CSDDD Supplier Contract Clause Review Workflow

Open an impact-specific clause review after the company has identified a potential or actual adverse human-rights or environmental impact connected to its own operations, subsidiaries, or business partners in the chain of activities. A separate baseline review can test whether a new or renewed supplier contract can support the due diligence policy before a specific impact is identified. For an impact-specific review, first decide whether the contract supports prevention under Article 10, action on an actual impact under Article 11, or both.

Record the supplier, site or activity, the relevant business partner relationship, the impact type, whether the supplier is an SME, and the evidence that makes the clause necessary. A generic code-of-conduct attachment is not enough if the risk finding calls for a prevention action plan, corrective action plan, SME support, or enhanced escalation.

For a potential adverse impact, Article 10 lists seeking contractual assurances from a direct business partner that it will ensure compliance with the company's code of conduct and, where necessary, a prevention action plan. Article 11 uses the same structure for an actual adverse impact and any necessary corrective action plan. The assurance is one possible appropriate measure, not a universal clause required in every supplier contract.

A general compliance warranty may support the policy, but it will not by itself address an impact that calls for a prevention or corrective action plan. For that impact, identify the applicable code-of-conduct obligations, the relevant plan, expected cascading assurances for the partner's own partners in the chain of activities, and the evidence the supplier must provide.

Articles 10 and 11 require contractual assurances to be accompanied by appropriate measures to verify compliance. Independent third-party verification can be used, including through industry or multi-stakeholder initiatives, but the review should ask whether the verification method actually tests the risk and action-plan milestones rather than merely collecting signed supplier declarations.

If the contract is with an SME, the terms must be fair, reasonable, and non-discriminatory. Where compliance with the code of conduct or action plan would jeopardise the SME's viability, the company must provide targeted and proportionate financial support. Where necessary in light of the SME's resources, knowledge, and constraints, the company must provide targeted and proportionate support, including capacity-building, training, or management-system upgrades. If independent third-party verification is carried out in relation to SMEs, the company bears the cost unless the SME requests to pay at least part of it.

Where the specified measures do not prevent or adequately mitigate a potential impact, amended Article 10 requires last-resort steps until the impact is addressed: refrain from a new or extended relationship, adopt and implement an enhanced prevention plan without undue delay where success can reasonably be expected, and suspend affected activities where the governing law permits unless suspension can reasonably be expected to cause manifestly more severe impacts. Directive (EU) 2026/470 removed mandatory termination.

Article 11 applies the same structure to an actual impact through an enhanced corrective action plan. Before suspension, assess its expected human-rights or environmental effects. If suspension would be manifestly more severe, the company is not required to suspend and must be able to explain its reasons to the competent authority. Member States must provide a suspension option for contracts governed by their law except contracts the parties are legally required to enter, so the governing law and national transposition must be checked. Whether the company suspends or not, it retains monitoring and review duties.

The final output should be a supplier-specific review file alongside the contract template. The record should show why the clause was used, which CSDDD measure it supports, how the supplier can comply, how compliance will be verified, and what happens if the risk remains.

Use the review file for monitoring under Article 15 and for later authority, audit, supplier, or stakeholder questions. The Commission, in consultation with Member States and stakeholders, must adopt guidance about voluntary model contractual clauses by 26 July 2027. Those clauses will be voluntary guidance, not binding contract terms and not a substitute for choosing and operating appropriate measures for the specific impact. National measures apply from 26 July 2029. If an impact-specific clause cannot be connected to action-plan milestones, verification evidence, SME support, or escalation criteria, revise it before signature.