RFPs

RFP vs RFI vs RFQ:what is the difference?

6 min read · Updated June 2026

An RFI, RFQ, and RFP are three procurement documents used at different stages of a buying process. An RFI (request for information) gathers early market and vendor information. An RFQ (request for quotation) compares price for well-defined requirements. An RFP (request for proposal) asks vendors to propose how they would solve a need, scored on more than price alone.

The short answer

All three are formal requests a buyer sends to suppliers, but they ask for different things at different points in the process:

  • RFI: "Tell us about your company and what you can do." Used early, to learn the market and build a shortlist.
  • RFQ: "Here is exactly what we need. What will it cost?" Used when requirements are fixed and price is the main variable.
  • RFP: "Here is our problem. Propose how you would solve it, and on what terms." Used for complex purchases scored on capability, approach, risk, and price.

RFI: request for information

An RFI is an information-gathering exercise, not a buying commitment. The buyer is still scoping the problem and wants to understand who is in the market, what they offer, and roughly how they approach it. Responses are usually short and qualitative.

For a supplier, an RFI is a chance to get on a shortlist and shape how the buyer frames the eventual RFP. Answers should be clear and credible rather than heavily priced, because pricing is rarely the point at this stage.

RFQ: request for quotation

An RFQ is used when the buyer already knows precisely what they want and the main question is cost. Requirements are specified tightly enough that suppliers can be compared on price and commercial terms for a like-for-like deliverable.

RFQs are common for commodities, well-defined services, or repeat purchases. Because the specification is fixed, the response is mostly numbers: unit prices, totals, lead times, and terms.

RFP: request for proposal

An RFP is used for purchases where the solution is not obvious and the buyer wants suppliers to propose an approach. The buyer scores responses against multiple criteria, so the best answer is not always the cheapest one.

RFPs are the most demanding to respond to. They typically include detailed questions about capability, methodology, implementation, security, references, and price, and they often fold in a security questionnaire or due-diligence section.

How they fit together

These documents often run in sequence rather than in isolation. A common pattern is to issue an RFI first to survey the market and shortlist suppliers, then follow with an RFP for a complex solution or an RFQ for a well-specified, price-driven purchase.

  1. 1RFI: explore the market and shortlist credible suppliers.
  2. 2RFP or RFQ: evaluate the shortlist in detail, by proposal or by price.
  3. 3Selection and contract: choose a supplier and agree terms.

What it means when you are the one responding

Read the request type before you start, because it tells you what the buyer is actually deciding. An RFI wants concise, confident information. An RFQ wants accurate pricing against a fixed spec. An RFP wants a persuasive, well-evidenced proposal.

Across all three, the same standard questions recur: who you are, how you operate, how you protect data, and what you charge. A maintained answer library means you reuse approved responses instead of rewriting them each time, whatever the request is called.

Frequently asked questions

What is the main difference between an RFP and an RFQ?

An RFQ asks for price against requirements the buyer has already defined, so suppliers compete mainly on cost. An RFP asks suppliers to propose how they would meet a need and is scored on several criteria, such as capability, approach, risk, and price, not on price alone.

Does an RFI come before an RFP?

Often, yes. Buyers commonly issue an RFI first to understand the market and shortlist suppliers, then send a more detailed RFP (or RFQ) to that shortlist. The two are not always sequential, but an RFI is typically the earlier, lower-commitment step.

Do I need to answer pricing in an RFI?

Usually only at a high level, if at all. An RFI is about information and fit, so detailed pricing is normally requested later in an RFP or RFQ. Indicative ranges can help, but firm quotes are rarely expected at the RFI stage.

Do this in a fraction of the time

Diligio centralises your approved answers, drafts each response grounded in your sources, and independently verifies it before you review. RFPs, DDQs, and security questionnaires, answered from one knowledge base.

Related guides

Due diligence

What is a DDQ (due-diligence questionnaire)?

Due diligence

DDQ vs RFP: what is the difference?

RFPs

The RFP response process: a step-by-step guide

RFPs

How to build an RFP content library

RFPs

The bid/no-bid decision: when to respond to an RFP

Security questionnaires

How to respond to security questionnaires faster

Security questionnaires

SIG vs CAIQ vs VSAQ: the security questionnaires explained

Security questionnaires

Vendor security assessment checklist

Compliance

SOC 2 vs ISO 27001: what is the difference?

Compliance

ISO 27001 readiness checklist: how to prepare for certification

Compliance

SOC 2 for startups: a practical guide

Compliance

GDPR compliance for SaaS: a practical guide

Compliance

HIPAA compliance for software vendors

Compliance

PCI DSS compliance, explained

Compliance

The NIST Cybersecurity Framework, explained

Compliance

ISO 42001, the AI management standard, explained

Compliance

ISO 27017 and ISO 27018: cloud security and privacy, explained

Compliance

ISO 22301 and business continuity, explained

Compliance

DORA, explained

Compliance

Cyber Essentials, explained

Compliance

The CCPA and CPRA, explained

Compliance

NIST 800-53, explained

Compliance

NIST 800-171 and CMMC, explained

Compliance

FedRAMP, explained

Compliance

HITRUST CSF, explained

Financial regulation

BSA/AML, explained

Financial regulation

The FATF 40 Recommendations, explained

Financial regulation

MiFID II and MAR, explained

Financial regulation

Consumer credit and fair lending, explained

Due diligence

Third-party risk management (TPRM): a practical guide