BEST PRACTICES
Published Apr 2026
5 min read

Vendor master hygiene: the unglamorous fix with the fastest payback

A dirty vendor master costs more than most finance teams realise. Here's what to look for and how to fix it.

THE TAKEAWAY
Duplicate and dormant vendor records drive duplicate-payment and fraud risk; a one-time clean-up delivers fast, measurable gains in AP accuracy and audit readiness.

Vendor master hygiene is not glamorous. It doesn't make it onto project roadmaps or feature in system reviews. It gets attention only when something goes wrong — a duplicate payment, a failed audit, a vendor complaint about a payment to the wrong bank account. By then the cost of the problem has already landed.

The most common vendor master problem is duplicates. Duplicate vendor records accumulate because the path of least resistance when a new vendor appears is to create a new record rather than search for an existing one. A supplier who trades under three names — their registered legal entity, their trading name, and the name on their invoices — will often have three records, each with different banking details and coding defaults. The result is payment confusion, duplicate payment risk, and an inconsistent coding history that makes analysis unreliable.

Inactive vendors with active bank details are a separate risk. Vendors who no longer trade with you should be inactivated, not just ignored. Active vendor records with live payment information that no one monitors are an obvious fraud vector — a change to banking details on a dormant record might not be caught because no one is looking at that vendor.

Missing or expired compliance documents are the third category. Many organisations require W-9 or tax identification from vendors, insurance certificates from contractors, and VAT numbers from overseas suppliers. These requirements are enforced at onboarding and forgotten at renewal. A vendor who has been in your system for three years may have an expired certificate that no one has noticed because the document was uploaded once and never tracked for expiry.

The remediation approach is the same regardless of scale: export the full vendor master, apply a deduplication pass based on registration number, bank account, and address similarity, inactivate records with no transactions in the past 24 months after a confirmation check, and build a process for ongoing maintenance. The Vendor Portal addresses the root cause by structuring the process that creates and maintains vendor records — but even without it, a one-time clean-up has immediate and measurable impact on AP accuracy and audit readiness.

WRITTEN BY
Sitaram Upadhya
Founder, SuitePeak · Principal NetSuite Consultant
RELATED ON SUITEPEAK
← PREVIOUS
The role-and-permission review every CFO should commission annually
NEXT →
Month-end close: a 5-day blueprint for NetSuite teams