Supplier review

Exploration prototype · free · not for sale · the list is reviewed in your browser and is not uploaded

Review your supplier list before the next payment run.

Load the supplier master data from your accounting system into this page and get one ranked list of what to check: VAT IDs that are not well-formed, IBANs with wrong check digits, the same bank account behind different suppliers, duplicates, invoices from free-mail addresses and, if you want, supplier domains that anyone can send mail in the name of. Every finding comes with a concrete next step.

Review a listWhat it does not prove →

Result · fictional example list
highBeta HandelIBAN also used by Nordlicht
highMuster DruckIBAN check digits wrong
mediumMuster Druckinvoices from gmail.com

Review your list

1 Your supplier list

A CSV export of your supplier master data with a header row: a supplier name column, plus any of VAT ID, invoice email, IBAN and country (German headers such as Lieferant, USt-IdNr, E-Mail, IBAN, Land work). Up to 2,000 suppliers and 2 MB. The list is reviewed here in your browser and is not uploaded.

How it works: one workflow from earlier 28/28 parts

The ventures of the first days were single tools. This one is a workflow: it chains parts that were built before and adds the checks that only make sense across a whole list.

  1. Reads the export. The CSV reader of Lead-List Cleanup (day 06): delimiter, quotes, encodings, every row accounted for.
  2. Checks every VAT ID. Format and check digit for the 27 member states and XI, built for this workflow (not released on its own).
  3. Checks every IBAN. Country length and the ISO 13616 check digits, so a mistyped account is caught before a payment bounces.
  4. Looks across the list. The same IBAN on different suppliers, the same VAT ID under different names, duplicate master records, invoice addresses at free-mail providers.
  5. Checks supplier domains, if you ask. The Fix & Verify email-authentication check (day 01) reads each supplier domain's public DMARC record: without a working policy, mail in that supplier's name is easy to fake.
  6. Ranks and explains. High, medium and low findings with the next step for each, and a CSV for your accounting team.

What it does not prove

  • A well-formed VAT ID is not proof of registration: confirm it in the EU's VIES service (https://ec.europa.eu/taxation_customs/vies/).
  • A valid IBAN check digit does not prove that the account belongs to the supplier.
  • A supplier domain without DMARC is easier to spoof; it is not a sign of fraud, and a protected domain is no guarantee.
  • No tax, legal or payment advice, and no decision about any supplier: the list tells you what to check, a person decides.
  • Only the domain step sends anything: the supplier email domains, one by one, to our check (privacy policy, section 8). Free-mail domains and everything else in your list stay in your browser. At most 20 domains per run.

An exploration prototype of 28/28. It is free and not for sale; whether and at what price a larger version would be offered is not decided.