Vendor Onboarding: A Step-by-Step Process for Mid-Market Finance Teams

An invoice arrives from a vendor nobody in finance has heard of. The W-9 is missing, the banking details came in over email, and the purchase happened three weeks ago. Now AP has to reverse-engineer the whole relationship before anyone can pay.

This guide is for Controllers and Accounting Managers at mid-market companies (100 to 1,000 employees) where 1 to 3 people handle AP and procurement. If you run enterprise procurement on SAP or Coupa, this process will feel too light. If you are a 15-person startup, it is more structure than you need.

Most vendor onboarding guides treat it as AP paperwork: collect a W-9, key in bank details, done. This one treats onboarding as the first spend control gate. Approval routing, 3-way matching, and your audit trail all depend on the vendor record being right from day one.

ProcureDesk, a procurement and AP automation platform built for mid-market finance teams, runs this entire workflow inside the same system that creates your POs and matches your invoices.

What is vendor onboarding?

Vendor onboarding is the process of collecting, verifying, and approving a new vendor’s business, tax, banking, and compliance information before the company issues its first purchase order or payment. A complete onboarding produces a verified vendor master record: legal name, tax ID, W-9 or W-8, banking details, payment terms, and default GL coding.

Done well, onboarding is the moment finance decides whether a vendor relationship starts under control or starts as cleanup work.

The output feeds everything downstream in your spend control workflow: POs route against the right vendor, invoices match against the right record, and auditors see one consistent trail.

Vendor onboarding vs supplier onboarding

Vendor onboarding and supplier onboarding describe the same process. The only difference is vocabulary. Finance and AP teams usually say vendor. Manufacturing and supply chain teams usually say supplier, especially for direct materials with lead times and quality requirements. Some companies split the terms: suppliers provide production inputs, vendors provide everything else. The intake, verification, and approval steps in this guide apply to both.

Why vendor onboarding is a finance control, not an AP admin task

Most companies discover their onboarding process is broken the same way: at payment time. The vendor already delivered. The invoice is already due. Finance is verifying tax forms under deadline pressure, which is exactly when verification gets skipped.

This is where the category split matters. Bill.com and similar AP tools onboard vendors at the invoice stage, after the spend is committed. Ramp onboards vendors at the card swipe. ProcureDesk sits before both: the vendor is screened, verified, and approved before anyone can raise a PO against them. Bill.com processes what was spent. ProcureDesk controls what gets spent.

What to collect before the first PO: the vendor onboarding checklist

Collect everything once, at intake. Chasing documents after the first invoice is how records end up half-complete for years.

Industry add-ons: biotech teams typically add quality certifications for lab suppliers, and manufacturers add ISO certificates and lead-time commitments for production-critical vendors.

A note on tax forms: 1099 thresholds and withholding rules change. Confirm current requirements with your accountant before you finalize your tax document policy.

The vendor onboarding process: 7 steps

Here is the workflow we see working at mid-market scale. Each step has one owner and one output.

Step 1: Intake request from the requester

The person who wants to buy something submits a new vendor request with the business case: what they need, why this vendor, and the expected annual spend. A standard vendor onboarding form does the collection work here. No form, no vendor.

This single rule kills the most common failure mode, where vendors enter the system through an invoice instead of a request.

Step 2: Risk and compliance screening

Screen before you collect banking details, so nobody wastes time onboarding a vendor who fails. Check sanctions lists, confirm the business is registered, and pull insurance certificates where the category requires them. Score the vendor by spend level: a $2,000-a-year office supplier does not need the same diligence as a $200,000-a-year contract manufacturer.

Step 3: Tax and bank verification

Collect the W-9 or W-8 and verify banking details through a controlled channel: a vendor portal or a callback to a phone number you sourced independently. Never accept bank details or bank changes by email alone. This step is your main defense against the payment fraud documented in the AFP survey above.

Step 4: Finance approval

Route the completed package to the right approver based on spend level. Department head for small vendors, Controller for mid-tier, CFO for strategic suppliers. The approval should live in a system with a timestamp, not in an email thread someone has to find during the audit.

Step 5: Vendor master setup

Create the vendor record once, with payment terms, default GL coding, and the AP contact. If your procurement system syncs with your accounting software, the record flows into QuickBooks, Sage Intacct, or NetSuite without re-keying. This is where duplicate vendors are born or prevented.

Step 6: Catalog or punchout configuration

For vendors your team buys from repeatedly, load a price list or connect a punchout catalog. Requesters then buy at negotiated prices inside the approval workflow instead of going around it with a card. This step is skipped in most AP-led onboarding processes because AP tools have nowhere to put a catalog.

Step 7: First PO and 30-day review

Issue the first purchase order through the system and watch the first cycle end to end: PO, goods receipt, invoice, match, payment. A 30-day check catches wrong payment terms, bad GL defaults, and pricing mismatches while they are still one-invoice problems.

How long should vendor onboarding take?

A standard, low-risk vendor should be fully onboarded in 1 to 3 business days; APQC’s Open Standards benchmarking puts the median supplier setup at 3.0 calendar days. High-risk or high-spend vendors with insurance and compliance requirements reasonably take 1 to 2 weeks.

If routine vendors take longer than a week, the delay is almost never the vendor. In our onboarding work with mid-market finance teams, the bottleneck is internal handoffs: the form sits in an inbox, the W-9 lives in one place and the bank details in another, and nobody owns the chase. Moving intake, verification, and approval into one workflow is what compresses the timeline.

Common vendor onboarding mistakes

Onboarding at invoice time. If the first time finance sees a vendor is on an invoice, every control downstream is retroactive. This is the root cause of surprise invoices with no PO attached.

Accepting bank details by email. Business email compromise targets exactly this moment. Verified portals or callbacks only.

No duplicate check. “Acme Inc,” “ACME, Inc.” and “Acme Incorporated” become three vendor records and, eventually, a duplicate payment.

Collecting documents without expiry tracking. An insurance certificate that lapsed eight months ago fails the audit just like a missing one.

Treating every vendor the same. Flat onboarding makes low-risk vendors slow and high-risk vendors under-screened. Tier the diligence by spend and risk.

Across ProcureDesk customers, the companies with the cleanest AP operations share one habit: no vendor gets paid without first passing through the same gated intake. That is also what makes our customers’ proof point possible, 90% fewer invoices arriving without a PO.

How ProcureDesk handles vendor onboarding

After implementing ProcureDesk, a Controller stops being the person who chases W-9s and starts being the person who approves a completed package. Every vendor in the system arrived through the same gate, so month-end matching and audit prep stop turning up mystery vendors.

ProcureDesk is built for mid-market companies with 100 to 1,000 employees, where a finance team of 1 to 3 people manages purchasing and AP. Vendor onboarding runs inside the same procure-to-pay workflow as your POs and invoices.

Approved vendors connect directly to 200+ punchout supplier catalogs, including Amazon Business, Grainger, Thermo Fisher Scientific, and McMaster-Carr. Requesters buy from approved vendors at negotiated prices from day one.

What that looks like in practice:

• Vendor requests come through a structured intake form, with required fields for tax, banking, and compliance documents. Incomplete requests cannot move forward, so the chase work disappears.
• Approvals route automatically by spend and category, with a timestamped trail your auditor can follow without a single email search.
• Approved vendor records sync to your accounting system, QuickBooks (Online, Desktop, and Enterprise), Sage Intacct, NetSuite, or Microsoft Business Central, so AP never re-keys what procurement already collected.
• Every later control inherits the clean record. POs, goods receipts, and invoices match against verified vendor data, which is how customers like Coast Flight, an aviation training company, cut invoice processing time by 30% after switching to ProcureDesk.

Implementation is done for you in 2 to 4 weeks, including vendor data migration and accounting integration, with no IT project. Pricing is published at procuredesk.com/pricing.

You can see how other finance teams run it on our customers page.

Where to go from here

Vendor onboarding is the cheapest control you will ever implement, because it runs once per vendor and protects every transaction after it. Start by writing down your intake form fields, your verification rules for banking details, and your approval thresholds. Then put them in a system that enforces them.

ProcureDesk is a procurement and AP automation platform built for mid-market finance teams (100 to 1,000 employees). It gates vendor onboarding before the first PO, with approval workflows, automated 3-way matching, and 200+ punchout supplier catalogs.

Across ProcureDesk customers, that pre-invoice control produces 90% fewer invoices arriving without a PO. The platform integrates natively with QuickBooks, Sage Intacct, NetSuite, and Microsoft Business Central, with implementation done for you in 2 to 4 weeks.