Vendor Due Diligence Checklist for Indian Companies

Vendor Onboarding · Due Diligence

Updated for 2026 · Claw Editorial

Onboarding a vendor without checking who they really are, what shape their finances are in, and whether they carry hidden legal or compliance baggage is one of the most common ways Indian companies end up in a dispute, a fraud, or a compliance notice months later. This checklist walks through what to verify before you sign, in what order, and where to check it, so due diligence is a repeatable process and not a last-minute box you tick.

01Why vendor due diligence matters in India

Vendor due diligence means checking a supplier, contractor, or service provider before you bring them on board, so you know who you are actually doing business with. In India, skipping this step or doing it half heartedly is a common and expensive mistake, for three reasons.

Shell entities and mismatched identities are common

A vendor can look legitimate on a letterhead and a website while the underlying company is newly registered, has no real operating history, or is not even the entity signing the contract. Without checking the Corporate Identification Number (CIN), PAN, and GST registration against official records, a company can end up contracting with an entity that cannot be traced or held accountable later.

Hidden litigation and disputes surface late

A vendor can be involved in ongoing litigation, cheque bounce cases, insolvency proceedings, or disputes with other clients, none of which show up in a standard KYC form. Many Indian companies only discover this after a payment default or a contract dispute, when it is too late to have priced in the risk.

Regulatory non-compliance becomes your problem too

If a vendor is not GST compliant, does not have the licenses its business requires, or is not meeting labour law obligations for its workforce, that exposure can flow back to the company that engaged them, through denied input tax credit, contractual liability, or reputational fallout.

02What a complete checklist covers

A due diligence checklist that actually protects a company covers five areas. Skipping any one of them leaves a gap.

• Identity and incorporation: confirming the vendor is a real, validly registered entity, and that the person signing has the authority to do so.
• Financial health: whether the vendor can actually deliver and survive the length of the contract, not just whether it looks solvent on paper.
• Legal and litigation exposure: whether the vendor or its directors carry pending cases, defaults, or insolvency proceedings that could affect the relationship.
• Regulatory and licensing compliance: whether the vendor holds and maintains the registrations and licenses its business requires.
• Reputation and references: how the vendor has actually performed for other clients, and whether it appears on any blacklist.

The most expensive vendor mistakes are rarely about price. They are about onboarding an entity whose legal, financial, or compliance problems only surface after the contract is signed.

03The vendor due diligence checklist

1. Verify identity and incorporation

Start with the basics: confirm the vendor’s legal name, Corporate Identification Number (CIN) or LLP Identification Number, registered address, and date of incorporation on the Ministry of Corporate Affairs (MCA) portal. Cross check the PAN and GST Identification Number (GSTIN) against the entity name. Confirm that the individual signing the contract actually has the authority to bind the company, usually a board resolution or a power of attorney for larger contracts.

2. Check GST and tax compliance

An inactive or cancelled GSTIN, or a pattern of late filings, is a warning sign and can also mean the buyer loses input tax credit on invoices from that vendor. The GST portal shows GSTIN status and filing frequency, and this check takes only a few minutes but is skipped surprisingly often.

3. Assess financial health

For any vendor that matters to the business, ask for recent financial statements, a bank reference, and where relevant a credit rating or a trade reference from an existing client. For high-value or long-term contracts, a vendor’s ability to survive the contract term financially is often a bigger risk than anything in the contract wording itself.

4. Check litigation history and legal disputes

Search whether the vendor entity, and where relevant its promoters or directors, appear in pending litigation, cheque bounce cases under Section 138 of the Negotiable Instruments Act, arbitration references, or insolvency proceedings before the National Company Law Tribunal (NCLT). This is covered in depth in the next section, since it deserves its own process.

5. Confirm regulatory licenses and registrations

Depending on the vendor’s sector, check for the specific licenses its business needs, for example FSSAI registration for a food supplier, an Import Export Code for a vendor handling cross-border shipments, or labour law registrations such as EPF and ESIC for a vendor supplying manpower. A vendor missing a mandatory license is a compliance risk that can pass through to the company engaging it.

6. Run reputational and reference checks

Speak to at least one or two existing or past clients of the vendor. Check whether the vendor appears on any government blacklist or debarment list for public procurement, and do a basic search for adverse news coverage. None of this replaces the formal checks above, but it often surfaces practical issues, like delivery delays or service quality, that official records will not show.

7. Build protective clauses into the contract

Due diligence findings should shape the contract itself: representations and warranties on the vendor’s compliance status, indemnity for undisclosed litigation, audit rights, and a termination for cause clause tied to any material misrepresentation discovered later.

04Litigation and court-record checks, in more depth

Checking a vendor’s litigation history deserves its own step because it is the part most companies skip, mainly because it used to be slow. It means searching court records to see whether the vendor entity, or the individuals behind it, are named as a party in pending or past cases across Indian courts, and checking for insolvency filings and cheque dishonour cases specifically, since both are common early warning signs for a business under financial stress.

This is a distinct process with its own steps and tools, covered fully in how to do litigation due diligence on a vendor in India and, for the general method, in how to do litigation due diligence. For background on searching court records specifically to verify a company or its directors, see company background verification using court records. If you are comparing tools for this step, the best litigation due diligence software in India covers the options.

05Checklist at a glance

06Common mistakes to avoid

• Treating due diligence as a one-time form: a vendor that was clean at onboarding can pick up litigation or GST issues later. Due diligence is a process, not a single form filled once.
• Only checking the entity, not the people behind it: a company can be newly incorporated specifically to avoid an adverse track record attached to its promoters or directors. Checking the individuals matters as much as checking the entity.
• Skipping litigation checks because they seem slow: this used to be a fair reason, since manually searching multiple courts took days. AI-based case search tools have made this step much faster, so there is less excuse to skip it.
• Not tying findings back into the contract: due diligence that does not translate into representations, warranties, and indemnity clauses in the contract has limited protective value if something goes wrong later.

07How often to redo due diligence

Due diligence should not stop at onboarding. For vendors handling significant value, sensitive data, or long-term contracts, repeat the identity, GST, and litigation checks at least once a year, and immediately if the vendor misses a delivery, delays payment-related communication, or a payment dispute arises. A vendor’s financial and legal position can change quickly, and the whole point of due diligence is to catch that change before it becomes the company’s problem.

08Where Claw fits

Claw is an all-in-one legaltech platform for Indian advocates, law firms, and corporate legal teams, combining AI-based case search, an AI legal assistant (Legal GPT), case management, and compliance automation across all Indian courts and tribunals.

Most of this checklist, identity verification, GST status, financial references, and licensing, sits outside what a legal case-search platform does, and is best handled through the MCA and GST portals and the vendor’s own documents. Where Claw is directly useful is the litigation and court-record piece of the checklist: its AI-based case search covers judgements across 25 High Courts (1980 to 2026) and the Supreme Court (1950 to 2026), so a legal or compliance team can search whether a vendor entity, or the individuals behind it, are named in pending or past cases in a few seconds instead of searching court by court. For a company that already runs ongoing vendor contracts, Claw’s case management also helps track any dispute that does arise with a vendor after onboarding, alongside the rest of the company’s litigation. This does not replace the financial and regulatory checks above, but it removes the biggest reason litigation checks get skipped, which is that they used to be slow.

09Sources and further reading

Official sources for the checks referenced above:

• Ministry of Corporate Affairs (company incorporation records): mca.gov.in
• GST portal (GSTIN status and filing): gst.gov.in
• e-Courts services (case status across Indian courts): services.ecourts.gov.in
• Claw: clawlaw.in

This checklist is a general guide and not legal advice. Confirm the exact registrations and licenses required for your industry with a qualified professional.

10Frequently asked questions