/ THE SHORT ANSWER
- 01Separate legal identity from bank-account verification.
- 02Match public-register results to the contracting entity.
- 03Create distinct permissions for orders, deliveries and payments.
- 04Treat changed payment details as a new controlled event.
/ dotSuper point of view
Supplier onboarding works better as several explicit permissions than as one universal verified status.
Give each check a precise question
It can be technically capable while its payment instructions require further confirmation.
Those are separate judgements.
Companies House provides access to company information such as registered details and filings.[
1] Use it to resolve the legal entity you intend to contract with, then retain the company number and the date of the lookup.
HMRC's service checks a supplied UK VAT number and returns the associated business name and address.[
2] Reconcile those details with the onboarding evidence.
Do not infer a VAT number from a similar trading name.
Make each check answer a written question.
Is this the contracting company?
Is this the tax identity on the invoice?
Who has authority to confirm a bank change?
A green tick without its question invites misuse.
Keep the trading name without losing the entity
A buyer may recognise the salesperson while the accounts team encounters a different legal name on the invoice.
Store the trading name as an alias, not as a replacement for the contracting entity.
Keep delivery locations and billing addresses separate.
The factory dispatching goods may not be the company entitled to invoice.
When an entity changes, ask whether the commercial agreement changes too.
An administrator should not silently overwrite the old company number because the supplier asks for a revised header.
AI can flag inconsistent spellings and suggest candidate matches.
Require a reviewer to select the actual entity and attach the supporting evidence.
A model's ability to find a plausible company quickly is not confirmation of the relationship.
Follow a hypothetical emergency purchase
Procurement knows a local distributor, but the invoice arrives from a similarly named limited company with unfamiliar bank details.
The buyer creates a provisional record and confirms the contracting entity.
Quality checks the required bearing specification.
Finance contacts an established supplier contact through a previously known route to confirm the payment instructions.
The system can show that technical approval is complete while payment approval remains open.
That prevents an urgent delivery decision from silently granting permission to transfer money.
Suppose the purchase is GBP 1,800 and the same supplier later requests a GBP 24,000 order.
The larger commitment should trigger the company's relevant approval rule, even though the initial entity checks remain usable.
Separate permissions in the master record
These are suggested controls for this workflow, rather than statutory categories.
Keep them simple enough for a small team to administer.
Allow a provisional supplier to exist without appearing in every automated purchasing rule.
Otherwise, the act of collecting information can accidentally enable an unreviewed supplier for repeated orders.
Keep an audit record when an approver changes a permission.
Include the previous state, the evidence and the reason.
Record a deliberate exception as an exception, with a scope and expiry appropriate to the circumstance.
Do not demand identical evidence for every supplier.
A low-value office service and a source of safety-critical components need different technical scrutiny.
The payment-change control can remain consistent even when the purchasing assessment varies.
| Permission | Evidence | Approver |
|---|---|---|
| Create provisional supplier | Legal name and contact provenance | Procurement administrator |
| Issue purchase order | Commercial and technical approval | Purchasing owner |
| Receive controlled material | Specification and traceability requirements | Quality owner |
| Release first payment | Verified payment instructions | Finance approver |
| Change bank details | Independent confirmation record | Separate finance reviewer |
Make changed details a visible event
Preserve the old record and the communication that initiated the request.
Do not let an extracted invoice automatically replace an approved payment instruction.
Use a contact route already held in trusted records where possible.
Confirm the change independently of the incoming request.
Avoid sending the verification question only to the address that supplied the new details.
The failure case is usually a process shortcut: a convincing message reaches someone busy, who updates the master record because the supplier already appears approved.
Separate permissions make that shortcut harder to overlook.
Plan what happens when the usual verifier is absent.
A named deputy and an explicit hold state are more dependable than an urgent informal approval sent through a personal messaging account.
Review the supplier as the relationship changes
A calendar review alone may miss the event that matters.
Measure incomplete onboarding records, time spent resolving mismatches and the proportion of changes with supporting evidence.
Avoid claiming that a high completion score means the supply chain is fraud-free or commercially reliable.
Start by reviewing one new supplier and one recent bank change.
Ask a colleague outside procurement to explain which actions each record permits and why.
Confusion identifies fields or approvals that need clearer definitions.
The deliverable is a supplier record that tells finance, purchasing and quality different useful things.
Public registers remain part of the evidence, while operational authority stays with the people accountable for the relationship.
What this page cannot conclude
- 01Public-register evidence does not establish creditworthiness, technical capability or bank-account ownership.
- 02The proposed controls require adaptation to supplier risk, contractual arrangements and finance policies.
- 03This article was researched and drafted with AI assistance. Sources and limitations are provided for scrutiny; it is not an independent professional review or a compliance certification.
Sources
- 01Get information about a companyCompanies House · accessed Sep 15, 2026
- 02Check a UK VAT numberHM Revenue & Customs · accessed Sep 15, 2026
This article was researched and drafted with AI assistance. Sources and limitations are provided for scrutiny; it is not an independent professional review or a compliance certification.
Our editorial standard · Found an error? Send a correction with its source.
/ CITE OR SHARE THIS GUIDE
Make the evidence easy to verify.
When you reference this guide, link to its canonical URL. That gives readers one stable place for the evidence, limitations and future updates.
dotSuper Research Desk. (September 15, 2026). A Supplier Record Needs More Than Companies House. dotSuper. https://dotsuper.net/feeds/applied-systems/uk-supplier-onboarding-company-vat-bank-controls