
Tools and providers
Part of What tougher evidence means for promotional products
When to run promotional merchandise vendor due diligence
A UK checklist on when to run promotional merchandise vendor due diligence, covering company checks, sanctions, PECR rules and payment terms before you brief.
What to take away
- Public procurement policy now pushes buyers to weigh supply-chain security and national interest alongside unit price when sourcing promotional merchandise.
- Due diligence should start before you brief a supplier, not after a quote lands, so sanctions, ownership and data checks shape the shortlist.
- Run the checks in stagescompany identity, compliance, data handling, then commercial terms, with a written record at each stage.
- Re-run checks on any supplier you have not used for twelve months, because ownership and sanctions positions change.
- Keep a dated comparison table so you can show why one vendor was chosen over another.
When does due diligence actually start?
It starts before the first brief goes out. Wait until quotes arrive and you are comparing prices from a shortlist you have not verified. The promotional merchandise tools and supplier guide for 2027 sets out the wider selection process this checklist feeds into.
Three due diligence gates
- Gate one: identity and ownership
- Gate two: compliance and data
- Gate three: commercial and delivery capacity
- Name one person per gate
Name one person per gate, because unnamed checks are the first to be dropped when a deadline tightens.
Which company checks come first?
Start with Companies House. Confirm the registered number, filing history, accounts status and any charges. Check who the directors are and whether the same people appear across several supplier entities.
First company checks
- Confirm registered number
- Review filing history and accounts status
- Check charges and directors
- Cross-check registered activity against purchase
- Request employer liability insurance
- Request product safety documentation
Cross-check the registered activity against what you are buying. A supplier whose filing history points at unrelated trading is worth a follow-up question, not an automatic rejection.
If you are buying for a public body, or selling into one, read Procurement in the national interest. It explains why supply-chain resilience and supplier conduct now carry more weight in public contracts.
Ask for evidence of employer liability insurance and, where relevant, product safety documentation for items intended for children.
Do sanctions and ownership checks matter?
Yes, and more than they did five years ago. Sanctions lists change, and a supplier that looked clean at onboarding can later be linked to a restricted entity. Check the ownership chain, not just the trading name.
Screen the trading entity and its ultimate parent, not just the brand on the invoice. Ask which company holds the contract and which one delivers.
For a quick read on how two shortlisted vendors compare once checks are done, see the promotional merchandise supplier comparison. It lines up scores side by side rather than arguing from memory.
Record the date of every check. A sanctions screen from 2024 does not support a 2027 order.
How should you handle data and marketing rules?
If the vendor will hold your customer list to send branded gifts or follow-up emails, the Guide to Privacy and Electronic Communications Regulations sets out consent and soft opt-in rules that apply to that activity.
Ask where data is stored, who can access it and how long it is kept. A supplier that cannot answer in writing is a risk you inherit.
Check whether the supplier is registered with the ICO for the data protection fee, and ask for a processing agreement that names any sub-processors.
If the vendor also runs paid campaigns around your branded merchandise, agency-side ad resources such as Ad Resources for Marketing Agencies cover the platform rules they should already know.
What changes between first quote and signed order?
Use this table to record the position before and after checks.
First quote vs signed order
Before due diligence
- Legal identity
- Trading name only
- Ownership
- Unverified
- Sanctions
- Not screened
- Insurance
- Assumed
- Data handling
- Verbal assurance
- Payment terms
- Deposit requested
- Lead times
- Estimate given
After due diligence
- Legal identity
- Registered number and filing status confirmed
- Ownership
- Directors and parent entities checked
- Sanctions
- Screened, dated, with method noted
- Insurance
- Certificate seen and expiry logged
- Data handling
- Written retention and access terms
- Payment terms
- Terms matched to delivery milestones
- Lead times
- Written dates with named contact
A team paying £2,000 a month for branded stock, for example, has enough exposure to justify two hours of checks.
When should you walk away?
Walk away when a supplier refuses to give a registered company number, when insurance cannot be produced, or when data questions are answered vaguely. Those are structural problems, not paperwork gaps.
Also walk away if payment terms demand full settlement before production on a first order with no verified trading history.
Common questions
How often should vendor checks be repeated?
At least annually, and always before a new order cycle. Ownership, sanctions and insurance positions can change within a year.
Is a credit check enough on its own?
No. Credit status says nothing about sanctions exposure, data handling or product safety documentation.
What should be kept on file?
A dated checklist per vendor, copies of certificates, sanctions screen results and the signed terms. Keep them for the life of the contract plus your retention period.
Does this apply to small orders?
Scale the depth, not the principle. A £300 order may need only identity and insurance checks, while larger programmes need all three gates.



