Keeping Supplier Records and Contracts in Order
By CodexierPublished 4 min read
Small companies accumulate suppliers quietly: software subscriptions, telecom, leasing, insurance, cleaning, IT support, accountants. Contracts sit in email attachments, notice periods are unknown and renewals happen automatically. The result is paying for things nobody uses, missing the window to renegotiate, and lacking the data protection agreements GDPR requires. You do not need a contract management system to fix this. You need a register, reminders and a yearly habit.
A supplier register
A spreadsheet or a simple database is enough for most small companies. The value is in having one place, kept current, rather than in the tool. Start by going through the last twelve months of supplier invoices in your accounting system; every recurring payment is a candidate for the register.
| Field | Why |
|---|---|
| Supplier and service | What you are actually buying |
| Internal owner | Who decides whether to keep it |
| Cost and billing period | Monthly, yearly, per user; compare against use |
| Start date and term | When the current period ends |
| Notice period and deadline | The date that actually matters |
| Auto-renewal and its length | Whether silence means another year |
| Personal data and processor agreement | Whether GDPR requires an agreement, and if it exists |
| Link to contract | So nobody has to search the inbox |
Contract dates and notice periods
Between businesses, Swedish law leaves notice periods and renewal terms largely to the contract, and consumer protection rules do not apply. Many B2B contracts renew automatically for a full new term, often a year, unless notice is given one to three months before the end. Telecom, leasing, alarm and software contracts are common examples. The notice deadline is therefore the date to track: miss it by a day and you may be bound for another full period.
- Read the renewal clause, not just the start date and price.
- Calculate the last day to give notice and write it in the register.
- Note how notice must be given: in writing, by email, via a portal.
- Keep proof that notice was sent and received.
Renewal reminders
A register nobody looks at does not help. Put reminders in a shared calendar or task tool, set well before each notice deadline so there is time to evaluate, compare alternatives or renegotiate. Assign each reminder to the supplier's internal owner, with a second person copied.
Three months before
For large or strategic contracts: time to request competing offers.
Four weeks before
Decide: keep, renegotiate or terminate.
One week before
Last check that notice has been sent if the decision was to leave.
Processor agreements
Under GDPR, a supplier that processes personal data on your behalf, such as your CRM, email platform, payroll service, IT support or website host, is a data processor, and you need a written data processing agreement (personuppgiftsbiträdesavtal) with them. Most larger software vendors include one in their terms; smaller suppliers may need to sign one. Record in the register whether each supplier processes personal data, whether an agreement exists, and whether data leaves the EU. This also feeds your record of processing activities.
Annual review
- Compare the register against twelve months of supplier invoices; add anything missing.
- For each subscription, check actual use: number of users, logins, features used.
- Cancel or downgrade what is unused, respecting notice periods.
- Confirm processor agreements are in place and up to date.
- Update owners if people have changed roles or left.
- Keep contracts and correspondence in line with your retention rules; contracts that support accounting entries follow the bookkeeping retention period.
Building the register is a well-defined task that suits outsourcing; our back-office and data entry support does exactly this kind of work, and our guide to documenting routines before delegating shows how to hand it over. When you do not need us: with ten suppliers and one person who knows them all, a spreadsheet and an afternoon are enough. If the contracts are scattered across inboxes and former employees, book a free call.
Frequently asked questions
Do consumer rules on cancellation apply to my company's contracts?
No. Contracts between businesses follow what the parties agreed, within general contract law. That is why automatic renewals with long notice periods are common and enforceable in B2B.
Which suppliers need a data processing agreement?
Any supplier that handles personal data on your behalf: CRM, email marketing, payroll, accounting software, hosting, IT support, and similar. Check whether it is included in their terms or must be signed separately.
How long should we keep old contracts?
At least as long as claims can be made under them, and longer if they support accounting entries, where the bookkeeping rules on retention apply. Ask your accountant how your contracts should be handled.
Is there software for this?
Yes, from contract modules in accounting and HR systems to dedicated contract management tools. For a small company a well-kept spreadsheet with calendar reminders often works just as well.
Contracts scattered everywhere?
Tell us roughly how many suppliers you have. In fifteen minutes we will outline how to build the register and who should own it.
Book a free 15-minute call