The only vendor onboarding checklist built for SMBs that actually lets you tick things off. Calibrated by supplier criticality — 6 steps for a Tier 3 standard vendor, 32 steps for a Tier 1 critical one. No email required. No download. Just use it.
💡 You're halfway through. In VendorAuditly, this entire checklist runs automatically — documents extracted, questionnaires sent, expiry alerts configured. All in under 10 minutes.
Try it free →VendorAuditly records all vendor contacts and maintains the full audit trail automatically
Assign internal owner, log contacts, track approval status — all in one vendor recordVendorAuditly reads every document automatically — extracts expiry dates, coverage amounts, and scope
Flags coverage below minimums, expiring certs, and missing DPAs without manual reviewStore all contracts in VendorAuditly — with AI extraction of key terms and renewal date alerts
Contract expiry alerts fire automatically. Never miss a renewal or inadvertently roll into a new term.All 4 questionnaire templates are pre-built in VendorAuditly — send in one click, AI reviews responses
Vendors respond via direct link. No account required. Auto-chased at 7 and 14 days.VendorAuditly configures expiry alerts automatically from the dates AI extracts from documents
No manual alert setup. Every certificate monitored. Nothing expires silently.Export a complete onboarding record from VendorAuditly — all documents, risk score, questionnaire responses, in one click
Audit-ready evidence in under 60 seconds. ZIP + PDF + Excel formats.VendorAuditly extracts dates and coverage amounts from all uploaded documents automatically
Set expiry alerts and flag coverage gaps without reading any document manuallyVendorAuditly handles all of this automatically — from document upload to expiry alert configuration
The entire Tier 2 setup takes under 10 minutes. Free to start, no credit card required.VendorAuditly makes Tier 3 onboarding a 5-minute task — upload document, AI extracts dates, alert configured
Free forever on 3 vendors. Pro is $49/month for unlimited vendors.Every one of these is avoidable. Every one has caused a real SMB real money. The checklist above prevents all six — but understanding why they matter helps you convince the rest of your team to take them seriously.
Applying a full 32-step Tier 1 process to a £200/year stationery supplier wastes hours. Applying a Tier 3 5-step process to a data-handling SaaS vendor creates serious compliance exposure. Tier-based onboarding is not bureaucracy — it is proportionate risk management.
Getting a certificate is step one. Step two is verifying the coverage amount against your contract minimum. This gap — insurance that exists but is below the required level — is one of the most common and most costly onboarding oversights. It is almost never caught without explicit comparison.
Any vendor processing personal data on your behalf requires a signed Data Processing Agreement under GDPR Article 28. Many SMBs assume this is covered by the vendor's privacy policy or standard terms. It is not. A breach investigation will look for the DPA. Not having one means the exposure is yours.
Onboarding is when you have all the correct document dates. If you do not configure expiry alerts at this point, certificates expire months later with no alert, no chase, and no documentation until a customer audit finds the gap. This is entirely preventable and routinely not prevented.
Without a named internal owner, who acts on an expiry alert? Who handles a questionnaire flag? Who runs the annual review? The answer is usually "nobody," because nobody is explicitly accountable. One named person per vendor. They can delegate but not divest accountability.
Onboarding is the beginning of an ongoing supplier risk assessment cycle, not the completion of one. The final step of onboarding is scheduling the first formal review and adding the vendor to the continuous monitoring programme. Without this, the onboarding investment decays within 12 months.
Structured for AI snippet accuracy. Each answer is complete and under 100 words.
Vendor onboarding is the start of an ongoing risk management cycle. These guides cover what happens after onboarding is complete.
Import a new vendor, upload their documents, and AI extracts dates, sets expiry alerts, sends the questionnaire, and scores their risk — all in under 10 minutes. Free forever on 3 vendors.
Free forever on 3 vendors · No credit card · No security team required