Back to all templates
Agency & service-business onboarding

Client Onboarding Questionnaire Template

Capture everything you need before the kickoff call — business basics, stakeholders, brand, tech stack, goals, billing terms, and the DPA signature — in a structured questionnaire that replaces the email-and-Slack discovery scramble. Used by agencies, freelancers, consultants, accountants, and lawyers.

Free — included in every plan

Client Onboarding Questionnaire Template

Live preview — try the fields below.

No fields to preview.

Who this template is for

Client onboarding is one of those workflows that decides whether the next six months go smoothly or get re-litigated in a Slack DM at 11 PM on a Tuesday. The agencies and freelancers who treat onboarding as a ritual — structured, written, signed — close engagements faster and renew at higher rates than the ones who run discovery as a series of unrecorded video calls. This template captures everything you need before the kickoff — legal business details (W-9 and EIN for US, CIF and modelo 036 confirmation for Spain, CNPJ and inscrição estadual/municipal for Brazil), stakeholder map (decision-maker, approver, day-to-day contact, billing contact), brand assets (logo files, brand guidelines URL, brand voice notes, audience definition), technical environment (domains, hosting, CMS, analytics tags, current vendors), engagement goals (30/60/90-day, success metrics, KPIs), billing terms acknowledgment, GDPR/LGPD Data Processing Agreement signature, and credential-handoff preference (1Password Business shared vault, LastPass Teams, Bitwarden Send, encrypted PDF — never email plaintext). It is the structured alternative to HoneyBook, Dubsado, Bonsai, Tave, 17hats, Plutio, SubRetro, and Productive — for teams that want the questionnaire layer without the full CRM commitment, or that already run on Asana, ClickUp, Notion, Linear, or Trello and need a front door before the work starts.

From signed engagement to kickoff-ready in one structured questionnaire

Client receives a personalized link after the engagement letter is signed (or after the deposit clears, depending on your terms). The questionnaire opens with business basics — legal name (with separate DBA / trading-as field), tax ID (W-9 for US, CIF for Spain, CNPJ for Brazil), billing address, primary billing contact, payment method preference (ACH, SEPA, PIX, credit card via Stripe/Mercado Pago/MoIP). A stakeholder map captures the decision-maker (signs off on deliverables), the approver (reviews before sign-off), the day-to-day contact (manages communication), and the technical/operations contact (provides credentials, tracks technical changes) — with their roles, emails, time zones, and preferred communication channel. Brand and creative section captures logo files (PNG, SVG, source AI/Sketch/Figma), brand guidelines URL or upload, brand voice notes, target audience definition, competitors to differentiate against, and any 'do not do' patterns from prior agency work. Technical section captures the URLs and platforms — main website, staging environment, hosting provider (Vercel, Netlify, AWS, GCP, Azure, WP Engine, Kinsta, Locaweb, KingHost), CMS (WordPress, Webflow, Contentful, Sanity, Strapi, RD Station CMS), analytics setup (GA4, Mixpanel, Amplitude, PostHog, Segment, Plausible, Fathom), ad platforms (Google Ads, Meta, LinkedIn, TikTok), CRM (Salesforce, HubSpot, Pipedrive, RD Station CRM, Agendor, PipeRun), email platform (Klaviyo, Mailchimp, Brevo, ActiveCampaign, RD Station Mkt). Credential handoff: explicit dropdown for the secure method — 1Password Business shared vault, LastPass Teams, Bitwarden Business, Dashlane Business, Keeper, encrypted PDF with separate-channel password — never plaintext email or Slack DM (which is the #1 onboarding security failure). Goals section captures the 30/60/90-day milestones, success metrics, KPIs to move, anti-goals (what counts as failure), and any non-public sensitivities (M&A in flight, layoffs coming, regulatory investigation). Engagement terms: client confirms the scope as understood, acknowledges the change-order process, acknowledges the cancellation and refund terms, and signs the GDPR Data Processing Agreement (or LGPD DPA in Brazil) electronically. On submission, the workflow creates the project in your project management tool (Asana, Linear, ClickUp, Jira, Notion, Monday), drops the brand assets into a shared Google Drive or Dropbox folder, creates the shared 1Password vault, schedules the kickoff calendar event, and sends an internal Slack notification to the assigned team.

What's included

Every field exists because some agency or freelancer has been burned by its absence — usually at week 3 when the client asks why the logo on the deliverable does not match their brand guidelines, or at month 4 when the billing dispute reveals that the original scope was 'whatever we discussed' rather than a written brief.

Service businesses using onboarding questionnaires

  • Marketing, branding, and creative agencies

    Brand-first onboarding where the brand questionnaire — voice, audience, competitors, anti-patterns from prior agency work — is the actual creative brief. Reduces the 'show us what you do not like' moment at week 3 from a creative-direction reset to a documented expectation match. Pairs with the technical section for performance-marketing engagements that need ad accounts, analytics, and CRM integration day one.

  • Web and software development agencies

    Technical onboarding where the credential handoff, repo access, hosting environment, and deployment pipeline get captured before the dev team is assigned. Reduces the 'what's the staging URL?' Slack DM at sprint 2 to a documented spec. The form's explicit credential-method field (1Password Business / LastPass Teams / Bitwarden Send / encrypted-PDF) prevents the most common SOC2 finding in agency engagements — credentials in plaintext email.

  • Accounting, bookkeeping, and tax practices

    Discovery for client books — entity type (sole prop, LLC, S-corp, C-corp; SL, SA in Spain; LTDA, S/A, MEI in Brazil), tax year, accounting basis (cash vs. accrual), accounting platform (QuickBooks Online, Xero, NetSuite, Sage 50, A3 Eco, Holded, Quipu, Conta Azul, Omie, Bling), prior accountant handoff, payroll provider, sales channels (Stripe, Shopify, Mercado Livre, Amazon FBA, RD Marketplace), and bank/credit-card access method (read-only feed via Plaid/Belvo, monthly CSV export, full account credentials via secure handoff). Plus IRS Form W-9 for 1099-NEC payees, modelo 036 confirmation for Spanish autónomos, and the cartão CNPJ for Brazilian PJs.

  • Legal practices and consulting firms

    Engagement intake with conflict-of-interest disclosure (a Bar Association requirement in most US jurisdictions, a Colegio de Abogados requirement in Spain, an OAB Provimento 188/2018 requirement in Brazil), KYC fields where applicable (financial advisory, immigration law), engagement letter acknowledgment, fee structure confirmation (hourly, flat-fee, contingency, retainer with replenishment terms), and the attorney-client privilege scope documentation. For Brazilian firms, includes the procuração (power of attorney) request for case-handling authority and the cartão CNPJ confirmation for corporate clients.

  • Coaches, therapists, and personal-brand consultants

    Discovery for coaching engagements with goals (career, life, business, performance), prior coaching history, current obstacles, success definitions, and the ethics/scope acknowledgment that distinguishes coaching from therapy (an ICF-credentialed coach in the US, a Federación Internacional de Coaching España member in Spain, a Federação Brasileira de Coaching member in Brazil follows a specific scope-of-practice statement that captures consent). For therapists, the questionnaire incorporates the informed-consent and emergency-contact requirements under HIPAA (US), LOPDGDD Art. 9 (Spain), and Resolução CFP 11/2018 (Brazil).

  • SaaS implementation and customer-success teams

    Customer-side discovery for SaaS implementations — current stack, integration requirements, SSO provider (Okta, Microsoft Entra ID, Google Workspace, OneLogin, JumpCloud), data migration scope and source format, custom fields and workflows, training requirements, and the go-live target date. Captures the technical and organizational readiness signals that determine whether implementation goes smoothly or stretches into the support ticket queue six weeks later.

Tailor it to your engagement

Every service business has its own intake quirks. Configure the business-basics section for your jurisdictions — W-9 collection for US 1099-NEC payees, modelo 036 / modelo 037 confirmation for Spanish autónomos with VAT registration, cartão CNPJ for Brazilian PJs with optante do Simples Nacional confirmation. Add a fee-structure section that branches based on engagement type — hourly with budget cap, flat-fee with milestone billing, retainer with auto-renewal terms, contingency with success-fee percentage. Configure the credential-handoff dropdown to match what you use — 1Password Business is the most common for agencies, LastPass Teams or Bitwarden Business for tech-forward teams, Keeper or Dashlane Business for enterprise-leaning. Add a 'who already knows about this engagement' field for legal and consulting work where confidentiality matters — sometimes the engagement is announced to the client's team, sometimes only the executive team knows, sometimes only the procurement function knows. Add a 'cancellation and refund terms acknowledgment' if you have specific terms beyond the engagement letter (most agencies do — 30-day notice with month-in-progress payable, no refund of deposit, etc.). For GDPR/LGPD compliance, include the explicit Data Processing Agreement signature with the categories of personal data being processed, the legal basis, the retention period, and the data subject rights — for client work that involves processing the client's customer data, the DPA is mandatory and the questionnaire is the natural place to capture the signature.

Client onboarding FAQs

Those are full creative-pro CRMs — they bundle the onboarding questionnaire with proposals, contracts with e-signature, invoicing, scheduling, time tracking, and pipeline management. Pricing is $25–$80 per month (HoneyBook is $39–79, Dubsado is $40–50, Bonsai is $25–80, Tave is $25–40, 17hats is $15–50, Plutio is $19–39). This template handles the onboarding questionnaire itself — structured discovery, brand and tech capture, credential handoff, DPA signature — without the full CRM commitment. It is what you reach for if you are already running invoicing through Stripe or Quaderno, contracts through DocuSign or HelloSign, scheduling through Calendly, and project management through Asana / ClickUp / Linear / Notion / Trello, and you only need the structured intake layer. Many agencies use both — the CRM for the proposal-and-contract phase and this form for the deep discovery after signing, because creative-pro CRM onboarding questionnaires are intentionally generic and rarely cover the technical/credential/DPA territory.
Yes — the business-basics section is configured to capture each jurisdiction's tax-identifier and the relevant validation. For US clients, the form captures the EIN or SSN (for sole proprietors), entity type (sole prop, LLC, S-corp, C-corp, partnership, nonprofit 501(c)(3)), and prompts for W-9 upload (the IRS Form W-9 is what you need on file before issuing a 1099-NEC at year-end for payments over $600 to non-employee contractors). For Spanish clients, the form captures the NIF/CIF, validates the format (8 digits + 1 letter for individuals/autónomos, letter + 7 digits + control char for entities), confirms the IVA registration status (modelo 036 or modelo 037 confirmation), and asks for the actividad económica IAE code for invoicing. For Brazilian clients, the form captures the CNPJ, validates the format and check digits, confirms the optante do Simples Nacional status (which affects how the agency invoices and whether ISS retention applies — typically 5 % of the service value), captures the inscrição estadual (if applicable for state taxes on goods) and inscrição municipal (for ISS on services), and requests the cartão CNPJ upload. This is what your accounting team needs for 1099 issuance (US), modelo 347 declaración anual de operaciones with terceros (Spain), or the DCTFWeb and EFD-Reinf (Brazil) filings.
The credential-handoff field is an explicit dropdown of secure methods, with plaintext email and Slack DM not as options. The standard recommendations are: (1) 1Password Business shared vault — most common for agencies, you send the client an invite to a vault scoped to their account credentials, they add the credentials directly, and the credentials are end-to-end encrypted with separate sharing controls; (2) LastPass Teams or Enterprise — similar shared folder model, encrypted at rest; (3) Bitwarden Business with Bitwarden Send for one-time credential transfers — open-source, self-hostable if your client has specific compliance requirements; (4) Dashlane Business or Keeper for enterprise-leaning teams; (5) encrypted PDF with the password sent via a separate channel (SMS, voice call) — works for one-off engagements that do not justify shared password manager setup; (6) for technical credentials like SSH keys or API tokens, GitHub/GitLab deploy keys or service-account creation with the access scoped to the agency's specific service account. The form captures the chosen method and creates the corresponding shared resource (vault invite, send link, etc.) on submission. This is the #1 SOC 2 finding in agency engagements, so getting it right at onboarding pays off if you ever pursue SOC 2 / ISO 27001 / Brazilian LGPD certification.
A Data Processing Agreement (DPA) is required whenever the agency or service provider processes personal data on behalf of the client. Under GDPR Article 28, the controller (client) and processor (agency) must have a written contract that includes specific clauses — subject matter and duration of processing, nature and purpose, type of personal data, categories of data subjects, controller obligations and rights, and processor obligations. Under Brazilian LGPD Article 39, an equivalent agreement is required when a third party processes data on behalf of the controller. The DPA is not a generic privacy policy — it is a separate, specific document. For agencies, the onboarding questionnaire is the natural place to capture the DPA signature electronically, alongside the explicit listing of (1) what personal data the agency will process (customer email lists for a marketing engagement, employee records for an HR consulting engagement, prospect data for a sales-ops engagement), (2) the legal basis the client is relying on (consent, contract, legitimate interest), (3) the retention period for the agency's copy of the data after engagement ends, and (4) the sub-processors the agency uses (which is required disclosure — Google Workspace, AWS, Stripe, SendGrid, Mailgun, etc.). The form's signature block produces the timestamped, audit-grade record that the client's DPO or the AEPD/ANPD/AEPD/CNIL would request in an inquiry.
Yes — on submission, the workflow creates a project record in your tool with the questionnaire data pre-populated. For Asana, a project with the client name, sections for each engagement phase, custom fields for stakeholder map and key dates, and tags for engagement type. For Linear, an issue or project with the brief pre-populated, the team assigned, and the GitHub/GitLab repository linked. For ClickUp, a List with custom fields for brand assets, technical stack, credentials, and goals, with the kickoff task auto-assigned. For Notion, a page in your client database with sub-pages for discovery, deliverables, and milestones, pre-populated from the questionnaire. For Jira, a project with epics for each milestone and the brand-guidelines and DPA attached as confluence pages. For Monday.com, a board with the appropriate template (creative project, dev project, consulting engagement) and the columns mapped to questionnaire fields. The form's webhook on submission also drops the brand assets into your shared Google Drive or Dropbox folder (in the per-client directory), creates the shared 1Password vault if you selected that handoff method, sends a Slack notification to the assigned team channel, and schedules the kickoff calendar event with the stakeholders captured in the form.

Related templates

Expense Report Form Template

Capture business expenses with line-item detail, receipt uploads, project allocation, and manager approval — built for IRS Publication 463 accountable-plan

View template

Project Proposal Form Template

Capture project proposals with the PMBOK Project Charter skeleton — business case, scope, milestones, capex vs opex breakdown, stakeholder RACI, risk register

View template

Room Booking Form Template

Reserve meeting rooms, huddle spaces, studios, coworking suites, and event venues with a structured booking form — captures requester, attendees, equipment

View template

Ready to build forms that work for you?

Create your first form in minutes. Your submissions will thank you.

Be first in lineLimited early accessSet up in 2 minutes