Supplier onboarding is boring paperwork that prevents specific, expensive problems — paying the wrong bank account, discovering an expired certificate mid-project, or having no contract when something goes wrong.
Supplier onboarding is the process of collecting what you need from a new supplier before you start trading with them: legal identity, banking details, tax status, insurance where relevant, contacts, and agreed terms. Vendor onboarding is the same thing under a different name, and the difference between doing it properly and doing it in an email thread shows up months later.
The case for the paperwork is specific rather than procedural. Each item on the list prevents a failure that small businesses actually experience: paying a fraudulent bank account, being unable to claim against a supplier because nothing was signed, or discovering during a job that a certificate expired in March.
Verify bank details out of band, always. An email saying our bank has changed, arriving from a real supplier's compromised mailbox, is the single most effective attack on small businesses, and it works because the request is plausible and the timing is right. A thirty-second call to a number you already had is the entire defence, and it has to be a rule rather than a judgement call — because in the moment it always feels unnecessary.
Ettex Records holds the supplier register with the fields, expiry dates and owners, and the intake form itself runs through Ettex Forms so the same information arrives each time. The ongoing relationship is covered in vendor management, and the payment side, where the bank details matter, in accounts payable.
To be direct: there is no supplier portal where vendors maintain their own details, no automated credit checking, no sanctions screening and no integration with company registries. Those exist as products for organisations with hundreds of suppliers; below that the form and the register do the job.
Legal entity name and registration number, verified bank details, tax status, functional contacts, agreed terms, and any required insurance or certificates with expiry dates.
By calling a number you already had for them, never one supplied in the email. Requests to change bank details are the most common invoice fraud against small businesses.
Nothing meaningful — the terms are used interchangeably. Vendor is more common in North America, supplier in the UK and Europe.
Tier it. Significant suppliers get the full list including checks and insurance; an occasional low-value supplier needs a name, verified bank details and terms.
Most reference checks confirm employment dates and nothing else, because nobody asked a question worth answering. A handful of specific questions changes what a former manager is willing to tell you.
A disaster recovery plan is not a binder. It is a short document that says who decides, who calls whom, and in what order things come back — written while nobody is panicking.
Cycle counting replaces the annual shutdown with twenty minutes a day. It finds errors while their cause is still identifiable, which is the part that actually improves accuracy.