Responsible Procurement: Supplier Clauses That Reduce Legal and Reputational Risk
Duty of vigilance, AGEC law, CSRD: the procurement function has become a legal control point. Here are the supplier clauses to embed in your contracts in 2026.
This topic is part of our service
ESG & CSRD reporting in France | SME and mid-cap supportExpert note: This article was written by our chartered accountancy firm. Information is current as of 2026. For a personalised review of your situation, contact us.
The procurement function is undergoing a quiet but deep transformation. For a long time, supplier contracts mainly set price, delivery times, quality and payment terms. In 2026, under the combined effect of the 2017 French duty of vigilance law, the 2020 AGEC law, the EU forced labour regulation, the CSRD and the CSDDD directive progressively transposed, procurement contracts have become a central legal control point. What is not in the contract is, in many cases, no longer defensible in case of audit, litigation or media campaign.
For the executive, the issue is not only legal: it is operational (continuity of supply) and reputational (clients, banks, employees, NGOs, social media). This article presents 7 families of supplier clauses to embed or audit in 2026, and the trade-off between binding framework and economic feasibility.
Short answer (TL;DR): 7 structuring supplier clauses to embed or update in 2026 — commitment to fundamental rules (labour, environment, data), audit and inspection rights, ESG information disclosure, supplier transition plan, product traceability, end-of-life management (AGEC), graduated remedies and penalties. These clauses do not eliminate risk but they shift the burden of proof and demonstrate due diligence before a judge or a regulator.
1. Why 2026 reshapes the procurement function {#context-2026}#
Duty of vigilance. Law no. 2017-399 of 27 March 2017, codified in article L225-102-4 of the French Commercial Code, requires very large companies (>5,000 employees in France or >10,000 worldwide) to publish a vigilance plan covering subsidiaries and subcontractors or suppliers with which they maintain an established commercial relationship. Practical consequence: suppliers of large groups are contractually drawn into their clients' due diligence.
CSRD and value chain. The CSRD, through the ESRS, requires disclosure of value chain information (scope 3, human rights, critical materials). Suppliers become producers of ESG data for their CSRD-covered clients. See our executive CSRD playbook and our CSRD scope piece.
AGEC law. The 2020 anti-waste and circular economy law progressively introduces sectoral obligations (extended producer responsibility, repairability index, bulk sales, fight against non-food waste) that cascade into procurement contracts: material substitution, packaging management, traceability.
Commercial practices and DGCCRF. The French consumer protection authority closely monitors environmental claims that are unsubstantiable or misleading (article L121-2 of the French Consumer Code, upcoming Green Claims texts), with possible administrative and criminal sanctions.
2. The 7 essential clauses {#clauses}#
The table below summarises clauses observed in the most mature supplier codes of conduct (industry, food, retail, services). To be adapted to the contract type, sector and purchase volume.
| # | Clause | Goal | Criticality |
|---|---|---|---|
| 1 | Commitment to fundamental rules: decent work, non-discrimination, environment, personal data, anti-corruption | Establish the minimum enforceable baseline | Essential |
| 2 | Audit and inspection rights: documents, sites, tier-1 sub-suppliers | Enable controls, protect against undetected default | Essential |
| 3 | ESG information obligation: transmission of carbon, energy, materials, social data on request | Feed the buyer's CSRD reporting | High |
| 4 | Transition plan: commitment to a low-carbon and/or social roadmap, with milestones | Maintain the relationship over the medium term | Medium, sector-dependent |
| 5 | Product traceability: material origin, applicable certifications, conflict materials declarations | Regulatory compliance (CBAM, deforestation, conflicts), client satisfaction | High for complex products |
| 6 | End of life / EPR: product take-back, eco-design, packaging, waste | AGEC compliance | Sectoral |
| 7 | Graduated remedies and penalties: warning, remediation plan, suspension, termination, financial penalties | Make the framework credible without abrupt rupture | Essential |
Three methodological principles:
- Proportionality: overloading a contract with a small supplier degrades the quality-price-risk balance. Adapt to criticality and volume.
- Reciprocity: a buyer requiring ESG data must accept being assessed in return (payments, conditions, transparency). Unilateral abusive clauses can be requalified (restrictive practices).
- Practicability: a non-auditable clause has weak legal value. 7 clear and enforced clauses beat 27 cosmetic ones.
To monitor supplier spend traceability, tools like Qonto coupled with a supplier analytics solution help collect data.
3. Worked example: a logistics SME facing a client audit {#case-study}#
This example is for educational purposes. Figures and facts are illustrative.
A French transport and logistics SME, 80 employees, €22 m revenue, subcontracts for two large retailers. In 2026, it receives a supplier CSR audit triggered by one of the two clients.
The audit covers:
- labour law compliance (driver working time, training, PPE),
- environmental measures (fuel consumption, fill rate, electrification plan),
- traceability (transports refused at loading for non-compliant documents),
- contractual commitments (clauses of the framework agreement signed 18 months earlier).
Findings:
- The framework agreement contains 4 of the 7 recommended clauses, but no explicit transition plan or milestones.
- Carbon data exists but is calculated by the client (internal method), creating a methodological gap.
- The audit identifies 3 remediation areas within 60 days, failing which the supplier scoring is downgraded — reducing volume by 15 to 25 % at the next tender.
Action plan:
- Signature of an amendment integrating the 3 missing clauses.
- Implementation of a carbon calculation aligned with the client's method.
- Formalisation of a 36-month fleet transition plan.
- Internal communication on the volume risk.
A joint intervention by the accountant and a contract lawyer closes the amendment in 30 to 45 days without commercial damage. See our legal advisory services and CSRD reporting practice.
4. Our accountant's analysis {#analysis}#
Contractual discipline beats communication. An SME able to produce in 48 hours its updated supplier contracts with CSR clauses withstands an audit. An SME that communicates on its CSR commitments but with contracts silent on the topic does not. Credibility is assessed by reading contracts, not by reading the website.
Supplier opportunity cost is not neutral. Not every supplier will be able to comply with all clauses. Imposing a uniform framework on every supplier may concentrate purchases on the most mature actors, at the expense of panel diversity and supply resilience. Calibrate requirements to volume, criticality and supplier maturity.
Articulation with financial steering. Supplier clauses have direct financial consequences: provisions for potential penalties, remediation costs, supply interruption risks. These must appear in the risk map reviewed by the statutory auditor where applicable. See our piece on CSR obligations for SMEs.
5. The underestimated risk {#risk}#
The least anticipated risk is abrupt termination of an established commercial relationship (article L442-1 of the French Commercial Code). When a company stops purchasing from a supplier on the basis of an undocumented CSR non-conformity, it can be ordered to pay damages for abrupt termination.
Good practice to mitigate:
- Document contractually the CSR requirements (clauses 1 to 7).
- Provide for a graduated mechanism: warning, remediation plan, suspension, termination.
- Formally notify each stage with proof (registered mail or equivalent).
- Keep the trace of audits, communications, technical exchanges.
- Respect a reasonable notice when termination becomes inevitable.
Symmetrically, a supplier facing a non-conformity must be able to propose a credible remediation plan with timeline — a right that should appear in clause 7.
6. What the executive must decide {#decision}#
Checklist for an executive reviewing their responsible procurement framework:
- Mapping of critical suppliers (top 80 % of purchase volume)
- Supplier code of conduct drafted and formally adopted
- Framework contract template integrating the 7 clauses, by category
- Specific annexes per stream (conflict materials, EPR, transport, IT, services)
- Supplier audit plan (which suppliers, frequency, by whom)
- Graduated remediation and termination procedure
- Information system: centralised contracts, audits, certifications, ESG data
- Steering indicators (clause coverage, supplier audit rate, remediation rate, termination rate)
- Articulation with public procurement if applicable
- Internal (buyers, legal, executive) and external (clients, banks) communication plan
7. 2026 watch points {#watchlist}#
- CSDDD directive: the European corporate sustainability due diligence directive (CSDDD), adopted in 2024, is being transposed. Thresholds and scope are being clarified; suppliers of large groups will be concerned indirectly.
- Deforestation regulation: regulation (EU) 2023/1115 imposes due diligence on certain commodities (wood, cocoa, coffee, soy, palm oil, rubber, livestock). Embed in relevant contractual annexes.
- CBAM: the Carbon Border Adjustment Mechanism requires supplier carbon data on imported products (steel, aluminium, cement, fertilisers, electricity, hydrogen). Specific clauses to embed for affected supplies.
- Forced labour: the EU forced labour regulation enters into force progressively. Origin and traceability clauses to be reinforced.
- DGCCRF Green Claims: unsubstantiable environmental claims expose to sanctions. Align supply chain communications (labelling, marketing) with contracts.
Hayot Expertise advisory note — Before any procurement overhaul, start with the top 20 suppliers: they typically represent 70 to 85 % of the risk. Embedding the 7 clauses on these critical contracts creates more defensive value than a uniform rollout. Our legal advisory practice supports this work alongside your procurement team and our CSRD reporting practice.
Frequently asked questions
Is an SME outside the CSRD scope concerned by the duty of vigilance?+
Not directly. The 2017 law targets companies with over 5,000 employees in France or 10,000 worldwide. However, SME suppliers of these large groups are indirectly concerned: they must respond to contractual requirements (clauses, audits, data) that their clients deploy to comply with their own vigilance plan.
Should there be a supplier code of conduct distinct from the contract?+
Yes, this is the most robust practice. The supplier code of conduct is a reference document that formalises ethical, social and environmental commitments. The contract refers to it and makes it enforceable. This architecture (code of conduct + framework contract + specific annexes) facilitates updates and audits without renegotiating every contract at every revision.
How can ESG clauses be imposed on a supplier in a position of strength?+
This is the most delicate case. Three approaches: (1) embed these clauses at the initial sourcing stage, in the requirements specification, rather than after contracting; (2) negotiate progressive commitments (milestones, transition plans) rather than immediate obligations; (3) play on sector mutualisation (common codes of conduct, shared audits) to reduce the cost for the supplier. Failing that, accept the limit and document it in the risk map.
What sanctions apply for breach of the duty of vigilance?+
Article L225-102-5 of the French Commercial Code allows any interested party to engage the civil liability of a company for failure in drawing up or implementing the vigilance plan, with compensation for the damages suffered. Several lawsuits have been filed in France against large companies. Suppliers are not directly attackable on this basis, but their default may feed the action against the buyer.
How to measure ESG clause coverage on contracts?+
A simple indicator expresses, as a percentage of purchase volume (not number of contracts), the share covered by a framework contract integrating the 7 recommended clauses. Practical target for a French mid-cap: > 80 % of volume within 24 months. Tracking can rely on a procurement information system or a centralised file maintained by the legal department. Our accounting practice can integrate this indicator into the quarterly dashboard.

Article written by Samuel HAYOT
Chartered Accountant, registered with the Institute of Chartered Accountants.
Regulated French accounting and audit firm based in Paris 8, built to support companies across France with a digital and decision-oriented approach.
Sources
Official and operational sources cited for this page.
This topic is part of our service ESG & CSRD reporting in France | SME and mid-cap support
Need a quote or personalised advice?
Our accountancy firm supports you through all your steps. Get a free quote to review your situation and receive a bespoke fee proposal, or contact us directly.