Free tools Windows power users keep installed
One-click scans. No signup required.
A useful supplier due diligence checklist verifies who a supplier is, where it operates and sources from, what harms its activities could cause, and whether those risks are being prevented or corrected. It should produce an action plan—not a one-time pass/fail score—scaled to the relationship, sector, geography, product or service, and the severity and likelihood of potential impacts.
What supplier due diligence is—and what the checklist must accomplish
Supplier due diligence is a continuing, risk-based process. A questionnaire is only one evidence-gathering step. The process should identify actual and potential adverse impacts, prioritize the most significant ones, prevent or mitigate them, track whether controls work, communicate how issues are handled, and provide for or cooperate in remediation when appropriate.
As an Amazon Associate I earn from qualifying purchases.
The OECD Council’s responsible business conduct recommendation says enterprises should “embed responsible business conduct into their policies and management systems.” That means procurement, compliance, sustainability, legal, information security, and operations should use the same risk record and escalation rules rather than treating due diligence as a form completed by purchasing alone.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesNo universal checklist applies identically to every supplier. A local office-supply vendor, a factory in a high-risk area, a cloud provider handling personal data, and a distributor of controlled goods require different questions and different evidence. The checklist below is a modular baseline. Mark each item as required, conditional, or not applicable, and record why.
#1 Best Overall
- Compact & Portable Design: This Small Excel, Word, PowerPoint, & Windows Cheat Sheet Mouse Pad measures 11.8" x 9.8", offering a portable mouse pad. Its compact size fits in bags or laptop cases, suitable for professionals, students, or travelers.
- Multi-Software Shortcut Guide: Featuring essential shortcut keys for Excel, Word, PowerPoint, & Windows, this small mouse pad provides a quick reference for frequently used shortcuts, offering a reference designed to support workflow efficiency
- Smooth & Precise Surface: The finely-textured surface ensures precise mouse control, allowing for smooth and accurate movement during work or gaming sessions.
- Durable & Non-Slip Design: This Multi-Software Shortcut Mouse Pad features stitched edges to reduce fraying. The non-slip rubber base helps keep it securely in place, and the water-resistant fabric allows for easier maintenance.
- Clear Print Quality: Displays high-resolution printing intended to remain legible through regular use and cleaning
Set up the checklist before asking questions
Define the relationship and risk scope
Start by recording the supplier’s role, products or services, countries involved, facilities, data access, subcontractors, expected spend, contract term, and operational criticality. Identify the people who could be affected by the relationship, such as workers, communities, customers, consumers, or downstream users. This scope determines which modules to send and how much evidence to request.
Use one case record with ownership
Every answer should sit in a case file that can be updated. At minimum, include the fields below. A blank answer is an information gap requiring follow-up; it is not evidence that the supplier is low risk.
| Field | What to record |
|---|---|
| Question or control | The exact requirement, including any jurisdiction, product, tier, or date limitation. |
| Evidence requested | Document, data extract, interview, site observation, certification, traceability record, or other support. |
| Reviewer | The accountable person or function, such as procurement, compliance, sustainability, security, or legal. |
| Risk finding | Actual or potential impact, affected stakeholders, evidence quality, severity, likelihood, and uncertainty. |
| Follow-up owner | The person responsible for obtaining information or completing corrective action. |
| Deadline | A dated commitment for an answer, control, milestone, or escalation. |
| Next review date | The planned reassessment date or event trigger. |
Set decision rules in advance
Define who may approve a supplier with open issues, when a contract requires a corrective-action plan, when senior management must review a case, and what constitutes unacceptable risk. Rules should allow continued engagement where improvement is realistic and leverage can be used, while preserving a route to suspension or responsible disengagement when risks cannot be acceptably mitigated.
1. Supplier identity, structure, and authority
Identity checks prevent a buyer from assessing the wrong entity or missing the people who control it. Request information that can be matched to registration records and the names of authorized signatories. European Commission due diligence materials use the following inquiry lines; adapt the level of detail to the supplier and jurisdiction.
- Legal name, trading names, registration number, registered jurisdiction, and business address.
- Countries in which the supplier operates, employs workers, owns facilities, stores data, or performs the contracted activity.
- Main activities in each operating country and the products, services, sites, and processes relevant to your relationship.
- Key individuals, senior management, shareholders, and beneficial owners. Ask for an organization chart when ownership or control is complex.
- Relevant operating, professional, environmental, import, export, or sector licenses, including expiry dates and issuing authorities.
- Names and authority of people signing the contract, plus confirmation that the information belongs to the contracting entity.
- Screening of relevant parties against applicable sanctions and politically exposed person sources when the transaction, jurisdiction, or governing rules make that appropriate.
Compare the supplier’s answers with registration documents, licenses, ownership records, and contract details. Escalate unexplained differences, recently changed ownership, nominee arrangements, or an inability to identify the beneficial owner.
Rank #2
- [MULTIFUNCTIONAL]You'll get 2 pieces computer monitor memo boards that you can stick on the left and right edges of your monitor, and they're the perfect office desk organizers and accessories. Computer monitor side panels desktop organizer are suitable for home work or office,bringing convenience. Desktop memo is used to organize meeting memos, important messages, business cards, planning notes.Paste on the message board to keep track of important things and to-do items to prevent forgetting.
- [🌟HIGHLY QUALITY] The material of computer screen side note holder is transparent acrylic. Durable, simple, stylish, light weight, easy to use, not easy to fall off or break. This cute office supplies for women desk can be used for a long time. This computer desk accessories is waterproof and dirt resistance, and look simple and stylish. The transparent acrylic sticky note holder as cubicle accessories is easy to notice the context of your sticky notes.
- [📋Easy to use] Office must haves cool office gadgets for desk ready to tear, easy to install and remove, not easy to leave traces. You only need to peel off the protective film on the surface of the computer side board memo, wipe off the dust on the edge of the computer monitor, and then stick the desk essentials for women office on the right or left side of the tape, and you're done. A perfect gift for your colleagues, friends or classmates and family members or relatives
- [🏢MULTI-SCENE USE] This desk supplies computer memo board can be applied to home and office, clear your office decor for women, suitable for most computer monitors, screens and cabinets, you can put it where you think, this cute office decor serve as a reminder. Stick on the computer side. It’s a good office gadgets can remind work improve office productivity. Pasted cabinets, dressers, refrigerators, walls, etc as cubicle accessories. To make life more orderly.
- [💌NOTE] The adhesive force of the computer sticky note holder is very strong. It can not be directly pasted on the computer screen. It should pasted on the black edge of the screen. Narrow edge not recommended!!! If you are not satisfied with your purchase, or if the product is damaged or broken in transit, please let us know immediately. We will promptly solve your problem.
2. Geography, products, and upstream sourcing
A low-risk registered address says little about where goods, labor, minerals, components, data, or services actually originate. Map the relevant chain beyond the direct supplier and identify where risk could enter.
- Countries of origin, production, processing, assembly, storage, and transit for the goods or service.
- Facilities and important processing or transformation points, including subcontractors and logistics providers.
- Key upstream suppliers and, where material to the risk, the next tier or source location.
- Exposure to conflict-affected or high-risk areas and the product- or sector-specific risks associated with those locations.
- Chain-of-custody, batch, mass-balance, or other traceability records when the material or sector calls for them.
- Known information gaps, non-responsive suppliers, and the owner and escalation date for closing each gap.
Do not demand the same depth of traceability for every purchase. Expand the map where severity, likelihood, leverage, or legal exposure warrants it. For mineral supply chains, the OECD’s sector guidance provides a tailored model: establish management systems, identify and assess risk, adopt a response strategy, use supply-chain controls and traceability, engage suppliers, and provide grievance mechanisms. Those steps are a module for relevant mineral sourcing, not an automatic rule for every category.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
3. Responsible business conduct and adverse impacts
Ask what policies and management responsibilities the supplier has, then test whether they operate in practice. A polished policy without implementation evidence should not close the review.
Policies and accountability
- Policies covering human rights, labor conditions, health and safety, environment, bribery and corruption, disclosure, and consumer interests where relevant.
- Board or senior-management responsibility, named control owners, training, reporting lines, and disciplinary processes.
- How the supplier extends expectations to contractors, labor agencies, and upstream business relationships.
- Records of regulatory notices, serious incidents, litigation, or substantiated allegations that are relevant to the relationship.
Impacts, controls, and remediation
- Actual or potential adverse impacts linked to the supplier, product, service, location, or your purchasing decision.
- Prevention and mitigation measures, with measurable milestones, dates, responsible managers, and evidence of progress.
- Worker and stakeholder grievance channels that are accessible, confidential where necessary, and free from retaliation.
- Complaint volumes, investigation outcomes, corrective actions, and evidence of remediation when harm has occurred.
- Whether your own prices, lead times, order changes, payment terms, or forecasting practices create barriers to improvement.
Responsible engagement may include practical support, clearer forecasts, training, technical assistance, or changed purchasing practices. A buyer should not require an improvement it makes impossible through its own commercial behavior.
4. Sanctions and transaction red flags
For relevant cross-border transactions, review more than the counterparty name. Consider the goods, destination, end use, intermediaries, routing, payment path, and transaction context. The European Commission’s guidance published and last updated on 19 February 2024 focuses on export-related sanctions and circumvention red flags.
Rank #3
- Stay Organized with Ease: Our To Do List Notepad provides multiple sections with plenty of space to jot down all of your important tasks.A versatile office supply perfect for daily task management, helping you keep track of everything that needs to be done and prioritize effectively.
- Achieve Your Productivity Goals: Begin each day on a positive note, reminding you of your potential, strength, and the significance of staying focused on your goals. Our Daily Checklist Notepad is the ultimate tool to streamline your daily planning and elevate your productivity. With a clear and concise overview of your tasks, you can effortlessly prioritize what truly matters and make consistent strides towards achieving your goals.
- Reliable and Stylish: Our to do list planner combines functionality with durability. With a transparent PP cover, the inner pages are well-protected from dirt and wear. Additionally, the back cover is crafted with thick paperboard, offering a stable surface for your writing needs. Each notepad includes 52 pages of high-quality, 100gsm paper, which is thick and non-bleeding, resulting in a smooth and enjoyable writing experience.
- Versatile Use: This daily checklist notepad, suitable for teacher supplies and a wide range of applications, proves invaluable in various settings including work, school, and home. Whether you need to organize your daily tasks, plan a project, or create a grocery list, this notepad serves as the ideal tool. Its compact size ensures easy portability, allowing you to conveniently carry it with you throughout your day.
- Perfect Present for Anyone: Our Daily To-Do List Notepad is the perfect present for those who value organization and productivity. With its stylish design and versatility, this office desk accessory is also a practical addition to school supplies. Suitable for students, professionals, and homemakers alike, it helps keep tasks and priorities in check effortlessly.
- Unusual routing, transshipment, or a newly formed intermediary with no clear commercial explanation.
- Requests to alter product descriptions, end-user statements, invoices, payment terms, or shipping documents.
- Inconsistent ownership, destination, end-use, or customer information.
- Goods whose specifications, quantities, or destination do not fit the stated business purpose.
- Pressure to bypass screening, split shipments, use cash or opaque payment channels, or avoid written records.
Document the legal basis and jurisdiction for each screening decision. This module is not a complete sanctions checklist for every country or sector; obtain specialist advice where rules, licenses, or restrictions are unclear.
5. ICT and cybersecurity supply-chain module
Use this module when a supplier provides ICT products or services, handles sensitive data, connects to operational systems, or is important enough that an outage could materially affect customers or operations. The European Commission reported that the NIS Cooperation Group adopted an EU toolbox for identifying, assessing, and mitigating ICT supply-chain risks on 13 February 2026.
- Systems, data, privileged access, software components, hosting locations, and dependencies involved in the service.
- Security governance, named accountable executives, risk assessments, vulnerability management, secure development, and change control.
- Identity and access controls, encryption, logging, backup, recovery objectives, and segregation of customer environments.
- Subprocessors, open-source and third-party components, support access, and geographic concentration.
- Incident notification times, investigation cooperation, business-continuity plans, testing evidence, and exit or data-return procedures.
- Independent assessments or certifications, with their scope, dates, exclusions, and remediation status.
Tailor controls to your systems and applicable requirements. An ICT questionnaire should not be treated as proof that every dependency is secure.
6. Evidence quality and verification
For each material answer, record the document title, issuing party, coverage period, date obtained, and reviewer conclusion. Prefer attributable, current evidence that covers the entity, site, product, and period under review.
- Verify that licenses, registrations, insurance, policies, audit reports, and certificates belong to the correct legal entity.
- Check expiry dates, scope, sampling, sites, exclusions, unresolved findings, and corrective-action status.
- Use interviews, worker or stakeholder feedback, site visits, transaction testing, and traceability records where documents alone cannot establish performance.
- Capture contradictory evidence instead of selecting the most favorable answer.
- Record what was not checked and why, so a future reviewer does not mistake an omitted test for a clean result.
Audits, certifications, and industry initiatives are evidence inputs, not automatic proof of good performance. OECD guidance notes that such initiatives differ significantly in scope, focus, and credibility. Confirm what each actually covers and what remains unchecked.
Rank #4
- 【Adjustable & Ergonomic】：This laptop stand can be adjusted to a comfortable height and angle according to your actual needs, letting you fix posture and reduce your neck fatigue, back pain and eye strain. Very comfortable for working in home, office and outdoor.
- 【Sturdy & Protective】 ：Made of sturdy metal, it can support up to 17.6 lbs (8kg) weight on top; With 2 rubber mats on the hook and anti-skid silicone pads on top & bottom, it can secure your laptop in place and maximum protect your device from scratches and sliding. Moreover, smooth edges will never hurt your hands.
- 【Heat Dissipation】 ：The top of the laptop stand is designed with multiple ventilation holes. The open design offers greater ventilation and more airflow to cool your laptop during operation other than it just lays flat on the table.
- 【Portable & Foldable】：The foldable design allows you to easily slip it in your backpack. Ideal for people who travel for business a lot.
- 【Broad Compatibility】：Our desktop book stand is compatible with all laptops from 10-15.6 inches, such as MacBook Air/ Pro, Google Pixelbook, Dell XPS, HP, ASUS, Lenovo ThinkPad, Acer, Chromebook and Microsoft Surface, etc.Be your ideal companion in Home, Office & Outdoor.
7. Risk rating that leads to a decision
A rating should help determine the next action, not replace judgment. For each finding, record the affected stakeholders, potential or actual impact, severity, likelihood, evidence quality, uncertainty, your leverage, and urgency. Prioritize significant impacts when resources cannot address everything simultaneously.
| Disposition | When it may fit | Required record |
|---|---|---|
| Continue with measurable mitigation | The issue is remediable, the supplier is engaging, and the buyer can use leverage or support. | Corrective actions, milestones, owner, deadline, verification method, and escalation trigger. |
| Temporary suspension while pursuing mitigation | Continued transactions could worsen serious risk, but a credible path to improvement exists. | Suspension scope, conditions for resumption, stakeholder communication, and review date. |
| Responsible disengagement | Risks cannot be acceptably mitigated, the supplier refuses meaningful engagement, or continued business would create unacceptable harm or legal exposure. | Decision rationale, notice and transition plan, affected-party considerations, and records-retention steps. |
These response options are illustrated in OECD minerals guidance and are not mandatory outcomes for every supplier issue. Consider proportionality, contractual duties, worker and community impacts, and whether abrupt exit could increase harm.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.8. Monitoring, communication, and review triggers
Close the loop after onboarding. Track corrective actions to evidence, not promises, and communicate relevant findings to decision-makers and affected stakeholders where appropriate.
- Set a next review date based on risk and define event triggers for an earlier review.
- Reassess after ownership or key-person changes, new countries or facilities, new products, major subcontracting, incidents, regulatory notices, complaints, or material changes in operating conditions.
- Refresh sanctions, license, beneficial-ownership, insurance, cybersecurity, and financial-resilience checks at intervals suited to the risk.
- Report overdue actions, repeated non-response, and worsening indicators to the escalation owner.
- Retain source documents, checks performed, dates, decisions, approvals, communications, and closure evidence.
Communication should explain what was identified, what is being done, who is accountable, and when progress will be tested. Do not claim that a supplier is “approved” without stating the scope, date, conditions, and unresolved limitations.
How to use the checklist in practice
- Classify the relationship. Record the supplier’s role, criticality, countries, products, data access, tiers, and potential affected stakeholders.
- Choose modules. Apply identity and ownership checks to all suppliers, then add upstream, responsible-conduct, sanctions, mineral, ICT, or other modules that fit the facts.
- Send focused requests. Ask for evidence tied to a question, explain acceptable formats, and set a response deadline.
- Validate and map gaps. Reconcile answers with registrations, licenses, ownership, transaction data, site information, and independent evidence.
- Assess impacts. Describe who could be harmed, how severe the harm could be, how likely it is, and how reliable the evidence is.
- Engage the supplier. Discuss root causes, practical support, purchasing barriers, corrective actions, and measurable milestones.
- Choose a disposition. Continue with controls, suspend under defined conditions, or disengage responsibly when mitigation is not feasible or acceptable.
- Monitor and communicate. Test milestones, record results, escalate overdue actions, and communicate material outcomes through the appropriate governance channels.
- Reopen when conditions change. Use the review triggers and next-review date rather than allowing an old questionnaire to remain the permanent record.
Common checklist failures and fixes
Using the same questionnaire for everyone
Failure: Low-risk and high-risk suppliers receive identical demands, wasting effort and obscuring serious issues. Fix: Keep a universal identity baseline, then scale evidence, interviews, traceability, and site work to significance, severity, likelihood, and leverage.
Best Value
- Twin-Ball Design : Hiacry gel pen features a double ball conical tip that reduces writing resistance and provides a stable and smooth writing experience. 0.7mm quick drying black ink ensures no jumping, leakage or seepage.
- Quick-Dry Long Lasting Ink：0.7mm black ink can slide effortlessly, dry immediately, & is not easily dirty. It has a high-capacity reservoir (up to 1300 meters), which is very suitable for left-handed & right-handed users.
- Sleek Design for Journaling & Planning: Engineered with a low center of gravity and precision tip for steady ink flow, these journaling pens excel at note-taking, sketching, planning, and more. They combine stylish pens with top-tier performance.
- Rolling Ball Design：The pocket clip with roll ball design can be easily attached to notebook pockets and binders, in addition, the fidget on the pen clip is also a small toy for your daily thinking to relieve stress.
- Comfortable Non-Slip Grip：The ergonomic pen barrel has a soft rubberized coating for a comfortable, non-slip grip, so you won't get fatigued even after long hours of writing.
Treating non-response as low risk
Failure: Missing answers disappear into a spreadsheet. Fix: Log each gap, assign an owner and date, escalate repeated non-response, and adjust the risk assessment for uncertainty.
Accepting a certificate without checking scope
Failure: A certificate is treated as proof of every control. Fix: Check issuer, entity, sites, period, standard, exclusions, findings, and remediation; supplement it with other evidence.
Scoring without an action
Failure: A numerical rating ends the review. Fix: Tie every material finding to an owner, deadline, milestone, verification method, escalation rule, and next review.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Ignoring the buyer’s leverage and conduct
Failure: The supplier is blamed for conditions shaped by unrealistic orders or payment practices. Fix: examine purchasing decisions, provide practical support where feasible, and use engagement before resorting to exit when improvement is possible.
Adapting depth to supplier profiles
| Supplier situation | Emphasis |
|---|---|
| Routine, low-criticality local service | Identity, authority, licenses, basic conduct expectations, applicable sanctions screening, and a proportionate review cycle. |
| Manufacturing or agricultural supply chain | Sites, labor and environmental impacts, upstream tiers, traceability, grievance channels, corrective actions, and location-specific risks. |
| Minerals or other conflict-sensitive materials | The OECD minerals module: management systems, source and chain-of-custody information, risk response, supplier engagement, and grievance mechanisms. |
| ICT, cloud, or data-intensive provider | Access, dependencies, subprocessors, secure development, incident response, resilience, exit planning, and the current EU ICT supply-chain toolbox as a reference. |
| Cross-border or controlled-goods transaction | Ownership, end use, destination, intermediaries, routing, export controls, sanctions, and circumvention indicators under the applicable jurisdiction. |
The result is a living control system: clear identity, visibility beyond the direct supplier, evidence-based impact assessment, proportionate action, and scheduled reassessment when facts change.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
