Most whistleblowing programmes are designed with employees in mind. The policies, the channels, the training – they are typically scoped to the internal workforce, not suppliers.

Yet some of the most significant conduct risks in any organisation sit outside the employment relationship: in the supply chain, among contractors, and with third-party partners who work closely enough with the business to observe misconduct but have no formal route through which to report it.

Extending anonymous reporting access to suppliers is not simply a matter of good practice. In a regulatory environment that increasingly holds organisations accountable for what happens across their supply chains, it is becoming a governance expectation – and in some sectors, a legal one.

Why Suppliers Are a Critical Reporting Population

Suppliers occupy a distinctive position. They are close enough to an organisation’s operations to observe bribery, procurement fraud, modern slavery, health and safety failures and other forms of misconduct – but they exist outside the employment relationship that provides the primary basis for whistleblower protection in UK law.

This creates a structural gap. A supplier who witnesses a buyer’s employee soliciting an improper payment has no internal channel to use, no line manager to approach and, in many cases, no clear understanding of whether they have any protection if they raise the concern externally. The result is that misconduct that might otherwise be detected goes unreported – not because the supplier chooses to ignore it, but because no accessible, safe route exists.

The ACFE 2024 Report to the Nations found that 43% of fraud is detected through tips, with 52% of those tips coming from employees. The remaining volume – from customers, vendors and anonymous sources – represents a significant detection resource that most organisations have not yet optimised. Suppliers are a meaningful part of that untapped pool.

The Regulatory Backdrop

Several legislative and regulatory developments have made supply chain conduct a more urgent compliance priority.

The Economic Crime and Corporate Transparency Act 2023 introduced a failure to prevent fraud offence, in force from September 2025, under which large organisations can be held liable for fraud committed by associated persons – including suppliers acting on the organisation’s behalf. Establishing accessible reporting channels for third parties is one of the reasonable prevention procedures that can be cited in a defence.

The Modern Slavery Act 2015 requires eligible organisations to report on the steps taken to address slavery and human trafficking in their supply chains. Anonymous reporting access for suppliers strengthens the detection layer that underpins those commitments. Emerging supply chain due diligence requirements at EU level – including developments under the Corporate Sustainability Reporting Directive – are extending similar expectations to a broader set of organisations.

In financial services, the FCA’s non-financial misconduct rules (PS25/23), finalised in December 2025 and in force from September 2026, apply to approximately 37,000 non-bank firms. The conduct expectations extend to third-party relationships, reinforcing the case for accessible reporting routes beyond the direct workforce.

Designing a Channel That Works for Suppliers

Extending reporting access to suppliers requires deliberate design. An internal employee-facing channel is not automatically accessible or appropriate for third-party use. The considerations specific to supplier reporting include:

• Accessibility without authentication – suppliers should be able to reach the channel without needing an employee login or internal system access
• Language and geography – supply chains frequently span multiple countries and languages; a channel accessible only in English or only within the UK is not genuinely open to all suppliers
• Clear scope guidance – suppliers need to understand what kinds of concern the channel is designed to receive and what will happen after they report
• Genuine anonymity – suppliers face commercial as well as personal risk if identified; the channel must be credible on anonymity in a way that accounts for the power imbalance inherent in a buyer-supplier relationship
• Independent operation – a channel run directly by the buying organisation creates an obvious conflict of interest; independence is even more important in third-party reporting than it is for employees

Communicating the Channel to Supply Chain Partners

Designing a suitable channel is only half the task. Suppliers will not use a reporting route they are unaware of or do not understand. Communication of the channel should be included in supplier onboarding documentation, procurement contracts and supplier codes of conduct. Periodic reminders – aligned to supplier relationship reviews or compliance communications – help maintain awareness over time.

The communication should be clear about what the channel is for, who operates it, what protections apply to those who use it and what the organisation commits to in terms of follow-up. Suppliers who understand what will happen after they report are more likely to use the channel when they observe something that warrants it.

Protecting Suppliers Who Report

The legal protections available to whistleblowers in the UK employment law framework do not automatically extend to supplier relationships. Workers employed by suppliers may have their own protections under the Public Interest Disclosure Act 1994 or the Employment Rights Act 2025 if they make a protected disclosure, but those protections run against their own employer, not the buying organisation.

What the buying organisation can do is commit, contractually and in policy, not to take commercial action against a supplier as a result of a concern being raised in good faith. Embedding non-retaliation commitments in supplier agreements, and communicating them clearly, provides a practical layer of protection that the law alone does not supply.

The Role of an Independent Channel Provider

An externally operated reporting channel is particularly well suited to third-party and supply chain reporting. It removes the conflict of interest inherent in a buyer-operated channel, provides genuine independence for the reporter, and can be designed to handle multilingual and cross-border reports as standard.

Safecall provides whistleblowing services to organisations operating across the UK and internationally, with coverage across 150 or more countries and support for 175 or more languages. All call handlers are former UK police officers with 25 or more years of interview experience – over 800 years of combined expertise – and calls are never audio-recorded, protecting the anonymity of every person who reports, whether employee, contractor or supplier. For organisations looking to extend their reporting programmes beyond the direct workforce, this capability is available as part of the core service.

Related Resources

Whistleblowing Security & Anonymity – safecall.co.uk/resources/whistleblowing-security-anonymity/

How Do Anonymous Hotlines Work for Contractors and Supply Chains? – safecall.co.uk/resources/how-do-anonymous-hotlines-work-for-contractors-and-supply-chains/

Global Whistleblowing Compliance – safecall.co.uk/resources/global-whistleblowing-compliance/

How Can Digital Reporting Channels Support Remote and International Teams? – safecall.co.uk/resources/how-can-digital-reporting-channels-support-remote-and-international-teams/

Speak to Safecall

Safecall provides independent whistleblowing services to organisations across the UK and internationally, including multilingual, multi-channel access for third-party and supply chain reporters. If you are extending your reporting programme beyond your direct workforce, we can help you design a channel that works for your supply chain.

Contact us: safecall.co.uk/en/contact-us/  |  +44 (0) 191 516 7720

Sources and Further Reading

ACFE Report to the Nations 2024 – Association of Certified Fraud Examiners

Economic Crime and Corporate Transparency Act 2023 – legislation.gov.uk

Modern Slavery Act 2015 – legislation.gov.uk

FCA PS25/23 Non-Financial Misconduct Rules – fca.org.uk

Public Interest Disclosure Act 1994 – legislation.gov.uk

Employment Rights Act 2025 – legislation.gov.uk