← Blog
Educational · Updated 8 November 2025 · 19 min read · By IQInvoice Finance Team

Vendor Compliance Under GST: A Guide for Finance Teams

Practical frameworks for GST vendor compliance - onboarding, monitoring, and supplier management to protect your Input Tax Credit and avoid penalties.

Overview

Let’s talk about Vendor Compliance under GST. If you’ve ever had to explain to your auditor why you claimed ITC on invoices from an unregistered supplier, you know the pain. The GST portal doesn’t care that your vendor “promised” to register next month. You’re left holding the bag - and the disallowed credit.

Here’s the uncomfortable truth: vendor non-compliance is now your problem. Not legally, but practically. When your vendor screws up their GST filing, you lose your Input Tax Credit. When they get their registration cancelled, your previous claims become questionable. When they’re operating from an unverified address, you’re on the hook to prove they’re legitimate.

This guide covers what actually works in vendor compliance - the frameworks finance teams use to protect ITC, avoid penalties, and sleep better at night.

Why vendor compliance under GST is different (and harder)

Before GST, vendor management was simpler. You verified their PAN, checked their service tax registration if applicable, and moved on. The compliance risk was mostly on the vendor’s side.

GST flipped this model:

AspectPre-GSTUnder GST
ITC DependencyIndependent of vendor filingYour ITC depends on vendor’s compliance
Burden of ProofVendor’s responsibilityYou must prove vendor compliance
Monitoring FrequencyOne-time verificationContinuous monitoring required
Financial ImpactLow12-18% of purchase value at risk
Audit FocusVendor booksYour vendor selection process

The Stakes Are Higher

ITC typically represents 12-18% of your purchase value (as per CGST Rules - cbic.gov.in). On a ₹10 crore annual vendor spend, that’s ₹1.2-1.8 crore in tax impact. Add 18% annual interest on disallowed credits and penalties, and you’re looking at material financial exposure.

🔴 Critical Reality: Your ITC claim is only as good as your vendor’s compliance. If they don’t file GSTR-3B, your ITC can be reversed. If their registration is suspended, your claims become invalid retroactively.

This is why vendor compliance has moved from “procurement’s job” to becoming a critical finance function.

The vendor compliance framework that works

Here’s the three-stage system successful finance teams use to protect ITC and avoid penalties:

📋 Quick Overview: The 3-Stage Framework

StageFocusTime InvestmentImpact
1. OnboardingVerify before approval30-45 min/vendorPrevents 70% of issues
2. TransactionValidate every invoice2-3 min/invoiceProtects daily ITC claims
3. MonitoringContinuous compliance2-4 hours/monthCatches changes early

Stage 1: Vendor Onboarding (Get it right from day one)

💡 Key Principle: Never create a vendor code without verification. It’s easier to delay onboarding than to clean up compliance issues later.

The 3 Non-Negotiables

Before approving any vendor, verify these three items:

RequirementWhat to CheckVerification MethodCommon Red Flags
Valid GSTINActive registration statusGST Portal real-time lookup❌ Provisional ID
❌ Suspended status
❌ Typos in number
Address MatchPhysical address = GST registrationCompare certificate to proof❌ Different pincode
❌ Vague “c/o” addresses
❌ PO Box only
Bank VerificationAccount name matches businessCancelled cheque analysis❌ Personal account
❌ Name mismatch
❌ Blurry/edited cheque
PAN/MCA VerificationLegal entity registered and activeMCA portal lookup❌ Struck-off company
❌ Name mismatch with invoice

Complete Onboarding Checklist

┌─────────────────────────────────────────────────────────┐
│ VENDOR ONBOARDING WORKFLOW                              │
├─────────────────────────────────────────────────────────┤
│                                                          │
│  1. ☐ GST Certificate (from portal, not vendor)         │
│     ↳ Verify GSTIN format: [State Code][PAN][Entity]   │
│     ↳ Check status: Must show "Active"                  │
│                                                          │
│  2. ☐ PAN Card                                          │
│     ↳ Match with GSTIN (characters 3-12)               │
│                                                          │
│  3. ☐ Incorporation Documents                           │
│     ☐ Company: Certificate of Incorporation             │
│     ☐ Partnership: Partnership Deed                     │
│     ☐ Proprietorship: Declaration                       │
│                                                          │
│  4. ☐ Bank Details                                      │
│     ↳ Cancelled cheque with vendor name                 │
│     ↳ Cross-verify IFSC code                            │
│                                                          │
│  5. ☐ Authorized Signatories                            │
│     ↳ List with specimen signatures                     │
│     ↳ Photo identification                              │
│                                                          │
│  6. ☐ Board Resolution (companies only)                 │
│     ↳ Contract signing authority                        │
│                                                          │
│  7. ☐ Address Proof                                     │
│     ↳ Must match GST registration exactly               │
│                                                          │
│ Final Approval: ☐ All items verified and filed         │
└─────────────────────────────────────────────────────────┘

Decision Flow: Vendor Approval Process

                    START
                      ↓
         ┌────────────────────────┐
         │ Vendor Submits         │
         │ Registration Documents │
         └────────┬───────────────┘
                  ↓
         ┌────────────────────┐
         │ GSTIN Valid?       │
         └────┬───────┬───────┘
              ↓       ↓
             NO      YES
              ↓       ↓
         [REJECT]     │
                      ↓
         ┌────────────────────┐
         │ Status = Active?   │
         └────┬───────┬───────┘
              ↓       ↓
             NO      YES
              ↓       ↓
         [REJECT]     │
                      ↓
         ┌────────────────────────┐
         │ Address Matches GST?   │
         └────┬───────┬───────────┘
              ↓       ↓
             NO      YES
              ↓       ↓
         [REJECT]     │
                      ↓
         ┌────────────────────────┐
         │ Bank Details Valid?    │
         └────┬───────┬───────────┘
              ↓       ↓
             NO      YES
              ↓       ↓
         [REJECT]     │
                      ↓
         ┌────────────────────────┐
         │ All Docs Complete?     │
         └────┬───────┬───────────┘
              ↓       ↓
             NO      YES
              ↓       ↓
          [HOLD]      │
                      ↓
              ┌───────────────┐
              │ APPROVE       │
              │ Create Vendor │
              └───────────────┘

What Actually Happens: The Three Levels

Team LevelWhat They DoResultRisk Level
BasicCollect documents → File them → Move on📁 Documents exist but unverified🔴 High
BetterCollect → Verify against GST portal → File with dates✅ Verified at onboarding, but never checked again🟡 Medium
BestCollect → Portal verification → System checkmarks → Automated monthly re-verification🏆 Continuous compliance assurance🟢 Low

⚠️ Real-World Warning: When your vendor says “my CA will send the GST certificate tomorrow,” don’t create the vendor code yet. Wait for complete documentation. You’ll avoid cleanup work later.

💰 Cost of Shortcuts: Creating a vendor without proper verification takes 5 minutes. Cleaning up compliance issues later takes 5 hours + potential ITC loss.


Stage 2: Transaction-Level Compliance (Protect Every ITC Claim)

Every invoice is an ITC claim. Protect each one.

Pre-Processing Invoice Validation

┌─────────────────────────────────────────────────────────┐
│ INVOICE VALIDATION CHECKLIST (Before Processing)        │
├─────────────────────────────────────────────────────────┤
│                                                          │
│  ☐ GSTIN on invoice matches vendor master               │
│    → One wrong digit = No ITC                           │
│                                                          │
│  ☐ Invoice format is GST-compliant                      │
│    Required fields:                                      │
│    • Supplier GSTIN                                      │
│    • Recipient GSTIN (your GSTIN)                       │
│    • Invoice number & date                               │
│    • Taxable value                                       │
│    • HSN/SAC code                                        │
│    • Tax amount (CGST/SGST or IGST)                     │
│    • Place of supply                                     │
│                                                          │
│  ☐ Tax rate is correct for HSN/SAC code                 │
│    → Cross-check against rate schedule                   │
│                                                          │
│  ☐ Place of supply correctly determined                 │
│    → Services: Usually recipient location                │
│    → Goods: Delivery location                            │
│                                                          │
│  ☐ Amount in words matches figures                      │
│                                                          │
│  ☐ No handwritten corrections                           │
│    → Require revised invoice from vendor                 │
│                                                          │
└─────────────────────────────────────────────────────────┘

Invoice Rejection Matrix

Issue TypeSeverityActionTimelineImpact on ITC
Missing GSTIN🔴 CriticalREJECT immediatelySame day100% ITC lost
Wrong state code (interstate)🔴 CriticalREJECT immediatelySame day100% ITC lost
Handwritten corrections🟠 HighREJECT, request revised invoice24 hoursPotential audit issue
Missing HSN/SAC🟠 HighREJECT, request correction24 hoursITC disallowance risk
Amount mismatch (words vs figures)🟡 MediumHOLD, clarify with vendor48 hoursMedium risk
Minor formatting issues🟢 LowPROCESS but document issueNote for improvementLow risk

🎯 The 10-Minute Rule: Yes, rejecting an invoice creates a 10-minute delay. But ITC disallowance creates a 10-month problem. Hold the line on invoice quality.


Stage 3: Ongoing Monitoring (Where Most Teams Fail)

Monthly Compliance Rhythm

ActivityWhenTime RequiredTools Needed
GSTIN Status Check1st of every month2 hours (manual)
30 min (automated)
GST Portal or API integration
Filing Status VerificationBefore GSTR-3B filing1 hourPortal: Check vendor GSTR-1
ITC ReconciliationMonthly after GSTR-2B2-3 hoursExcel or reconciliation software
Compliance Review MeetingLast Friday of month15-30 minutesCompliance dashboard

The Vendor Health Status System

┌─────────────────────────────────────────────────────────┐
│ VENDOR COMPLIANCE HEALTH STATUS                         │
├─────────────────────────────────────────────────────────┤
│                                                          │
│  🟢 GREEN (Compliant)                                   │
│     • GSTIN Active                                       │
│     • Filed last 3 months' returns                      │
│     • ITC matches GSTR-2B                               │
│     → Action: Standard monitoring                        │
│                                                          │
│  🟡 YELLOW (At Risk)                                    │
│     • Filed returns but with delays                     │
│     • Minor ITC mismatches (<5%)                        │
│     • New vendor (<6 months)                            │
│     → Action: Enhanced monitoring (bi-weekly)            │
│                                                          │
│  🟠 ORANGE (High Risk)                                  │
│     • Missed 1 month's filing                           │
│     • Significant ITC mismatch (5-15%)                  │
│     • High-value vendor (>₹50L annual)                  │
│     → Action: Weekly status check + vendor contact       │
│                                                          │
│  🔴 RED (Critical)                                      │
│     • GSTIN Suspended/Cancelled                         │
│     • Missed 2+ months filing                           │
│     • Major ITC discrepancy (>15%)                      │
│     → Action: STOP new invoices + immediate escalation   │
│                                                          │
└─────────────────────────────────────────────────────────┘

Manual vs. Automated Monitoring: The Reality

AspectManual ProcessAutomated Process
Vendor capacityMax 20-30 vendors500+ vendors
Time per vendor10 minutes30 seconds
Monthly effort (100 vendors)16+ hours1 hour
Error rate15-20% (human fatigue)<2%
Real-time alerts❌ No✅ Yes
Audit trailManual screenshotsAuto-archived reports
CostStaff time (₹2-3L/year)Software (₹8-10L/year)
ScalabilityPoorExcellent
ROI break-evenN/A6 months (50+ vendors)

📊 The Tipping Point: If you have more than 50 active vendors, automation pays for itself in 6 months through time savings alone - before counting ITC protection.

The Monthly Compliance Meeting (15 Minutes That Matter)

┌─────────────────────────────────────────────────────────┐
│ Monthly Vendor Compliance Review                        │
│ Date: [Last Friday of Month] | Duration: 15 minutes     │
├─────────────────────────────────────────────────────────┤
│                                                          │
│ 1. Dashboard Review (5 min)                             │
│    • Red vendors: Immediate action items                │
│    • Orange vendors: Status update                      │
│    • Yellow vendors: Monitoring plan                    │
│                                                          │
│ 2. New Issues (5 min)                                   │
│    • Vendor status changes this month                   │
│    • ITC mismatches identified                          │
│    • Upcoming threshold breaches                        │
│                                                          │
│ 3. Action Items (5 min)                                 │
│    • Assign: Who does what by when                      │
│    • Escalations needed                                 │
│    • Process improvements                               │
│                                                          │
│ Next Review: [Date]                                     │
└─────────────────────────────────────────────────────────┘

High-risk vendor categories (where to focus your attention)

Not all vendors carry equal compliance risk. Focus your monitoring on:

Vendor Risk Assessment Matrix

Vendor CategoryRisk LevelMonitoring FrequencyKey Compliance ChecksAnnual Cost of Failure
Unregistered🔴 CriticalEvery invoiceRCM threshold tracking₹3-5L (penalties + interest)
Interstate🟡 MediumMonthlyState code, IGST, E-way bill₹1-2L (ITC reversal)
New (<6 months)🟡 MediumBi-weeklyRegistration status, filing₹50K-1L (disputed ITC)
High-value (>₹50L)🟠 HighBi-weeklyFiling status, ITC match₹5-10L (material impact)
Past issues🟠 HighWeeklyEverything₹2-4L (repeat problems)
Composition scheme🟡 MediumMonthlyVerify still eligible₹1-2L (invalid ITC)

1. Unregistered Vendors (Highest Risk)

🔴 Critical Threshold: If your annual transactions with an unregistered vendor exceed ₹20 lakhs (₹10 lakhs for special category states), you’re required to pay GST under reverse charge mechanism (RCM).

What to do: Track cumulative vendor spend monthly. When approaching the threshold, either register the vendor or prepare for RCM compliance (which is its own headache - see our guide on RCM).

2. Interstate Vendors

Interstate transactions require verification that:

  • The vendor’s GSTIN state code matches the invoice supply state
  • IGST is correctly applied (not CGST+SGST)
  • E-way bill requirements are met for goods over ₹50,000

Common mistake: Your AP team processes hundreds of invoices and interstate vs. intrastate isn’t always obvious. One wrong state code = complete ITC loss.

3. New Vendors (First 6 Months)

New registrations are more likely to face compliance issues as vendors figure out GST filing. They’re also more likely to have registration problems that lead to cancellation.

Practical approach: Put new vendors on “enhanced monitoring” for 6 months - verify status every invoice, not just monthly.

4. High-Value Vendors (>₹50 Lakhs Annual Spend)

Any vendor where annual spend exceeds ₹50 lakhs deserves extra attention. A compliance issue here has material financial impact.

Best practice: Quarterly in-person compliance reviews where your team meets theirs to review documentation, filing status, and upcoming concerns.

The ITC protection checklist (before filing GSTR-3B)

Every month, before filing your GSTR-3B, run through this:

┌─────────────────────────────────────────────────────────┐
│ PRE-FILING ITC PROTECTION CHECKLIST                     │
├─────────────────────────────────────────────────────────┤
│                                                          │
│  ☐ Verified all vendor GSTINs are still Active          │
│                                                          │
│  ☐ Confirmed vendors have filed their GSTR-1            │
│    for the relevant period                               │
│                                                          │
│  ☐ Reconciled GSTR-2B against your purchase register    │
│                                                          │
│  ☐ Identified and investigated any ITC mismatches       │
│                                                          │
│  ☐ Segregated ITC from suspended/cancelled vendors      │
│    (to be reversed)                                      │
│                                                          │
│  ☐ Applied reversal under Rule 37 if vendor failed      │
│    to pay GST to government                              │
│                                                          │
│  ☐ Documented all above checks with screenshots/reports │
│    dated before filing                                   │
│                                                          │
│  ☐ Management approval on any disputed/grey area ITC    │
│                                                          │
└─────────────────────────────────────────────────────────┘

⚠️ Critical Documentation: During audits, the department wants proof you did due diligence before claiming ITC, not after they questioned it. Archive your pre-filing checklists with dated screenshots.

Common vendor compliance mistakes (and how to avoid them)

The Top 5 Mistakes

MistakeWhat HappensReal CostFix
One-time verification onlyVendor status changes, you don’t know₹5-10L ITC reversalMonthly automated checks
Accepting provisional IDsTemp registration expires, all ITC invalid₹3-8L disputed creditsWait for final GSTIN
Missing composition scheme changeVendor can’t charge GST, your ITC invalid₹2-5L ITC lossMonthly scheme verification
Trusting vendor’s wordVendor says “filed returns” - they didn’t₹4-7L interest + penaltiesPortal verification always
Poor documentationNo proof of due diligence during audit₹10-15L (audit penalties)Dated screenshots monthly

Mistake 1: One-time verification at onboarding

Scenario: You verify the vendor when setting them up, then never check again. Two years later, their registration has been cancelled for six months, but you’ve been claiming ITC on their invoices the whole time.

Fix: Monthly automated status checks. Non-negotiable.

Mistake 2: Accepting provisional IDs

Scenario: Vendor gives you a provisional GSTIN that ends in digits (temporary registration). You create the vendor, process invoices. Six months later, they still haven’t got final registration, and all your ITC claims are invalid.

Fix: Don’t create vendor codes for provisional IDs. Wait for final registration.

Mistake 3: Not tracking composition scheme vendors

Scenario: Your vendor switches to composition scheme (which means they can’t charge GST). But nobody updated your system. You keep claiming ITC on their invoices, which is now invalid.

Fix: Monthly checks include verifying vendor hasn’t switched to composition scheme.

Mistake 4: Trusting the vendor’s word

Scenario: Vendor says “Yes, we filed our returns.” You assume it’s true. It’s not.

Fix: Verify filing status on the portal yourself. Trust but verify.

Mistake 5: Poor documentation

Scenario: During audit, the officer asks for proof of vendor compliance at the time of transaction. You have nothing except the invoice.

Fix: Maintain monthly vendor compliance reports with dated portal screenshots. Archive them. You’ll need them during audits.

Building a sustainable vendor compliance process

Here’s what a mature vendor compliance system looks like:

The Four Layers of Compliance

┌─────────────────────────────────────────────────────────┐
│ COMPLIANCE INFRASTRUCTURE                                │
├─────────────────────────────────────────────────────────┤
│                                                          │
│ Layer 1: TECHNOLOGY                                     │
│  • Vendor master with GSTIN verification status         │
│  • Automated monthly GSTIN status checks (API)          │
│  • Compliance dashboard with health metrics             │
│  • Alert system for status changes                      │
│  • ITC reconciliation tool (GSTR-2B matching)           │
│                                                          │
│ Layer 2: PROCESS                                        │
│  • Documented onboarding procedure                      │
│  • Invoice validation workflow                          │
│  • Monthly compliance review meeting                    │
│  • Quarterly vendor compliance audit                    │
│  • Annual vendor performance review                     │
│                                                          │
│ Layer 3: PEOPLE                                         │
│  • Clear ownership (AP/Tax Manager)                     │
│  • AP team GST training                                 │
│  • Escalation path for issues                           │
│  • Vendor communication protocols                       │
│                                                          │
│ Layer 4: DOCUMENTATION                                  │
│  • Vendor onboarding files                              │
│  • Monthly compliance reports (archived)                │
│  • Vendor correspondence trail                          │
│  • ITC reconciliation workbooks                         │
│                                                          │
└─────────────────────────────────────────────────────────┘

Implementation Priority

PriorityWhat to BuildDifficultyImpactTimeline
P0 (Must Have)Onboarding verification, Monthly status checks, Invoice validationLowHighWeek 1-2
P1 (Should Have)Compliance dashboard, Monthly review meeting, Documentation archiveMediumHighWeek 3-6
P2 (Nice to Have)API automation, Advanced analytics, Vendor risk scoringHighMediumMonth 3-6

You don’t need to build all of this immediately. Start with the non-negotiables (onboarding verification, monthly status checks, invoice validation), then layer in automation and documentation over time.

When vendor compliance goes wrong (damage control)

Despite best efforts, compliance issues happen. Here’s how to handle them:

Crisis Response Playbook

Scenario 1: Vendor GSTIN Gets Suspended

┌─────────────────────────────────────────────────────────┐
│ IMMEDIATE ACTIONS (Within 24 Hours)                     │
├─────────────────────────────────────────────────────────┤
│                                                          │
│  1. STOP processing new invoices from this vendor       │
│                                                          │
│  2. Calculate ITC claimed during suspension period      │
│     → Pull all invoices from suspension date            │
│     → Sum total GST amounts                              │
│                                                          │
│  3. Reverse that ITC in your next GSTR-3B with interest │
│     → Interest = 18% per annum from claim date          │
│                                                          │
│  4. Document the reversal with calculation workings     │
│     → Save for audit trail                               │
│                                                          │
│  5. Contact vendor to resolve their compliance issue    │
│     → Set 7-day deadline                                 │
│                                                          │
│  6. If critical vendor, identify alternate suppliers    │
│     → Don't be held hostage                              │
│                                                          │
└─────────────────────────────────────────────────────────┘

✅ Key Principle: Don’t wait for the department to notice. Self-correct immediately. This demonstrates good faith and often results in lower penalties.

Scenario 2: Realized Vendor Never Filed Returns

Immediate actions:

  • Calculate total ITC claimed from this vendor
  • Check if vendor has now filed returns (may allow you to claim ITC retrospectively)
  • If not, prepare ITC reversal calculation
  • Document the situation with timeline
  • Reverse ITC with interest in next GSTR-3B
  • Decide whether to continue relationship with this vendor

Scenario 3: Audit Finds ITC from Non-Compliant Vendor

Response strategy:

  • Don’t argue or make excuses
  • Present your compliance documentation showing due diligence
  • Acknowledge the error if genuine mistake was made
  • Show you’ve now implemented controls to prevent recurrence
  • Offer to immediately reverse the ITC if not already done
  • Negotiate penalty reduction based on good compliance track record and self-correction

The business case for vendor compliance

Some businesses resist building robust vendor compliance systems because “it slows down vendor onboarding” or “our AP team is already stretched.”

Here’s the math on why it’s worth it:

ROI Analysis: ₹10 Crore Annual Vendor Spend

CategoryCost/BenefitAmountNotes
COST OF NON-COMPLIANCE
Potential ITC disallowance (18% GST)Risk₹1.8 CrFull exposure if multiple vendors fail
Interest at 18% per year for 2 yearsPenalty₹65 LOn disallowed ITC
Penalties (conservative estimate)Penalty₹25 LSection 122 violations
Total Exposure₹2.7 CrWorst-case scenario
COST OF COMPLIANCE
Vendor compliance softwareAnnual₹5-10 LAPI integration, dashboard
Additional AP team member (compliance focus)Annual₹8-12 LFully loaded cost
Training and process documentationOne-time₹2-3 LInitial setup
Total Cost₹15-25 L/yearOngoing investment
NET BENEFIT
Even preventing 10% of potential ITC lossesSavings₹27 LFar exceeds cost
ROI108-180%First year alone

Additional Benefits (Not Quantified Above)

  • Time saved in audit defense: 50-100 hours/year
  • Reduced working capital tied up in disputed ITC: ₹20-40 lakhs
  • Improved vendor relationships through professional compliance management
  • Better negotiating position with vendors (compliance as leverage)
  • Reduced insurance premiums (demonstrable risk management)

💰 Bottom Line: Even if your compliance system prevents just 10% of potential ITC losses, the ROI is massive. And that’s before considering the time saved in audit defense, the reduction in working capital tied up in disputed ITC, and the improved vendor relationships.

Moving forward: Your vendor compliance roadmap

If you’re starting from scratch, here’s a 90-day implementation plan:

90-Day Vendor Compliance Transformation

┌─────────────────────────────────────────────────────────┐
│ DAYS 1-30: FOUNDATION                                   │
├─────────────────────────────────────────────────────────┤
│                                                          │
│ Week 1: Assessment                                       │
│  • Document current vendor onboarding process           │
│  • Audit existing vendor master for compliance gaps     │
│  • Identify high-risk vendors (>₹50L annual spend)      │
│                                                          │
│ Week 2: Standards                                        │
│  • Define minimum compliance requirements               │
│  • Create vendor onboarding checklist                   │
│  • Draft vendor compliance policy document              │
│                                                          │
│ Week 3: Training                                         │
│  • Train AP team on GST invoice requirements            │
│  • Workshop on portal navigation and verification       │
│  • Role-play vendor rejection scenarios                 │
│                                                          │
│ Week 4: Pilot                                            │
│  • Test new onboarding process with 3-5 vendors         │
│  • Refine checklist based on feedback                   │
│  • Begin monthly status verification (manual)           │
│                                                          │
└─────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────┐
│ DAYS 31-60: IMPLEMENTATION                              │
├─────────────────────────────────────────────────────────┤
│                                                          │
│ Week 5-6: Process Rollout                               │
│  • Implement monthly GSTIN status verification          │
│  • Set up basic vendor compliance dashboard (Excel)     │
│  • Begin archiving compliance documentation             │
│                                                          │
│ Week 7: Governance                                       │
│  • Launch monthly compliance review meetings            │
│  • Assign vendor compliance owner (AP/Tax Manager)      │
│  • Create escalation matrix for red/orange vendors      │
│                                                          │
│ Week 8: Vendor Engagement                                │
│  • Update vendor contracts with compliance obligations  │
│  • Communicate new compliance standards to vendors      │
│  • Set up vendor feedback mechanism                     │
│                                                          │
└─────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────┐
│ DAYS 61-90: AUTOMATION & SCALE                          │
├─────────────────────────────────────────────────────────┤
│                                                          │
│ Week 9-10: Technology Evaluation                        │
│  • Evaluate vendor compliance software options          │
│  • Request demos from 3-4 vendors                       │
│  • Calculate ROI for automation                         │
│                                                          │
│ Week 11: Automation Pilot                                │
│  • Pilot API-based GSTIN verification                   │
│  • Test automated alerts for status changes             │
│  • Build ITC reconciliation process (GSTR-2B matching)  │
│                                                          │
│ Week 12: Optimization                                    │
│  • Create vendor compliance playbook                    │
│  • Conduct first quarterly vendor compliance audit      │
│  • Present results to management with recommendations   │
│                                                          │
└─────────────────────────────────────────────────────────┘

Success Metrics (Track Monthly)

MetricTargetWhy It Matters
% vendors with Active GSTIN>95%Core compliance indicator
Average time to onboard vendor<3 daysEfficiency measure
Invoice rejection rate5-10%Quality gate effectiveness
ITC reversal due to vendor issues<2%Financial impact
Vendor compliance meeting attendance100%Process adherence
% vendors in Green status>80%Overall health

After 90 days, you should have a functional vendor compliance process that protects your ITC and withstands audit scrutiny. For a full breakdown of ITC eligibility rules that your vendor compliance process is protecting, see understanding GST input tax credit rules.

IQInvoice automates vendor GST validation and GSTR-2B reconciliation as part of the core AP workflow. See the GST compliance module for details, or book a demo to see it applied to your vendor base.

The bottom line

Vendor compliance under GST isn’t optional. It’s not something you can delegate to procurement and forget about. It’s a core finance function that directly impacts your balance sheet, cash flow, and audit outcomes.

The Simple Truth

It’s not complicated. It’s systematic:

  • Verify vendors properly at onboarding
  • Check their status monthly
  • Validate invoices before processing
  • Document everything

These simple disciplines, applied consistently, protect millions in ITC and prevent painful audit experiences.

Two Paths Forward

The “Hope and Pray” ApproachThe Systematic Approach
Verify vendor once at onboardingMonthly automated verification
Process all invoices quicklyReject non-compliant invoices
Trust vendor’s wordVerify on GST portal
No documentationComprehensive audit trail
Result: ₹2-3 Cr exposureResult: Protected ITC

The businesses that treat vendor compliance as an afterthought pay for it - literally - in reversed credits, interest charges, and penalties. The businesses that build it into their AP process sleep better and have cleaner audits.

Which one are you going to be?


Related reading: Looking to understand another complex GST compliance area? Check out our guide on Reverse Charge Mechanism (RCM) and how to handle it properly in your accounting.

Frequently asked questions

What happens if I claim ITC from a non-compliant vendor?
If your vendor is unregistered, cancelled, or suspended under GST, any Input Tax Credit you've claimed on their invoices can be disallowed. This means you'll have to reverse the ITC, pay interest at 18% per annum from the date of claim, and potentially face penalties. The GST department can go back up to 5 years for such cases.
How often should I verify vendor GST status?
Best practice is monthly verification before filing your GSTR-3B. At minimum, verify quarterly. Many businesses automate this through their AP systems to check vendor status in real-time when processing invoices. Remember: a vendor can be compliant today and suspended tomorrow.
What's the difference between GSTIN verification and compliance checking?
GSTIN verification just confirms the number is valid and matches the vendor name. Compliance checking goes deeper - it verifies the vendor is actively filing returns, their registration is current (not suspended/cancelled), and there are no compliance red flags. You need both.
Can I continue doing business with a vendor whose GSTIN is suspended?
Legally, yes - but you cannot claim Input Tax Credit on invoices from suspended vendors. You'll need to pay the full GST amount as a cost. Many businesses either ask the vendor to resolve their compliance issues quickly or find alternative suppliers to avoid this situation.
What documents should I collect during vendor onboarding?
Essential documents: (1) GST registration certificate, (2) PAN card, (3) Cancelled cheque for bank verification, (4) Address proof matching GST registration, (5) Board resolution/authorization letter for vendor representatives. Store these securely - auditors will ask for them.
How do I handle vendors operating from multiple states?
Each state where the vendor has operations requires a separate GSTIN. Verify all applicable GSTINs depending on which state they're billing from. If they're invoicing from Maharashtra, verify their Maharashtra GSTIN, not their Karnataka one. Mismatched state codes can lead to ITC denial.
What's the penalty for not maintaining proper vendor records?
Under Section 122 of the CGST Act, failure to maintain proper records can result in penalties up to ₹25,000. More critically, without proper vendor documentation, you cannot defend ITC claims during audits, leading to potentially massive ITC reversals plus interest.

Published by IQInvoice - AI-powered accounts payable automation for Indian mid-market finance teams.

See IQInvoice in action

Book a personalised demo and see how AP automation works for your team.

Book a Demo Calculate your ROI →

How many unverified vendors did you pay this month?

IQInvoice enforces GST validity, vendor legitimacy, and invoice integrity before your ERP sees a single entry. Live in 4-6 weeks. No SI engagement required.

Book a Demo