Skip to content
Enjoy complimentary data migration when switching from your existing bookkeeper or CPA to Institution.

Choosing a provider

Evaluate a supplier portal before opening it to vendor changes

Test invitations, company matching, sensitive updates and review stages so supplier self-service produces usable records without bypassing the company's approval process.

By Institution5 minute readPublished View sources
In this guide

Choose which supplier tasks belong in the portal

A supplier portal can collect onboarding information, show purchase documents or allow vendors to request changes. Decide which of those tasks the company wants to offer before comparing products. A portal intended only for invoice status needs a different authority model from one that accepts banking changes.

List the records the supplier may view and the fields it may submit. Identify what should remain under internal control, such as an approved payment method or a decision to release a hold. Self-service should simplify collection without making the boundary between a request and an approved company record ambiguous.

Microsoft's vendor-collaboration documentation describes a feature through which vendors maintain bank information and the company can inspect resulting changes. That is a product example of supplier-originated data entering a finance workflow. It is not evidence that the submitted information has been independently verified or is ready for payment.

Use a sample supplier journey from invitation through an accepted update. Include a rejected request and a supplier contact who leaves the business. Those cases reveal more about the operating model than a demonstration that begins with an already configured vendor account.

References: Microsoft: Maintain vendor bank information through vendor collaboration

Match the invited person to the supplier entity

Ask who is permitted to invite a supplier and how the invitation reaches an established contact. Verify the legal entity and supplier record before granting access. A name that resembles an existing vendor should not be enough to associate a new user with its documents.

Test a supplier serving two companies in your group. Determine whether the portal presents separate relationships and permissions or combines them. The supplier should see the information relevant to its authorized relationship, with the paying legal entity clear on the screen and documents.

Ask how an additional supplier employee obtains access. Decide whether an existing supplier administrator can invite others, whether the company reviews the request and how the access is limited. The proposed process should fit the sensitivity of the information available in the portal.

Demonstrate removal of a departed supplier contact and recovery when its only administrator leaves. Use the supported identity process. The company needs a reliable route to restore legitimate access without treating an unexpected email as proof that the sender represents the supplier.

Follow a sensitive change through review

Use synthetic bank information to request a change during the evaluation. Observe where the proposed value is stored, who receives the request and when it becomes effective. The old and proposed values should be distinguishable to the authorized reviewer through the available interface or supporting record.

Keep independent verification within the company's established process. A portal login can identify an account used to submit information without proving that a new payment destination is legitimate. Ask how the software supports the verification record and the approval required before the change affects a payment.

Test a change while an invoice or payment proposal is already in progress. Determine whether the existing item keeps the earlier details, adopts the new ones or requires a separate decision. The person approving payment needs to know which version will actually be used.

Include a rejected update and a corrected resubmission. The record should show what was declined and what the supplier changed, with sensitive data visible only to appropriate users. A fresh submission should not silently overwrite the evidence needed to understand the earlier decision.

Check completeness without encouraging duplicate records

Have a supplier complete the onboarding fields using an ordinary browser and the intended language where relevant. Test unclear instructions, an unsupported document and missing required information. The portal should explain the problem in terms the supplier can act on without exposing internal system details.

Ask how the product identifies a supplier that already exists. Compare legal identifiers, names and locations through the permitted matching process. A duplicate warning should help an internal reviewer decide whether two records describe the same company rather than automatically merge unrelated businesses.

Follow supporting documents into the company's record system. Confirm the relevant version, submission date and relationship to the supplier record remain accessible. If the portal only keeps an attachment temporarily, identify where the required evidence will be retained afterward.

Distinguish incomplete information from a business decision to decline onboarding. A supplier may submit every requested field while still needing purchasing, tax or compliance review under the company's process. The portal's completion indicator should not be mistaken for approval to transact.

Show suppliers a status that matches the work

Review the meaning of every supplier-facing status. An invoice received, an invoice approved and a payment initiated are different events. Ask the vendor to demonstrate where each status comes from and how quickly it reflects a change in the authoritative system.

Test a disputed invoice or missing purchase reference. The supplier should have a clear route to provide the required information, while the internal team can see the unresolved issue. Avoid a portal that tells the supplier to contact finance without giving finance enough context to identify the question.

Inspect messages and notifications for sensitive content. Determine whether supplier replies remain attached to the record and whether internal comments are excluded from external communication. Review the actual recipient list when several supplier contacts share the account.

Provide an operating route for suppliers unable to use the portal. The company can still maintain a controlled intake process for exceptions. Define how staff-entered information is identified so the history distinguishes supplier submissions from internal changes made on their behalf.

Price administration as well as external access

Ask how supplier accounts, users, documents, integrations and support are charged. Include the work needed to invite existing suppliers, resolve duplicate records and handle access problems. A low portal subscription may still require substantial onboarding effort.

Accept the proposed setup after a supplier and internal reviewer complete the full sample journey, including the sensitive-change test and a rejected request. Retain the field permissions, review rules and support responsibilities with the implementation record.

The portal should give suppliers an understandable way to participate while leaving the company's decisions visible and controlled. The purchase succeeds when cleaner information reaches the team without an unexplained shortcut into approved vendor records.

Sources

Requirements and product details can change. Check the linked guidance for the facts that apply to your situation.

Related reading

Need help with this work?

General information, not personalized accounting, tax, legal, or investment advice. Have the appropriate qualified professional review decisions that depend on your circumstances.