Vendor Onboarding Process

Vendor onboarding is the process of collecting, verifying, and recording everything a business needs before it can legally and safely buy from a new supplier and pay them. Done properly it takes a few days and prevents fraud, tax penalties, and a payment sent to a criminal. Done as an afterthought, which is how most companies do it, it becomes the reason a vendor record has the wrong bank account in it. This guide covers the full process, the documents you actually need, the US tax forms, and what changed for 1099 reporting in 2026. Written for US accounts payable, finance, and procurement teams.

What is vendor onboarding?

Vendor onboarding is the structured intake of a new supplier into your systems: gathering their legal and tax identity, verifying that they are who they claim to be, screening them for risk, agreeing commercial terms, and creating an accurate vendor master record that AP can pay against. It sits at the boundary between procurement and accounts payable, which is exactly why it so often falls through the gap between them.

The vendor master record it produces is the single most attacked data object in accounts payable. Every payment your company makes goes to a bank account stored in that record. Vendor onboarding is the control that decides whether the account number in there is correct.

What does the vendor onboarding process look like?

Six steps, in this order. Reordering them is how mistakes happen.

First, request the vendor's information through a standard form rather than by email thread. Second, collect the tax and legal documents, which in the US means a Form W-9 for domestic vendors. Third, verify identity and banking details independently of the documents the vendor sent you. Fourth, screen for risk: sanctions lists, insurance certificates, and whatever your industry requires. Fifth, agree and record commercial terms, including payment terms and any negotiated discount. Sixth, create the vendor master record, with the banking detail entered by someone other than the person who requested the vendor.

That last point about separation of duties sounds bureaucratic until you have seen the alternative. The requester who wants the vendor paid should not be the person who tells the system where to send the money.

What documents do you need to onboard a vendor?

You do not need all of these for every vendor. A one-time supplier of office chairs does not need a certificate of insurance. A contractor working on your premises absolutely does. Tiering vendors by risk and spend, and asking only for what that tier warrants, is what keeps onboarding from becoming a process nobody follows.

What is a vendor onboarding checklist?

A vendor onboarding checklist is the standing list of items that must be collected and verified before a vendor record goes live. The useful version has an owner and a verification method against each line, not just a checkbox. "W-9 received" is a checkbox. "W-9 received, legal name matches TIN via IRS TIN Matching, checked by tax" is a control. The difference shows up two years later during an audit, which our guide to the accounts payable audit covers in detail.

Why do you need a W-9 from a vendor?

Form W-9, Request for Taxpayer Identification Number and Certification, is how you collect a US vendor's legal name, entity classification, and taxpayer identification number. You need it because at year end you may have to file an information return reporting what you paid them, and you cannot file it without a correct TIN. Collect the W-9 before the first payment, not at the point you are trying to close the books in January. Chasing a W-9 from a vendor you no longer buy from is a genuinely miserable task.

If a vendor does not provide a TIN, or provides one that does not match IRS records, backup withholding applies at 24 percent, meaning you withhold that share of the payment and remit it to the IRS. That is a conversation nobody wants with a supplier, and it is entirely avoidable by collecting the form up front.

Which vendors need a 1099?

Generally, you file Form 1099-NEC for payments for services made in the course of your trade or business to individuals, sole proprietors, partnerships, and LLCs taxed as such. Payments to corporations are generally exempt, with attorneys' fees being the well known exception. Payments for goods do not trigger it, only services.

The threshold changed, and a great deal of published guidance is now out of date. Under the One Big Beautiful Bill Act, Public Law 119-21, the reporting threshold rose from 600 dollars to 2,000 dollars for payments made after December 31, 2025, so it applies to payments made during calendar year 2026, and it will be adjusted for inflation in calendar years after 2026. If your AP policy still says "collect a W-9 from anyone we might pay over 600 dollars," it is describing the old rule. Collecting the W-9 regardless of expected spend remains the sane policy, since you rarely know at onboarding what a vendor will end up billing. Confirm the current position with your tax advisor before changing a filing process.

How do you verify a vendor's bank details?

Independently, using contact details you already hold, before any payment is released. Call the vendor on a number from the signed contract or their official website, never a number printed on the email or the invoice requesting the change. Business email compromise works precisely because a change request looks completely ordinary: a familiar supplier, a plausible reason, an attached letterhead.

Treat any bank detail change on an existing vendor as a new onboarding event with the same verification. The most expensive fraud in accounts payable is not a fake invoice, it is a real invoice from a real supplier paid into an account the criminal controls. Our guide on how to prevent invoice fraud goes through the specific controls, and preventing duplicate invoice payments covers the other way money leaves the building without anyone deciding it should.

What is vendor onboarding software?

Vendor onboarding software gives suppliers a portal where they submit their own details and documents, validates what they enter, screens them against sanctions and risk databases, routes internal approvals, and writes the finished record into the ERP. The value is less about speed than about evidence: the system records who verified what, and when.

It is worth buying when you onboard suppliers frequently, when regulation requires demonstrable screening, or when the vendor master has already gone bad. It is not worth buying to onboard eleven vendors a year, and a small business that buys it will end up maintaining a portal nobody logs into. The honest starting point for a small company is a standard intake form, a documented checklist, a callback rule for bank details, and separation of duties on who touches the vendor master.

How long should vendor onboarding take?

Three to five business days for a low-risk domestic supplier with complete paperwork, and two to four weeks where insurance verification, security review, or contract negotiation is involved. The variable that dominates is not internal processing time. It is how long the vendor takes to return documents, which is why a single structured intake form beats an email thread that discovers a missing certificate on day nine.

How does vendor onboarding connect to accounts payable?

Directly, and painfully when it goes wrong. Every downstream AP control assumes the vendor master is correct. Three-way matching assumes the PO points at the right vendor. Duplicate detection assumes the same supplier is not sitting in the system three times under slightly different names. Invoice import into an accounting system fails outright when the vendor does not already exist, which is a restriction that native bill capture in QuickBooks, NetSuite, and Sage Intacct all share.

Duplicate vendor records deserve specific attention. "Acme Corp", "Acme Corporation", and "ACME Corp." are three records to a database and one company to a criminal looking for a place to hide an invoice. Deduplicate the master before you automate anything on top of it. Once the master is clean, the invoice end can be automated properly: capture the bill with AI rather than typing it, match it, and route exceptions. Our walkthrough of the accounts payable process shows where each control sits, and accounts payable automation software covers the capture layer. Once the vendor record exists and the invoice is approved, software that handles approval routing and the payment run takes it from there.

What are vendor onboarding best practices?

Collect the W-9 before the first payment, without exception. Verify bank details by callback to a number you already held. Separate the person who requests a vendor from the person who creates the banking record. Tier your requirements by risk and spend so the process is proportionate enough that people follow it. Deduplicate the vendor master on a schedule rather than after an incident. Record payment terms at onboarding so AP is not guessing, and so a negotiated early payment discount actually gets taken.

Finally, treat onboarding as the front end of the buying cycle rather than a form. It is the first stage of the source to pay process and it feeds everything downstream, from the purchase order through to net 30 payment terms and the remittance advice the vendor receives when they are finally paid. Small teams building this for the first time can pair a simple checklist with accounts payable software for small business and get most of the benefit without a procurement department.