A vendor onboarding checklist is the step-by-step plan for bringing a new supplier on board safely: collecting its documents, confirming it meets your compliance rules, setting up verified payment details and connecting it to your systems before the first order.
Updated 13 Oct 2026 · Reviewed by the Spendflo procurement team
Set the vendor's risk tier at the request, then complete the checks that tier needs. Open any check to see the document to collect and the red flag that should pause onboarding.
Get the vendor onboarding checklist as an Excel tracker with owners, status drop-downs and a progress score.
A vendor onboarding checklist turns the gap between choosing a supplier and paying it into a controlled sequence: gather documents, check compliance, verify bank and address details, then switch the vendor on in your systems with every function's sign-off.
Onboarding starts once the vendor is chosen and ends with the first purchase order. Selection and deep due diligence sit before it; ongoing monitoring sits after it. The checklist keeps procurement, accounts payable, security, legal and the requester working from one list rather than five email threads.
Fraudsters target this stage with fake bank details, so verification gets its own group. Risk tiers keep the effort proportionate: a caterer needs a tax form and a bank check, while a payroll provider needs every line on this new vendor onboarding checklist.
A complete checklist follows four stages, and each one stops a different problem reaching your books.
| Stage | What it covers | Problem it prevents | Usual owner |
|---|---|---|---|
| Pre-qualification and risk | Business reason, duplicate search, risk tier, sanctions, financial health | Unneeded, duplicate or sanctioned vendors | Procurement |
| Documentation and legal | Tax forms, licences, insurance, security evidence, MSA, SOW, NDA | Uninsured or non-compliant vendors | Legal, Security |
| Financial and payment setup | Secure bank collection, call-back check, payment terms | Payments to a fraudster's account | Accounts payable |
| Integration and activation | ERP setup, minimum access, KPIs, sign-off | Orders placed before approval | Procurement, IT |
The checklist covers one vendor; the tracker sheet in the download covers all of them. Each row is a vendor, so you can see who is stuck and why.
| Column | What to enter | Why it helps |
|---|---|---|
| Vendor and requester | Legal name, requesting team | Shows who to chase |
| Risk tier | Tier 1, 2 or 3 | Sets which checks apply |
| Stage | Request, Collect, Verify, Review, Active | Shows where each vendor sits |
| Open items | Missing documents or failed checks | Turns delays into a to-do list |
| Owner and due date | Person and date for the next step | Stops items waiting on nobody |
| Days open | Formula from request date | Flags vendors stuck too long |
Use the vendor onboarding checklist template in Google Sheets if several teams update it, or the Excel version if accounts payable owns it alone. The PDF suits a single high-risk vendor that needs signatures on paper.
Suppliers that ship goods or send people to your sites need checks a software vendor never does. Add these to the core list, or use the supplier onboarding checklist template sheet in the download.
Download the vendor onboarding checklist so every owner can work their own rows in Excel or Google Sheets, with status and dates.
A clean vendor master is what makes the rest of onboarding stick. Use this supplier database checklist so every record is complete before it is used.
Block anyone from editing bank details without a second approver. Most vendor master fraud happens through a change request, not a new record.
Ask for every document in one request, so the vendor is not chased six times. These are the forms that come up most often.
| Document | What it is | Who needs it |
|---|---|---|
| W-9 | US tax form with legal name and taxpayer ID | US vendors |
| W-8BEN-E | Tax form confirming foreign status | Non-US entities paid by a US company |
| Certificate of insurance (COI) | Proof of cover and limits | Most service vendors |
| Bank letter | Bank-issued confirmation of account details | Every vendor you pay |
| SOC 2 Type II report | Independent test of security controls over a period | Vendors holding your data |
| Data processing agreement (DPA) | Contract terms for handling personal data | Vendors processing personal data |
Set the tier from data access, annual spend and how hard the vendor would be to replace. The tier decides how many checks apply and how long onboarding should take.
Holds sensitive data, runs a core process or takes large spend.
Security, legal and finance all sign off
Some data access or moderate spend.
Skip the Tier 1-only checks
No data access, low spend, easy to replace.
Business reason, sanctions, tax form, contract, bank call-back, sign-off
Each step has one owner and a clear exit, so a vendor never reaches go-live with checks still open.
Requester logs the need; procurement sets the risk tier.
Vendor uploads tax, insurance, security and contract documents.
Screen sanctions, validate tax ID, call back bank details.
Legal, IT, finance and procurement sign off by tier.
Create in the ERP, grant access, enable purchase orders.
Here is a completed onboarding for a facilities supplier, with the one flag it raised and how it was cleared. The companies and figures are illustrative.
| Check | Owner | Evidence received | Status |
|---|---|---|---|
| Sanctions screening clear | Compliance | No match, 1 Oct | Done |
| Tax form received | Accounts payable | W-9, name matches registry | Done |
| Insurance certificates match the contract | Finance | Workers' comp missing from COI | Flagged |
| Bank details verified by call-back | Accounts payable | Called registry number, 3 Oct | Done |
| Vendor master approved by a second person | Finance | Approved by AP lead | Done |
| Vendor created in ERP and procurement systems | Accounts payable | Vendor ID issued | Done |
+ 12 more checks done, documents filed
The 29 checks, the multi-vendor tracker and the supplier parts, ready to fill in. Free, no credit card.
FreeNo credit cardWork email only
| # | Check | Owner | Status |
|---|---|---|---|
| 1 | Business justification and scope recorded | Requester | Done |
| 2 | Duplicate check against the existing vendor list | Procurement | In progress |
| 3 | Risk tier set from data access, spend and dependency | Procurement | Flagged |
| 4 | Sanctions screening clear (OFAC, EU, UN) | Compliance | Done |
It is the set of steps between choosing a vendor and placing the first order: request, collect documents, verify tax and bank details, review by risk tier and activate in your systems. Each step has an owner so nothing is skipped.
A vendor onboarding checklist includes the business reason and risk tier, tax and entity forms, insurance and security evidence, the signed contract, verified bank details and system setup with sign-off. The free download lists 29 checks with an owner and evidence for each.
A vendor checklist is a list of documents and checks a company completes before it approves or pays a supplier. This page's version covers onboarding, from the first request to the first purchase order.
It depends on the risk tier: a low-risk vendor can be live within a week, while a critical vendor holding your data needs security and legal review first. Collecting every document in one request is the biggest time saver.
Yes, you can download this vendor onboarding checklist as an Excel file, a Google Sheet or a PDF. The Excel version includes a tracker for every vendor you are onboarding at once.
Onboard suppliers from the request, not the inbox
Spendflo starts supplier onboarding from the intake request: the supplier gets one invite to upload tax, bank and compliance documents, and approvals route from there. Integrations, including NetSuite, push the approved vendor to your ERP. Spendflo has handled 15,000+ agreements.
Enter your work email and your download starts straight away.
Need another format? Pick one below.
Google Sheets: upload the Excel file to Drive and open it with Google Sheets.
