How to Vet a Supplier: A Due Diligence Checklist That Works

Learning how to vet a supplier properly is the difference between a smooth first order and an expensive lesson. A polished website, a fast reply, and a great quote tell you almost nothing about whether a supplier is who they claim to be, can actually do the work, and will still be there when something goes wrong. Vetting is the disciplined process of gathering evidence before you commit money, so that you reduce risk to a level you can live with. It is worth being honest about that goal from the start: vetting reduces risk, it does not eliminate it. No checklist guarantees quality, and no desk research replaces a sample order or, where the stakes justify it, an independent inspection.

This guide walks through a due diligence process you can actually run, from confirming the supplier exists as a real business through checking their track record and reading the risk flags that should make you slow down.

Why supplier vetting matters

The risks of skipping vetting are concrete. You can wire a deposit to a company that does not exist, receive goods that do not match the sample, or partner with a factory that quietly subcontracts your order to a third party you never approved. Each of these failures is far cheaper to prevent than to recover from. Vetting is not paranoia; it is the routine due diligence that experienced buyers run as a matter of course.

The aim is not to find a perfect supplier with zero risk, because that supplier does not exist. The aim is to gather enough evidence to make an informed decision and to know where your remaining exposure sits.

Step 1: Verify the supplier's identity

Start with the most basic question: is this a real, registered business that is who it says it is? Identity verification is the foundation everything else rests on.

• Confirm the legal company name and that it is registered in its jurisdiction.
• Check that the business address is a real location, not just a virtual office or a mismatch with the registration.
• Cross-check the bank account name against the registered company name. A request to pay a personal account or a third party is a serious warning sign.
• Confirm the contact you are dealing with actually works for the company.

Where it is available, cross-checking against business registries and trade or customs records adds independent confirmation that the company is real and actually trades in the goods it claims. This is exactly the kind of cross-check Suppliers performs as part of supplier discovery: identity verification and registry checks with the evidence surfaced so you can see it, not just take a score on faith.

Step 2: Assess capability and track record

A real company is not necessarily a capable one. The next layer is whether they can actually do your job well.

• Confirm they already make products similar to yours, not just adjacent ones.
• Ask for references from current customers and actually contact them.
• Ask how long they have been in business and how their capacity matches your order size.
• Ask directly whether they manufacture in-house or subcontract, and to whom.

References are underused. A short conversation with an existing customer reveals how the supplier communicates under pressure, whether they hit their dates, and how they handle defects. People who have shipped product through a factory will tell you things no sales deck ever will.

Step 3: Check certifications and compliance, with evidence

Many suppliers list certifications, quality standards, or test reports. The discipline here is to treat claims as claims until you see evidence. Ask for the actual certificates and test reports, check that they are current rather than expired, and confirm they cover the specific product and facility in question, not a different line.

Be especially careful with compliance that carries legal weight in your market, such as safety standards for products sold to consumers. A claimed certification that turns out to be invalid is not just a quality issue; it can become a liability issue. Surfacing certifications is valuable, but verifying that they are genuine and applicable is the part that actually protects you.

Step 4: Read the risk flags

Beyond the formal checks, certain behaviors should make you slow down and dig deeper. None of these is automatically disqualifying, but each warrants explanation.

• Reluctance to share a verifiable company address or factory photos.
• Pressure to pay quickly, pay in full upfront, or pay to a personal or third-party account.
• Prices dramatically below every other quote, which can signal corners being cut or a job being subcontracted.
• Vague or evasive answers to direct technical questions about the product.
• A product range so broad it could not plausibly come from one facility, suggesting a trading company presenting as a factory.
• Guarantees of perfect quality, which an honest supplier knows they cannot promise.

Step 5: Sample, then start small

No matter how clean the paperwork, do not skip the physical proof. Order a pre-production sample and approve it in writing against your specification. Then place a smaller first order before committing to full volume. A sample tests capability; a small first run tests the whole relationship, from communication to packaging to on-time delivery, at a scale where mistakes are affordable.

For higher-stakes orders, an independent third-party inspection before shipment is worth the cost. It is the one check that puts neutral eyes on the actual goods, and it catches problems that no amount of due diligence on the company itself would reveal.

How an AI sourcing agent supports vetting

Running all of this manually for every candidate is slow, which is why many buyers cut corners exactly where they should not. This is where an AI sourcing agent earns its place. Suppliers performs the first-pass checks for you: identity verification, registry and customs cross-checks, surfaced certifications, and risk flags, with the evidence shown so you can review it rather than trust a black box.

It is important to be clear about what this does and does not do. The platform reduces risk by doing the legwork and surfacing evidence and AI-assisted suggestions for you to verify. It does not guarantee quality, it does not conduct on-site audits, and it does not replace your judgment, your sample order, or an independent inspection. A human stays in the loop on every decision, which is exactly how vetting should work. You can run this alongside dedicated supplier management software so the evidence you gather lives with the supplier record over time.

Build vetting into a repeatable checklist

The reason vetting gets skipped is rarely that buyers do not value it. It is that doing it from scratch each time feels slow and ad hoc. The fix is to turn it into a checklist you reuse for every supplier, so the discipline is built in rather than relying on willpower under deadline pressure.

• Confirm legal registration and that the company name, address, and bank account all match.
• Verify the contact works for the company and the company actually makes products like yours.
• Collect and check certificates and test reports for currency and relevance.
• Contact at least one reference and ask about communication, deadlines, and defect handling.
• Note any risk flags and require an explanation before proceeding.
• Approve a pre-production sample in writing, then place a small first order.
• For higher-stakes orders, commission an independent pre-shipment inspection.

Run the same list every time and vetting stops being a special effort and becomes simply how you do business. Over many orders, that consistency is what protects you, because the one time you skip it is usually the time it would have mattered most.

Keep the evidence with the supplier record

Vetting is not a one-time event. Certifications expire, ownership changes, and a supplier that was reliable last year may slip this year. The value of keeping your vetting evidence attached to each supplier record is that you can revisit it on reorders, watch for changes, and avoid re-doing work you already completed. Treating supplier records as living documents, rather than a folder you open once and forget, turns vetting from a gate you pass through once into ongoing risk management.

The bottom line

Vetting a supplier is a layered process: verify who they are, confirm they can do the job, check certifications against real evidence, read the risk flags honestly, and prove the relationship with a sample and a small first order. Done well, it reduces your risk substantially. Done honestly, it never pretends to eliminate it. The buyers who avoid expensive surprises are the ones who treat vetting as routine, demand evidence rather than promises, and keep a human in the loop right through to the final call.