Vendor and Supplier Management, Handled by Someone Who Has Run It

Start with an honest supplier register

A supplier register is not a spreadsheet someone made once. It is a living record of who you buy from, what you buy, which contract governs it, who inside your company owns the relationship and when the next decision falls due. Without it, every review starts from scratch and every renewal arrives as a surprise.

The first pass is usually uncomfortable. You will find suppliers nobody can explain, duplicate vendors serving the same need under slightly different names, and contracts that expired months ago while the work quietly continued. That is normal, and it is better known than unknown, because each of those findings is a decision your team can now make.

Keep the register small enough to stay true. A handful of fields maintained weekly beats forty columns nobody updates. Assign one owner per supplier and one owner for the register itself, and the rest follows. The brief should also name who decides, what must be true before a shortlist, and what would make you stop.

Evaluate suppliers before you commit

Due diligence is often skipped when a supplier is recommended internally or already known to someone senior. That shortcut is exactly where risk enters. A short, consistent assessment on capability, financial stability, documentation and dependency gives you a defensible basis for the decision, and a record you can show later.

The depth should match the exposure. A supplier providing a small, easily replaced service needs less scrutiny than one holding your customer data or supplying a component only they make. Write the criteria down so the same standard applies to everyone, including the supplier your founder likes.

Documentation matters here. Registration papers, tax details, insurance and any certifications should be current and stored where the team can find them. When an audit arrives, the file should already exist rather than being assembled under pressure.

Finally, record the decision and its reasoning. Six months later, someone will ask why this supplier was chosen, and a written note answers that question without a meeting. The brief should also name who decides, what must be true before a shortlist, and what would make you stop.

Track contracts and renewal dates

Contract tracking is the cheapest risk control available and the most commonly neglected. Every agreement has dates, obligations and clauses that change what you pay or owe. Those facts need a home with a reminder attached, and a person who checks it.

A simple tracker with the start date, end date, notice period, price terms and owner covers most needs. Add a review date a few weeks before the notice window, not on the final day, so there is room to think and room to renegotiate rather than accept.

Price clauses deserve particular attention. Index-linked increases, minimum volumes and auto renewal language all cost money quietly. The specialist reads these and flags them early enough for your team to act. The brief should also name who decides, what must be true before a shortlist, and what would make you stop. The brief should also name who decides, what must be true before a shortlist, and what would make you stop.

Measure performance on a fixed rhythm

Supplier performance drifts when nobody is looking. Delivery slips a day, then a week, and the relationship absorbs it until a customer notices. A fixed review rhythm stops that drift from becoming normal, and it gives both sides a date they can prepare for.

Keep the measures few and agreed in advance. On-time delivery, quality or rework, responsiveness on issues and accuracy of documentation cover most supplier relationships. What matters is that both sides know the measures and the review date, and that the numbers come from the same source.

The review itself should produce a written outcome: what improved, what did not, and what happens next. Without that record, the meeting becomes a conversation that neither side can act on, and the same issues return at the next review.

Escalation needs a route. When a supplier misses repeatedly, someone must know who to call, what the contract allows and when the relationship moves to exit planning. The brief should also name who decides, what must be true before a shortlist, and what would make you stop.

Watch risk and concentration

Some supplier risk is obvious, like a vendor facing insolvency. Most is structural. If one supplier holds most of a category, or one component comes from a single source, you carry a continuity risk that no amount of good relationship management removes.

Name those risks explicitly and give each an owner. Concentration, compliance gaps, undocumented subcontracting and geographic dependency are the usual candidates. The register and contract tracker give you the evidence to name them properly rather than describing them as a general worry.

Compliance documentation needs a review cadence of its own. Certifications expire, insurance lapses and statutory registrations change. Tracking those dates alongside contract renewals keeps the two problems from arriving together, which is when they are hardest to handle.

Report risk upward in plain language. Leadership does not need a dashboard; it needs to know which three things could stop the business and what is being done about each. The brief should also name who decides, what must be true before a shortlist, and what would make you stop.

Plan exits before you need them

The best moment to plan a supplier exit is while the relationship is still healthy. Once a dispute starts, options narrow and the transition becomes urgent, expensive and poorly documented. Planning early is not pessimism; it is the cheapest form of leverage you will have.

An exit plan covers notice periods, knowledge transfer, data return, outstanding obligations and alternate sourcing. Most of this information already exists in the contract and the register; the work is assembling it before it is needed, and confirming who inside your team will run the transition.

Alternate sourcing deserves early attention. Qualifying a second supplier takes time, and the point of doing it early is that you are not negotiating from a position of need. Even a rough shortlist of two names changes the conversation.

When the exit happens, document it. Close the contract, update the register, archive the files and note what was learned. That record improves the next supplier decision and gives the team something to work from. The brief should also name who decides, what must be true before a shortlist, and what would make you stop.

Conclusion

The engagement is unglamorous work that prevents expensive surprises. A current register, honest due diligence, tracked contracts, a fixed review rhythm and a named risk owner cover most of it. Where your team lacks the time or the owner, a specialist can carry the operational load while commercial and legal decisions stay with you.