Vendor Master
The vendor master stores legal name, DBA, remittance address, tax ID, W-9 status, 1099 classification, preferred payment method, accepted rails, remittance format, per-rail bank details and the vendor-tier assignment. Vendor onboarding runs through a verification workflow: W-9 collection, TIN match against the IRS TIN Matching program, OFAC screening, bank account micro-deposit verification, dual-authorization approval.
Vendor-master edits require dual authorization. Bank-account changes trigger a 24-hour cooldown before the first payment to the modified record. This is a core control against business-email-compromise fraud, which typically attacks AP by spoofing a "new banking details" email from a known vendor contact. Cooldowns, callback verification and change-log audit trails close that attack surface.