On this page
- What vendor onboarding is
- Why it matters
- The process, step by step
- Who does what
- How long should it take?
- Where onboarding gets stuck
- Fraud checks worth building in
- Onboarding different kinds of vendors
- Manual or automated
- Onboarding mistakes that show up months later
- Terms to know
- Keep reading
- Frequently asked questions
Key takeaways
- Vendor onboarding is the process of verifying, approving and setting up a new supplier so it can be used and paid.
- Core steps: request, screening, documents, risk check, approval, system setup and welcome.
- Collect only the documents you will actually use, and match the depth to the vendor tier.
- Verify bank details independently. Payment fraud often starts at supplier setup.
- Aim for days, not weeks. Slow onboarding makes people work around it.
A new supplier is already doing work. The invoice arrives. Accounts payable asks for a tax form, nobody has one, the contract is in a draft folder, and the bank details in the invoice differ from the ones in the quote.
Each of those problems was preventable at onboarding. Onboarding is the unglamorous process that stops them.
What vendor onboarding is
Vendor onboarding, also called supplier onboarding, is the process of collecting information and documents from a new supplier, checking them, approving the supplier and creating the records needed to order from and pay them. It ends when the supplier is active in your systems and knows how to work with you.
Vendor onboarding is the end to end process of verifying, approving and setting up a new supplier so it can be engaged and paid safely.
Why it matters
- Payment accuracy. Correct tax and bank details prevent failed payments and duplicate records.
- Fraud prevention. Fake supplier setups and altered bank details are common attack routes.
- Compliance. You record licenses, certifications and screening results at the point they are fresh.
- Speed. A clear process gets legitimate suppliers working quickly.
- A reliable record. Everyone later works from the same vendor data.
The process, step by step
1. Request
A business owner asks to engage a new supplier. They state what for, expected spend and why an existing supplier will not do. This stops needless duplicates.
2. Initial screening
Procurement checks whether the supplier already exists in your records, whether an approved alternative exists, and assigns a risk tier based on spend, data access and criticality.
3. Information and documents
The supplier completes a short form and provides documents matched to their tier.
| Document | Why you need it | Tier |
|---|---|---|
| Legal entity name, address, registration number | Identify who you are contracting with | All |
| Tax form or tax identification | Tax reporting and correct withholding | All |
| Bank details with proof | Pay the right account | All |
| Insurance certificates | Confirm cover for liability and indemnity | Medium and above |
| Security attestations or questionnaire | Assess data protection | High and critical |
| Financial statements or credit check | Assess stability | High and critical |
| Licenses or certifications | Show they can legally do the work | Where relevant |
| Signed code of conduct or terms | Agree standards | Medium and above |
4. Verification and risk review
Check the documents are real and consistent. Screen against sanctions lists. Confirm bank details by calling a known number, not the number on the form. For higher tiers, run the due diligence in our vendor due diligence checklist.
5. Approval
The right people approve according to tier: procurement for all, finance for payment setup, security for data access, legal for non-standard terms.
6. Contract and system setup
Sign the agreement, create the vendor record in your accounting or procurement system, link payment details and assign the internal owner. Separate the person who creates the vendor from the person who approves payments.
7. Welcome and orientation
Tell the supplier how to invoice, where to send purchase order queries, who to call and what your payment terms are. A short welcome note saves dozens of later emails.
Who does what
| Role | Responsibility |
|---|---|
| Business owner | Requests the vendor, owns the relationship |
| Procurement | Runs the process, screens, assigns tier |
| Finance or accounts payable | Verifies tax and bank details, creates the vendor record |
| Security or IT | Reviews systems access and data protection |
| Legal | Reviews non-standard terms |
| Supplier | Provides accurate information promptly |
How long should it take?
There is no universal figure, and anyone quoting one is guessing. A fair target is days for low and medium tier suppliers and a couple of weeks for critical ones, mostly spent waiting on the supplier. Measure your own current time first and halve the biggest delay.
Get the next guide in your inbox
We publish plain-language guides for people who buy and run procurement software. Leave your email and we send you new ones as they go live.
Where onboarding gets stuck
- Long forms. Suppliers abandon them or fill them carelessly. Keep the first form short and get the rest later where needed.
- Chasing documents by email. Each follow-up costs days. A portal or one clear checklist helps.
- Unclear owner. No one knows who is waiting for what.
- Approvals in series. Run security, finance and legal reviews in parallel instead of one after another.
- Starting work before approval. This makes the process a formality. Set a rule: no onboarding, no purchase order.
Fraud checks worth building in
- Confirm bank details by a call back to a verified number.
- Check that the bank account name matches the legal entity name.
- Flag changes of bank details after onboarding for a second verification.
- Check for duplicate suppliers with the same address, tax ID or bank account.
- Screen directors and owners where regulation requires it.
Onboarding different kinds of vendors
| Vendor type | Extra checks | Why |
|---|---|---|
| Software or cloud provider | Security questionnaire or audit report, data location, breach notice terms | They hold or process your data |
| Contractor or freelancer | Right to work or contractor status check, insurance, confidentiality agreement | Employment and liability exposure |
| Goods supplier | Quality certification, sample approval, delivery capacity | Product quality and continuity |
| Professional services firm | Conflict check, professional indemnity insurance, references | Advice carries legal and financial weight |
| Overseas supplier | Tax documents for the country, currency and bank details check, sanctions screening, export or import rules | Cross-border payment and compliance risk |
Build one base form and add modules per type. Suppliers should only answer questions that apply to them.
Manual or automated
Email and spreadsheets work for a handful of new vendors a month. Beyond that, a portal where suppliers enter their own details, upload documents and see status cuts the work dramatically. See how to automate vendor onboarding, vendor portal setup and the supplier onboarding software category.
- Request recorded with business reason and expected spend.
- Duplicate and existing supplier check done.
- Risk tier assigned.
- Legal entity, tax and bank documents collected.
- Bank details verified by call back.
- Sanctions screening done.
- Insurance and security evidence collected for higher tiers.
- Approvals recorded.
- Contract signed and stored.
- Vendor created and an internal owner named.
- Welcome note sent with invoicing instructions.
A ready-made list is in our vendor onboarding checklist and the vendor information sheet template.
Onboarding mistakes that show up months later
- Duplicate vendor records. Two records for one supplier lead to split spend and double payments. Search before you create.
- Missing tax forms. Tax authorities can require withholding on payments to suppliers with no valid form on file.
- Wrong payment terms. The default in your system may differ from the contract. Check before the first invoice.
- No owner recorded. Nobody knows who to ask when a problem arises.
- Documents that expire. Insurance and certificates have end dates. Record them and set reminders.
Terms to know
- Vendor master. The central record of all suppliers, with their details and status.
- W-9 or equivalent. A tax identification form collected from suppliers in some countries.
- KYC. Know your customer, here meaning verification of who a supplier is.
- Sanctions screening. Checking names against lists of restricted parties.
- Supplier portal. A site where suppliers submit and update their own details.
Keep reading
Once a supplier is live, move to vendor performance management to track results, and to vendor risk management to keep checks current. For the full picture, read what is vendor management.
Frequently asked questions
What is vendor onboarding?
It is the process of collecting and verifying information from a new supplier, approving them and setting them up so they can be ordered from and paid.
What documents are needed for vendor onboarding?
At minimum: legal entity details, tax identification and verified bank details. Higher risk vendors add insurance, security evidence, financial statements and licenses.
How do you verify a vendor's bank details?
Call a known number for the vendor, not the one on the form or in the email that supplied the details, and confirm the account name matches the legal entity.
Who is responsible for vendor onboarding?
Procurement usually runs it. Finance verifies payment details, security reviews data access, legal reviews terms and the business owner owns the relationship.
What is the difference between onboarding and due diligence?
Onboarding is the full setup process. Due diligence is the checking part inside it, such as financial, security and compliance review, and its depth depends on the vendor tier.