What “good” supplier onboarding looks like in UK SMEs (and why it matters)
In UK SMEs, “good” supplier onboarding is a repeatable, documented process that gets the basics right before any orders are placed. It matters because it reduces day-to-day fire-fighting (late deliveries, invoice disputes, missing paperwork) and helps you keep consistent records for audits, insurance, and customer requirements.
A practical UK supplier onboarding checklist typically covers:
- Supplier identity and contacts: registered company name, Companies House number (if applicable), trading address, main contact, and escalation contact.
- Commercial set-up: agreed pricing, lead times, minimum order quantities, Incoterms (where relevant), and a named owner internally.
- Payment and invoicing: payment terms, invoice format, PO requirements, VAT number and VAT status, and bank details (with a simple verification step to reduce fraud risk).
- Compliance and policies: GDPR/data processing needs, modern slavery statement (where requested), health & safety expectations for site work, and any sector-specific requirements.
- Quality and service expectations: specs, acceptance criteria, returns process, service levels, and how issues are logged and resolved.
- Contractual documents: signed terms, NDAs (if needed), and evidence of relevant insurance (e.g., public liability for on-site suppliers).
Done well, onboarding creates a single source of truth: purchasing knows what to buy and how, finance knows how to pay, and operations knows what “good” looks like. The result is fewer blocked invoices, clearer accountability, and smoother supplier relationships as you scale.
UK supplier onboarding checklist: step-by-step process from request to first payment
1) Raise the supplier request (internal)
Capture the basics: legal name, trading name, company number (if applicable), VAT number (if applicable), registered address, primary contact, service description, expected spend, and which cost centre/project will pay. Confirm who approves the relationship.
2) Run initial due diligence (risk-based)
Check the supplier’s website, trading history, and any sanctions/PEP screening your organisation uses. For higher-risk categories (e.g., data processing, subcontracting), request relevant policies and evidence (insurance certificates, accreditations, references). Keep checks proportionate to the value and risk.
3) Collect onboarding documents
Request: signed supplier onboarding form, VAT details, proof of bank account ownership (e.g., void cheque/letter), and key contacts for accounts payable. If they’ll handle personal data, gather a completed data processing questionnaire and confirm a DPA is in place.
4) Agree commercial terms
Confirm scope, pricing, delivery/SLAs, and payment terms (e.g., 30 days). Align on invoicing requirements: PO number needed, invoice email address, mandatory fields, and whether you accept e-invoices.
5) Set up in finance systems
Create the supplier record in your accounting/ERP tool. Enter bank details using a “two-person” verification step to reduce fraud risk. Set default tax codes, payment method, and remittance email.
6) Create the first purchase order (if used)
Issue a PO with clear line items and budget owner approval. Share it with the supplier before work starts.
7) Receive invoice and approve
Match invoice to PO/receipt, confirm deliverables, and route for approval. Resolve discrepancies quickly (rates, quantities, VAT treatment).
8) Schedule and make first payment
Add to the next payment run, send remittance advice, and confirm receipt. Log any issues and update the supplier record for smoother future payments.
Due diligence options compared: light-touch vs risk-based vs enhanced onboarding
Choosing the right level of supplier due diligence in the UK is about matching effort to risk, not applying the same checks to everyone. Use the comparison below to pick a proportionate route that supports your supplier onboarding checklist.
| Option | Best for | Typical checks | Time & effort | Common triggers |
|---|---|---|---|---|
| Light-touch | Low-value, low-impact suppliers | Company details (name, address, registration), contact verification, basic sanctions/PEP screening (where relevant), confirmation of insurance/certifications if required | Fast; minimal documentation | Standard services, domestic supply, no access to sensitive data |
| Risk-based (standard) | Most operational suppliers | All light-touch plus: financial stability indicators, reference checks, policy review (H&S, modern slavery statement where applicable), data protection posture, subcontractor disclosure, onboarding questionnaire | Moderate; evidence-led | Higher spend, critical service, access to systems/sites, overseas elements |
| Enhanced onboarding | High-risk or business-critical suppliers | All standard plus: deeper ownership/beneficial owner review, on-site/virtual audit, penetration test or security assessment, ESG/ethical sourcing validation, litigation/adverse media screening, contract clause verification and sign-off workflow | Slowest; cross-team involvement | Regulated activity, sensitive personal data, high fraud/bribery exposure, complex supply chains |
Practical tip: document your triggers (spend threshold, data access, geography, criticality) and map them to the option above so your team can apply the same standard consistently and keep an auditable trail.
Supplier onboarding FAQs (VAT, bank details, UBOs, IR35, and common AP blockers)
What VAT details do you need from a UK supplier?
Ask for the VAT registration number (if registered), registered name/address, and confirmation of VAT status (standard, reduced, exempt, or not registered). Validate the number format and ensure invoice details match the supplier’s legal entity to avoid rejected invoices.
How should we collect and verify bank details safely?
Request bank name, sort code, account number, and account holder name. Use a controlled process: changes to bank details should be confirmed via an independent contact method (e.g., calling a known number on file), and approvals should be logged. Mismatched account names and last-minute change requests are common red flags that trigger AP holds.
What are UBOs and why do we ask for them?
UBO means “ultimate beneficial owner” (the individuals who ultimately own or control a business). Many organisations collect UBO information as part of due diligence and anti-fraud controls, especially for new suppliers or higher-risk categories. Typical blockers include incomplete ownership details or unclear corporate structures.
Does IR35 apply to suppliers?
IR35 is mainly relevant when engaging individuals via personal service companies or intermediaries. If the supplier is a limited company providing consultancy/contractor services, you may need an employment status assessment and supporting documentation before onboarding.
What are the most common AP blockers?
Missing PO details, invoice address mismatch, duplicate supplier records, incomplete tax forms, unclear payment terms, and absent contact emails for remittance. Standardising required fields in your supplier onboarding checklist reduces rework and payment delays.