The Ultimate Vendor Onboarding Checklist

Your vendor relationships don’t start when you sign a contract. They start, or break down, during onboarding.

A vendor who can’t get their invoices processed, doesn’t know whom to contact for payment queries, and has to resubmit documents three times is a vendor who will deprioritise your business, push your orders down the queue, and charge you higher rates at renewal. The commercial cost of poor onboarding shows up months later, in places that don’t obviously trace back to it.

This checklist gives you everything you need to onboard vendors correctly the first time, along with the context to understand why each step matters.

Why Vendor Onboarding Is a Finance Problem, Not Just a Procurement Problem

Most companies treat vendor onboarding as a procurement activity that ends when the contract is signed. Finance gets involved when the first invoice arrives, which is exactly when it’s too late to fix the gaps.

The downstream costs are specific and quantifiable:

• Missing GSTIN or incorrect GST details: ITC claim fails, reconciliation breaks, finance spends hours reconstructing the error
• Wrong bank account details: payment fails or, worse, goes to the wrong account; recovery is time-consuming and occasionally impossible
• Absent MSME status: you may be breaching the MSME Development Act from the first invoice, with interest accruing at 3x the RBI bank rate from day 46
• Duplicate vendor records: the most direct route to a duplicate payment; average recovery cost for a duplicate payment in Indian SMBs is 4–6 hours of finance team time plus external coordination
• No agreed invoice format. Every invoice from this vendor becomes an exception that has to be manually corrected before it can be processed

None of these cost anything to fix at onboarding. All of them are expensive to fix after the fact.

Finance should own the sign-off on vendor onboarding, not just receive the output from Procurement.

The Complete Vendor Onboarding Checklist

Phase 1: Vendor Qualification (Before Onboarding Begins)

This phase is Procurement’s responsibility. By the time Finance sees a vendor, these steps should already be complete.

• Business need confirmed and approved by department head
• Vendor shortlisting documented, with a minimum of 2–3 quotes for contracts above threshold
• Basic due diligence completed: company age, client references, online presence check
• Conflict of interest self-declaration signed by relevant employees and directors
• For critical or high-value vendors: financial health check (last 2 years of financials or a credit report)

Phase 2: Document Collection (Compliance & Legal)

These documents are non-negotiable before any vendor is activated in your system. Missing documents here are the root cause of every downstream compliance gap.

Mandatory for all vendors:

• PAN Card copy (individual or company)
• GSTIN certificate. Verify independently via gstin.gov.in, not just the copy provided
• Cancelled cheque or bank confirmation letter. Verify IFSC and account number before saving to vendor master
• Address proof matching the GST registration address

Mandatory if applicable:

• Udyam Registration Certificate, required for all MSME-registered vendors. Triggers 45-day payment SLA
• Certificate of Incorporation or business registration (for companies and LLPs)

Contractual documents:

• Signed Non-Disclosure Agreement (if vendor will access confidential systems or data)
• Signed Master Service Agreement or vendor terms acknowledgment

Phase 3: Vendor Master Setup (System Entry)

This is where most companies move too fast. Rushed vendor master entries are the source of duplicate records, failed payments, and TDS errors.

• Check for duplicate vendor. Search by PAN, GSTIN, and bank account before creating a new record
• Assign unique vendor code (no duplicates. No exceptions)
• Categorise vendor: goods vs. services, expense category, department owner
• Configure payment terms in system. This must match negotiated commercial terms exactly
• Set TDS profile: applicable section (194C for contractors, 194J for professional services, 194H for commission, etc.) and rate
• Flag MSME status, which activates 45-day payment SLA tracking
• Validate bank account via penny drop or account verification service before saving
• Set approved invoice submission channel: vendor portal, dedicated AP email, or physical address
• Configure spending limit or approval threshold if applicable to this vendor category

Phase 4: Commercial Agreement

• Contract executed with clear scope, deliverables, and timeline
• Pricing and rate card documented and linked to vendor master
• Payment terms explicitly agreed and matching what’s entered in the system (net 30, net 45, milestone-based)
• Dispute resolution clause included
• SLA penalties and performance metrics defined for critical vendors
• Auto-renewal clauses reviewed and flagged in your compliance calendar

Phase 5: Vendor Enablement

This is the most consistently skipped phase, and the one that directly causes the first three months of invoice exceptions. A vendor who doesn’t know how to invoice you correctly will invoice you incorrectly, every time, until someone tells them otherwise.

Send every new vendor a written orientation that covers:

1. Invoicing format requirements
   • Must reference PO number on every invoice
   • GST breakdowns required (CGST/SGST or IGST as applicable)
   • HSN/SAC code must match the PO line item
   • TDS deduction amount should be shown separately
2. Submission channel
   • Which email address or portal to submit invoices to
   • What happens if invoices are submitted through any other channel (they will not be processed)
   • Expected processing and payment timeline from submission
3. Your contact directory
   • Name and contact for AP queries (payment status, remittance advice)
   • Name and contact for contract or commercial queries
   • Escalation contact for unresolved issues
4. What gets an invoice rejected
   • Missing PO reference
   • Incorrect GSTIN
   • Amount mismatch with PO
   • Submission to wrong channel

• Orientation document sent and acknowledged by vendor
• Vendor portal access provisioned and tested (if applicable)
• First invoice process walkthrough completed with vendor contact
• Internal stakeholders notified: department head, budget owner, IT (if vendor needs system access)

Phase 6: Post-Onboarding Review

• First invoice processed end-to-end successfully, with no manual intervention required
• Vendor satisfaction check at 30 days: are they experiencing payment or query issues?
• Document expiry reminders set: GSTIN renewal, contract expiry, MSA validity, Udyam certificate

Vendor Master Hygiene: Ongoing Responsibilities

Onboarding is the start, not the finish. A clean vendor master requires active maintenance.

Quarterly:

• Review and flag inactive vendors. Deactivate any with no transactions in 90 days or more
• Check for duplicate records introduced via manual entry or system imports

Annually:

• Re-verify compliance documents, especially after GST assessment season when registrations lapse
• Confirm MSME status. Vendors can gain or lose MSME registration; your payment obligations change accordingly
• Review contract auto-renewal flags and update commercial terms if needed

Immediately on trigger:

• Vendor offboarding: deactivate the vendor record the day a contract ends; do not leave inactive vendors in an active state
• Bank account change requests. This is a high-fraud-risk event; always reverify via penny drop and confirm directly with a known contact at the vendor before updating. Never update bank details based solely on an email request

How open.money Digitises Vendor Onboarding

Manual vendor onboarding: documents over email, data entry into spreadsheets, bank details copied by hand. This is where most of the errors in this checklist are introduced.

Open’s vendor management module removes that friction:

• Self-service vendor portal: vendors submit documents directly, with no back-and-forth email chains
• Automatic GSTIN verification, cross-checked against the GST portal at submission
• MSME flag and SLA activation. The Udyam certificate triggers 45-day payment tracking automatically
• Penny drop bank verification. The account is validated before it’s saved to the vendor master
• TDS profile auto-configuration, based on vendor category and applicable section
• Single vendor master, which feeds directly into AP automation; no duplicate data entry between onboarding and payment processing

Finance teams using Open’s vendor portal report that vendor setup time drops from an average of 5 to 7 days to under 24 hours, with a cleaner audit trail and fewer first-invoice exceptions.

Frequently Asked Questions

1. Which documents are mandatory vs. optional for Indian vendor onboarding?

Mandatory for all vendors: PAN, GSTIN certificate (verified independently), cancelled cheque or bank confirmation letter, and address proof. Udyam Registration Certificate is mandatory if the vendor is MSME-registered. It determines your legal payment obligations. Certificate of Incorporation is mandatory for company vendors. NDAs and MSAs are contractually required but the specific documents depend on your internal policy and the nature of the engagement.

2. What is the penalty for not identifying an MSME vendor at onboarding?

If you pay an MSME vendor beyond 45 days (or 15 days if no written agreement exists. compound interest accrues automatically at three times the RBI bank rate, currently around 15 to 18% per annum. This liability isn’t waivable and must be disclosed in your annual financial statements. The longer it goes undetected, the larger it compounds. Identifying MSME status at onboarding is the only way to ensure your AP system flags the deadline in time.

3. How do you handle vendors who refuse to provide documents?

Don’t onboard them. A vendor unwilling to provide PAN or GSTIN before the first invoice is one whose invoices you cannot legally process for ITC or TDS compliance. If the business relationship is critical, escalate to the commercial team, but the compliance documents are non-negotiable. A no-PO, no-pay policy has a natural companion: no-compliance-docs, no-vendor-activation.

4. How often should vendor master records be reviewed?

At minimum: quarterly for activity status and duplicates, annually for compliance document validity and MSME status. Immediately on any bank account change request. This is the highest-fraud-risk event in vendor master management. Any request to update bank details should trigger a reverification via penny drop and a direct confirmation call to a known vendor contact before the update is made.

5. What’s the difference between vendor onboarding and vendor management?

Vendor onboarding is the process of qualifying, documenting, and activating a new vendor in your systems. Vendor management is the ongoing relationship: performance tracking, contract renewals, spend analysis, and compliance maintenance. Onboarding done well makes vendor management easier: a clean vendor master, documented terms, and flagged compliance obligations mean fewer surprises over the life of the relationship.