Vendor master data is the governed core information used to identify suppliers and control purchasing, invoicing and payment transactions. Many organizations use vendor and supplier master data as equivalent terms.
Which fields are included?
- Legal name and registration
- Addresses and tax identifiers
- Contacts and ordering details
- Payment terms and currency
- Verified bank accounts
- Status, category and risk flags
Why is the vendor master high risk?
False vendors, duplicate records and unauthorized bank changes can cause fraud, overpayment and distorted spend reporting. Access should be separated from invoice and payment approval.
How should records be created?
Verify legal identity, tax data, duplicate risk and account ownership; retain evidence; and require independent approval. A submitted form should not create a payable vendor automatically.
How should changes be controlled?
Use effective dates, reason codes, maker-checker approval and independent confirmation for material changes. Monitor payments soon after bank-detail updates.
How should data quality be maintained?
Review inactive, incomplete and duplicate records; expired documents; invalid contacts; and inconsistent data across systems. Preserve historical transactions when deactivating records.
