Inviting your team

People reach your Vendorica organization by invitation. An invitation is tied to one email address and grants membership of one organization with one role.

Sending an invitation

Invite from Settings → Users. You need the person’s email address and the role you want them to hold. They receive an email with a link that expires; if it does, send a new invitation rather than forwarding the old email — the link is single-use and tied to the address it was sent to.

An invited person who does not yet have a Vendorica account creates one when they accept. An invited person who already has an account joins your organization and can switch between organizations from the account menu.

Choosing a role

The role decides what the person can see and change. Pick the narrowest one that lets them do their job — it is easy to widen later, and widening on request is a much better failure mode than discovering that a vendor owner could edit the risk methodology.

Read Roles and permissions before inviting anyone into an administrative role.

Invitations are membership, not a mailing list

Adding someone so they “get the reports” gives them access to everything their role can reach, including supplier contracts and assessment responses. If a person only needs a figure once a quarter, send them the export.

Removing someone

Remove a member from the same screen. Removing a member does not delete anything they created: their vendors, assessments and comments stay, and the audit trail keeps their name against the actions they took. That is deliberate — a compliance record that quietly loses its author when the author leaves is not a compliance record.

Who owns a vendor after someone leaves

Ownership does not follow the account. If the person you removed was the named owner of vendors or controls, those records keep pointing at them until you reassign them. Filter the register by owner before you remove someone — it takes a minute and saves an audit finding.