How to Audit a Vendor List You Inherited Without Starting From Scratch

How to Audit a Vendor List You Inherited Without Starting From Scratch

You took over a role — operations manager, purchasing lead, office administrator — and someone handed you a spreadsheet with 140 vendor names, half of which you’ve never heard of. This guide walks you through a real supplier list cleanup without the corporate-consultant jargon.

Where do you even start when the list is a mess?

Start with a simple triage, not a full audit. Export everything into a single spreadsheet if it isn’t already, and add four columns: Last Invoice Date, Annual Spend, Contract on File (Y/N), and Active Contact Known (Y/N). You’re not making decisions yet — you’re just getting visibility. A list of 140 vendors will typically collapse to about 60 to 80 meaningful entries once you see who you’ve actually paid in the past 12 months.

Resist the urge to delete anything immediately. Some vendors look dormant but represent standing agreements, seasonal suppliers, or emergency backup sources. A landscaping company in South Florida, for example, might invoice only twice a year but be critical before hurricane season. Flag before you cut.

How do you figure out which vendors are legitimate versus just… left over?

Pull your accounts payable records for the last 24 months and match every payment to a vendor on your list. Any vendor with zero payments in two years and no active contract is almost certainly a ghost — a company that was used once, added to the system, and never removed. These are safe to archive. Any vendor with a single payment under $500 total in two years deserves a second look: either it was a one-time fix and should be closed out, or it’s a slow-burn subscription that nobody remembered to cancel.

Watch specifically for duplicate entries. A single supplier might appear as “ABC Cleaning Services,” “ABC Cleaning Svc,” and “A.B.C. Cleaning” depending on who entered them. In mid-sized businesses, duplicate vendor entries are surprisingly common — some studies in procurement operations have found duplication rates as high as 10 to 15 percent of total vendor records. Consolidating duplicates alone can clarify your real vendor count and sometimes reveal double-payments that accounting hasn’t caught.

What’s the right way to verify that a vendor is still a real, operating business?

For vendors you plan to keep or pay significant money to, run a basic legitimacy check. In Florida, you can search the state’s Division of Corporations database at sunbiz.org to confirm a company is still registered and in good standing. This takes about 90 seconds per vendor and has saved more than a few businesses from paying invoices to companies that dissolved years ago. For vendors outside Florida, most states have an equivalent online registry.

Beyond registration, check whether the vendor’s phone number still connects to a real business, whether their website is active, and whether any named contact you have on file still works there. If you can’t reach a vendor through two different channels within a week, treat them as inactive until proven otherwise. This isn’t about being harsh — it’s about knowing who you’re actually doing business with.

How do you prioritize which vendors need deeper scrutiny during a procurement review?

Use a simple spend-and-risk matrix. Sort your verified vendors by annual spend and flag the top 20 percent — these are your Tier 1 suppliers and they deserve the most attention. For each one, you want to confirm: Is there a signed contract? Does it have an expiration date? Are the payment terms documented? Is there a backup supplier if this one fails? In many inherited lists, the highest-spend vendors are actually the least documented, because the previous manager just “had a relationship” with them.

The remaining 80 percent can be reviewed more quickly. For mid-spend vendors (roughly $5,000 to $50,000 annually depending on your business size), verify contact info and confirm service is still relevant. For low-spend vendors, a simple active/inactive designation is usually enough at this stage. The goal of a first-pass procurement review isn’t perfection — it’s knowing where your money is actually going and which relationships carry real operational risk.

What do you do about vendors with no contract at all?

This is more common than it should be, especially in small to mid-sized businesses and in service industries. If you have a vendor you’re paying regularly — monthly cleaning service, IT support, a local printing company — and there’s no signed agreement anywhere, you have two choices: formalize it or phase it out. For any vendor you’re paying more than $1,000 a month, formalizing is worth the effort. A basic service agreement doesn’t need to be a 40-page legal document; a one-page letter confirming scope, rate, payment terms, and 30-day termination notice does the job.

For vendors you’re paying sporadically or in smaller amounts, a purchase order system is usually sufficient. The point isn’t legal paranoia — it’s that contracts protect you when the vendor changes ownership, raises prices unexpectedly, or delivers something different from what was agreed. The U.S. Small Business Administration recommends maintaining written agreements for any recurring vendor relationship, and this is advice worth following even when it feels like extra paperwork.

How do you handle vendors that someone internally has a personal relationship with?

Carefully, but honestly. In smaller markets — Fort Lauderdale, Naples, the broader South Florida business community — it’s common for vendor relationships to be personal ones. Someone’s brother-in-law does the HVAC service, or a former colleague runs the courier account. That doesn’t automatically make the arrangement bad, but it does mean it’s often underpricied, underdocumented, and underscrutinized.

Your job isn’t to blow up those relationships — it’s to make sure they meet the same basic standard as any other vendor: a fair rate, a clear scope, and a record of performance. If you can benchmark their pricing against one or two comparable services and it’s in the same range, document it and move on. If it’s 30 to 40 percent above market, that’s a conversation worth having, and it’s easier to have it when you have the data rather than a gut feeling.

What’s the fastest way to clean up the actual vendor master file?

Set a decision rule before you start deleting anything: vendors with no payment in 24 months and no active contract get archived, not deleted. Archiving keeps the history (important for accounting and audit trails) while removing them from active use. Vendors with no payment in 12 months get flagged for a 30-day review — someone needs to make an active call on whether to keep or close them. Everything else stays active but gets tagged with a review date.

If your business uses accounting software like QuickBooks, NetSuite, or even a simpler platform, most have an “inactive vendor” designation that removes them from dropdown menus without erasing records. Use that feature aggressively. A clean active vendor list — one where every name is a company you might actually use in the next 90 days — makes everyone’s job easier, from the person cutting checks to whoever takes over from you someday.

How long should a proper vendor audit actually take?

For a list under 100 vendors, a thorough first-pass audit should take one dedicated person about two to three full workdays. Not two to three weeks — two to three days, if you stay focused and don’t get pulled into renegotiating contracts at the same time. The audit and the renegotiation are two separate phases. The audit tells you what you have; the cleanup and contracting work happens after.

For lists in the 100 to 300 vendor range, budget a week to ten days. Anything larger than that typically means you’re in a company with a dedicated procurement function, and the process becomes more formalized with team sign-offs and system workflows. But even in larger organizations, the core logic is the same: verify who’s real, rank by spend and risk, document what you find, and set a calendar reminder to do it again in 12 months. A vendor audit isn’t a one-time project — it’s a rhythm. The businesses that do it regularly spend less, get burned less, and spend a lot less time scrambling when a key supplier disappears without warning.