What it means
The words vendor and supplier are used interchangeably in most businesses, though vendor is more common in software, retail and procurement contexts. Whatever the label, a vendor relationship is a contract with agreed prices, delivery expectations and payment terms.
Vendors matter far more than their administrative image suggests, because they usually account for a large share of total spending and they carry risk into your operations. A single vendor failure can stop production, breach a customer commitment or expose confidential data.
Managing them well means keeping a clean master list, agreeing payment terms deliberately rather than accepting whatever appears on the invoice, and measuring performance on quality, delivery reliability and responsiveness. Most finance teams also monitor vendor concentration, which measures how much of total spending flows through any one supplier.
Concentration matters in both directions, since a dominant vendor has pricing power over you while a fragmented base costs more to administer and forfeits volume discounts. A common target is to keep any single vendor below roughly 20% to 30% of category spend unless there is a clear reason otherwise.
Vendor master data is also a well-known fraud risk, because a fake vendor record with a real bank account is one of the simplest ways money leaves a business unnoticed. Separating the ability to create a vendor from the ability to approve a payment is the standard control.
Larger organisations formalise all of this into vendor onboarding, with checks on financial stability, insurance, data protection and, increasingly, sustainability credentials. Smaller businesses rarely need that machinery, but even a one page checklist before a new supplier is set up prevents most of the problems that later require a lawyer.
In practice
Real-world examples.
Example
A restaurant group reviews its vendor list and finds 340 active accounts, half of which were used once. Consolidating produce buying into two vendors earns a 6% volume discount and cuts invoice processing time substantially.
Example
A software company discovers that a single cloud vendor hosts every part of its product. It adds a secondary region with a different provider for its most critical service, accepting higher cost in exchange for continuity.
Example
A manufacturer's payables team receives an email asking to update a long-standing vendor's bank details. The control requiring a callback to a previously verified phone number stops a $190,000 fraudulent payment.
Formula
Calculation
Vendor concentration = Spend with one vendor / Total procurement spend.
A distribution business spends $8,000,000 a year with outside suppliers. Its largest vendor, a packaging manufacturer, accounts for $2,400,000 of that, so concentration is $2,400,000 / $8,000,000 = 0.30, or 30%. Adding the next two vendors at $1,200,000 and $800,000 gives top three spend of $2,400,000 + $1,200,000 + $800,000 = $4,400,000, which is $4,400,000 / $8,000,000 = 55% of all procurement spend running through three relationships. If the largest vendor raised prices by 5%, the annual cost increase would be $2,400,000 x 0.05 = $120,000, and on a business earning $900,000 of operating profit that single increase would remove more than 13% of profit.Case study
Seen in the real world.
Halbrook Medical is a fictional device assembler used here as an illustrative example. It bought a specialised polymer housing from one vendor that had served it well for eight years, representing $1,900,000 of its $6,000,000 annual spend, or about 32%.
When that vendor was acquired in this illustrative scenario, the new owner raised prices by 14% and extended lead times from four weeks to eleven. Halbrook had no alternative qualified source, and requalifying a new supplier for a medical device took nine months, so it paid the increase, adding roughly $266,000 of annual cost.
The lesson the illustrative company drew was to qualify a second source for every component representing more than 10% of spend, even where it never intended to place volume there. Carrying that dormant capability cost about $40,000 a year in qualification work and removed a risk that had already cost it more than six times that amount in a single year.
Watch out
Common mistakes.
- Treating vendor management as a purely administrative task, when supplier choice affects product quality, cash flow and operational risk.
- Letting the vendor master file grow unchecked with duplicates and dormant records, which weakens controls and hides fraud.
- Choosing purely on unit price and ignoring lead time, defect rates and payment terms, which often cost more than the price difference.
Questions
People also ask.
Is a vendor the same as a supplier?
In everyday business use they mean the same thing, although vendor is more common in technology and procurement and supplier in manufacturing.
What is vendor concentration risk?
It is the exposure created when too much of your spending or capability depends on one supplier, so that its failure or price rise directly damages your business.
How should vendor payment terms be set?
Negotiate them explicitly as part of the contract, balancing your own cash conversion cycle against the discounts a supplier will give for faster payment.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%