Reviewing renewal data before deactivating a vendor

A vendor should be deactivated only after someone has confirmed what the renewal data actually shows: which records are current, which have lapsed, and which were never verified in the first place. Pull the vendor's full record set before touching its status, because deactivation hides the history that explains why the decision was made.

Pull the full record set first

Open the vendor's file and list every certificate or credential on it, with the expiry date, the verification date, and who confirmed it. Separate the list into three piles: current, lapsed, and unverified. Do not merge lapsed and unverified — they lead to different decisions. A lapsed record means the vendor had a credential and let it run out. An unverified record means no one ever checked whether it existed.

Apply a hold rule, not a deletion rule

A workable rule: deactivate only when every record is either current or has a documented replacement. If any record is lapsed with no replacement, place the vendor on hold and keep the record visible. If a record is unverified, treat it as missing until someone attaches the paperwork.

Record state	Action
Current, verified	No action
Lapsed, replacement on file	Update the record, then proceed
Lapsed, no replacement	Hold; do not deactivate
Unverified	Hold until paperwork is attached

A worked case

Suppose a supplier called Halbrook Industrial shows three records. Its liability certificate expired a month ago but a renewal PDF dated last week sits in the file. Its equipment inspection is current. Its driver authorization was never verified — the field is blank.

Suppose the reviewer planned to deactivate the vendor because the top-line status read "expired." After opening the records, the picture changes: the liability certificate has a valid replacement waiting to be entered, and the driver authorization is the real gap. The reviewer updates the liability record with the renewal date, marks the driver authorization as unverified, and keeps the vendor active but flagged. The change to verify is the status line: it should reflect the weakest record on file.

When a vendor is being retired anyway

If the vendor is leaving for commercial reasons, the renewal data still matters for the handoff. Record which credentials were current at the point of deactivation so a successor or auditor can see the vendor was compliant when the relationship ended. Deactivation should follow the record review, not replace it. Once the review is complete, the observable change is that the vendor's status reflects the weakest record on file, and the reviewer can point to the exact document behind that status.

Related: Cert Expiry Tracker features.