Free checklist · Excel · Google Sheets · PDF

Vendor Selection Criteria Checklist

A vendor selection criteria checklist is the agreed list of tests procurement and the business apply to every shortlisted supplier, so cost, quality, reliability, financial health, security and support are scored the same way for each vendor before anyone signs.

  • 60criteria with owner, evidence and red flag
  • 8criteria groups, from need to exit
  • 3purchase sizes, so small buys get a short list

Updated 13 Oct 2026 · Reviewed by the Spendflo procurement team

The vendor selection criteria checklist

Choose the purchase size first and the list hides the criteria a smaller buy does not need. Open any row to see the evidence to ask for and the red flag that should pause the decision.

Purchase size
0 of 0 shown done
01

Business need and requirements

6 checks
  1. Business ownerEvery purchase
    Evidence to requestOne-page need statement signed by the requester
    Red flagNeed described only as a product name
  2. Business owner$10k and up
    Evidence to requestRequirements list marked must or nice
    Red flagEvery requirement marked must-have
  3. FinanceEvery purchase
    Evidence to requestBudget line or approved business case
    Red flagNo budget owner willing to sign
  4. ProcurementEvery purchase
    Evidence to requestSearch of the contract and vendor lists
    Red flagSame capability already paid for elsewhere
  5. Procurement$10k and up
    Evidence to requestSigned-off criteria sheet with weights
    Red flagWeights changed after a favourite emerged
  6. ProcurementOver $100k
    Evidence to requestPanel list with one accountable approver
    Red flagPanel is only the requesting team
02

Cost and financial terms

8 checks
  1. FinanceEvery purchase
    Evidence to requestTCO sheet: licences, setup, overages, shipping, maintenance
    Red flagOnly year-one price compared across vendors
  2. Procurement$10k and up
    Evidence to requestBenchmark data for similar volume and term
    Red flagQuote well above comparable deals
  3. Procurement$10k and up
    Evidence to requestItemised quote or statement of work
    Red flagServices bundled into one unexplained figure
  4. Finance$10k and up
    Evidence to requestRate card for API calls, storage and extra seats
    Red flagOverages billed at undefined list price
  5. Finance$10k and up
    Evidence to requestProposed payment schedule and invoicing terms
    Red flagFull multi-year fee demanded upfront
  6. ProcurementEvery purchase
    Evidence to requestUplift clause in the order form
    Red flagRenewal price left to the vendor
  7. ProcurementOver $100k
    Evidence to requestFixed price schedule per unit
    Red flagUnit price can change mid-term
  8. ProcurementOver $100k
    Evidence to requestWritten discount terms with validity date
    Red flagDiscount disappears at first renewal
03

Quality, fit and compliance

8 checks
  1. Business ownerEvery purchase
    Evidence to requestLine-by-line response, verified in the demo
    Red flagA must-have exists only on the roadmap
  2. Business owner$10k and up
    Evidence to requestDemo script with a score per scenario
    Red flagVendor will not follow your script
  3. IT$10k and up
    Evidence to requestAPI documentation and named connectors
    Red flagIntegration depends on a custom build
  4. ComplianceOver $100k
    Evidence to requestISO 9001 or sector certificates with expiry dates
    Red flagCertificate expired or held by a parent only
  5. Compliance$10k and up
    Evidence to requestCompliance statements relevant to your use
    Red flagCompliance claimed with no document behind it
  6. Business ownerOver $100k
    Evidence to requestTrial feedback from three or more users
    Red flagOnly managers have seen the product
  7. ITOver $100k
    Evidence to requestRoadmap briefing under NDA
    Red flagA feature you rely on is being retired
  8. Business ownerOver $100k
    Evidence to requestPoC success criteria and written results
    Red flagPilot ended with no written result
04

Reliability and capacity

7 checks
  1. Procurement$10k and up
    Evidence to requestOn-time and accuracy history from references
    Red flagMissed dates reported by current customers
  2. IT$10k and up
    Evidence to requestSLA schedule with the uptime commitment
    Red flagNo uptime figure in the contract
  3. Procurement$10k and up
    Evidence to requestCredit table in the SLA
    Red flagSLA has no remedy when missed
  4. Business ownerOver $100k
    Evidence to requestCapacity statement and customers of similar scale
    Red flagYou would be their largest account by far
  5. ITOver $100k
    Evidence to requestStatus page history for 12 months
    Red flagLong outages with no published root cause
  6. ITOver $100k
    Evidence to requestBCP summary with the last test date
    Red flagNo test in the last two years
  7. Business ownerOver $100k
    Evidence to requestWritten lead-time or response commitment
    Red flagTimes promised verbally only
05

Financial health and stability

6 checks
  1. Finance$10k and up
    Evidence to requestTwo years of P&L and balance sheet
    Red flagLosses with under 12 months of cash
  2. FinanceOver $100k
    Evidence to requestThree years of revenue and margin
    Red flagRevenue shrinking year on year
  3. Finance$10k and up
    Evidence to requestCredit agency report
    Red flagRecent defaults or a falling score
  4. Legal$10k and up
    Evidence to requestCourt search and signed disclosure
    Red flagOpen fraud or contract-breach claims
  5. FinanceOver $100k
    Evidence to requestFunding history and ownership chart
    Red flagPending sale and no change-of-control clause
  6. ProcurementEvery purchase
    Evidence to requestRegistry extract and tax ID
    Red flagEntity name differs from the quote
06

Security and risk management

9 checks
  1. Security$10k and up
    Evidence to requestSOC 2 Type II report or ISO 27001 certificate
    Red flagType I only, or report over a year old
  2. SecurityOver $100k
    Evidence to requestControl mapping or completed questionnaire
    Red flagVendor cannot name a framework
  3. Security$10k and up
    Evidence to requestHosting regions listed in the DPA
    Red flagVendor cannot say where data sits
  4. Security$10k and up
    Evidence to requestSecurity whitepaper or questionnaire answer
    Red flagBackups or exports left unencrypted
  5. IT$10k and up
    Evidence to requestSSO documentation and plan comparison
    Red flagSSO sold only on a higher tier
  6. LegalEvery purchase
    Evidence to requestYour DPA, marked up by the vendor
    Red flagVendor refuses to sign any DPA
  7. IT$10k and up
    Evidence to requestExport documentation and a sample file
    Red flagExport only on request, for a fee
  8. ComplianceEvery purchase
    Evidence to requestScreening result for entity and owners
    Red flagAny unresolved match
  9. SecurityOver $100k
    Evidence to requestNotification clause in the DPA
    Red flagNo commitment to notify within days
07

Support, implementation and references

8 checks
  1. Business owner$10k and up
    Evidence to requestNamed contacts with an executive sponsor
    Red flagOnly a sales rep is named
  2. IT$10k and up
    Evidence to requestSupport tiers and response targets
    Red flagNo support in your time zone
  3. Business owner$10k and up
    Evidence to requestProject plan with milestones and owners
    Red flagPlanning starts only after signature
  4. ITOver $100k
    Evidence to requestTeam CVs or partner credentials
    Red flagUnnamed subcontractor will do the work
  5. Business ownerOver $100k
    Evidence to requestTraining plan and materials list
    Red flagTraining charged per session and unbudgeted
  6. Procurement$10k and up
    Evidence to requestReference call notes
    Red flagNo comparable customer will speak to you
  7. ProcurementEvery purchase
    Evidence to requestSearch log with dates and sources
    Red flagPattern of complaints about support
  8. Business ownerOver $100k
    Evidence to requestPanel notes on response times and answers
    Red flagSlow or evasive answers before signature
08

Contract and exit

8 checks
  1. ProcurementEvery purchase
    Evidence to requestOrder form and renewal clause
    Red flagAuto-renewal with a short notice window
  2. Legal$10k and up
    Evidence to requestTermination clause in the draft contract
    Red flagNo way out before the term ends
  3. Legal$10k and up
    Evidence to requestDraft contract
    Red flagCap below one year of fees
  4. Legal$10k and up
    Evidence to requestExit clause and deletion certificate template
    Red flagNo deletion commitment
  5. Business ownerOver $100k
    Evidence to requestExit and transition clause
    Red flagMigration help billed at any rate
  6. LegalOver $100k
    Evidence to requestAudit clause in the contract
    Red flagNo right to audit the vendor
  7. LegalOver $100k
    Evidence to requestAssignment clause
    Red flagContract passes to a buyer without consent
  8. ProcurementEvery purchase
    Evidence to requestContract record with owner and key dates
    Red flagNobody owns the vendor after signature
Owners are suggestions for a mid-size company.
Take all 60 checks offline

Get the vendor selection criteria checklist as an Excel tracker with owners, status drop-downs and a progress score.

01

What is a vendor selection criteria checklist?

It is a structured scoring tool: before demos start, the buying team fixes which supplier qualities matter and how much, then checks and scores every candidate against that same list so the choice rests on evidence rather than the best pitch.

Procurement usually runs it, with finance, IT, security and legal each owning the criteria in their area. The checklist sits between the business need and the contract: it starts once requirements are written and ends with a signed decision record.

Two kinds of criteria live on it. Gates are pass or fail (a vendor without a current security attestation is out, however good the demo). Scored criteria are weighted and compared across the vendors that clear every gate.

02

What should a vendor selection criteria checklist include?

Eight groups cover the full decision, from why you are buying to how you would leave. Each answers a different question about the supplier.

Criteria groupThe question it answersUsual owner
Business need and requirementsWhat exactly are we buying, and who decides?Business owner
Cost and financial termsWhat will it cost over the whole term, and can the price move?Finance, Procurement
Quality, fit and complianceDoes it meet every must-have and the rules we work under?Business owner, Compliance
Reliability and capacityWill it deliver on time and cope with our peaks?IT, Business owner
Financial health and stabilityWill the vendor still be trading in three years?Finance
Security and risk managementIs our data protected, and can we take it back?Security
Support, implementation and referencesWill they get us live and help when it breaks?Business owner
Contract and exitCan we renew, audit and leave on our terms?Legal, Procurement
03

Vendor evaluation criteria checklist: gates and weights

Run the gates first so nobody spends a week scoring a vendor that fails security. Then weight what is left; the weights below are an illustrative starting point, not a rule.

  1. 1Meets every must-have requirementHard fail
  2. 2Current SOC 2 Type II or ISO 27001 for data vendorsHard fail
  3. 3Signs your DPA and code of conductHard fail
  4. 4Sanctions and watchlist screening clearHard fail
  5. 5Total cost within the approved budgetReview
  6. 6Credit and accounts show no going-concern doubtReview
  7. 7At least one reference of similar scaleReview
  8. 8No live contract for the same capabilityMerge
CriterionIllustrative weightWhy
Security and risk3xA breach costs more than any saving
Cost and financial terms2xCovers the whole term, not year one
Quality and functional fit1xMust-haves are already a gate
Reliability and support1xSeparates vendors that pass on features
Contract and exit1xDecides how hard it is to leave
04

Vendor evaluation checklist: shortlist, demo and reference checks

Once the long list is screened, these ten checks keep the comparison fair. For a side-by-side matrix, copy the scores into a weighted evaluation sheet.

  • Shortlist capped at three to five vendorsEach one has cleared every gate
  • Same information pack sent to every vendorRequirements, volumes and contract terms identical
  • Demo script shared a week aheadVendors show your scenarios, not their slides
  • Each evaluator scores alone firstScores collected before the group discussion
  • Score gaps of two points or more discussedAgreed score and reason recorded
  • References chosen by you where possibleAt least one customer the vendor did not suggest
  • Reference questions the same for each vendorNotes stored with the scoring sheet
  • Hands-on trial for the top twoEnd users complete real tasks
  • Final quotes requested on the same basisSame term, volume and scope in every quote
  • Conflicts of interest declaredSigned declaration from every evaluator

After go-live, the same vendor evaluation checklist becomes a performance review: rescore reliability, support and cost each year before the renewal notice date.

05

IT vendor evaluation checklist for software and SaaS

Software suppliers bring risks that a goods supplier never does. Add these checks when the vendor will hold data or connect to your systems.

  • SSO and SCIM provisioningUsers added and removed from your identity provider
  • Role-based accessAdmin rights limited to named people
  • Audit logsExportable logs kept for at least a year
  • API scopesLeast-privilege tokens with documented scopes
  • Data residencyRegion set in the contract, not by default
  • Self-service exportFull export in a standard format at any time
  • Change noticeAdvance warning of breaking changes
  • Licence modelSeats or usage priced clearly, true-up rules written down
  • AI featuresYour data not used for model training without consent
  • Shadow IT checkNo other team already pays for the same tool
Running this with a team?

Download the vendor selection criteria checklist so every owner can work their own rows in Excel or Google Sheets, with status and dates.

06

Vendor selection checklist and supplier selection checklist: the decision record

The decision record is what auditors and the next renewal team will read. Ten lines are enough to show the choice was fair and documented.

  • Need statement attachedSigned by the requester and budget owner
  • Criteria and weights attachedDated before the first demo
  • Long list and gate resultsReason recorded for every vendor removed
  • Individual and consensus scoresBoth kept, not just the final number
  • Reference and trial notesOne page per finalist
  • Total cost comparisonSame term and volume for every finalist
  • Risk findings and ownersEach open issue has a fix date
  • Contract conditionsGaps written into the contract, not left as promises
  • Approval trailApprover names, dates and spend authority
  • Runner-up namedFallback if negotiation with the winner fails

The same record works as a supplier selection checklist for goods and services suppliers; swap the IT checks for quality, capacity and delivery evidence.

07

Vendor selection red flags and the evidence that settles them

Most bad choices show warning signs during the sale. Ask for the document before you accept the explanation.

Red flagWhat to ask forOwner
Discount only valid this weekWritten quote with a 30-day validityProcurement
Security questions answered by salesThe attestation report itselfSecurity
References all from one region or sizeA customer matching your scaleProcurement
Implementation estimate given verballyStatement of work with milestonesBusiness owner
Renewal price described as standardUplift cap in the order formProcurement
Export described as possible on requestA sample export fileIT
08

Scale the vendor selection criteria checklist by purchase size

A small one-off purchase does not need sixty criteria. Set the size at intake and the filter above shows the right list.

Over $100kStrategic
60of 60 checks

Large spend, sensitive data or hard to replace.

Full panel, pilot and reference calls

Re-reviewBefore each renewal
$10k to $100kStandard
39of 60 checks

Moderate spend or limited data access.

Skip the strategic-only criteria

Re-reviewEvery two years
Under $10kSimple
12of 60 checks

Low spend, no sensitive data, easy to switch.

Gates plus a quick price check

Re-reviewAt renewal
Move a purchase up a size if it
  • Holds customer or employee data
  • Runs a core process
  • Locks you in for over a year
  • Needs custom integration
  • Replaces a failed vendor
09

How to use the vendor selection criteria checklist in six steps

Each step produces one document, and together they form the decision record.

  1. 1Tailor

    Remove criteria that do not apply and add sector ones.

  2. 2Weight

    Agree weights, for example security above cost above fit.

  3. 3Map

    Copy the criteria into your RFP or information request.

  4. 4Score

    Evaluators score alone, then agree a consensus score.

  5. 5Pilot

    Run a pilot or proof of concept with the leader.

  6. 6Decide

    Sign the decision record and name a runner-up.

10

Vendor selection criteria checklist sample: a filled-in decision

This is a completed checklist for a mid-size analytics purchase with two flagged criteria and the decision they led to. The companies and figures are illustrative.

Sample · illustrative
Buyer
Northwind Logistics, 600 staff
Chosen vendor
Orbit Analytics
Annual value
$72,000
Purchase size
$10k to $100k
CheckOwnerEvidence receivedStatus
Every must-have requirement met todayBusiness ownerScripted demo, all 14 must-haves shownDone
Total cost of ownership calculatedFinanceThree-year TCO $231,000 incl. setupDone
Annual price increases capped in writingProcurementOrder form silent on upliftFlagged
Security attestation in dateSecuritySOC 2 Type II, dated JuneDone
Data portability and export format confirmedITExport only via paid servicesFlagged
Three references of similar scale calledProcurementThree calls, notes filedDone

+ 33 more criteria checked, evidence filed

DecisionSelect Orbit Analytics with conditions
  1. Uplift capped at a fixed rate in the order form
  2. Self-service full export added before signature

Download the vendor selection criteria checklist

All 60 criteria with gates, weights and the decision record, ready to fill in for up to three vendors. Free, no credit card.

Inside the file
  • The 60-criteria checklist with status drop-downs and a purchase-size filter
  • A three-vendor scoring sheet with gates and editable weights
  • The vendor evaluation and IT vendor evaluation checks
  • The 10-line decision record and red flag table
Choose a format

FreeNo credit cardWork email only

spendflo-vendor-selection-criteria-checklist.xlsx
Progress33%
#CheckOwnerStatus
1Problem and expected outcome written downBusiness ownerDone
2Must-have and nice-to-have requirements separatedBusiness ownerIn progress
3Budget range and funding source confirmedFinanceFlagged
4Existing contracts checked for overlapProcurementDone
ChecklistWhat to includeGates and weightsEvaluationIT vendorsDecision recordRed flagsPurchase size

Vendor Selection Criteria Checklist FAQ

What are the criteria for vendor selection?

The usual criteria are cost over the full term, quality and fit, reliability and capacity, financial health, security, support and contract terms. The free download lists 60 of them in eight groups, each with an owner and the evidence to request.

What are the 7 steps of the supplier selection process?

A common version is: define the need, set criteria and weights, build a long list, screen against gates, evaluate and score the shortlist, check references or pilot, then decide and record. The six-step method above folds the long list into tailoring and mapping.

What is a vendor checklist?

A vendor checklist is a list of the checks and documents a company needs before it chooses, approves or keeps a supplier. This one focuses on selection, with gates that rule vendors out and weighted criteria that rank the rest.

What are the 10 C's of supplier evaluation?

The 10 C's are competency, capacity, commitment, control, cash, cost, consistency, culture, clean (environmental and ethical standing) and communication. Each one maps to a group in this checklist, so the download covers them all with evidence to request.

Can I download the vendor selection criteria checklist as a PDF or Excel template?

Yes. You can download it as an Excel template, a Google Sheet or a printable PDF, and every version includes the scoring sheet and decision record.