Vendor Risk Questionnaire by Qeluntra

Raw materials supplier risk questionnaire

Questions to send to suppliers of raw materials: who they are, whether they can keep supplying you, how they control quality, where materials come from and how they treat people and the environment along the way.

69 questions in 10 sections. Each has the kind of answer you need and a one-line reason you can keep in the questionnaire, so suppliers understand why you ask.

Download Word (.doc) Download spreadsheet (.csv) Customise it in the builder

1. Company and ownership (8)

  1. What is your company's full legal name and registration number?TextWhy we ask: Confirms you're contracting with the right legal entity.
  2. Who are your ultimate beneficial owners (holding 25% or more)?TextWhy we ask: Ownership affects conflicts of interest and sanctions checks.
  3. In which countries do you have operations that would serve us?TextWhy we ask: Shows where work is done and which rules apply.
  4. How many years has the company been trading?NumberWhy we ask: Track record is a simple indicator of stability.
  5. How many employees do you have?NumberWhy we ask: Indicates capacity and dependence on key people.
  6. Please provide a current certificate of registration or trade licence.Document requestedWhy we ask: Evidence that the company is registered and active.
  7. Has the company changed ownership in the last 3 years?Yes / NoWhy we ask: Recent ownership changes can change priorities and risk.
  8. Who will be our main contact, and who is their backup?TextWhy we ask: Avoids depending on one person.

2. Financial stability (8)

  1. Please share your last two years of financial statements.Document requestedWhy we ask: The basic evidence of financial health.
  2. What was your annual revenue in the last financial year?NumberWhy we ask: Lets us see how large our spend is relative to your business.
  3. What share of your revenue would our business represent?NumberWhy we ask: Very high dependence on one customer is a risk for both sides.
  4. Are you subject to any insolvency, restructuring or major debt proceedings?Yes / NoWhy we ask: Direct signal of financial distress.
  5. Have your audited accounts ever been qualified by the auditor?Yes / NoWhy we ask: A qualified opinion can signal accounting problems.
  6. Are there any outstanding legal claims above 5% of your annual revenue?Yes / NoWhy we ask: Large claims can affect your ability to deliver.
  7. Which bank(s) do you use for operations?TextWhy we ask: Supports payment set-up and verification.
  8. Do you require advance payment for raw materials or tooling?Yes / NoWhy we ask: Advance payments increase our exposure if you fail.

3. Business continuity (7)

  1. Do you have a written business continuity plan?Document requestedWhy we ask: Shows you have prepared for disruption.
  2. When did you last test the plan, and what was the result?DateWhy we ask: An untested plan often fails when needed.
  3. Do you produce or store our items at more than one site?Yes / NoWhy we ask: A single site is a single point of failure.
  4. What is your recovery time if your main site is unavailable?TextWhy we ask: Tells us how long supply could stop.
  5. Which of your own suppliers could stop your service to us if they failed?TextWhy we ask: Reveals hidden dependencies further up the chain.
  6. How many weeks of finished stock or safety stock do you hold for our items?NumberWhy we ask: Buffer stock protects us during short disruptions.
  7. How will you notify us of a disruption, and how quickly?TextWhy we ask: Early warning gives us time to respond.

4. Quality (7)

  1. Which quality management certifications do you hold (for example ISO 9001)?Document requestedWhy we ask: Independent evidence of a quality system.
  2. What was your defect rate for the last 12 months (parts per million)?NumberWhy we ask: A direct measure of quality performance.
  3. What was your on-time delivery rate for the last 12 months?NumberWhy we ask: Reliability of delivery matters as much as price.
  4. How do you handle non-conforming products or services and corrective actions?TextWhy we ask: Shows how problems get fixed and prevented.
  5. Can you provide certificates of conformity or material test reports with each shipment?Yes / NoWhy we ask: Traceable proof that what arrives meets the specification.
  6. Do you have batch or lot traceability back to raw materials?Yes / NoWhy we ask: Needed to contain a defect or recall quickly.
  7. Have you had any product recalls or major customer complaints in the last 3 years?Yes / NoWhy we ask: Past incidents indicate process weaknesses.

5. Cyber security and data protection (5)

  1. Will you store, process or access any of our data or systems?Yes / NoWhy we ask: Determines whether the rest of this section applies.
  2. Do you enforce multi-factor authentication for all staff with access to our data or systems?Yes / NoWhy we ask: MFA prevents most account takeovers.
  3. Have you had a security incident affecting customer data in the last 3 years?Yes / NoWhy we ask: Past breaches indicate risk and response maturity.
  4. How quickly will you notify us of a security incident affecting our data?TextWhy we ask: Fast notification lets us meet our own obligations.
  5. Do staff receive security awareness training at least yearly?Yes / NoWhy we ask: People are the most common entry point for attacks.

6. AI use on your data (7)

  1. Do you use AI tools or AI agents in the work you do for us?Yes / NoWhy we ask: Determines whether the rest of this section applies.
  2. Will any of our data be entered into AI tools? If so, which tools?TextWhy we ask: Our data may leave your control once entered into an AI service.
  3. Is our data used to train or improve any AI model, yours or a provider's?Yes / NoWhy we ask: Training use can expose our information to others.
  4. Do you keep an inventory of the AI agents and tools your staff use?Yes / NoWhy we ask: You can't control AI use you don't know about.
  5. Are consequential AI decisions or actions reviewed by a person before they take effect?Yes / NoWhy we ask: Human review limits the impact of AI errors.
  6. Can you show which AI actions were taken on our data, and when?Yes / NoWhy we ask: An audit trail is needed to investigate problems.
  7. Do you have a written AI use policy for staff?Document requestedWhy we ask: Shows AI use is governed, not ad hoc.

7. ESG and responsible sourcing (9)

  1. Do you have a supplier code of conduct or responsible sourcing policy?Document requestedWhy we ask: Sets expectations for your own supply chain.
  2. Do you measure your greenhouse gas emissions (scope 1 and 2 at least)?Yes / NoWhy we ask: Needed if we report emissions across our supply chain.
  3. Can you disclose the country of origin of the main materials in our items?Yes / NoWhy we ask: Origin affects labour, environmental and trade risks.
  4. How do you check for forced or child labour in your operations and supply chain?TextWhy we ask: A serious legal and reputational risk.
  5. Do you hold any environmental certifications (for example ISO 14001)?Document requestedWhy we ask: Independent evidence of environmental management.
  6. How do you manage waste and hazardous materials from the work you do for us?TextWhy we ask: Improper disposal can create liability for both parties.
  7. What share of your workforce and spend is local to the countries you serve us from?TextWhy we ask: Relevant where local-content goals apply.
  8. Do you have targets to reduce emissions, energy use or waste? Please describe them.TextWhy we ask: Shows whether environmental performance is managed over time.
  9. Do workers in your operations have written contracts, fair working hours and a way to raise grievances?Yes / NoWhy we ask: Basic labour standards that buyers are expected to check.

8. Compliance and ethics (7)

  1. Do you have an anti-bribery and corruption policy, and do staff receive training on it?Document requestedWhy we ask: Bribery by a supplier can create liability for the buyer.
  2. Do you screen your company, owners and partners against sanctions lists?Yes / NoWhy we ask: Dealing with sanctioned parties is prohibited in many jurisdictions.
  3. Are you, your owners or directors subject to any sanctions or debarment?Yes / NoWhy we ask: A direct compliance blocker.
  4. Do any of your owners or staff have a relationship with our employees that could be a conflict of interest?Yes / NoWhy we ask: Conflicts of interest undermine fair selection.
  5. Do you have a whistleblowing channel for staff and third parties?Yes / NoWhy we ask: Lets problems be reported before they grow.
  6. Have you been subject to regulatory fines or investigations in the last 5 years?Yes / NoWhy we ask: Indicates compliance risk.
  7. Do you hold all licences and permits required for the work you'd do for us?Document requestedWhy we ask: Unlicensed work can be stopped or invalid.

9. Insurance (4)

  1. Please provide certificates for your current insurance policies.Document requestedWhy we ask: Evidence that cover exists and is current.
  2. What is your general / public liability cover limit?NumberWhy we ask: Covers damage or injury to third parties.
  3. What is your product liability cover limit?NumberWhy we ask: Covers harm caused by defective products.
  4. Will you name us as an additional insured where appropriate?Yes / NoWhy we ask: Lets us claim directly under your policy.

10. Sub-suppliers (7)

  1. Will you subcontract any part of the work for us? If so, which parts?TextWhy we ask: Subcontracting moves work outside direct control.
  2. Will you ask for our approval before adding or changing a subcontractor?Yes / NoWhy we ask: Keeps visibility of who actually does the work.
  3. Do you apply the same requirements (quality, security, ethics) to your subcontractors?Yes / NoWhy we ask: Risks pass down the chain unless requirements do too.
  4. Which critical inputs come from a single source?TextWhy we ask: Single-source inputs are a common cause of shortages.
  5. How do you monitor the performance and risk of your key suppliers?TextWhy we ask: Shows whether upstream problems would be caught early.
  6. Please list the subcontractors and key suppliers you would use for our work, with their countries.Document requestedWhy we ask: You can't manage risks in a chain you can't see.
  7. What would you do if a key supplier of yours failed or stopped delivering?TextWhy we ask: Tests whether upstream failure has a backup plan.

Track the answers, not just the questions

Once suppliers reply, Qeluntra keeps due-diligence evidence, remediation owners and deadlines in one place, linked to your contracts.

Track answers and evidence in Qeluntra, free How Qeluntra handles supplier risk

Free plan: no card, no expiration, one company workspace.

This questionnaire is a starting point, not legal or compliance advice. Adapt it to your contracts, your sector and the laws that apply to you. Question bank last reviewed 2026-09-25.