Can suppliers sign electronically?

Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are met.

When is a BAA required?

If the supplier will create, receive, maintain, or transmit protected health information on behalf of a covered entity, a HIPAA Business Associate Agreement is required to satisfy regulatory obligations under HIPAA.

What if the supplier refuses a clause?

Document the objection, seek legal review, and negotiate acceptable language or mitigation measures before approving vendor onboarding.

Are witness or notary signatures necessary?

Typically not for commercial supplier codes; require witness or notarization only if corporate policy or specific state law mandates it for binding attestations.

How should disputes be handled?

Include a clear escalation path: contact, remediation timeline, dispute resolution forum, and governing law to ensure predictable enforcement.

Can the Code be updated later?

Yes. Communicate changes in writing, require supplier acknowledgement, and retain prior versions per your record retention policy for audit purposes.

Electronic Signature
Templates
HR
HR Supplier Code of Conduct

HR Supplier Code of Conduct

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HR SUPPLIER CODE OF CONDUCT

This Supplier Code of Conduct (the "Code") sets forth minimum standards and requirements that Company Name: requires of all suppliers, contractors, subcontractors and their agents (collectively "Supplier") engaged to provide goods or services. This Code is incorporated by reference into any purchase order, contract, or other procurement instrument between Company Name and Supplier.

Effective Date and Parties

Effective Date: Month Day Year .

Supplier Legal Name: Supplier Primary Contact:

Supplier Contact and Company Information

Supplier Legal Name Doing Business As (DBA) Business Address Primary Contact - Title

Phone

Email

Legal Entity / Tax ID Entity Type (select applicable) Corporation Limited Liability Company (LLC) Partnership Sole Proprietor

Position / Contract Information

Primary Contact Role with Supplier Relationship Start Date

Month Day Year

Estimated Annual Contract Value

Key Personnel Employment History (Primary Contact)

Employer 1 - Company Name Employer 1 - Title / Responsibilities Employer 1 - Dates of Employment

From Month Year To Month Year

Employer 2 - Company Name Employer 2 - Title / Responsibilities Employer 2 - Dates of Employment

From Month Year To Month Year

Education (Primary Contact)

Degree / Qualification Institution Graduation Year

Business References

Reference 1 - Name Reference 1 - Phone / Email / Relationship Reference 2 - Name Reference 2 - Phone / Email / Relationship Reference 3 - Name Reference 3 - Phone / Email / Relationship

Legal Disclosures

At-Will Employment Statement: Supplier acknowledges that execution of this Code and any interaction between Supplier personnel and Company does not create an employment relationship with Company. Supplier maintains responsibility for all employment terms, and to the extent Supplier or its personnel are employed by Supplier, such employment remains at-will unless otherwise defined by Supplier's own written policies.

Equal Opportunity Statement: Supplier represents and warrants that it is an equal opportunity employer and will not discriminate in hiring, compensation, promotion, termination or other terms and conditions of employment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age or any other characteristic protected by applicable law.

Standards and Requirements

1. Compliance with Laws: Supplier shall comply with all applicable laws, regulations and industry standards in the jurisdictions in which it operates, including labor, health and safety, environmental, tax and anti-corruption laws. Supplier shall obtain and maintain all permits, licenses and approvals required to perform its obligations.

2. Labor, Human Rights and Fair Treatment: Supplier shall prohibit forced, bonded, indentured, involuntary or trafficked labor and shall not employ persons under the age of 15 or under the minimum working age under applicable law. Supplier shall respect freedom of association and collective bargaining rights and shall not subject workers to harassment, corporal punishment or inhumane treatment.

3. Wages, Benefits and Working Hours: Supplier shall pay wages and benefits that meet or exceed minimum legal requirements, maintain accurate wage and time records, and comply with limits on working hours and requirements for overtime compensation.

4. Health, Safety and Well-Being: Supplier shall provide a safe and healthy workplace, including training, hazard communication, emergency preparedness and appropriate personal protective equipment. Supplier shall implement systems to identify, evaluate and control health and safety risks.

5. Environment and Sustainability: Supplier shall operate in a manner that protects the environment, minimize waste and emissions, manage hazardous substances appropriately, and comply with environmental permits and reporting obligations.

6. Anti-Bribery and Anti-Corruption: Supplier shall not offer, promise, give or accept any bribe, kickback, or other undue payment or advantage to obtain or retain business, influence any decision, or secure an improper advantage. Supplier shall maintain adequate internal controls to prevent corruption and shall promptly disclose any suspected violation.

7. Conflicts of Interest and Gifts: Supplier shall avoid conflicts of interest and shall not provide gifts, hospitality or other benefits to Company personnel in excess of customary business courtesies or that create the appearance of impropriety.

8. Confidentiality and Data Protection: Supplier shall protect confidential information received from Company and comply with applicable data protection laws. Supplier shall implement reasonable technical and organizational measures to safeguard personal and proprietary data and shall notify Company of any unauthorized access or breach affecting Company data.

9. Subcontractors and Supply Chain: Supplier shall ensure that its subcontractors, agents and suppliers adhere to standards consistent with this Code. Supplier remains fully responsible for the performance and compliance of its subcontractors.

10. Audits, Inspections and Remediation: Supplier shall permit reasonable on-site inspections and audits by Company or its designated representatives, including review of records and facilities. Where nonconformities are identified, Supplier shall cooperate in timely corrective action, including remediation plans and verification activities.

11. Reporting of Violations: Supplier shall provide channels for workers to report concerns without retaliation and shall notify Company promptly of any alleged violation of this Code. Company will review credible reports and may require corrective action or terminate any agreement for material breaches.

Recordkeeping and Certifications

Supplier shall retain accurate records demonstrating compliance with this Code, including payroll, time records, safety and training records, permits and audit reports, for a minimum of five (5) years or longer where required by law. Supplier shall provide copies of such records upon reasonable request.

Supplier Certification (check applicable) Supplier certifies that it, its affiliates and subcontractors comply with the standards and requirements set forth in this Code. Supplier certifies that to the best of its knowledge there are no undisclosed conflicts of interest with Company personnel that would impair objective business dealings. If exceptions apply, describe in detail

Authorization to Contact and Background Checks

Supplier authorizes Company or its designated third parties to contact references, previous employers and other third parties to verify information provided and to conduct background checks on key personnel assigned to Company engagements, where permitted by law.

Supplier authorizes such contact and background screening consistent with applicable law and agrees to obtain any necessary consents from its personnel.

Remedies and Termination

Material breach of this Code may result in remedies up to and including suspension of performance, withholding of payments, requirement to implement corrective actions within a specified timeframe, and termination of contracts for cause. Supplier remains liable for damages and costs incurred by Company as a result of Supplier noncompliance.

Training and Communication

Supplier shall communicate this Code and related policies to its workforce, agents and subcontractors and provide training as necessary to ensure compliance. Supplier shall maintain a process to monitor and remediate noncompliance.

Supplier Certification and Acknowledgement

I certify that the information provided in this form is true, accurate and complete. I further certify that I am authorized to bind the Supplier and that Supplier shall comply with the obligations set forth in this Code. I understand that false statements or material omissions may constitute grounds for contract termination and other remedies.

I certify and acknowledge the statements above. Additional Comments or Required Corrective Actions

Company Name:

By:

Date:

Supplier Name:

By:

Date:

What the HR Supplier Code of Conduct Is and Why It Exists

An HR Supplier Code of Conduct is a formal document that sets minimum labor, ethics, safety, and compliance expectations for third-party suppliers who provide personnel, contingent workers, or HR-related services. It typically covers workplace standards, anti-discrimination and harassment rules, recordkeeping obligations, background check and eligibility requirements, data privacy commitments, and escalation paths for violations. Organizations use the Code to align supplier behavior with corporate policies and legal obligations, to support consistent contractual terms across vendors, and to create measurable compliance checkpoints during onboarding and audits.

Why a Supplier Code of Conduct Matters for HR

A clear HR Supplier Code of Conduct reduces legal risk, standardizes expectations across vendors, and supports consistent workforce protections while enabling compliance with federal and industry rules such as HIPAA and employment recordkeeping.

Who Prepares and Who Signs This Code

Signatures are usually provided by an authorized supplier representative and an internal contract or vendor manager to indicate mutual acceptance.

Procurement teams and HR: Draft and enforce supplier compliance requirements and monitor performance.
Vendors and subcontractors: Review, attest, and provide required supporting documentation during onboarding.
Legal and compliance: Approve language, escalate breaches, and maintain audit records for regulatory review.

Step-by-step: Completing the HR Supplier Code of Conduct

Follow these steps in order to complete, sign, and store the Code during supplier onboarding and periodic reviews.

01

Prepare draft: Identify applicable clauses and review corporate HR policies.
02

Collect supplier data: Request legal name, EIN/TIN, point of contact, and insurance proof.
03

Execute acceptance: Supplier signs and dates the Code; include witness or notary if required.
04

Archive and monitor: Store signed copy and schedule audits or renewals.

FAQs: Common Questions About the HR Supplier Code of Conduct

Answers to frequently asked questions that arise when preparing, signing, or enforcing the Code.

Need help? Contact support

Can suppliers sign electronically?
Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are met.
When is a BAA required?
If the supplier will create, receive, maintain, or transmit protected health information on behalf of a covered entity, a HIPAA Business Associate Agreement is required to satisfy regulatory obligations under HIPAA.
What if the supplier refuses a clause?
Document the objection, seek legal review, and negotiate acceptable language or mitigation measures before approving vendor onboarding.
Are witness or notary signatures necessary?
Typically not for commercial supplier codes; require witness or notarization only if corporate policy or specific state law mandates it for binding attestations.
How should disputes be handled?
Include a clear escalation path: contact, remediation timeline, dispute resolution forum, and governing law to ensure predictable enforcement.
Can the Code be updated later?
Yes. Communicate changes in writing, require supplier acknowledgement, and retain prior versions per your record retention policy for audit purposes.

Essential Components to Include in the Code

A robust Code is concise but thorough: include commitments, verification steps, and remedies for noncompliance.

Labor Standards

Prohibit forced labor and child labor; require compliance with federal and state wage, hour, and safety laws and permit audits to verify working conditions.

Anti-Discrimination

Mandate equal treatment and non-harassment consistent with Title VII and state civil rights statutes; require reporting channels for complaints.

Background Checks

Specify acceptable checks and compliance with FCRA and state background-check rules; require written consent where applicable.

Data Privacy

Outline handling of HR data, encryption controls, breach notification timelines, and BAA requirements for protected health information.

Subcontracting Rules

Require supplier disclosure of subcontractors and flow-down of Code obligations with the same compliance expectations and monitoring rights.

Remediation & Termination

Describe corrective action timelines, verification steps, and termination rights for persistent or severe violations of the Code.

Security, Privacy, and Compliance Checklist

Encryption: TLS 1.2/1.3; AES-256 at rest

HIPAA Controls: BAA required when PHI is involved

Audit Trail: Timestamped signing events

Access Controls: Role-based access required

Records Retention: Define retention schedule

Accessibility: WCAG 2.0 Level AA

Top Risks and Potential Consequences

Contract Breach: Termination for cause

Regulatory Fines: HIPAA penalties possible

Reputational Harm: Public disclosure risk

Operational Disruption: Service delivery interruptions

Liability Exposure: Indemnity claims

Procurement Delays: Onboarding suspension

Common Preparation Pitfalls to Avoid

Using vague language that allows inconsistent interpretation across suppliers and weakens enforceability during audits or disputes.
Failing to align the Code with corporate contracts, which creates conflicts between signed agreements and procurement terms.
Not specifying verification steps or documentary evidence, leaving compliance checks subjective and unreliable.
Omitting consumer-facing disclosures or BAAs when handling health or sensitive personal data, creating regulatory exposure.

Typical Digital Workflow Settings for Online Completion

Recommended configurations for digitizing the Code and collecting supplier attestations in a compliant manner.

Field	Configuration
Signature Type	Electronic signature with audit trail
Authentication	Email link or SMS code; consider stronger MFA for PHI
Conditional Fields	Show BAA request when PHI indicated
Retention Policy	Preserve signed PDF + audit log

Platform Requirements for Secure eSigning

Ensure platform logs are retained for audits and allow role-based access to limit exposure to sensitive HR data.

Integrations: Salesforce, NetSuite, Google Workspace
File Formats: PDF, DOCX, HTML supported
Compliance: HIPAA, SOC 2, ESIGN compliant

Digital Signing Flow for the Supplier Code

A straightforward signing flow reduces friction and preserves a verifiable audit trail for compliance.

Upload Document: Sender uploads Code to eSignature platform
Add Fields: Place signature, date, and data fields
Send to Supplier: Dispatch via email or secure link
Store Record: Save signed PDF and audit log

Key Deadlines, Reviews, and Processing Expectations

Scheduleable events and review timelines help keep supplier commitments current and auditable.

Initial Acceptance Deadline:

Require signed Code during vendor onboarding before access to HR systems

Annual Review:

Conduct yearly attestations for active suppliers to refresh compliance commitments

BAA Trigger:

Execute BAA before supplier accesses protected health information

Audit Window:

Allow 30 days for suppliers to deliver requested compliance evidence

Remediation Timeline:

Specify 14–90 days based on severity for corrective action

Comparing eSignature Vendors for HR Supplier Onboarding

A neutral feature and price comparison to help select an eSignature provider for Code distribution and storage.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now