Verify the legal counterparty
Confirm the exact legal name, registration details, tax identifiers where relevant, registered address and authorised signatory. The brand name on a proposal may not be the entity that will invoice or contract with you.
Validate capability, not only presentation
Ask for evidence relevant to the actual scope: team structure, delivery process, references, certifications where material, sample reporting, service locations and escalation contacts. Verify references independently for high-impact vendors.
Review information-security exposure
Map what systems, personal data, credentials, source code or confidential information the vendor can access. Contractual confidentiality is only one layer; access controls, logging, retention and offboarding should match the risk.
Understand commercial dependencies
Check payment terms, taxes, currency, renewal, minimum commitments, subcontracting, termination rights and transition support. A low monthly price can create expensive switching risk if data, systems or knowledge cannot be transferred cleanly.
Create a risk-tiered process
Do not apply the same diligence to an office-catering vendor and a provider with production-system access. Define low, medium and high-risk vendor tiers and require stronger legal, security and financial review as exposure increases.
Match diligence to vendor risk
A caterer, recruitment agency, software provider and payroll processor do not create the same exposure. Classify vendors by access to money, personal data, confidential information, systems and business-critical operations. Higher-risk vendors should receive deeper legal, security, financial and reference checks. This keeps the process proportionate while ensuring that convenience does not replace diligence where failure would be costly.
Verify delivery ownership
Ask who will actually perform the work, where the team is located, whether subcontractors are used and who owns escalation. A polished sales presentation may not describe the delivery team assigned after signature. For ongoing services, meet the proposed account or operations lead and understand backup arrangements. The goal is to know the counterparty and the people responsible for performance.
Plan the exit before the start
Good vendor selection includes an exit path. Define how data, credentials, documents, equipment or unfinished work will be returned; what transition support is required; and how access will be removed. For technology and data vendors, test whether information can be exported in a usable form. Exit planning reduces dependency and gives both sides clearer expectations during the relationship.
Separate capability checks from commercial negotiation
A low quote or persuasive sales presentation should not substitute for evidence that a vendor can perform the required work. First define the scope and ask each shortlisted provider for comparable information about delivery responsibility, staffing, escalation, security, references, documentation and continuity. Only then is price comparison meaningful.
For services that will support a Gurgaon operation repeatedly, also identify the person who will own the relationship after onboarding. Clarify how issues are logged, who can approve changes and what happens if the primary contact is unavailable. Overseas headquarters should be able to understand the service status without depending on informal conversations or one individual’s memory.
Create a vendor file that survives staff changes
Keep the final scope, proposal, approvals, contract, key contacts, renewal dates and material diligence records together. This is especially useful when the US team is supervising the relationship from another time zone. A well-maintained vendor file allows a new manager to understand why the supplier was selected, what was promised and which issues still require attention.
Frequently asked questions
What should an overseas company verify about a Gurgaon vendor?
Verify the legal counterparty, authorised signatory, delivery team, relevant capability, references, commercial terms and any access to sensitive systems or data.
Do all vendors need the same level of due diligence?
No. Apply deeper checks to vendors with access to money, personal data, confidential information, systems or business-critical operations.
Why should vendor exit terms be reviewed before signing?
Clear data return, access removal, transition support and termination terms reduce dependency if the relationship later needs to end.