What clients check in a vendor pre-qualification compliance review

Clients in energy, construction and infrastructure increasingly ask suppliers to show how conduct is managed before they award work. Questionnaires differ, but they tend to test the same things. Once you know what those are, pre-qualification becomes a routine task rather than a scramble.

What a compliance questionnaire is really asking

Most questions come down to three things: do you have clear standards, do your people know them, and can you show they are applied. A policy on file answers the first question only. Reviewers look for evidence of the other two.

Expect the questions to be specific. Instead of asking whether you have an anti-bribery policy, a reviewer may ask who approved it, when it was last reviewed and how a new employee learns about it. Short, factual answers backed by a document work better than long descriptions.

The documents clients usually ask for

• A Code of Conduct approved by senior management
• An anti-bribery and anti-corruption policy, including gifts and hospitality rules
• A conflict of interest policy and a register of declarations
• A way to raise concerns, and a procedure for handling them
• A due diligence procedure for subcontractors, agents and other third parties
• Records showing employees have read and acknowledged key policies

Evidence that shows a policy is working

• Signed acknowledgements from employees and, where relevant, subcontractors
• Register entries with dates, reviewers and agreed actions
• Minutes showing that senior management has reviewed compliance matters
• A log of concerns raised and how they were closed, with personal details removed
• Supplier files showing that checks were completed before approval

A smaller company is not expected to have the systems of a multinational. Reviewers generally look for arrangements that fit the size and risk of the business, and that are actually followed.

Where submissions commonly fall short

• Policies adapted from a template that still reflect another organisation
• Documents with no owner, version number or review date
• A register that exists but has no recent entries
• Procedures describing approvals that nobody in the business recognises

None of this means a company is doing anything wrong. It usually means the paperwork has not kept pace with the business.

Answering honestly when something is missing

If a control is not yet in place, say so and explain what is planned and by when. A clear action with an owner and a date usually reads better than a vague answer, and it avoids a difficult conversation if the client later asks for proof.

Group companies and joint ventures

If you bid through more than one company in a group, make sure each one can show that the standards apply to it. A policy issued by a parent company should say which entities it covers and who is responsible in each.

How to prepare before the next questionnaire arrives

• Name one person who owns the compliance file and keeps it current
• Gather your policies, registers and procedures in one place
• Compare them against a recent questionnaire from a client you value
• Close the gaps that matter most first, and record what you changed
• Keep a short evidence pack ready, so each new request takes hours and not weeks

A focused diagnostic is a simple way to begin. It reviews one process or topic and gives you a gap register and a roadmap, so you know exactly what to fix before a client asks.

This article is general information and is not legal advice.