3 minute read

 

Selecting the right document automation and digital transformation supplier to help reduce risks, build trust, and support a secure, reliable, and sustainable supply chain is crucial for any organisation. But how do you check if a potential supplier meets key Information Security, quality, environmental, and ethical standards?

This article will help you consider what to assess when vetting a potential supplier and how to search and confirm a supplier’s credentials so you can make an informed decision as part of your supplier management strategy.

1. Request and Verify Key ISO Certifications

Begin by asking suppliers to provide copies of their relevant ISO certifications. These documents are crucial for proving a supplier’s compliance with recognised ISO standards.

You can also verify these certifications independently online to ensure they are current and valid. The UKAS CertCheck website allows you to verify UKAS accredited Management System certificates to ISO standards. For example, here are links to Datagraphic’s ISO certificate records:

Note that some suppliers – like Datagraphic – may have multiple listings if assessed by different auditors.

Consider also which version (or sometimes called ‘revision’) of the ISO Standard your supplier is certified to. For example, with ISO 27001, the latest version is 2022. ISO 27001:2022 adds a focus on organisational context and leadership. It also introduces new controls for cybersecurity and data protection, reflecting the evolving landscape of Information Security, giving you confidence your supplier complies with the latest criteria set by the Standard. 

Validate a supplier’s ISO certifications here

2. Evaluate Sustainability Commitments

Sustainability is a growing concern, and many suppliers commit to carbon neutrality or net zero. Verify their claims by checking if they publish a Carbon Reduction Plan on their website and if they have independently validated targets. A great example is if a supplier has targets approved by the Science Based Targets initiative (SBTi). SBTi provides organisations with a clearly defined path to reduce emissions in line with the Paris Agreement goals.

The SBTi website provides a searchable dashboard where a supplier’s approved and validated targets can be seen.

Validate a supplier’s SBTi targets here

3. Ensuring Ethical Standards

To ensure your potential supplier meets the standards required to pay its workforce in line with the Real Living Wage, online validation is possible. Further checks for the additional standard Real Living hours, which ensures the supplier commits to decent notice of shifts and a contract of 16 hours or more (so no zero-hours contracts), can also be validated if desired.

Validate a supplier is a Real Living Wage Employer here and a Real Living Hours Employer here

You should also review if your supplier has a published Modern Slavery Statement. Some suppliers don’t meet the criteria for legally publishing a statement, so one might not always be available on their website. However, many proactive suppliers self-elect to make a statement as part of their commitment to preventing exploitation within their supply chain.

To help organisations review their suppliers’ Modern Slavery Statements, the GOV.UK website has a Modern Slavery Statement Registry. This site is currently voluntary, so not all suppliers will be listed. However, it provides a good starting point if you need to check statements for multiple suppliers in one place quickly.

4. Check for B Corp Certification

Last but not least, consider partnering with a B Corp Certified supplier. B Corp values are written into the business as a foundation for making decisions and solving problems. Therefore, B Corp Certification is only awarded to organisations that meet high social and environmental performance standards, accountability, and transparency. The certification assures a supplier is committed to sustainable practices and ethical business operations across every area. B Corp Certified organisations verify that they balance profit with purpose and are legally required to consider the impact of their decisions on all stakeholders, not just shareholders.

Validate a supplier is B Corp certified here

Although your supplier validation checks will go beyond those listed here and will be tailored to the unique needs of your organisation, we hope this article has given you food for thought on some of the supplier credentials you can validate to ensure they meet your data protection, compliance, and ethical standards.

To discuss more on how Datagraphic meets its obligations as a responsible and compliant supplier, please contact us.