Client Due Diligence Questionnaires - The Policies Corporate Clients Ask Suppliers For
Somewhere between the sales conversation and the signed contract, a questionnaire now arrives. Corporate clients ask prospective suppliers for policies, certificates and statements before procurement will onboard them, and for many SMEs it is the first time anyone external has read their documents.
The requests are not random. Each one cascades from a duty the client carries, which is why the list keeps growing and why a good response is worth systematising. This guide covers what gets asked for, why, and how to answer without a compliance team.
The Standard Request List
| Request | What sits behind it |
|---|---|
| Health and safety policy and accident record | The client's own safety duties and insurers |
| Environmental or ESG policy | The client's reporting and net zero commitments cascading to suppliers |
| Modern slavery statement or policy | Clients over £36 million turnover must publish annual statements covering their supply chains |
| Anti-bribery and corruption policy | The Bribery Act's adequate procedures defence reaches associated persons |
| Information security policy and certifications | The client's data protection duties and cyber insurance |
| Equality, diversity and inclusion policy | The client's own commitments and public sector requirements |
| Fraud prevention procedures | The failure to prevent fraud offence covers large organisations' associated persons |
| Business continuity and insurance details | Supply resilience and contract risk |
Why the Questionnaires Keep Coming
Large organisations carry duties they cannot discharge alone. A company publishing a modern slavery statement must describe its supply chain diligence, the Bribery Act's adequate procedures extend to those acting for the business, and the failure to prevent fraud offence has made large clients ask suppliers about fraud controls since 2025.
The result is a cascade, and it flows downhill: our guide to why customers ask for your supply chain policy covers the mechanism in detail, and our fraud prevention guide covers the newest addition to the list.
Where Questionnaires Bite Hardest
Some sectors meet the questionnaire wall constantly. IT companies and MSPs face security questionnaires on almost every enterprise deal, construction firms answer through SSIP schemes, and recruitment agencies field client audits on compliance and vetting.
Professional services are catching up fast, with law firms and accountants asked about fraud, sanctions and information security by their own clients. Whatever the sector, the pattern is identical: the client's duty becomes your paperwork.
Answering Without a Compliance Team
Three habits turn questionnaires from a fire drill into an hour's work. Keep a current, consistent policy set with review dates, because most questions are answered by attaching the right document. Keep a living answer library, so wording written for one questionnaire serves the next. And answer honestly at your scale, because a ten-person business claiming enterprise-grade committees reads as fiction, while a proportionate, genuine framework reads as competence.
The trap to avoid is the one from our guide to writers versus templates: submitting a generic document with another company's assumptions in it ends conversations rather than starting them.
Turning It Into an Asset
Businesses that answer questionnaires well win work from businesses that cannot. Procurement teams remember the supplier whose documents arrived same-day, matched the questions and agreed with each other, and several of our clients treat their due diligence pack as sales collateral rather than compliance overhead.
The pack is finite: for most SMEs, eight to twelve current documents cover the overwhelming majority of questionnaires, which makes building it once cheaper than improvising it forever.
Policy and Procedure Writers
Policy Pros writes due diligence packs for UK suppliers: the policy set, consistent with each other and your contracts, on professional templates with review dates that reassure procurement teams. Our policy writing service builds the set, and our reviewing service repairs one that questionnaires keep exposing.
If a client questionnaire is sitting unanswered in your inbox, contact us for a free quote, or call 020 3951 2875.
Frequently Asked Questions
Which policies do client due diligence questionnaires usually request?
The recurring set is health and safety, environmental or ESG, modern slavery, anti-bribery, information security, equality and diversity, and increasingly fraud prevention, plus insurance and business continuity details. Sector-specific extras follow, such as safeguarding for services touching vulnerable people or security certifications for IT suppliers.
Do small suppliers legally have to have these policies?
Mostly no; the duties sit with the large client, cascading contractually. A small supplier is rarely legally required to hold a modern slavery statement or fraud procedures, but the client can decline to onboard suppliers who cannot evidence them, which makes the distinction academic when the contract matters.
Can we just say a requirement does not apply to our size?
Sometimes, and honesty helps where it is true, such as the £36 million modern slavery statement threshold. The stronger answer pairs the exemption with what you do have, for example a proportionate policy, because procurement scoring usually rewards evidence over exemption.
How should we manage repeated questionnaires efficiently?
Maintain a current policy pack with review dates, keep an answer library of approved wording, and nominate an owner so responses stay consistent. Most SMEs find eight to twelve documents cover nearly every questionnaire, and the same pack serves tenders and accreditations too.
