Vendors

Who you pay, how you pay them, and the verification that stops you paying somebody else.

Vendors in SigmaPointPi
/bills/vendors

A vendor record holds the legal name, the tax identifier, the payment details and the contacts. It is also the control point for the most expensive fraud in small business, which is a fake change to bank details.

A change to a vendor's bank account is treated as a security event. It is recorded, it requires confirmation through a channel other than the one the request arrived on, and payments to that vendor are held until it is confirmed.

Where everything sits

Vendor, Total Paid, Terms
Vendor, Total Paid, Terms
Vendor
Vendor
Sysco
Sysco
UPS
UPS
Verizon
Verizon
DoorDash
DoorDash

How to work this page

Collect the tax identifier at onboarding

A W-9 for a domestic vendor, a W-8 for a foreign one. Collecting it before the first payment avoids backup withholding and makes the 1099 straightforward.

Verify bank details out of band

Call a number you already had, not the number on the email requesting the change. This is the whole control and it takes two minutes.

Watch the payment history

Amount and cadence per vendor. A payment that breaks the pattern is worth a look before it goes.

Keep contacts current

The person who confirms a change should be somebody you have spoken to before.

On a phone

Vendors on iPhone 15 Pro Max

Every figure from the desktop appears here, stacked rather than reduced. Tables scroll inside themselves so the page never moves sideways, and figures keep their separators and their alignment at every width.

Questions people actually ask

What happens when bank details change?

The change is recorded with who made it, payments to that vendor hold, and the confirmation is required before anything releases. Nothing about this is optional.

Do I need a W-9 for every vendor?

For any unincorporated vendor you pay above the annual threshold, yes, and collecting it from everybody is simpler than deciding case by case.