Vendor Onboarding Checklist for Accounts Payable

Emailing a W-9 request and waiting for the vendor to reply is a fraud surface. So is pulling banking details off an invoice, skipping the duplicate check because the requester says “we need this vendor live today,” and filing a certificate of insurance without confirming it is current.

Every gap in a vendor onboarding checklist maps to a specific risk: a fraudulent payment, a failed 1099 filing, a duplicate vendor record that generates duplicate payments for months before anyone catches it. This checklist treats each section as a control and maps the workflow to the segregation-of-duties principles that make those controls work.

What vendor onboarding means for AP

Vendor onboarding is the controlled process of turning a new supplier into a payable vendor record: collecting identity and tax documents, banking details, and compliance documents, validating them, getting the required approvals, and creating the record in the system before the first invoice arrives.

The terminology varies by department. “Supplier onboarding” is the procurement and supply-chain term. “Vendor onboarding” is the AP and finance term. Procurement-led versions add sourcing and qualification steps, but the AP core (tax, banking, compliance, approval) is identical.

Ramp draws a useful line between the two: vendor onboarding focuses on administrative and financial setup (contracts, tax forms, banking information, accounts payable systems), while supplier onboarding covers broader operational readiness (delivery expectations, supply chain processes, long-term performance standards). AP owns the financial setup. That is the scope of this checklist.

Every checklist gap is a fraud vector

Three of the most common vendor fraud vectors trace directly to onboarding shortcuts:

Contact details taken from the invoice itself.

When an invoice arrives from an unknown vendor and AP uses the phone number or email on that invoice to verify the vendor, they are verifying with the vendor's own potentially fraudulent information. Contact details must come from an independent source.

Unvalidated banking information.

A vendor submits banking details by email. No one verifies them against a voided check or bank letter. A business email compromise changes the routing number. Payment goes to the wrong account.

Email-based document collection.

Email is universal but insecure, unstructured, and unauditable. W-9 forms arrive as attachments, sit in inboxes, get misfiled. There is no attributable record of who supplied what, and no way to confirm the document was altered in transit.

Effective vendor onboarding prevents unvetted vendors from entering company systems, reducing fraud, reputational exposure, and regulatory issues. The checklist below closes each of these surfaces.

The vendor onboarding checklist: five sections

1. Identity

• Legal name (as registered with the state or jurisdiction)
• DBA / trade name (if different from legal name)
• EIN or SSN (for sole proprietors)
• Principal business address
• Primary contact name, phone, email (verified independently)

2. Tax documentation

• W-9 (domestic vendors) or W-8 series form (foreign vendors)
• 1099 determination: is this vendor reportable? (based on entity type and payment type)
• Tax classification confirmed (corporation, partnership, LLC, sole proprietor, exempt)

3. Payment setup

• Banking information (account number, routing number, verified against a voided check or bank verification letter)
• Remit-to address (if different from principal address, flag for additional verification)
• Payment terms (Net 30, Net 45, or as negotiated)
• Preferred payment method (ACH, wire, check)
• Currency (for international vendors)

4. Compliance

• Certificate of insurance (COI), current and naming your entity as additionally insured where required
• Business licenses applicable to the vendor’s industry
• Professional certifications (where relevant to the engagement)
• Sanctions screening (OFAC, or equivalent for your jurisdiction)
• Conflict-of-interest disclosure

Industry-specific add-ons: lien waivers and licenses for construction; exclusion checks for healthcare.

5. Governance

• Name of the internal requester (who needs this vendor and why)
• Name of the approver (must be someone other than the requester)
• Date of onboarding completion
• Onboarding method (portal, form, manual) and record location

The five-step workflow with clear owners

The checklist defines what to collect. The workflow defines who does what, and in what order. A sound vendor onboarding workflow has five steps with distinct owners:

Step 1: Requester submits intake. The person who needs the vendor fills out a structured request with business context: what the vendor does, why this vendor, estimated annual spend. A single intake point, a form rather than an email thread, captures legal name, tax classification, W-9/W-8, remit-to address, banking details, and business justification.

Step 2: Vendor completes self-service form. The vendor enters their own tax and banking data through a secure portal. Self-service is more accurate and defensible than AP-managed data entry because it removes AP keying errors and creates an attributable record of who supplied what.

Step 3: AP validates. AP runs three checks: duplicate vendor check (does this entity already exist under a different name or ID?), TIN verification, and bank account verification. This step is also where AI document processing fits into the workflow, automating consistency checks on incoming vendor documents before payment is released.

Step 4: Independent approver activates. The approver who activates the vendor must be someone other than the requester or the validator. This is the minimum segregation-of-duties control. High-risk vendors (high spend, international, or those with banking changes) warrant a second approver.

Step 5: Record syncs to the ERP. The verified vendor record flows into your accounting system. Payment terms, tax classification, and default coding are set once and apply to every future invoice.

Who owns what: AP, procurement, and the requester

Multiple teams participate in vendor onboarding: procurement, finance, legal, compliance, IT, and business stakeholders. When each group understands its role, onboarding moves faster and with fewer errors.

The critical point: AP owns validation and data quality because AP bears the payment and 1099 consequences. The requester initiates but does not own the record. If 1099s are wrong at year-end, AP answers for it.

When to onboard: before the PO

Issuing a PO to an unvetted vendor commits spend to an entity that has not been verified. The correct sequence: complete onboarding before issuing the first purchase order.

If speed requires it, allow PO issuance against a “pending” vendor status, but block payment until onboarding completes. Never pay from an unonboarded vendor record.

When an invoice arrives with no vendor record: park the invoice in a pending state. Send the vendor your onboarding form using contact details from an independent source. Do not release payment until tax and banking data are validated. This is where many AP teams compromise under pressure. Do not.

Special cases the checklist must handle

Retroactive onboarding (contractor already working). This happens. A department engaged a contractor, work started, and nobody told AP. The correct response: collect the W-9 before the first payment. You have maximum leverage while money is owed. Verify banking. Block payment until the record is complete. Send a note to the hiring manager that future engagements require onboarding before work begins.

Emergency vendors. Allow a PO with “pending” status. Run an abbreviated checklist (identity, W-9, banking verification) within 24 hours. Full compliance documents follow within 30 days. Payment remains blocked until the abbreviated checklist clears.

One-time vendors. Still require identity, tax, and banking verification. The compliance section can be lighter (no COI if the engagement is a single purchase with no ongoing liability), but the tax record must be complete for 1099 reporting.

What clean onboarding does for AP downstream

A structured vendor onboarding checklist is the foundation for everything AP does after the vendor is active.

Vendor onboarding strengthens AP workflows by ensuring payment terms, tax classifications, and banking information are captured correctly the first time. This reduces failed payments and minimizes the rework that often slows down AP teams.

The downstream effects:

• Fewer failed payments. Verified banking means payments land on the first attempt.
• Less 1099 rework. Correct W-9 data at intake means year-end filing is a reconciliation, not a scramble.
• Faster invoice processing. When the vendor record is clean, invoice matching runs against verified data. No manual lookups, no “which vendor is this?” delays.
• No duplicate vendor records. The duplicate check at Step 3 prevents the same vendor from appearing under multiple names, which is one of the most common causes of duplicate invoice payments.

A clear onboarding process also sets expectations early. Vendors who understand requirements, payment terms, and points of contact from the start are more likely to deliver on time and meet service standards. That is a procurement benefit, but AP feels it too: fewer invoice disputes, fewer payment exceptions, less back-and-forth.

The vendor onboarding checklist is where AP's data quality starts. Everything downstream, from automated invoice processing to three-way matching to payment runs, depends on the record being right from day one. Zerentry's AI document processing pipeline plugs into that foundation, turning clean vendor records into faster, more accurate invoice handling.

Vendor onboarding FAQ