#vendor-management
Strategies for selecting, managing, and optimizing vendor and supplier relationships for small businesses
Supplier concentration risk — depending on one vendor for over 25–30% of spend or an irreplaceable input — is among the most predictable, least-planned-for small-business threats. A guide to screening your accounts payable for spend and operational concentration, mapping hidden sub-tier dependencies, and building affordable redundancy.
Starting July 1, 2026, South Dakota's SB 221 requires a per-location retail license to sell any nicotine product — including vapes and pouches — while HB 1220 raises the wholesaler/distributor license fee from $150 to $1,000 per location. Unlicensed retail sales carry a $500-per-day fine, and retailers must source only from state-licensed wholesalers.
The median small business now runs five AI tools, and combined monthly spend on unaudited AI subscriptions can reach $3,000–$6,000. A five-step afternoon audit — find every AI charge including shadow spend on personal cards, price in the hours spent babysitting each tool, check seat usage, cut redundant overlap, and force a keep/downgrade/cancel decision — plus a lightweight budget structure that stops sprawl from creeping back.
Business email compromise cost U.S. victims over $3 billion in reported losses in 2025, and 86% of it moves by wire or ACH. Six accounts payable controls — callback verification, dual approval, vendor master file locks — stop fraudulent transfers before the money leaves.
The IRS requires 24% backup withholding when a vendor's TIN is missing or incorrect. This playbook covers collecting W-9s before the first payment, validating them, using the free IRS TIN Matching Program, responding to CP2100 B-notices within 15 business days, and why the new $2,000 1099-NEC threshold for 2026 doesn't change when you need a W-9.
A practical vendor-onboarding playbook for collecting W-9s, passing IRS TIN matching, handling CP2100 and B notices, and avoiding 24% backup withholding and 1099 penalties in 2026.
NYC Local Law 144's AEDT bias-audit, public-summary, and ten-business-day candidate notice rules now carry real enforcement risk after the December 2025 State Comptroller audit — and Illinois HB 3773, California's ADMT regulations, Colorado SB24-205, and Maryland HB 1202 layer additional 2026 obligations on multi-state employers using AI hiring tools.
Twenty US states have comprehensive consumer privacy laws in effect by 2026, twelve require Global Privacy Control recognition, and cure periods are sunsetting in Connecticut, Delaware, Kentucky, Minnesota, and Montana. Here is the minimum viable compliance program for SaaS, e-commerce, and professional service operators.
A 2026 walkthrough of W-9 collection, IRS e-Services TIN matching, the 24 percent backup withholding trigger, CP2100 B-Notice timelines, Section 6721 penalty defense, and W-8BEN handling for small businesses paying contractors.
For tax year 2026, the 1099-NEC reporting threshold rises from $600 to $2,000 and the IRS replaces FIRE with the IRIS portal. A practical workflow for W-9 collection, TIN matching, backup withholding, e-filing, and avoiding per-form penalties that stack under §6721 and §6722.
A practical guide for small businesses on identifying unclaimed property — uncashed vendor and payroll checks, customer credits, gift cards — applying state dormancy periods, mailing due diligence letters, and filing the NAUPA II holder report before Delaware or another state opens a contingency-fee audit.
A founder's guide to SOC 2 Type II in 2026 — what it actually tests, realistic cost ($20K–$35K first year) and timeline (3–12 month observation window), which Trust Services Criteria to scope, the seven controls that trip startups up, and how to keep enterprise deals moving with Type I bridge letters while the audit runs.
