assess.one – AI-powered business operations platform

Workflow Template

Vendor Master Data Change Workflow

Enables a finance team to safely process supplier record changes. The requester submits the vendor and fields to change with supporting evidence, flagging sensitive changes. A verifier independently confirms sensitive changes (e.g. bank details), then finance approves. On approval, the vendor record is updated and the requester notified; if verification or approval fails, the request is returned with a reason.

One unverified change to a vendor's bank details can redirect an entire payment run to a fraudster's account, and finance teams often discover it only after the money is gone. This workflow forces every vendor master data change through independent verification for sensitive fields and a separate finance approval before the record updates, closing the gap that phishing and business email compromise attacks exploit. Requesters get instant status visibility and a clear reason whenever a request is returned, cutting resolution time from days of email chasing to minutes.

Business Outcomes

  • Eliminates unverified bank detail changes reaching the vendor master file
  • Cuts vendor change turnaround from days to hours with automatic routing
  • Creates a full audit trail of who requested, verified, and approved every change
  • Reduces payment fraud risk by separating requester, verifier, and approver roles
  • Removes email back-and-forth by notifying requesters automatically at each outcome

Workflow Steps

Steps

  1. 1
    Create Vendor Change Requestcreate record

    Registers the submitted vendor change request as a record.

  2. 2
    Set Status to Submittedupdate record

    Marks the request as submitted.

  3. 3
    Check if Change is Sensitive

    Determines whether the requested change requires independent verification.

    contains_sensitive_change: "true"Set Status to Under Verification
    DefaultSet Status to Under Approval
  4. 4
    Set Status to Under Verificationupdate record

    Marks the request as under verification.

  5. 5
    Verify Sensitive Changecreate task

    A verifier independently confirms the sensitive change details (e.g. bank details) against supporting evidence.

  6. 6
    Route on Verification Outcome

    Routes based on whether the verifier confirmed or failed the sensitive change.

    verification_outcome: "Confirmed"Set Status to Under Approval
    verification_outcome: "Failed"Set Status to Returned (Verification Failed)
    DefaultSet Status to Returned (Verification Failed)
  7. 7
    Set Status to Returned (Verification Failed)update record

    Marks the request as returned due to failed verification.

  8. 8
    Notify Requester of Verification Failuresend email

    Informs the requester that verification failed and the request was returned.

  9. 9
    Set Status to Under Approvalupdate record

    Marks the request as under finance approval.

  10. 10
    Finance Approvalrequest approval

    Finance reviews and approves or rejects the vendor master data change.

  11. 11
    Route on Finance Approval Outcome

    Routes based on finance's approval decision.

    approval_status: "approved"Set Status to Approved
    approval_status: "rejected"Set Status to Returned (Approval Rejected)
    DefaultEnd
  12. 12
    Set Status to Approvedupdate record

    Marks the request as approved.

  13. 13
    Update Vendor Recordupdate record

    Applies the approved changes to the vendor master record.

  14. 14
    Notify Requester of Approvalsend email

    Informs the requester that the vendor record has been updated.

  15. 15
    Set Status to Returned (Approval Rejected)update record

    Marks the request as returned due to rejected approval.

  16. 16
    Notify Requester of Approval Rejectionsend email

    Informs the requester that the change was rejected by finance and returned.

Fields

  • Requester Name*
  • Requester Email*
  • Vendor Name*
  • Vendor ID / Reference*
  • Fields to Change*
  • Details of Requested Change*
  • +6 more fields

Forms

Vendor Master Data Change Request

8 fields

Data Views

Vendor Change Requests

vendor_change_request_ref, vendor_name, fields_to_change, request_status +1 more

Dashboard Widgets

Vendor Change Requests OverviewRequests by Field Changed

Recommended integrations

Setup the following integrations to extend workflow capability.

  • Send email in the workflow

    AWS SES logoAWS SES
vendor master datasupplier details changebank account changevendor updateprocurement control

Similar Workflows

Similar Categories

FAQs

What happens if a change involves both sensitive and non-sensitive fields?

The workflow flags the entire request as sensitive if any field on it qualifies, routing it through independent verification before it can reach finance approval. You can customise the sensitivity check logic inside assess.one to define exactly which fields trigger verification, so mixed requests are always handled by the stricter path.

Can this handle a vendor change that fails verification but the requester wants to resubmit with corrected evidence?

Yes. When verification fails, the request is set to 'Returned (Verification Failed)' and the requester is notified with the reason, and they can submit a new request with corrected supporting evidence. Each submission is tracked separately so you retain a clear history of what was rejected and why.

What if finance approves a change but verification was skipped by mistake?

Verification is a mandatory gate in the workflow logic, so a sensitive request cannot progress to finance approval without first passing the verification step. This sequencing is built into the routing rules, removing the risk of a sensitive change bypassing independent checks.

Who needs access to this workflow?

You need at least three roles: a requester (typically accounts payable or procurement staff), a verifier independent of the requester for sensitive changes, and a finance approver for final sign-off. All roles are configured inside assess.one with permissions scoped to their step, so verifiers and approvers only see what they need to act on.

How do we customise this workflow for our own approval hierarchy?

You can adjust roles, add extra approval tiers, change notification recipients, and modify the sensitivity criteria directly in assess.one without any coding. Common customisations include adding a second finance approver for high-value vendors or routing verification to a specific team based on vendor region.

What compliance considerations does this workflow address?

Segregation of duties between requester, verifier, and approver directly supports SOX and internal audit requirements around master data controls. Every status change, approval decision, and rejection reason is logged automatically, giving auditors a complete trail without manual record-keeping.

What happens at the finance approval decision point?

Finance reviews the request, the supporting evidence, and the verification outcome, then either approves or rejects it. Approval triggers the vendor record update and a confirmation notification to the requester, while rejection returns the request with a documented reason and notifies the requester immediately.

How long does implementation take?

This template is ready to use — you publish it in minutes and your team can start submitting vendor change requests immediately. There's no lengthy setup project; you configure roles, notifications, and approval logic directly in assess.one as you go.

Can this handle high-volume vendor change requests during a batch update?

Yes, each vendor change request runs as its own independent workflow instance, so multiple requests move through verification and approval simultaneously without blocking one another. This lets finance teams process bulk supplier updates while still applying the same sensitive-change controls to each one.

What if the requester needs to check on a request's status without emailing finance?

Every request has a live status such as Submitted, Under Verification, Under Approval, Approved, or Returned, visible to the requester directly in assess.one. This removes the need for status-check emails and gives requesters real-time visibility into exactly where their request sits.

Ready to use this workflow?

Create a free account and customise this workflow for your business.

Vendor Master Data Change Workflow | assess.one