What it means
A business may need assurance that a supplier can legally and safely provide a product or service. Collecting a PDF is only the first step.
A certificate can be expired, issued to another entity or cover a different activity, so a review matches the document to the supplier, requirement and intended contract. Set requirements by risk, since a catering supplier, software processor and cleaning contractor need different evidence.
Request only what is needed and protect sensitive records. Explain which documents are mandatory before award, which can follow later and who has authority to accept a justified exception.
Check names, registration numbers, issue and expiry dates, scope, issuer and any conditions. Where a current public register or issuing body is available, verify it there for load-bearing claims.
A screenshot of an old licence or a file name saying "valid" is not sufficient evidence of present validity. Some certification schemes offer verification records showing whether a certificate is active, suspended, withdrawn or expired, and absence from one database needs follow-up, not an automatic fraud conclusion.
Record the result and reviewer by marking a requirement accepted, rejected, awaiting clarification or approved as an exception, with a reason and review date. Do not silently replace a previous document or delete the trail, and if a supplier changes legal entity, location or service scope, reassess whether old evidence still applies.
Keep time in view, because a document valid at onboarding may expire during the contract. A tracker should remind owners ahead of renewal and restrict work where a required document lapses under policy or law.
Review frequency can reflect risk, not a one-size-fits-all annual ritual. For managers, this is a decision process.
The goal is to know whether a vendor meets the requirements for the actual work, not to assemble the largest possible folder. A short written reason for each decision lets a later reviewer see why the evidence was accepted.
In practice
Real-world examples.
Example
A facilities buyer checks that a contractor's insurance certificate names the company signing the contract and covers the type of work planned. The reviewer also checks the policy period against the contract term. A certificate naming a sister company is returned for correction.
Example
A food retailer reviews an ingredient supplier's current product specification and asks about a changed manufacturing site. The specification matches the old plant, so the buyer requests updated evidence. The new site's documents are reviewed before the next order is released.
Example
A software buyer receives a security policy but requests evidence for the specific data service it intends to buy. The policy covers the vendor's corporate systems only. The reviewer asks for a report or certificate that names the product and the hosting environment.
Formula
Calculation
Document review completion rate = Required documents accepted for the scoped supplier work / Required documents identified for that work x 100
Worked example. A fictional vendor needs ten documents for a contract. Seven are accepted, two are under clarification and one is missing.
- Accepted completion rate = 7 / 10 x 100 = 70%.
- A file count of nine uploaded documents would give a misleading 90%; uploaded does not mean accepted.
Critical requirements may block work even if the overall completion rate is high. Suppose 4 of the 10 documents are critical, such as insurance and a safety permit, and only 3 of those 4 are accepted. The critical completion rate is 3 / 4 x 100 = 75%, so work stays on hold even though the overall figure is 70% and other items may be nearly complete.Case study
Seen in the real world.
This illustrative and entirely fictional example follows Elm Facilities, an invented building-services buyer. It had a supplier folder labelled complete because every checklist row contained an attachment. A site manager later noticed the insurance certificate belonged to a sister company and excluded the specialist cleaning work being ordered. Elm paused the affected assignment, contacted the established supplier representative and asked for current evidence covering the correct entity and scope.
It recorded the exception, owner and decision rather than quietly replacing the old file. The buyer also reviewed other active contracts with similar work. The company changed the checklist to record document assessment, not only upload. It connected expiry reminders to contract owners so valid evidence stayed current throughout the work.
Elm checks the issuer's current record where available and keeps the verification date with its documented assessment and reviewer. If no public lookup exists, it contacts the issuer through an independently sourced route. The file attachment remains evidence to assess, not a substitute for checking the correct legal entity, activity and current scope.
Watch out
Common mistakes.
- Treating the presence of a file as proof that it is current and covers the right legal entity and activity.
- Reusing one generic checklist for every supplier while missing role-specific risks and requirements.
- Forgetting to review expiry or scope changes after onboarding is complete.
Questions
People also ask.
Does every supplier need the same documents?
No. Match requirements to the work, contract and current law or policy. Avoid collecting unnecessary sensitive information.
Can an exception be approved?
Sometimes, by the proper authority with a documented reason and limits. Some legal or safety requirements cannot be waived internally.
Is a document review the same as a supplier audit?
No. A document review assesses submitted evidence; an audit may examine actual operations and controls more deeply.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%