Responsible Procurement: Supplier Clauses That Reduce Legal and Reputational Risk
Duty of vigilance, AGEC law, CSRD: the procurement function has become a legal control point. Here are the supplier clauses to embed in your contracts in 2026.
This topic is part of our service
ESG & CSRD reporting in France | SME and mid-cap supportExpert note: This article was written by our chartered accountancy firm. Information is current as of 2026. For a personalised review of your situation, contact us.
The procurement function is undergoing a quiet but deep transformation. For a long time, supplier contracts mainly set price, delivery times, quality and payment terms. In 2026, under the combined effect of the 2017 French duty of vigilance law, the 2020 AGEC law, the EU forced labour regulation, the CSRD and the CSDDD directive progressively transposed, procurement contracts have become a central legal control point. What is not in the contract is, in many cases, no longer defensible in case of audit, litigation or media campaign.
For the executive, the issue is not only legal: it is operational (continuity of supply) and reputational (clients, banks, employees, NGOs, social media). This article presents 7 families of supplier clauses to embed or audit in 2026, and the trade-off between binding framework and economic feasibility.
Short answer (TL;DR): 7 structuring supplier clauses to embed or update in 2026 — commitment to fundamental rules (labour, environment, data), audit and inspection rights, ESG information disclosure, supplier transition plan, product traceability, end-of-life management (AGEC), graduated remedies and penalties. These clauses do not eliminate risk but they shift the burden of proof and demonstrate due diligence before a judge or a regulator.
1. Why 2026 reshapes the procurement function {#context-2026}#
Duty of vigilance. Law no. 2017-399 of 27 March 2017, codified in article L225-102-4 of the French Commercial Code, requires very large companies (>5,000 employees in France or >10,000 worldwide) to publish a vigilance plan covering subsidiaries and subcontractors or suppliers with which they maintain an established commercial relationship. Practical consequence: suppliers of large groups are contractually drawn into their clients' due diligence.
CSRD and value chain. The CSRD, through the ESRS, requires disclosure of value chain information (scope 3, human rights, critical materials). Suppliers become producers of ESG data for their CSRD-covered clients. See our executive CSRD playbook and our CSRD scope piece.
AGEC law. The 2020 anti-waste and circular economy law progressively introduces sectoral obligations (extended producer responsibility, repairability index, bulk sales, fight against non-food waste) that cascade into procurement contracts: material substitution, packaging management, traceability.
Commercial practices and DGCCRF. The French consumer protection authority closely monitors environmental claims that are unsubstantiable or misleading (article L121-2 of the French Consumer Code, upcoming Green Claims texts), with possible administrative and criminal sanctions.
2. The 7 essential clauses {#clauses}#
The table below summarises clauses observed in the most mature supplier codes of conduct (industry, food, retail, services). To be adapted to the contract type, sector and purchase volume.
| # | Clause | Goal | Criticality |
|---|---|---|---|
| 1 | Commitment to fundamental rules: decent work, non-discrimination, environment, personal data, anti-corruption | Establish the minimum enforceable baseline | Essential |
| 2 | Audit and inspection rights: documents, sites, tier-1 sub-suppliers | Enable controls, protect against undetected default | Essential |
| 3 | ESG information obligation: transmission of carbon, energy, materials, social data on request | Feed the buyer's CSRD reporting | High |
| 4 | Transition plan: commitment to a low-carbon and/or social roadmap, with milestones | Maintain the relationship over the medium term | Medium, sector-dependent |
| 5 | Product traceability: material origin, applicable certifications, conflict materials declarations | Regulatory compliance (CBAM, deforestation, conflicts), client satisfaction | High for complex products |
| 6 | End of life / EPR: product take-back, eco-design, packaging, waste | AGEC compliance | Sectoral |
| 7 | Graduated remedies and penalties: warning, remediation plan, suspension, termination, financial penalties | Make the framework credible without abrupt rupture | Essential |
Three methodological principles:
- Proportionality: overloading a contract with a small supplier degrades the quality-price-risk balance. Adapt to criticality and volume.
- Reciprocity: a buyer requiring ESG data must accept being assessed in return (payments, conditions, transparency). Unilateral abusive clauses can be requalified (restrictive practices).
- Practicability: a non-auditable clause has weak legal value. 7 clear and enforced clauses beat 27 cosmetic ones.
To monitor supplier spend traceability, tools like Qonto coupled with a supplier analytics solution help collect data.
3. Worked example: a logistics SME facing a client audit {#case-study}#
This example is for educational purposes. Figures and facts are illustrative.
A French transport and logistics SME, 80 employees, €22 m revenue, subcontracts for two large retailers. In 2026, it receives a supplier CSR audit triggered by one of the two clients.
The audit covers:
- labour law compliance (driver working time, training, PPE),
- environmental measures (fuel consumption, fill rate, electrification plan),
- traceability (transports refused at loading for non-compliant documents),
- contractual commitments (clauses of the framework agreement signed 18 months earlier).
Findings:
- The framework agreement contains 4 of the 7 recommended clauses, but no explicit transition plan or milestones.
- Carbon data exists but is calculated by the client (internal method), creating a methodological gap.
- The audit identifies 3 remediation areas within 60 days, failing which the supplier scoring is downgraded — reducing volume by 15 to 25 % at the next tender.
Action plan:
- Signature of an amendment integrating the 3 missing clauses.
- Implementation of a carbon calculation aligned with the client's method.
- Formalisation of a 36-month fleet transition plan.
- Internal communication on the volume risk.
A joint intervention by the accountant and a contract lawyer closes the amendment in 30 to 45 days without commercial damage. See our legal advisory services and CSRD reporting practice.
4. Our accountant's analysis {#analysis}#
Contractual discipline beats communication. An SME able to produce in 48 hours its updated supplier contracts with CSR clauses withstands an audit. An SME that communicates on its CSR commitments but with contracts silent on the topic does not. Credibility is assessed by reading contracts, not by reading the website.
Supplier opportunity cost is not neutral. Not every supplier will be able to comply with all clauses. Imposing a uniform framework on every supplier may concentrate purchases on the most mature actors, at the expense of panel diversity and supply resilience. Calibrate requirements to volume, criticality and supplier maturity.
Articulation with financial steering. Supplier clauses have direct financial consequences: provisions for potential penalties, remediation costs, supply interruption risks. These must appear in the risk map reviewed by the statutory auditor where applicable. See our piece on CSR obligations for SMEs.
5. The underestimated risk {#risk}#
The least anticipated risk is abrupt termination of an established commercial relationship (article L442-1 of the French Commercial Code). When a company stops purchasing from a supplier on the basis of an undocumented CSR non-conformity, it can be ordered to pay damages for abrupt termination.
Good practice to mitigate:
- Document contractually the CSR requirements (clauses 1 to 7).
- Provide for a graduated mechanism: warning, remediation plan, suspension, termination.
- Formally notify each stage with proof (registered mail or equivalent).
- Keep the trace of audits, communications, technical exchanges.
- Respect a reasonable notice when termination becomes inevitable.
Symmetrically, a supplier facing a non-conformity must be able to propose a credible remediation plan with timeline — a right that should appear in clause 7.
6. What the executive must decide {#decision}#
Checklist for an executive reviewing their responsible procurement framework:
- Mapping of critical suppliers (top 80 % of purchase volume)
- Supplier code of conduct drafted and formally adopted
- Framework contract template integrating the 7 clauses, by category
- Specific annexes per stream (conflict materials, EPR, transport, IT, services)
- Supplier audit plan (which suppliers, frequency, by whom)
- Graduated remediation and termination procedure
- Information system: centralised contracts, audits, certifications, ESG data
- Steering indicators (clause coverage, supplier audit rate, remediation rate, termination rate)
- Articulation with public procurement if applicable
- Internal (buyers, legal, executive) and external (clients, banks) communication plan
7. 2026 watch points {#watchlist}#
- CSDDD directive: the European corporate sustainability due diligence directive (CSDDD), adopted in 2024, is being transposed. Thresholds and scope are being clarified; suppliers of large groups will be concerned indirectly.
- Deforestation regulation: regulation (EU) 2023/1115 imposes due diligence on certain commodities (wood, cocoa, coffee, soy, palm oil, rubber, livestock). Embed in relevant contractual annexes.
- CBAM: the Carbon Border Adjustment Mechanism requires supplier carbon data on imported products (steel, aluminium, cement, fertilisers, electricity, hydrogen). Specific clauses to embed for affected supplies.
- Forced labour: the EU forced labour regulation enters into force progressively. Origin and traceability clauses to be reinforced.
- DGCCRF Green Claims: unsubstantiable environmental claims expose to sanctions. Align supply chain communications (labelling, marketing) with contracts.
Hayot Expertise advisory note — Before any procurement overhaul, start with the top 20 suppliers: they typically represent 70 to 85 % of the risk. Embedding the 7 clauses on these critical contracts creates more defensive value than a uniform rollout. Our legal advisory practice supports this work alongside your procurement team and our CSRD reporting practice.
Frequently asked questions
Une PME non soumise à la CSRD est-elle concernée par le devoir de vigilance ?
Pas directement. La loi de 2017 vise les entreprises de plus de 5 000 salariés en France ou 10 000 dans le monde. En revanche, les PME fournisseurs de ces grands groupes sont indirectement concernées : elles doivent répondre aux exigences contractuelles (clauses, audits, données) que leurs clients déploient pour respecter leur propre plan de vigilance.
Faut-il un code de conduite fournisseurs distinct du contrat ?
Oui, c'est la pratique la plus solide. Le code de conduite fournisseurs est un document de référence qui formalise les engagements éthiques, sociaux et environnementaux. Le contrat y fait référence et le rend opposable. Cette architecture (code de conduite + contrat-cadre + annexes spécifiques) facilite les évolutions et les audits, sans renégocier chaque contrat à chaque mise à jour.
Comment imposer des clauses ESG à un fournisseur en position de force ?
C'est le cas le plus délicat. Trois approches : (1) intégrer ces clauses dès le sourcing initial, dans le cahier des charges, plutôt qu'après contractualisation ; (2) négocier des engagements progressifs (jalons, plans de transition) plutôt que des obligations immédiates ; (3) jouer sur la mutualisation sectorielle (codes de conduite communs, audits partagés) pour réduire le coût global pour le fournisseur. À défaut, accepter la limite et la documenter dans la cartographie des risques.
Quelles sanctions en cas de non-respect du devoir de vigilance ?
L'article L225-102-5 du Code de commerce permet à toute personne intéressée d'engager la responsabilité civile de l'entreprise pour défaillance dans l'élaboration ou la mise en œuvre du plan de vigilance, avec réparation des préjudices subis. Plusieurs contentieux ont été engagés en France contre de grandes entreprises. Les fournisseurs ne sont pas directement attaquables sur ce fondement, mais leur défaillance peut nourrir l'action contre le donneur d'ordre.
Comment mesurer le taux de couverture des clauses ESG sur ses contrats ?
Un indicateur simple consiste à exprimer en pourcentage du volume d'achats (et non du nombre de contrats) la part couverte par un contrat-cadre intégrant les 7 clauses recommandées. Cible pratique pour une ETI : > 80 % du volume sur 24 mois. Le suivi peut s'effectuer via un système d'information achats ou un fichier centralisé tenu par le service juridique. Notre équipe expertise comptable peut intégrer cet indicateur au tableau de bord trimestriel.

Article written by Samuel HAYOT
Chartered Accountant, registered with the Institute of Chartered Accountants.
Regulated French accounting and audit firm based in Paris 8, built to support companies across France with a digital and decision-oriented approach.
Sources
Official and operational sources cited for this page.
This topic is part of our service ESG & CSRD reporting in France | SME and mid-cap support
Need a quote or personalised advice?
Our accountancy firm supports you through all your steps. Get a free quote to review your situation and receive a bespoke fee proposal, or contact us directly.