Bringing on a new vendor is easy to treat as a purely transactional decision — compare a few quotes, pick the best price, sign. But a vendor that handles a critical input, holds your data, or represents your brand to customers is effectively becoming part of your operation. A short due diligence process before signing catches problems that are far more expensive to discover after you're dependent on them.
Verify the Business Actually Exists as Represented
Confirm the vendor's legal business name, entity type, and state of registration through the relevant secretary of state's business search. Check how long the entity has been registered — a vendor claiming fifteen years of experience but registered as an LLC eight months ago is worth asking about. For vendors handling significant volume, request a D&B report or similar business credit profile to see payment history with other suppliers and any liens or judgments on file.
Confirm Insurance and Licensing
Request a certificate of insurance showing general liability coverage, and workers' compensation if the vendor will have staff on your premises. Confirm any required professional or trade licenses are current, particularly for contractors, healthcare-adjacent vendors, or anyone in a regulated field. A vendor unwilling to provide a certificate of insurance promptly is signaling something about how the rest of the relationship will go.
Check References From Actual Recent Clients
Ask for references from clients with a similar size and use case to yours, not just whoever the vendor's sales team has ready. Ask references pointed questions: how has responsiveness held up after the contract was signed, has pricing changed unexpectedly, and how were problems handled when something went wrong. A vendor's best moment is always the sales pitch; references reveal what happens afterward.
Understand Their Financial Stability
A vendor in financial distress creates real risk — missed deliveries, sudden price increases, or an abrupt shutdown that leaves you scrambling for a replacement mid-project. For vendors supplying something critical, ask about how long they've been profitable, whether they've had layoffs recently, and whether they carry key-person dependency (a single founder or specialist whose absence would halt operations). Public financial data isn't available for most small vendors, but direct questions and industry reputation often surface the same information.
Review Data Handling and Security Practices
If the vendor will touch customer data, financial information, or access your systems, ask specifically how that data is stored, who can access it, and what happens to it if the relationship ends. Confirm whether they carry cyber liability insurance and whether they've had a breach in recent years. A vendor that can't answer basic security questions clearly is a data risk you're inheriting, not just a service provider.
Read the Contract for What Happens When Things Go Wrong
Beyond price and delivery terms, check the contract for termination rights and notice periods, liability caps and indemnification clauses, and what recourse you have for missed service levels or quality issues. Vendor contracts are often written entirely in the vendor's favor by default; even modest negotiation on termination and liability terms can meaningfully reduce your exposure later.
Pilot Before You Commit at Scale
Where possible, start with a smaller order, a trial period, or a single project before signing a large or long-term agreement. A pilot reveals communication style, actual lead times versus quoted lead times, and quality consistency in a way that a sales conversation never will, and it costs far less to walk away from a bad pilot than a bad multi-year contract.
Set a Review Cadence, Not Just a Signing Date
Due diligence shouldn't stop once the contract is signed. Build in a periodic review — annually at minimum for important vendors — to recheck insurance certificates, confirm pricing is still competitive, and reassess whether the vendor still fits your needs as your business has grown or changed.
None of this needs to slow down every purchase order — a low-stakes, easily replaced vendor doesn't need the same scrutiny as one holding your customer data or supplying a component your whole product depends on. The point is matching the depth of diligence to how much would actually go wrong if the vendor let you down, and doing that thinking before the signature rather than after the first problem.
Comments
Post a Comment