Vendor due diligence
A GST certificate and a working website confirm that a vendor filled out a form. This confirms the entity is real, who controls it, and whether the people it deploys on your account have been checked at all.
What goes wrong without it
A GST certificate and a working website confirm that a vendor filled out a form. They do not confirm the company is real, solvent, or who it says it is.
A registered name with no real operations behind it, discovered only after the contract is signed and the advance is paid.
A pending suit or a history of disputes with other clients, never mentioned during onboarding.
A GSTIN that does not match the entity on the invoice, or a registration that lapsed months ago.
Who actually controls the vendor, behind a director who is a nominee for someone else.
The vendor's own hiring bar, applied to the people who end up on your premises or your systems.
A vendor that cannot meet payroll is a vendor that cannot deliver, and it rarely shows up before the first missed milestone.
What is in a vendor due diligence check
Two layers: the entity itself, and the people it puts on your account.
Entity existence, MCA filings, GST status and beneficial ownership are read from public filings and registries, not a declaration. Directorship, litigation, adverse media, bank account and credit are run the same way they are for a candidate. Where the engagement includes people the vendor deploys on your site or systems, their identity and employment are verified to the same standard as a direct hire.
A GST certificate is not due diligence
Two ways to satisfy a vendor onboarding checklist. Only one of them tells you anything about the company.
Self-submitted documents
A GST certificate, a PAN card and a company website, provided by the vendor itself.
- Confirms the vendor filled out a form, not that the entity behind it is solvent or real.
- Litigation, adverse media and beneficial ownership are never in the pack, because nobody is required to disclose them.
- The people the vendor sends to your site are whoever they choose to send.
GVS vendor due diligence
The entity checked at the registry, not from what the vendor chose to hand over.
- MCA, court and global database records read directly, independent of anything the vendor submitted.
- Directors, beneficial owners and litigation history surfaced whether or not the vendor mentioned them.
- The staff the vendor deploys on your account verified to the same standard as your own hires.
How it runs
Entity checks and people checks move on different tracks, and finish at different times.
Registered name, CIN and GSTIN confirmed against MCA and GST records before anything else runs.
Directorship, DIN, MCA filings, court records and global database screening, read directly from each source.
Identity and employment history for the individuals the vendor puts on your premises or systems, run to the same standard as a direct hire.
Entity findings and staff findings land together, so procurement and security are reading the same case.
Entity checks draw on public filings and registries, not personal consent. Where the engagement extends to the vendor's own staff, the same consent-first standard applies as it does for a direct hire, and those individuals are never charged for a check. Retention, purpose limitation and the grievance route are set out in the Trust Centre.
Related pages
What a director directs, and the standing of the number behind it, read from MCA records.
Directorship and DIN Leadership verificationThe same depth of scrutiny applied to the people rather than the companies they bring with them.
Leadership verification Global databaseSanctions, regulator and adverse media screening, with every potential match adjudicated.
Global database check