A vendor management checklist covers every stage of a supplier relationship, from choosing and vetting the vendor through contract and onboarding to monitoring, renewal and exit, with an owner and evidence for each check so nothing falls between teams.
Updated 13 Oct 2026 · Reviewed by the Spendflo procurement team
Pick the vendor's tier, then work through the checks for the stage the relationship is in. Open any check to see the evidence to keep and the red flag that needs action.
Get the vendor management checklist as an Excel tracker with owners, status drop-downs and a progress score.
A vendor management checklist is one list that follows a supplier from the moment someone asks to buy until the contract ends, setting out what each team checks at selection, due diligence, contracting, onboarding, monitoring and renewal or exit.
Most companies have pieces of this spread across procurement, IT, legal and finance. The checklist joins them up: the same vendor record carries the risk tier set at selection, the contract terms agreed by legal and the renewal date that decides when the next review happens.
Not every vendor needs every check. A critical software platform gets all 44; a low-risk office supplier gets the core checks only. That is why the list is tiered, and why the monitoring and oversight parts below set different cadences for each tier.
A complete checklist covers the whole lifecycle, plus the governance that holds it together. Each stage answers a different question.
| Stage | The question it answers | Usual owner |
|---|---|---|
| Plan and govern | Do we know every vendor, its owner and its tier? | Procurement |
| Selection and research | Is this the right vendor at a fair price? | Business owner, Procurement |
| Risk and due diligence | Is the vendor secure, compliant and stable? | Security, Compliance, Finance |
| Contract | Do the terms protect us on service, data and exit? | Legal |
| Onboarding | Is the vendor set up safely in our systems? | Accounts payable, IT |
| Ongoing monitoring | Is the vendor delivering what it promised? | Business owner |
| Renewal and offboarding | Should we renew, and can we leave cleanly? | Procurement, Legal |
Oversight is the layer above day-to-day management: proving to leadership, auditors or regulators that the programme works. Use this vendor oversight checklist each quarter.
Monitoring is where most programmes slip. This vendor monitoring checklist sets what to watch for each tier and how often to look.
| What to monitor | Tier 1 | Tier 2 | Tier 3 |
|---|---|---|---|
| KPI and SLA scorecard | Monthly | Quarterly | At renewal |
| Business review meeting | Quarterly | Twice a year | Not needed |
| Full risk re-assessment | Every year | Every two years | At renewal |
| Certificates and insurance | On expiry | On expiry | At renewal |
| Sanctions and adverse news | Continuous or monthly | Quarterly | Yearly |
| Fourth-party changes | On notice | At review | Not needed |
Good relationships need a rhythm, not just a contract. Use this vendor relationship management checklist to plan each quarterly business review with a strategic vendor.
Download the vendor management checklist so every owner can work their own rows in Excel or Google Sheets, with status and dates.
Pick a handful of KPIs per vendor and agree them at kick-off, so performance reviews rest on numbers both sides accept.
| KPI | What it measures | Best for |
|---|---|---|
| SLA adherence | Share of periods the service level was met | Software and services |
| On-time delivery | Orders delivered by the agreed date | Goods suppliers |
| Ticket resolution time | Time to fix reported issues | Software and IT services |
| Defect or error rate | Faulty items or work per batch | Goods and outsourced work |
| Invoice accuracy | Invoices matching contract rates | Every vendor |
| Value delivered | Savings or outcomes against the business case | Strategic vendors |
The download is one sheet per vendor plus a summary tab. These are the columns that make it work across a whole vendor base.
| Column | What to enter |
|---|---|
| Check | The line from the checklist above |
| Owner | A role or named person |
| Evidence | Link to the document or record |
| Status | Done, flagged or not applicable |
| Next due | Date the check repeats, from the tier cadence |
| Notes | Conditions agreed or open actions |
Keep one master vendor list with owner, tier, annual spend and renewal date, and link each row to its checklist. That list drives the monitoring calendar.
Set the tier from three facts: data access, annual spend and how hard the vendor would be to replace.
Holds sensitive data, runs a core process or takes large spend.
Evidence on file for every check
Limited data access or moderate spend.
Skip the Tier 1-only checks
No data access, low spend, easy to replace.
Inventory, price, sanctions, contract basics, bank check, renewal
Each stage hands a complete record to the next, so the renewal team inherits everything the selection team learned.
Confirm the need, research vendors and benchmark price.
Run due diligence on security, compliance and finances.
Agree scope, SLAs, data terms and exit rights.
Verify tax and bank details, set minimum access.
Track KPIs and re-assess on the tier's cycle.
Decide early, then renegotiate or offboard cleanly.
Here is a completed annual review of a critical analytics vendor, with the two flags it raised and the decision taken. The companies and figures are illustrative.
| Check | Owner | Evidence received | Status |
|---|---|---|---|
| KPIs tracked against SLA | Business owner | SLA met 11 of 12 months | Done |
| Licence and usage reviewed | IT | 140 of 200 seats active | Flagged |
| Security evidence in date | Security | SOC 2 Type II, dated July | Done |
| Certificates and insurance renewed | Compliance | Cyber cover renewed, Sep | Done |
| Renewal flagged before notice deadline | Procurement | Notice date 1 Dec logged | Done |
| Renewal price benchmarked | Procurement | Quote above benchmark range | Flagged |
+ 38 more checks done, evidence filed
All 44 checks, the oversight, monitoring and relationship parts, ready to fill in. Free, no credit card.
FreeNo credit cardWork email only
| # | Check | Owner | Status |
|---|---|---|---|
| 1 | Vendor management policy approved and published | Procurement | Done |
| 2 | One vendor inventory with owner, spend and tier | Procurement | In progress |
| 3 | Tiering criteria written down | Procurement | Flagged |
| 4 | Every vendor has a named business owner | Business owner | Done |
A vendor checklist is the list of checks and documents a company uses to choose, approve and manage a supplier. This page's download covers the full lifecycle in 44 checks, each with an owner and evidence.
The usual steps are selection, risk and due diligence, contract, onboarding, ongoing monitoring, and renewal or offboarding. Governance sits over all of them, so every vendor has an owner, a tier and a review date.
A KPI is a measure of how well a vendor is performing against what it agreed, such as SLA adherence, on-time delivery or invoice accuracy. Agree a few KPIs at kick-off and review them at each business review.
Yes, you can download this vendor management checklist template free as an Excel file, a Google Sheet or a PDF. It includes the master vendor list tab and the oversight and monitoring parts.
Review critical vendors every year, important vendors every two years and low-risk vendors at renewal. Re-assess sooner after a breach, an ownership change or repeated service failures.
Manage every vendor from request to renewal
Spendflo covers the lifecycle stages on this checklist: intake and approvals at selection, supplier onboarding, the Contracts Agent for key terms, third-party risk management for monitoring, and renewals tracking with software pricing benchmarks. Spendflo has handled 15,000+ agreements and processed $3.7B in software spend.
Enter your work email and your download starts straight away.
Need another format? Pick one below.
Google Sheets: upload the Excel file to Drive and open it with Google Sheets.
