WorkflowProcurement

Supplier Onboarding Orchestrator

Supplier onboarding with six agents reading, checking and screening every new supplier

Every new supplier checked and set up in days, and every bank change verified before payment.

See one case, screen by screen ↓
target6.2daysmedian from request to supplier created, against a 10-day target
demo25fieldsread from 5 supplier documents, each with the page it came from
target100%of bank changes called back on the number on file before payment
demo$186,420held on one lookalike-domain bank change, then kept on the verified account
The problem

Why a new supplier takes weeks, and why bank changes are where the money leaves

A scientist needs a GLP lab to start on study samples. Before the first purchase order, supplier enablement has to collect a W-9 or W-8BEN-E, a bank confirmation letter, a certificate of insurance, a signed Code of Conduct and a questionnaire — then match the tax ID, confirm the account belongs to the supplier, screen sanctions lists, look for the same supplier already in the master, and decide which quality, privacy, anti-bribery and cyber reviews apply.

The days go on chasing documents, reading forms and keying them into the ERP, writing back to the supplier about the one limit or signature that is wrong, and waiting on reviews. When nobody has time to read the answers, every supplier gets sent to every review. And the most expensive mistake is not in onboarding at all: an urgent email to the AP mailbox, from a domain one letter off, asking that Thursday’s payments go to a new account.

typical3–6weeksfrom request to supplier created, by hand
demo$425,980would have left on 4 bank changes stopped in 90 days
Where a new supplier’s days goestimated
By hand21 days
With the solution6 days
  • Collecting and chasing documents7 → 2 d
  • Reading forms and keying the record3 → 0.5 d
  • Tax, bank, sanctions and duplicate checks3 → 1 d
  • Risk reviews6 → 2 d
  • Approval and ERP set-up2 → 0.5 d

Estimated split for a typical new supplier, in working days, by hand and with the solution.

How it works

How a supplier moves

Six specialist agents read, verify and screen every supplier; the enablement lead approves each record.

What comes in
Documents inSupplier documents · portal or mailbox, any form
Agents at work
Document readerclassifies everything
Then
Tax & identity checker
Bank verifier
Sanctions & duplicate screener
Then
Risk trigger routeronly the reviews needed
Then
Follow-up writerone precise ask
A person decides
Enablement leadapproves; reviewers sign off
What comes out
Clean supplier record
Risk reviews signed
Bank details verified
One case, step by step

One new supplier, from documents in to a supplier number

Quillstone Analytical Labs sends its onboarding documents at 08:12. Dr. Maya Chen needs the lab for GLP bioanalysis. Here is what happens next, screen by screen, in the working solution — and the bank change held the same morning.

  1. 01Morning

    The onboarding wall: every supplier, every check

    Lena Ortiz · Supplier enablement lead

    Lena opens the solution and sees 11 suppliers in onboarding, 5 that need her, a median of 6.2 days from request to supplier created, and $240,720 of payments held on 3 open bank changes. Each supplier is a ring of seven checks — identity, tax, bank, sanctions, duplicates, insurance and Code of Conduct.

    Agents at work: “Bank verifier held CHG-318 Corvane Packaging — lookalike domain, account 11 days old.”

  2. 0208:12

    Five documents arrive through the supplier portal

    Dr. Maya Chen · Requester

    Quillstone Analytical Laboratories, Inc. sends a W-9, a bank confirmation letter from Cardinal Trust Bank, a certificate of insurance from Bluehaven Mutual, a Code of Conduct attestation signed Oct 5 and a 38-answer questionnaire. Maya’s request sits beside them: GLP bioanalysis of VLT-302 PK samples, because the current lab has no capacity before December, at an estimated $420,000 a year.

  3. 03One click

    “Run checks” — six agents read and verify

    The agents

    Lena presses Run checks. The document reader classifies the five documents and reads 25 fields. In parallel, the tax ID 84-2913377 is matched with the legal name, the bank account is confirmed as Quillstone’s own — open 6 years, not shared with any supplier or employee — and the company, its owner and its CEO are screened against OFAC, EU and UK lists.

    Each step is shown as it runs, with what it found and how long it took.

  4. 04Under a minute

    A cited supplier record, and one finding

    Risk trigger router

    The supplier record is built: legal entity, tax, bank, insurance and compliance, each value with the page it came from. One problem: the certificate shows general liability of $1,000,000 each occurrence, below the $2,000,000 minimum for lab services. Approve record stays disabled until it is resolved.

    “General liability $1,000,000 each occurrence — below the $2,000,000 minimum for lab services handling study samples.”

  5. 05Drafted

    One precise ask to the supplier

    Follow-up writer

    The follow-up writer drafts a short letter to Elena Brooks: everything checks out except one item — the insurance limit, the amount needed, and a request for a revised certificate or an umbrella policy naming Northwind Bio, Inc. as certificate holder, due Oct 9. Lena can edit anything; nothing is sent until she presses Send.

  6. 0609:24

    The revised certificate arrives, and is checked

    Document reader

    The revised certificate lands in the portal. It is read straight away — general liability $2,000,000 each occurrence, policy to Mar 31, 2027 — and the insurance check passes. The record now reads “Insurance resolved”, and Approve record is open.

  7. 07Approved

    Only the reviews the answers trigger

    Lena Ortiz · Supplier enablement lead

    Lena approves the record, and three sign-offs open. Quality goes to Sam Patel because the questionnaire says “Yes — regulated bioanalysis under GLP”; Privacy goes to Dana Okafor because of “Coded study data only — no names”. Anti-bribery and Cyber are skipped — no trigger fired. Omar Haddad gives the second approval on the bank details.

    Every review cites the answer that fired it.

  8. 08Created

    Signed, and created in the ERP

    Sam Patel, Dana Okafor, Omar Haddad

    Each reviewer signs as themselves, with an electronic signature that records meaning, name and time. With every sign-off in, Lena creates the supplier: 100-4417 in the ERP supplier master, bank details added and locked, payment terms Net 60, and Maya told the supplier is ready for a purchase order. Day 1.

  9. 09Same morning

    A bank change that looks routine, and is not

    Bank verifier

    CHG-318 came to the AP mailbox on Oct 6 at 21:14: Corvane Packaging, a supplier since 2019, “updating” its remittance details to an account at Marlowe Digital Bank. The bank verifier sets it beside the record on file and finds seven warning signs — a lookalike domain, an account in the name of CVP Trading Ltd, opened 11 days ago, in Cyprus, a new phone number and pressure to act before Thursday’s run. $186,420 of invoices are held.

    “corvane-packagng.com — one letter away from corvanepackaging.com on file.”

  10. 10Blocked

    A callback to the number on file, and the money stays put

    Lena Ortiz · Supplier enablement lead

    Lena calls Karen Doyle on +1 414 555 0187 — the number on the record, never the one in the email — and records that Corvane did not ask for any change. She blocks the request. Invoices INV-88412 and INV-88430 stay on Thursday’s run to the verified Menomonee Valley Bank account, the sender domain is blocked in the AP mailbox and the security team has the evidence.

Who it’s for

Built for everyone who touches a new supplier.

The same supplier, seen by the five people who carry it — what their week looked like, and what it looks like now.

LO
Lena OrtizSupplier enablement lead
Approves supplier records
Before
Reads every form by hand, keys it into the ERP and writes back to suppliers one problem at a time.
Now
Starts from a cited record with the findings on top and a drafted follow-up; approves when the checks pass.
OH
Omar HaddadTreasury & AP controls
Second approver · bank details
Before
Is asked to approve bank details without the request, the record on file and the warning signs side by side.
Now
Approves only after a callback by someone else, with the on-file and requested details compared line by line.
SP
Sam PatelSupplier quality lead
Quality reviews
Before
Gets every new supplier in the queue, whether or not it does GxP work.
Now
Sees only suppliers whose answers fire the Quality trigger, with the answer cited, and signs under their own name.
DO
Dana OkaforThird-party risk, Compliance
Privacy and anti-bribery reviews
Before
Hunts through questionnaires to find which suppliers touch personal data or healthcare professionals.
Now
Gets a Privacy or Anti-bribery review only when an answer triggers it, with that answer one click away.
MC
Dr. Maya ChenBioanalytical sciences
Requester
Before
Waits weeks for a lab she needs now, with no view of where her request is stuck.
Now
Sees her suppliers’ stage and days open, and is told the moment a supplier is ready for a purchase order.
Built on the engine

6 agents. Each with one job, and hard limits.

Six specialist agents read, verify and screen every supplier; the enablement lead approves each record.

Document reader

Classifies everything a supplier sends — W-9, W-8BEN-E, VAT extracts, bank letters, insurance certificates, Code of Conduct attestations, questionnaires — and reads each field with the page it came from.

  • Every field cites its source passage
  • Unreadable is reported, never guessed
Tax & identity checker

Matches the legal name and tax ID with the issuing authority, confirms EU VAT numbers and the company registry, and checks tax forms are complete and signed.

  • Never creates a supplier without a tax-ID match
  • Flags an unsigned or incomplete form with the part that is missing
Bank verifier

Confirms a bank account belongs to the supplier, checks its age, and compares every bank-change request with the record on file — domain, holder, country, phone, urgency — and holds payments.

  • The bank letter alone is never enough
  • Callbacks use only the number on the record
  • Agents hold payments; only people release them
  • Two different people approve bank details
Sanctions & duplicate screener

Screens the company, owners of 25% or more and the signing officer against OFAC, EU and UK lists, rescreens active suppliers nightly, and looks for the same supplier in the master by tax ID, bank account, name and address.

  • A possible match is a finding for a person, never an automatic block
  • Proposes extending an existing supplier instead of creating a duplicate
Risk trigger router

Applies the category rules — insurance minimums, Code of Conduct — and opens only the risk reviews a supplier’s answers trigger: Quality, Privacy, Anti-bribery, Cyber.

  • Every review cites the answer that fired it
Follow-up writer

Writes one precise ask to the supplier for exactly what is missing or wrong, with the page it comes from, sends reminders and re-runs the checks when the document arrives.

  • Sends only after a person approves
  • Never shares other suppliers’ data
  • Never includes internal rule names
Enablement lead

Approves the record. The agents propose; a named person decides.

Ask in plain words

Ask about any supplier, in plain words

Ask about any supplier, check or bank change — or tell it a rule to add. Every answer shows the page behind it.

Where is Quillstone in onboarding?

Day 1, and close. Six of seven checks passed: the tax ID matches the legal name, the bank account belongs to Quillstone, sanctions are clear. One finding: general liability is $1,000,000 against the $2,000,000 lab minimum. The follow-up is drafted — one click to send. Quality and Privacy reviews fire because of GLP work and coded study data.

Why did you hold the Corvane bank change?

Four reasons. The email came from corvane-packagng.com — one letter away from the domain on file. The new account is in the name of CVP Trading Ltd, not Corvane. The account was opened 11 days ago. And it pushes to act before Thursday’s run and gives a different phone number. Payments of $186,420 are held until you call the number on file.

Hold bank changes to accounts under 60 days old

Done. The hold rule now covers new accounts under 60 days old (it was 30). Corvane’s 11-day-old account is caught either way; Halvorsen Freight’s account is 3 months old, so it is unchanged. The rule is saved as version 1.8 in Settings and recorded on the audit trail.

Which suppliers are over the 10-day target?

Two are near or over it: Tessera Imaging Labs on day 12 and Ostrava Fine Chemicals on day 9. Both are in risk reviews, not checks. Tessera waits on Sam Patel and Dana Okafor; Ostrava has a Quality audit booked Oct 14.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Onboarding wallEvery supplier in onboarding as a ring of seven checks, payments held on bank changes, follow-ups out and what the agents did today.
Documents inWhat the supplier sent, the request behind it, and the agents ready to read and verify — the W-9 open beside them.
Agents at workSix agents run in view: documents read, tax ID matched, bank ownership confirmed, sanctions and duplicates screened, reviews decided.
The cited supplier record25 fields, each with its page and a confidence — the insurance finding on top, the certificate open beside it.
The follow-upOne numbered ask per finding, drafted from the findings and editable before it is sent.
Finding resolvedThe revised certificate read on arrival and the insurance check re-run — the record ready for approval.
Risk reviewsOnly the reviews a supplier’s answers trigger, each with the answer cited, plus the second approval on bank details.
Reviewer sign-offThe named reviewer signs with an electronic signature that records meaning, name and time.
Supplier createdEvery sign-off in, the supplier created in the ERP supplier master with its number, every field still cited.
Bank-change reviewThe request, the bank letter and the record on file side by side, with every warning sign and the payments held.
Change blockedAfter a callback to the number on file, the change is blocked and the invoices stay on the verified account.
The onboarding dashboardDays to create, where the days go by category, reviews triggered and why we went back to suppliers.
Your rulesApprovers, insurance minimums, the bank-change hold, sanctions lists and review triggers — every change a new version.
Governance

Built for controls: cited, two-person, on the record.

Every field cites its pageEach value in the supplier record, each finding and each answer links to the passage of the W-9, bank letter, certificate or questionnaire it came from.
Agents propose, people approveThe agents read, check and propose. Only people approve supplier records, bank details and changes — and the follow-up goes to the supplier only when someone sends it.
Two different people on bank detailsThe person who approves the record or records the callback cannot give the second approval. Bank details are locked in the ERP once the supplier is created.
Callbacks to the number on fileEvery bank change is called back on the number already on the supplier record — never one from the request — and recorded with name and time.
Payments held while a change is openInvoices to that supplier leave the payment run until two people decide. A “did not request it” callback blocks the change and alerts security.
Rules versioned, every step on the trailEvery rule change is saved as a new version; the agents apply version 1.7, approved by Lena Ortiz on Sep 30. Every agent step and every human decision is on the activity trail.
Configuration

Your onboarding rules, not ours

Approvers, insurance minimums, hold rules, sanctions lists and review triggers are settings. Every change is saved as a new version.

SettingDefaultChoose from
Approve supplier recordsLena OrtizLena Ortiz · Ines Duarte
Second approver for bank detailsOmar HaddadOmar Haddad · Dana Okafor
Minimum general liability · lab services$2,000,000$1,000,000 · $2,000,000 · $5,000,000
Hold bank changes to new accountsUnder 30 daysUnder 30 · 60 · 90 days
Sanctions listsOFAC + EU + UKOFAC + EU + UK · OFAC + EU + UK + UN
Tax ID must match before a supplier is createdOnOn · Off
Check employee bank accounts for matchesOnOn · Off
Send every supplier to every reviewOffOn · Off
Connections

Works with the systems you already run

Supplier portaldocuments checked the moment a supplier presses Submit
Supplier and AP mailboxesattachments filed to the right supplier; bank-change emails held
ERP supplier masterduplicate search, and the new supplier created with bank details locked
Tax and registry checkstax-ID match, EU VAT register, company registries
Bank account validationaccount ownership and age, never from the letter alone
Sanctions screeningOFAC, EU and UK lists, rescreened nightly
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
6.2days
median from request to supplier created, against a 10-day target
By hand3–6 weeks
With agents6.2 days
target
39%
of new suppliers cleared with no extra risk review
no review needed · last 30 days
target
100%
of bank changes called back on the number on file before payment
71 of 71 in the last 90 days

“demo” = seen in the working solution, on its sample supplier data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published supplier-onboarding studies (2025) — 3–6 weeks from request to supplier created by hand. People and companies named on this page are characters in the working solution.

Questions

What procurement and AP teams ask us.

What is supplier onboarding software?

Software that takes a new supplier from the first request, through collecting and checking its tax, bank, insurance and compliance documents, to an approved record in the ERP supplier master. The Supplier Onboarding Orchestrator adds six agents that read the documents, run the checks, decide which risk reviews apply and draft the follow-up to the supplier.

How does it stop bank change fraud?

Every request to change bank details opens a review and holds payments to that supplier. The bank verifier compares the request with the record on file — sender domain, account holder, country, phone and account age — and a person calls back on the number already on the record. A different person gives the second approval; a “did not request it” callback blocks the change.

Does it check tax IDs and sanctions?

Yes. For US suppliers the name and tax ID on the W-9 are matched with the tax authority; EU VAT numbers are confirmed in the EU VAT register. The company, owners of 25% or more and the signing officer are screened against OFAC, EU and UK lists, and active suppliers are rescreened nightly.

Will it catch duplicate suppliers?

It searches the supplier master for the same tax ID, bank account, name or address. When a request matches an existing supplier — such as a renamed company — it proposes extending that supplier instead of creating a second one. It also checks new bank accounts against employee payroll accounts.

Does every supplier go through every risk review?

No. Quality, Privacy, Anti-bribery and Cyber reviews open only when a questionnaire answer triggers them, and each review cites the answer that fired it. In the working solution, 39% of suppliers created in the last 30 days needed no risk review at all.

Do people stay in control?

Yes. The agents read, check and propose; only people approve supplier records, bank details and changes. Follow-ups go to suppliers only when someone sends them, and every agent step and human decision is on the activity trail.

Can we set our own rules and approvers?

Yes. Who approves records, the second approver for bank details, reviewers, insurance minimums by category, the hold rule for new accounts and the sanctions lists are all settings. You can also add a rule in one sentence; it becomes a check for your approval, saved as a new version.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements — your onboarding policy, insurance minimums, questionnaire and a sample of past supplier documents — and it goes live once every quality gate has passed. We will walk you through it on your own suppliers first.

See it on
your suppliers.

We’ll run Supplier Onboarding on a sample of your own supplier documents and bank-change requests.