> ## Documentation Index > Fetch the complete documentation index at: https://docs.coverbase.com/llms.txt > Use this file to discover all available pages before exploring further. # Certificate Vault and prequalification > One repository for every certificate a vendor holds, whether uploaded, read from a document, pulled from ISNetworld, Avetta or EcoVadis, or found in a trust center, with prequalification rules that can block new purchase orders and licensed security, financial and credit ratings in Radar.
For AI agents: a documentation index is available at [https://docs.coverbase.com/llms.txt](https://docs.coverbase.com/llms.txt). This page is also available in markdown by appending .md to the URL.
Your Coverbase representative turns on the third-party lifecycle features, including the Certificate Vault, prequalification, and the licensed rating connectors with their Radar rating detector, for your organization. The Certificate Vault is a record for every attestation your program relies on: ISO certificates, SOC reports, PCI attestations, certificates of insurance, network grades and ESG ratings. Prequalification rules read the vault to decide which vendors may be used, and licensed rating providers feed rating changes into Radar. ## What it does **Certificates** in the left navigation lists every certificate across your vendors, and each vendor has a **Certificates** tab. Validity (valid, expiring within 60 days, expired) is worked out when you look, so it never goes stale. Certification, PCI, SOC 1 and SOC 2, ACORD 25 and insurance policy documents fill the vault when they are analyzed. Trust center documents, network pulls and certificates you add by hand fill it too, and you can request a certificate from the vendor through the supplier portal. Rules that must all pass, each passing when any one of its conditions does: a network grade, a network status, a certificate held, insurance coverage with a minimum limit and additional insured, or a safety or ESG figure such as TRIR, EMR, DART rate or ESG score. A rule set can block new purchase orders until the vendor qualifies or someone records an override with a rationale. An override lapses when the result changes. ISNetworld and Avetta grades, safety statistics and insurance, and EcoVadis scorecards, sync into the vault daily. Bitsight, SecurityScorecard, RapidRatings and Moody's ratings are pulled for your portfolio. A change in a matched vendor's rating becomes a Radar signal, and the first pull is a baseline, so connecting a provider does not flood Radar. Certificates page with counts for certificates, expiring in 60 days, expired and from networks, the All Certificates table, two prequalification rule sets and the Networks card When a provider's response does not have the shape Coverbase expects, the pull stops and records the error rather than reading it as empty, so a changed response never archives certificates. A value the provider reports as zero, such as a rating, a score, an insurance limit or a company ID, is recorded as zero. ## How long a certificate counts * A SOC report is relied on for a year past the end of its period. * A certificate of insurance is only as current as its first policy to lapse. * Every prequalification condition reads only current certificates, so an expired record stops counting for its grade and its figures alike. * A safety figure over a number of years needs each of the latest years reported. A missing year fails the condition. ## Where prequalification shows up * On the vendor's page, as **Qualified**, **Blocked** or **Overridden**, with **Override with rationale**. * On the Front Door review of an intake request, with the same override control. * When someone issues a purchase order in Coverbase for a blocked vendor: the purchase order is refused. * In workflows, as a prequalification condition you can branch on. A failing rule set that does not block reads as advisory. Results are recalculated when a certificate changes, when you save a rule set, and once a day. Each rule set can remind relationship owners a set number of days before a certificate lapses. ## Where to go next Fill the vault, write a rule set, override a result and connect a network. Connect contractor grades, statistics and insurance. Bring security rating changes into Radar. Where rating changes become signals. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.