Vendor master data management sounds like housekeeping: a supplier moves, changes a bank account or sends a new price list, and someone updates the record. But vendor master data management is also the door that invoice fraud walks through, and a wrong price list quietly changes every order after it. So the process splits. Receiving requests, preparing the change and logging it are rule work. Reading the attachments is a fair job for AI. Verifying who asked and approving the change stay with people. The first thing to fix is the intake: no changes from a reply-all email.
What each step needs
01● Standard automation
Receive change requests through one channel
Suppliers submit changes through a portal or form with fixed fields and required attachments. Emails asking for changes are answered with a link to that channel, which stops informal requests from becoming data entry.
⛨The form records who submitted, when, and from which supplier account.
02● AI candidate
Read the request and prepare the change
AI extracts the new values from the attachments, such as a bank letter or a price list, and presents a side-by-side of the current record and the proposed change with the source highlighted.
⛨The proposed diff is a draft for review; nothing is written to the vendor master at this stage.
03● Keep human
Verify the requester and the evidence
A person confirms the change through a channel you already trust, such as a call to a known contact number on file, never the number in the request. This is the step that catches impersonation.
⛨Bank detail changes require a call-back to a previously recorded contact, without exception.
04● Keep human
Approve under segregation of duties
Someone other than the person who prepared the change approves it, with the evidence in view. High-impact changes, such as bank accounts or contract prices, can require a second approver.
⛨Requester, preparer and approver are different people, and the system enforces it.
05● Standard automation
Apply the change and log it
The approved values are written to the ERP with the effective date, the approver and the evidence attached. Downstream systems receive the update from the master record, not from a copy.
⛨Every change is reversible and the audit trail shows the before and after values.
06● Keep human
Decide on price and term changes
A new price list or payment term is a negotiation, not a data update. Procurement reviews the proposal against the contract and decides whether to accept, push back or escalate.
⛨Price changes take effect only after a recorded commercial decision.
A sensible first experiment
Route only bank-detail and address changes through the new flow for one month. Count requests that arrive with incomplete evidence, the time from request to approval, and any change stopped by the call-back. Add price lists once the verification habit holds.
The trap to avoid
Treating an emailed “we changed our bank account” as a data-entry task. That is the classic route for invoice fraud, and speed makes it worse.
Questions teams ask
Can AI detect fraudulent supplier change requests?
AI can flag signals: a bank account in a different country than before, a request from a new email domain, urgency in the wording, or a letterhead that does not match earlier documents. Those flags are useful, but the control that actually stops fraud is a person calling a known contact. Use AI to prioritise verification, not to replace it.
Who should approve changes to supplier records?
Someone who did not request or prepare the change and who can see the evidence. For low-risk fields, one approver in procurement or finance is enough. For bank details, tax numbers and contract prices, many companies require two approvers and a documented call-back. Write the rule down and let the system enforce it rather than relying on habit.
How does this fit into vendor management as a whole?
Vendor management covers selecting, contracting, evaluating and offboarding suppliers. Master data changes are the operational core underneath it: if the record is wrong, evaluations, payments and compliance checks are wrong too. Getting the change process right is usually the cheapest improvement in the whole vendor management chain.
Illustrative workflow guidance by Arcgent. Each business needs its own assessment. No integration or savings claim has been verified for your systems.