survey, cited by 63% of respondents. It works because the request is plausible, arrives from a real-looking address, and lands with someone who has no independent way to check. A control that verifies account ownership independently, rather than trusting the channel the request arrived on, removes the entire class of attack.

The operational version has three parts: bank details are verified against the entity at onboarding, any change request triggers re-verification through a channel the requester didn't choose, and the person who can change banking details is not the person who can release payment. That last one is unglamorous segregation of duties, and it catches more than any technology does. The same discipline is what vendor management best practices for AP teams are built around.

What do you owe a good sub in return?

You owe them prompt payment, and the market now prices this. Billd's 2025 National Subcontractor Market Report found 74% of subcontractors report being generally slow paid by general contractors, and slow, inconsistent payment practices act as a hidden 14% tax on projects, costing the U.S. construction market an estimated $299 billion in 2025 according to Rabbet's report on the same period.

Vetting subs harder while paying them slower is a strategy with a short shelf life. The good subs, the ones who pass every threshold on your checklist, are precisely the ones who can afford to be selective about whose bid list they join. Every day you add to their collection cycle is working capital they have to finance, and they will price it into the next bid or decline to submit one.

There's a version of this that's genuinely mutual. Pay fast and consistently, and you become the GC whose jobs subs bid first and price sharpest, which is a real commercial advantage that also happens to reduce your risk, since well-paid subs don't develop cash crises on your site. Smoothing the timing on both sides is most of what managing a lumpy construction cash-flow curve involves.

How do you run prequalification at scale without adding headcount?

At scale, prequalification stops being a document-collection problem and becomes a data-linkage problem. There were more than 919,000 construction establishments in the U.S. in Q1 2023, employing 8.0 million people and producing nearly $2.1 trillion worth of structures per year, according to Associated General Contractors of America construction data. A regional GC might touch four hundred of them in a year.

Nobody reads four hundred financial statement packages carefully. What actually works is tiering by exposure, applying full review to the subs above a contract threshold and a lighter screen to everyone else, and then making sure the result of that review travels to the systems that use it.

Where should the prequalification record live: Your ERP or your AP system?

The prequalification record belongs in whatever system holds the subcontract and the job cost, which for most general contractors means the construction ERP or the project management platform. That's already where contract values, change orders, and compliance documents live. Procore, Sage 300 CRE, and Viewpoint Vista all support some version of this, as does CMiC.

What that system generally doesn't do is carry the risk assessment through to the payment. The vendor master in your accounting system needs to inherit at least three things from prequalification: the approved contract ceiling, the required payment controls, and the verified banking details. Without those, the payment side runs blind.

Prequalification software exists and is worth evaluating above a certain volume, though be clear about what you're buying. Most of it automates collection and scoring, which is the easy half. The hard half is the handoff, and a scoring tool that doesn't write back to your vendor master has moved the bottleneck rather than removed it. The same evaluation logic applies when choosing construction payment software generally.

Payments that keep projects moving

Sync with any construction ERP, replace manual approvals with paperless workflows, and earn rebates on fuel, purchases, and T&E — all on one card with built-in fraud controls.

Explore construction solutions

What breaks when prequalification and vendor onboarding are separate systems?

Three things break, and they break quietly. A sub gets prequalified in the preconstruction system with a hard contract ceiling and then set up in the accounting system with no ceiling at all, so project teams write them four separate awards without anyone noticing the aggregate.

The second break is the tax and compliance record. Prequalification collects a W-9, insurance certificates, and a bonding letter; vendor onboarding collects a W-9 again, often a different one, sometimes with a different entity name. Reconciling that at year end is where 1099-NEC rules for construction subcontractors turn into a scramble, and where duplicate vendor records get created.

The third is visibility. When the risk assessment lives in one system and the spend lives in another, nobody can answer the question that actually matters, which is total current exposure to a given sub across all active jobs. That answer requires project-level spend visibility joined to the vendor record, and it's the number a controller should be able to pull in under a minute.

Reviewers on both sides describe the same symptom in different words. One review-mining comment put the onboarding half as needing to "automate vendor onboarding and tax form collection"; another named "vendor duplication complicating transactions." Those are the same failure seen from two seats.

Vet once, pay with confidence with Corpay AP automation

A sub gets properly evaluated in one system and then paid, without controls, out of another. That gap is where a prequalification decision stops protecting anybody, and it's on the payment side that the exposure converts into an actual loss.

We validate vendor banking before payments release and re-verify on any change request, so a spoofed bank-change email doesn't reach the payment run. Supplier enrollment and follow-up are handled by our managed service rather than by an AP team already at capacity. Payments go out across ACH, virtual card, check, and wire from one approved file, and each one reconciles back to the job as a single transaction instead of a statement your team has to unpick. Access runs through MFA-protected portals with segregation between who can change vendor details and who can release funds, and Corpay is SOC 2 Type II compliant, which is the audit evidence your own risk and IT reviewers will ask for.

None of this replaces the ERP or project management system that holds your prequalification record. We connect to the accounting system underneath it through 180+ ERP integrations via API, SFTP, or file-based connections. NetSuite, Sage Intacct, Microsoft Dynamics 365, and Acumatica are all in that set. Around 800,000 businesses run payments through Corpay on that model. See how Corpay AP automation handles subcontractor payment controls, or look at what Corpay does for construction specifically.

Frequently Asked Questions

What is subcontractor prequalification?

Subcontractor prequalification is a structured review of a sub's finances and past performance, run to decide whether they can bid and at what contract size. Bonding capacity, insurance limits, and safety history are collected alongside it. Most general contractors run it annually.

What goes on a subcontractor prequalification form?

A prequalification form should request current and prior-year financial statements plus a work-in-progress schedule, a surety letter showing single-job and aggregate bonding capacity, and certificates of insurance. It should also capture EMR and OSHA history, backlog by project, ownership details, and supplier references.

How do general contractors evaluate a subcontractor's financial health?

They look at working capital relative to the intended contract size, the current ratio, and the underbilled and overbilled positions on the work-in-progress schedule. Equity trend year over year matters too. Bonding capacity is used as a cross-check, since a surety has already underwritten the firm in detail.

What are the three Cs of subcontractor evaluation?

Capacity, capital, and character. Capacity is whether they can staff and manage the work, capital is whether they can fund it through the payment cycle, and character is whether they honor obligations, including paying their own suppliers on time. The framing is long established in construction financial management.

What is subcontractor default insurance, and how does it differ from a surety bond?

Subcontractor default insurance is a policy the general contractor buys covering a portfolio of subs, with the GC managing claims directly and carrying a deductible. A surety bond is purchased by the subcontractor for a specific job, and the surety controls the completion process after a default.

How often should you re-prequalify a subcontractor?

At least annually, plus an immediate review triggered by events: a change in ownership or bonding company, a new award that stretches their backlog, a lien or judgment, repeated payment-behavior warning signs, or any request to change banking details.

What are the warning signs a subcontractor is running out of cash?

Their suppliers calling your AP team directly, an increase in joint check requests, preliminary notices arriving on their scope, slower or qualified lien waiver returns, requests to accelerate payment terms or release retainage early, and a rise in change-order disputes.

David Luther

Product Marketing Program Manager

David Luther, MBA is a product marketing program manager with years of experience in commercial banking, finance, and technology sectors, with research and writing appearing in financial publications.

Risk management