What is a “vendor”?
A vendor is a company or individual that supplies goods or services to another business — distinct from “customer” (which receives) and “partner” (which collaborates on shared outcomes). In modern startup operations, vendor relationships span software (SaaS subscriptions), professional services (legal, accounting, consulting), cloud infrastructure, marketing, and any third-party that the company pays for inputs to its own product or operations.
Vendor categories in startups
- Technology vendors: AWS, Google Cloud, payment processors, observability tools, CRM, support tools.
- Professional services: law firms, accountants, recruiters, marketing agencies.
- Marketing and growth: ad platforms, content creators, lead-generation services.
- HR and operations: payroll providers, benefits administrators, office services.
- Strategic vendors: partners who are technically vendors but provide critical capability (e.g., a hosting partner with deep SLA obligations).
Vendor management essentials
- Contracts: MSA + SOW or order forms; clear termination rights, IP ownership, data protection.
- SLA and uptime commitments: for critical vendors, documented service levels with credits or termination for non-performance.
- Data protection: DPA (data processing agreement) for vendors processing personal data — required under GDPR and KVKK.
- Spend management: regular review of vendor spend; “shelfware” (unused subscriptions) accumulates fast.
- Concentration risk: over-reliance on one vendor creates leverage problems and operational fragility.
Vendor vs. related concepts
- Vendor vs. supplier: in many usages they are synonymous; “supplier” leans toward physical goods, “vendor” toward services and software.
- Vendor vs. partner: vendor relationships are commercial; partner relationships imply shared incentives or co-marketing.
- Vendor vs. contractor: a contractor is typically an individual providing services; a vendor is a corporate entity.
Türkiye’de vendor yönetimi
Türk startup’larında uluslararası vendor sözleşmeleri (AWS, Stripe, OpenAI) Türk tarafından imzalanırken KVKK uyumlu DPA gereklidir. KKTC veya AB ülkesine veri transferi standart sözleşme maddeleri (SCC) gerektirir. Yerli vendor sözleşmeleri (Iyzico, PayTR, Logo, Mikro) TBK ve TTK kapsamında düzenlenir; e-Fatura, e-Arşiv ve KDV uyumu vendor seçim kriterleridir.
Do: review vendor list quarterly; rationalise duplicate tools; renegotiate above-market terms with established vendors.
Don’t: sign vendor agreements with auto-renewal escalators without diary entries — silently auto-renewed contracts are the canonical source of waste.