Workflow Template
Vendor Master Data Change Workflow
Enables a finance team to safely process supplier record changes. The requester submits the vendor and fields to change with supporting evidence, flagging sensitive changes. A verifier independently confirms sensitive changes (e.g. bank details), then finance approves. On approval, the vendor record is updated and the requester notified; if verification or approval fails, the request is returned with a reason.
One unverified change to a vendor's bank details can redirect an entire payment run to a fraudster's account, and finance teams often discover it only after the money is gone. This workflow forces every vendor master data change through independent verification for sensitive fields and a separate finance approval before the record updates, closing the gap that phishing and business email compromise attacks exploit. Requesters get instant status visibility and a clear reason whenever a request is returned, cutting resolution time from days of email chasing to minutes.
Business Outcomes
- Eliminates unverified bank detail changes reaching the vendor master file
- Cuts vendor change turnaround from days to hours with automatic routing
- Creates a full audit trail of who requested, verified, and approved every change
- Reduces payment fraud risk by separating requester, verifier, and approver roles
- Removes email back-and-forth by notifying requesters automatically at each outcome
Workflow Steps
Steps
- 1Create Vendor Change Requestcreate record
Registers the submitted vendor change request as a record.
- 2Set Status to Submittedupdate record
Marks the request as submitted.
- 3Check if Change is Sensitive
Determines whether the requested change requires independent verification.
contains_sensitive_change: "true"→Set Status to Under VerificationDefault→Set Status to Under Approval - 4Set Status to Under Verificationupdate record
Marks the request as under verification.
- 5Verify Sensitive Changecreate task
A verifier independently confirms the sensitive change details (e.g. bank details) against supporting evidence.
- 6Route on Verification Outcome
Routes based on whether the verifier confirmed or failed the sensitive change.
verification_outcome: "Confirmed"→Set Status to Under Approvalverification_outcome: "Failed"→Set Status to Returned (Verification Failed)Default→Set Status to Returned (Verification Failed) - 7Set Status to Returned (Verification Failed)update record
Marks the request as returned due to failed verification.
- 8Notify Requester of Verification Failuresend email
Informs the requester that verification failed and the request was returned.
- 9Set Status to Under Approvalupdate record
Marks the request as under finance approval.
- 10Finance Approvalrequest approval
Finance reviews and approves or rejects the vendor master data change.
- 11Route on Finance Approval Outcome
Routes based on finance's approval decision.
approval_status: "approved"→Set Status to Approvedapproval_status: "rejected"→Set Status to Returned (Approval Rejected)Default→End - 12Set Status to Approvedupdate record
Marks the request as approved.
- 13Update Vendor Recordupdate record
Applies the approved changes to the vendor master record.
- 14Notify Requester of Approvalsend email
Informs the requester that the vendor record has been updated.
- 15Set Status to Returned (Approval Rejected)update record
Marks the request as returned due to rejected approval.
- 16Notify Requester of Approval Rejectionsend email
Informs the requester that the change was rejected by finance and returned.
Fields
- Requester Name*
- Requester Email*
- Vendor Name*
- Vendor ID / Reference*
- Fields to Change*
- Details of Requested Change*
- +6 more fields
Forms
Vendor Master Data Change Request
8 fields
Data Views
Vendor Change Requests
vendor_change_request_ref, vendor_name, fields_to_change, request_status +1 more
Dashboard Widgets
Recommended integrations
Setup the following integrations to extend workflow capability.
Send email in the workflow
AWS SES
Similar Workflows
Similar Categories
FAQs
What happens if a change involves both sensitive and non-sensitive fields?
The workflow flags the entire request as sensitive if any field on it qualifies, routing it through independent verification before it can reach finance approval. You can customise the sensitivity check logic inside assess.one to define exactly which fields trigger verification, so mixed requests are always handled by the stricter path.
Can this handle a vendor change that fails verification but the requester wants to resubmit with corrected evidence?
Yes. When verification fails, the request is set to 'Returned (Verification Failed)' and the requester is notified with the reason, and they can submit a new request with corrected supporting evidence. Each submission is tracked separately so you retain a clear history of what was rejected and why.
What if finance approves a change but verification was skipped by mistake?
Verification is a mandatory gate in the workflow logic, so a sensitive request cannot progress to finance approval without first passing the verification step. This sequencing is built into the routing rules, removing the risk of a sensitive change bypassing independent checks.
Who needs access to this workflow?
You need at least three roles: a requester (typically accounts payable or procurement staff), a verifier independent of the requester for sensitive changes, and a finance approver for final sign-off. All roles are configured inside assess.one with permissions scoped to their step, so verifiers and approvers only see what they need to act on.
How do we customise this workflow for our own approval hierarchy?
You can adjust roles, add extra approval tiers, change notification recipients, and modify the sensitivity criteria directly in assess.one without any coding. Common customisations include adding a second finance approver for high-value vendors or routing verification to a specific team based on vendor region.
What compliance considerations does this workflow address?
Segregation of duties between requester, verifier, and approver directly supports SOX and internal audit requirements around master data controls. Every status change, approval decision, and rejection reason is logged automatically, giving auditors a complete trail without manual record-keeping.
What happens at the finance approval decision point?
Finance reviews the request, the supporting evidence, and the verification outcome, then either approves or rejects it. Approval triggers the vendor record update and a confirmation notification to the requester, while rejection returns the request with a documented reason and notifies the requester immediately.
How long does implementation take?
This template is ready to use — you publish it in minutes and your team can start submitting vendor change requests immediately. There's no lengthy setup project; you configure roles, notifications, and approval logic directly in assess.one as you go.
Can this handle high-volume vendor change requests during a batch update?
Yes, each vendor change request runs as its own independent workflow instance, so multiple requests move through verification and approval simultaneously without blocking one another. This lets finance teams process bulk supplier updates while still applying the same sensitive-change controls to each one.
What if the requester needs to check on a request's status without emailing finance?
Every request has a live status such as Submitted, Under Verification, Under Approval, Approved, or Returned, visible to the requester directly in assess.one. This removes the need for status-check emails and gives requesters real-time visibility into exactly where their request sits.
Ready to use this workflow?
Create a free account and customise this workflow for your business.
