Vendor & Third-Party Compliance Policy

Policy Statement

The Company recognizes that its reputation, integrity, and operational success depend on the ethical conduct and compliance standards of its vendors and third-party partners. This Vendor & Third-Party Compliance Policy establishes the principles, standards, and due diligence procedures that all vendors, suppliers, contractors, consultants, and service providers must adhere to while conducting business with the Company.

Objective

• Ensure that all vendors and third parties comply with applicable laws, regulations, and ethical standards.
• Promote responsible business practices, transparency, and integrity across the supply chain.
• Minimize risks related to corruption, data privacy, and business continuity.
• Establish procedures for onboarding, monitoring, and evaluating vendor compliance.

Scope and Applicability

This policy applies to all external entities and individuals providing goods, services, or support to the Company It covers vendors, suppliers, consultants, contractors, agents, intermediaries, and outsourcing partners.

Vendor Code of Conduct

Vendors and third parties are expected to adhere to the following principles when doing business with the Company:

• Legal Compliance: Adhere to all applicable local, national, and international laws and regulations.
• Ethical Practices: Conduct business with integrity, honesty, and fairness.
• Anti-Corruption: Strictly prohibit bribery, kickbacks, or facilitation payments.
• Labor Standards: Ensure fair wages, safe working conditions, and zero tolerance for forced or child labor.
• Environmental Responsibility: Follow sustainable practices and minimize environmental impact.
• Data Privacy & Security: Protect Company and customer data as per contractual and legal obligations.

Vendor Due Diligence

The Company shall perform due diligence on all vendors and third parties before engagement. The due diligence process includes assessing the vendor's ownership structure, financial stability, regulatory compliance, and reputation.

• Background checks for legal, financial, and reputational risks.
• Verification of certifications, licenses, and statutory registrations.
• Evaluation of data protection, cybersecurity, and business continuity measures.
• Screening against sanctions, PEP, and watchlists (e.g., UN, OFAC).

Contractual Obligations

All vendor contracts shall include clauses requiring compliance with this policy, applicable laws, and the Company's Code of Conduct. Contracts shall define obligations related to confidentiality, data protection, anti-bribery, and audit rights.

Vendor Monitoring and Audits

The Company shall periodically review vendor performance and compliance through assessments and audits. Non-compliance or violations of this policy may result in corrective action, suspension, or termination of the relationship.

Anti-Bribery and Corruption

Vendors shall not offer, promise, or give any gifts, payments, or benefits to Company employees or officials to gain business advantages. All business dealings must be transparent and documented. Any attempt to influence decision-making through corrupt practices will result in immediate termination.

Data Privacy and Information Security

Vendors and third parties with access to Company data must implement robust information security measures. They shall comply with the Digital Personal Data Protection (DPDP) Act, 2023, and follow the Company's Information Security Policy. Breach of data protection obligations must be reported immediately to the Compliance Officer.

Conflict of Interest

Vendors shall disclose any situation that may create an actual or perceived conflict of interest with the Company. Examples include familial or financial relationships with Company employees or involvement in competing businesses.

Reporting Violations

Vendors and employees are encouraged to report any unethical or non-compliant behavior observed within the supply chain. Reports can be submitted via email to compliance@yourcompany.com or through the Whistleblower channel. All reports will be investigated confidentially, and retaliation against reporters is prohibited.

Consequences of Non-Compliance

Any vendor found violating this policy may face corrective action, including suspension, contract termination, or blacklisting. Severe breaches may result in legal proceedings and reporting to authorities.

Policy Review

This policy shall be reviewed annually by the Compliance and Procurement Departments. Updates will be made as necessary to align with evolving legal and regulatory requirements.

Vendor Acknowledgment

We acknowledge that we have read and understood the Vendor & Third-Party Compliance Policy of the Company We agree to adhere to all the principles and standards outlined herein and ensure compliance within our operations.

Vendor Name: __________________________

Authorized Signatory: ___________________

Signature: ______________________________

Date: _________________________________