Twenty documents · complete and available today · current at 9 September 2026
The documents a Canadian buyer asks for before they will sign
A customer, a prime contractor or a public body sends a supplier questionnaire. It asks whether you have written policies on forced labour, bribery, harassment, health and safety, accessibility and information security, and whether somebody senior has approved them. You have the practices. You do not have the paperwork.
This is the paperwork — written to be true of a small Canadian organisation rather than copied from a multinational, and written so you can tell a buyer honestly which obligations do not apply to you.
The thing nobody else tells you
Most of what you are being asked for, you are not legally required to have.
The Fighting Against Forced Labour and Child Labour in Supply Chains Act only reaches an organisation meeting two of three thresholds — $20 million in assets, $40 million in revenue, or an average of 250 employees. Almost no small business meets that. But every large buyer that does must describe the due diligence it applies across its supply chain, so the questionnaire lands on you anyway.
A supplier who writes “we are not a reporting entity under section 2, as we do not meet the thresholds; our statement of practice is attached voluntarily” looks better informed than one who files a report they never owed. Every document in this pack states the threshold that governs it, and where you sit below it, the document says so.
Tender and supplier qualification pack — 20 documents
Buy this if a questionnaire has landed and you cannot answer it. Everything a Canadian SME is asked for in supplier onboarding, with the legal thresholds stated and sourced.
- Supplier code of conduct, and a forced and child labour statement written for a business that is not an S-211 reporting entity but is being asked by one.
- Anti-bribery and corruption, conflict of interest, human rights and non-discrimination, and a whistleblowing procedure with an anonymous route — which is the part buyers actually check.
- Health and safety, workplace violence and harassment, and a separate Quebec psychological harassment policy carrying the seven elements prescribed since 28 September 2024.
- Accessibility, environment and business continuity, each written to survive being asked for evidence.
- A one-page information security summary to send with a bid, which answers two thirds of a vendor questionnaire before anyone asks.
- A jurisdiction obligations register: every written-document duty for federal, Ontario, Quebec and BC, with the section of the statute beside it.
- A buyer question map, a readiness self-check that scores itself, and an evidence index.
- A worked example: a completed questionnaire for a fictional eleven-person firm, including four questions answered “no”.
CAD $450
20 documents in 18 files · Word and Excel · emailed within one working day
What makes it worth paying for
Generic HR and safety templates are already free from Ontario’s health and safety associations. We are not competing with those, and we will say so.
- The thresholds are checked against the statute. While writing this we found three published sources — including an international law firm and an HR consultancy — stating Ontario and BC thresholds incorrectly.
- Ontario’s written health and safety policy duty does not apply where five or fewer workers are regularly employed, so it begins at six. The violence and harassment policies are required of every employer; only the written-and-posted form has the small-workplace exception.
- British Columbia requires a formal written programme at 20 or more workers with a moderate or high hazard rating, or 50 or more regardless — not “more than 20”, as one national source has it.
- Every threshold in the pack carries its section number, so you can check us rather than trust us.
How to know if this is for you
It is, if any of these has happened.
- You lost a bid, or were held up in one, because you could not return a supplier questionnaire.
- A customer has sent you a supplier code of conduct to sign and you do not have the underlying policies.
- You are being asked about modern slavery, and you do not know whether the Act applies to you.
- You are bidding for public sector work for the first time.
- You have policies, but nobody has reviewed them in years and you know the date will be asked for.
It is not for you if you need employment contracts, incorporation documents or tax registration. Those are for a lawyer and an accountant, and we will tell you so rather than sell you a template.
The questions people ask before buying
Answered the way we would answer them on the phone
Which provinces does it cover?
Federal, Ontario, Quebec and British Columbia at launch. We say that plainly rather than implying national coverage. If you are in another province the policies still work — what changes is the threshold table, and we will tell you honestly what we have not yet verified for you. We add provinces as they are asked for.
Does this overlap with your ISO 27001 pack?
No. The ISO pack is entirely information security — policies, the Statement of Applicability, registers and audit programme. It contains no labour, supply chain, accessibility or environmental content. This pack contains no ISMS documents. They answer different halves of the same questionnaire, and the one-page security summary here tells you which questions belong to which.
Is it legal advice?
No, and we are not lawyers. It is a statement of what the named statutes say, with the section numbers, so you or your lawyer can check it. Employment, health and safety and human rights law differ by province and change; verify the position for your jurisdiction and headcount before relying on it.
Will it make us compliant?
No. Adopting a policy you do not follow is worse than having none, because it becomes evidence against you. The pack includes a readiness self-check whose last question is the one that actually loses contracts: could you evidence every control you claimed in your last questionnaire response?
What can it not give me?
Your certificates of insurance, your workers compensation clearance letter, and your audited accounts. No document pack can produce those, and the buyer question map names them as gaps rather than pretending otherwise.
What format, and can I edit it?
Word and Excel. Nothing is locked or watermarked. Rebrand it, cut what does not apply, extend what does. The registers have shaded cells for you to complete and dropdowns where a consistent answer matters.
What happens when the law moves?
Where we materially revise a document you have bought, you get the revision free for twelve months and we tell you what changed. This pack needs more maintenance than the ISO one, because employment and health and safety thresholds move more often than ISO 27001 does.
I am a consultant. Can I use these with clients?
Not on a single-organisation licence, but ask and we will licence it properly. The full licence terms are published so you can read them before you pay.
Buying more than one
With the ISO 27001 packs
Tender pack and Canadian overlay
The tender pack answers the labour, ethics, safety and accessibility half of a supplier questionnaire. The Canadian overlay answers the privacy and information security half — PIPEDA, Law 25, the two retention clocks. Together they cover almost everything a Canadian buyer asks a small supplier.
CAD $795 saving $105 · What is in the overlay →
Tender pack and the full ISMS pack
For an organisation that has been asked for a management system as well as a supplier questionnaire — typically when the customer is regulated, or the contract involves their customers’ personal information.
CAD $1,750 saving $150 · tell us on the enquiry form and we will send one invoice
What this is not
We are not going to sell you everything you need to start a business.
You will find packs offering exactly that. Incorporation, shareholder agreements, employment contracts and tax registration are law and accounting, we do not practise in either, and a document we cannot defend is worth less than nothing to you when it is challenged.
And the rule that governs everything here still applies: where we assess an organisation, we do not also remediate it. Buying these documents does not stop us assessing you later, because we did not build your management system — we sold you writing. If that ever stops being true, we will say so.
Not sure whether you need it?
Tell us what has been asked of you and who is asking. We will tell you which of these documents you actually need, and which you are being asked for by a questionnaire that was written for a company a hundred times your size. If the answer is that you need none of it, we will say that too.
Tell us what you have been asked forStart with the free things