An invoice arrives from a vendor nobody in finance has heard of. The W-9 is missing, the banking details came in over email, and the purchase happened three weeks ago. Now AP has to reverse-engineer the whole relationship before anyone can pay.
This guide is for Controllers and Accounting Managers at mid-market companies (100 to 1,000 employees) where 1 to 3 people handle AP and procurement. If you run enterprise procurement on SAP or Coupa, this process will feel too light. If you are a 15-person startup, it is more structure than you need.
Most vendor onboarding guides treat it as AP paperwork: collect a W-9, key in bank details, done. This one treats onboarding as the first spend control gate. Approval routing, 3-way matching, and your audit trail all depend on the vendor record being right from day one.
ProcureDesk, a procurement and AP automation platform built for mid-market finance teams, runs this entire workflow inside the same system that creates your POs and matches your invoices.
The Vendor Master List Template
The 8-field record format from this guide, with a bank-verification status column. Excel + Google Sheets.
Table of Contents
What is vendor onboarding?
Vendor onboarding is the process of collecting, verifying, and approving a new vendor’s business, tax, banking, and compliance information before the company issues its first purchase order or payment. A complete onboarding produces a verified vendor master record: legal name, tax ID, W-9 or W-8, banking details, payment terms, and default GL coding.
Done well, onboarding is the moment finance decides whether a vendor relationship starts under control or starts as cleanup work.
The output feeds everything downstream in your spend control workflow: POs route against the right vendor, invoices match against the right record, and auditors see one consistent trail.
Vendor onboarding vs supplier onboarding
Vendor onboarding and supplier onboarding describe the same process. The only difference is vocabulary. Finance and AP teams usually say vendor. Manufacturing and supply chain teams usually say supplier, especially for direct materials with lead times and quality requirements. Some companies split the terms: suppliers provide production inputs, vendors provide everything else. The intake, verification, and approval steps in this guide apply to both.
The Purchasing Policy Template
Put the approval thresholds and vendor rules from this guide in writing. Ready to adapt to your team.
Why vendor onboarding is a finance control, not an AP admin task
Most companies discover their onboarding process is broken the same way: at payment time. The vendor already delivered. The invoice is already due. Finance is verifying tax forms under deadline pressure, which is exactly when verification gets skipped.
The risk is not theoretical
Changed banking details are a top scheme
Vendor impersonation through altered bank information is one of the most common ways fraud gets in.
Nacha 2026 rules raise the bar
Updated operating rules require risk-based processes for spotting fraudulent ACH entries, putting vendor bank verification squarely on finance’s desk.
This is where the category split matters. Bill.com and similar AP tools onboard vendors at the invoice stage, after the spend is committed. Ramp onboards vendors at the card swipe. ProcureDesk sits before both: the vendor is screened, verified, and approved before anyone can raise a PO against them. Bill.com processes what was spent. ProcureDesk controls what gets spent.
20-minute live walkthrough
Want to see the before-the-PO version of vendor onboarding?
Watch a vendor request go from intake to first POWhat to collect before the first PO: the vendor onboarding checklist
Collect everything once, at intake. Chasing documents after the first invoice is how records end up half-complete for years.
| Category | What to collect | Why it matters |
|---|---|---|
| Business identity | Legal name, DBA, address, primary contact, AP contact | Prevents duplicate vendor records and misdirected POs |
| Tax | W-9 (US) or W-8 (foreign), tax classification | 1099 reporting and withholding depend on it |
| Banking | Account and routing details, verified through a callback or portal, never email alone | Primary fraud control point |
| Compliance | Insurance certificates (COI), licenses, sanctions screening | Audit evidence and risk screening |
| Commercial terms | Payment terms, currency, early-pay discounts | Feeds invoice matching and cash planning |
| Accounting defaults | GL code, department, cost center | Clean coding at the point of request, not at month-end |
| Catalog details | Price list or punchout catalog availability | Lets requesters buy at negotiated prices |
Industry add-ons: biotech teams typically add quality certifications for lab suppliers, and manufacturers add ISO certificates and lead-time commitments for production-critical vendors.
A note on tax forms: 1099 thresholds and withholding rules change. Confirm current requirements with your accountant before you finalize your tax document policy.
The vendor onboarding process: 7 steps
Here is the workflow we see working at mid-market scale. Each step has one owner and one output.
The vendor onboarding gate
Seven steps, one owner per step. No vendor gets paid without passing through.
Steps 3–4 are the spend control gate: verified banking, timestamped approval, full audit trail.
Step 1: Intake request from the requester
The person who wants to buy something submits a new vendor request with the business case: what they need, why this vendor, and the expected annual spend. A standard vendor onboarding form does the collection work here. No form, no vendor.
This single rule kills the most common failure mode, where vendors enter the system through an invoice instead of a request.
Step 2: Risk and compliance screening
Screen before you collect banking details, so nobody wastes time onboarding a vendor who fails. Check sanctions lists, confirm the business is registered, and pull insurance certificates where the category requires them. Score the vendor by spend level: a $2,000-a-year office supplier does not need the same diligence as a $200,000-a-year contract manufacturer.
Step 3: Tax and bank verification
Collect the W-9 or W-8 and verify banking details through a controlled channel: a vendor portal or a callback to a phone number you sourced independently. Never accept bank details or bank changes by email alone. This step is your main defense against the payment fraud documented in the AFP survey above.
Step 4: Finance approval
Route the completed package to the right approver based on spend level. Department head for small vendors, Controller for mid-tier, CFO for strategic suppliers. The approval should live in a system with a timestamp, not in an email thread someone has to find during the audit.
Step 5: Vendor master setup
Create the vendor record once, with payment terms, default GL coding, and the AP contact. If your procurement system syncs with your accounting software, the record flows into QuickBooks, Sage Intacct, or NetSuite without re-keying. This is where duplicate vendors are born or prevented.
Step 6: Catalog or punchout configuration
For vendors your team buys from repeatedly, load a price list or connect a punchout catalog. Requesters then buy at negotiated prices inside the approval workflow instead of going around it with a card. This step is skipped in most AP-led onboarding processes because AP tools have nowhere to put a catalog.
Step 7: First PO and 30-day review
Issue the first purchase order through the system and watch the first cycle end to end: PO, goods receipt, invoice, match, payment. A 30-day check catches wrong payment terms, bad GL defaults, and pricing mismatches while they are still one-invoice problems.
How long should vendor onboarding take?
A standard, low-risk vendor should be fully onboarded in 1 to 3 business days; APQC’s Open Standards benchmarking puts the median supplier setup at 3.0 calendar days. High-risk or high-spend vendors with insurance and compliance requirements reasonably take 1 to 2 weeks.
If routine vendors take longer than a week, the delay is almost never the vendor. In our onboarding work with mid-market finance teams, the bottleneck is internal handoffs: the form sits in an inbox, the W-9 lives in one place and the bank details in another, and nobody owns the chase. Moving intake, verification, and approval into one workflow is what compresses the timeline.
Common vendor onboarding mistakes
Onboarding at invoice time. If the first time finance sees a vendor is on an invoice, every control downstream is retroactive. This is the root cause of surprise invoices with no PO attached.
Accepting bank details by email. Business email compromise targets exactly this moment. Verified portals or callbacks only.
No duplicate check. “Acme Inc,” “ACME, Inc.” and “Acme Incorporated” become three vendor records and, eventually, a duplicate payment.
Collecting documents without expiry tracking. An insurance certificate that lapsed eight months ago fails the audit just like a missing one.
Treating every vendor the same. Flat onboarding makes low-risk vendors slow and high-risk vendors under-screened. Tier the diligence by spend and risk.
Across ProcureDesk customers, the companies with the cleanest AP operations share one habit: no vendor gets paid without first passing through the same gated intake. That is also what makes our customers’ proof point possible, 90% fewer invoices arriving without a PO.
How ProcureDesk handles vendor onboarding
After implementing ProcureDesk, a Controller stops being the person who chases W-9s and starts being the person who approves a completed package. Every vendor in the system arrived through the same gate, so month-end matching and audit prep stop turning up mystery vendors.
ProcureDesk is built for mid-market companies with 100 to 1,000 employees, where a finance team of 1 to 3 people manages purchasing and AP. Vendor onboarding runs inside the same procure-to-pay workflow as your POs and invoices.
Approved vendors connect directly to 200+ punchout supplier catalogs, including Amazon Business, Grainger, Thermo Fisher Scientific, and McMaster-Carr. Requesters buy from approved vendors at negotiated prices from day one.
What that looks like in practice:
- Vendor requests come through a structured intake form, with required fields for tax, banking, and compliance documents. Incomplete requests cannot move forward, so the chase work disappears.
- Approvals route automatically by spend and category, with a timestamped trail your auditor can follow without a single email search.
- Approved vendor records sync to your accounting system, QuickBooks (Online, Desktop, and Enterprise), Sage Intacct, NetSuite, or Microsoft Business Central, so AP never re-keys what procurement already collected.
- Every later control inherits the clean record. POs, goods receipts, and invoices match against verified vendor data, which is how customers like Coast Flight, an aviation training company, cut invoice processing time by 30% after switching to ProcureDesk.
Implementation is done for you in 2 to 4 weeks, including vendor data migration and accounting integration, with no IT project. Pricing is published at procuredesk.com/pricing.
You can see how other finance teams run it on our customers page.
Stop surprise invoices. Gain spending control.
Stop chasing W-9s over email.
See the vendor intake form, approval routing, and QuickBooks sync live. Built for finance teams at 100 to 1,000 employee companies.
Frequently asked questions
Vendor onboarding
What is vendor onboarding?+
Vendor onboarding is the process of collecting, verifying, and approving a new vendor’s business, tax, banking, and compliance information before issuing a first purchase order or payment. The output is a verified vendor master record with payment terms and default GL coding that downstream controls like PO matching and 1099 reporting depend on.
What documents are required to onboard a new vendor?+
At minimum: a W-9 (or W-8 for foreign vendors), verified banking details, legal business name and address, and agreed payment terms. Depending on risk and category, add insurance certificates, business licenses, sanctions screening results, and quality or ISO certifications. Collect everything at intake rather than after the first invoice.
How long does vendor onboarding take?+
A low-risk vendor should take 1 to 3 business days; APQC benchmarking puts the median supplier setup at 3.0 calendar days. High-risk or high-spend vendors with compliance requirements take 1 to 2 weeks. In our onboarding work with mid-market finance teams, delays usually come from internal handoffs, not from vendors.
Who should own vendor onboarding, procurement or finance?+
Finance should own the control points: tax verification, bank verification, and final approval. At mid-market companies with 100 to 1,000 employees, there is rarely a separate procurement department, so the Controller or Accounting Manager typically owns the process end to end, with requesters submitting vendors through a standard intake form.
What is the difference between vendor onboarding and vendor management?+
Vendor onboarding is the one-time setup gate: screening, verification, and approval before the first PO. Vendor management is the ongoing work after it: performance tracking, document renewals, spend reviews, and offboarding. A weak onboarding process makes vendor management harder, because every later review inherits incomplete records.
How do you verify a vendor’s bank details safely?+
Never accept bank details or bank changes by email alone. Use a secure vendor portal where the vendor enters details directly, or call back a phone number sourced independently of the email request. The AFP 2025 survey found 79% of organizations faced attempted or actual payments fraud, and changed-bank-details schemes are a leading vector.
Can vendor onboarding sync with QuickBooks?+
Yes, if your procurement system integrates with it. ProcureDesk syncs approved vendor records to QuickBooks Online, Desktop, and Enterprise, as well as Sage Intacct, NetSuite, and Microsoft Business Central. Procurement collects and verifies the data once, and AP never re-keys it, which prevents the duplicate vendor records that cause duplicate payments.
Where to go from here
Vendor onboarding is the cheapest control you will ever implement, because it runs once per vendor and protects every transaction after it. Start by writing down your intake form fields, your verification rules for banking details, and your approval thresholds. Then put them in a system that enforces them.
ProcureDesk is a procurement and AP automation platform built for mid-market finance teams (100 to 1,000 employees). It gates vendor onboarding before the first PO, with approval workflows, automated 3-way matching, and 200+ punchout supplier catalogs.
Across ProcureDesk customers, that pre-invoice control produces 90% fewer invoices arriving without a PO. The platform integrates natively with QuickBooks, Sage Intacct, NetSuite, and Microsoft Business Central, with implementation done for you in 2 to 4 weeks.
If your team is onboarding more than a handful of vendors a quarter and the W-9 chase still happens over email, this is worth 20 minutes of your time.
Request a demo →This article covers financial controls and fraud prevention practices. It is not legal, tax, or audit advice. Confirm tax document requirements and verification procedures with your accountant or advisor.
