P&G Guidelines/Expectations for Suppliers

This page describes some of P&Gs core business conduct expectations for suppliers and other external business partners. For clarification purposes, this list is not exhaustive, and there may be additional expectations/guidelines depending on the goods/services provided. These will be provided on a case by case basis, as relevant.

For more information about P&G's Supplier Stewardship Guidelines and Expectations Overview click English | Español | 中国 | Português.

For information about how P&G collects and processes Vendors information please click here to review P&G’s Vendor privacy notice.

Guidelines	Relevant for Suppliers
Conflict of Interest	All suppliers. See pages 51 + 52 of policy.
Global Social Media Policy	All suppliers.
Gifts & Entertainment Expectations	All suppliers.
World Wide Business Conduct Manual	All suppliers.
Purchase Orders (Terms & Conditions)	All suppliers.
Utilization of External Party Resources	All suppliers providing staffing to complete a service.
P&G Competitive Information Collection Policy	All suppliers.
Global Violence Free Workplace	All suppliers.
Access Control - Company Facilities	All suppliers accessing P&G facilities.
Publicity Guidelines	All Suppliers.
Physical Security Expectations	All Suppliers with P&G Assets.
Expectations of P&G Suppliers Using Artificial Intelligence (AI) in their P&G Work	Suppliers Using Artificial Intelligence (AI) in their P&G Work
Securing Company Facilities	All suppliers accessing P&G facilities and to all Contract Manufacturers

P&G is committed to providing products and services of superior quality and value to the world's consumers, now and for generations to come. Sustainability Guidelines for External Business Partners explain the global standards to be followed in your daily business activities on behalf of P&G. External business partners and their suppliers are expected to share P&G's commitment to these standards

Guidelines	Relevant for Suppliers
Responsible Sourcing Expectations	All suppliers.
French Undeclared Labor	Suppliers located in, or doing business in, France
U.S. State Requirements for Animal Testing	All suppliers.
Beauty Supplier Expectations for Cruelty-Free Brands	Relevant for Beauty suppliers.
Beauty Responsible Sourcing Expectations	Relevant for Beauty suppliers.
Policy Statement on German Supply Chain Due Diligence Law (Lieferkettensorgfaltsgesetz) German Version (English version; non-binding)	Relevant for suppliers supplying into Germany or supplying products used to manufacture P&G Brands sold in Germany

As a P&G supplier you must not offer, give, seek, or accept bribes. You also must not allow any other party working on behalf of P&G—such as an agent, consultant, or subcontractor—to offer, give, seek, or accept a bribe. A bribe is anything that is given or offered to improperly influence the behavior of someone in business or government. It need not be made in cash. P&G also prohibits “facilitation” payments. These are small, unofficial payments made to government officials that prompt or expedite routine tasks, such as clearing goods through customs, obtaining a travel visa, or connecting utilities.

Guidelines	Relevant for Suppliers
Anti-Bribery Expectations	All suppliers.
Anti-Corruption Compliance Agreement	All suppliers.

This information is provided to help suppliers and external business partners understand the basics of our commitment to privacy, what our goals are and some general concepts about privacy at P&G. Contact your Purchases representative for support.

These requirements are the basic organizational security and privacy requirements for suppliers. They describe the expectations P&G has with suppliers and external business partners to align with the P&G Information Security and Privacy Policies.

Privacy & Security Requirements for External Business Partners
View the Privacy & Security Requirements for EBPs who collect, use or process personal information for P&G.

P&G's Privacy & Security Requirements for EBPs

EEA/UK/Swiss Cross-Border Personal Data Transfers – P&G Exporting Entities
When P&G exports EEA/UK/Swiss personal data to a vendor or business partner (a “Third Party”) located in a Non-Adequate Third Country we may rely on the Standard Contractual Clauses (“SCC’s”) as a valid mechanism of transfer. For purposes of identifying P&G exporting entities, this section provides a list of P&G’s affiliates that may operate as data exporters and thus export personal data outside of the EEA, UK and or Switzerland to other jurisdictions. These entities will be the exporting entities under P&G’s data transfer mechanisms (e.g., SCC’s).
To note, a “Non-Adequate Third Country” is a country that has not received an adequacy decision from the EU Commission. The official list of countries that have received a European Adequacy decision can be reviewed here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Incident Management
Learn more about P&G Incident Management process or if you feel there has been a Privacy Incident.

Learn About Incident Management

Guidelines	Relevant for Suppliers
P&G Retention Schedules for Consumer Personal Data	All suppliers that process P&G Consumer Personal Data

Cyber Security is an increasing risk for both P&G and our External Business Partners. Please remain alert and diligent and continue to improve your capabilities to protect all our supply chains. We encourage you to explore and adopt best practices and certifications that support the needs of P&G and the other CPGs and industries with whom you work. For EBPs who have access to P&G Highly Restricted Data, provides a SaaS or an Application that host P&G owned data, and/or have access that requires VPN to P&G network from a third party owned device. P&G requires the following contract to be signed Exhibit C P&G Information Security Requirements.

In addition, all external business partners who deploy, manage, or support P&G IT assets (applications, data, platforms, software, networks and information systems) and / or require access privileges to any P&G system to perform their role should at a minimum adhere to the IT Guidelines below:

Guidelines	Relevant for Suppliers
Info Security Threat & Incident Management	All suppliers who deploy, manage, or support P&G IT assets (applications, data, platforms, software, networks and information systems).
System Access	All suppliers who require access privileges to any P&G system to perform their role.
Technical Security Management	All suppliers who deploy, manage, or support P&G IT assets (applications, data, platforms, software, networks and information systems).

External business partners providing IT services to P&G please review the applicable expectations / guidelines from the list below.

Guidelines	Relevant for Suppliers
IT Risk Management	All suppliers who deploy, manage, or support P&G IT applications, data, platforms,   software, networks and information systems.
IT Change Management	All suppliers who deploy, manage, or support P&G IT applications, data, platforms,   software, networks and information systems.
Information Asset Classification	All suppliers who are storing, transmitting, processing, or otherwise managing information no matter the physical or digital form of the information or where it is stored.
Acceptable Use of P&G Technology	All the suppliers using technology to conduct business for P&G, regardless of whether the technology is owned by P&G, the employee, or by the Third Party.
Software Development	All suppliers.

Relevant expectations / guidelines for suppliers providing services or goods to P&G in certain regions. Review as applicable from the list below.

Guidelines	Relevant for Suppliers
Occupational Safety and Health Supplement (St. Petersburg Plant)	Requirements for labor protection, industrial safety, fire safety and environmental protection for contractors carrying out work on the territory of LLC Petersburg Products International