The Risk You Are Not Thinking About
Most security company directors spend considerable time and money ensuring their own business is compliant — maintaining SIA licences, running BS7858 vetting, keeping DBS checks up to date, and managing health and safety documentation. This is entirely appropriate. But there is a category of compliance risk that is frequently overlooked: the compliance status of your suppliers and subcontractors.
If you use subcontract labour, specialist security suppliers, or third-party service providers in the delivery of your contracts, their compliance failures can become your liability. A client who suffers a security incident involving a non-compliant subcontractor will look to you for accountability — regardless of whether the subcontractor was your direct employee or not.
What Supplier Compliance Covers
Supplier compliance in the security industry encompasses several distinct areas, each of which carries its own risks.
Insurance and Liability
Every supplier or subcontractor working on your contracts should hold adequate public liability and employers' liability insurance. If they cause damage or injury while working under your contract and their insurance is inadequate or expired, you may face claims that your own policy is expected to cover.
SIA Licensing
Any individual providing security services in the UK must hold a valid SIA licence for the activities they are performing. If you deploy a subcontractor whose licence has expired — even unknowingly — you are in breach of the Private Security Industry Act 2001. The SIA takes a robust approach to enforcement, and the consequences can include prosecution, fines, and loss of your own Approved Contractor Scheme (ACS) status.
Health and Safety Documentation
Suppliers working on your sites should have current health and safety policies, risk assessments, and method statements relevant to their activities. In the event of a workplace incident, the Health and Safety Executive will examine the documentation of all parties involved — including subcontractors.
Financial Stability
A supplier that becomes insolvent mid-contract creates significant operational disruption. While you cannot eliminate this risk entirely, monitoring the financial health of key suppliers — through credit checks and regular financial reviews — allows you to identify warning signs early.
The Challenge of Manual Supplier Management
Many security companies manage supplier compliance through a combination of email, spreadsheets, and periodic phone calls. This approach has several fundamental weaknesses. Documents expire without anyone noticing. Requests for updated certificates go unanswered and are not chased. There is no central record of what has been received, what is outstanding, and what is overdue. When a client or auditor asks for evidence of supplier compliance, assembling the documentation is a time-consuming and stressful exercise.
A Better Approach: Automated Supplier Compliance Management
The most effective way to manage supplier compliance is to move the entire process into a dedicated platform that automates document collection, tracks expiry dates, and provides a real-time view of your supplier compliance status.
With the right system in place, each supplier has their own portal where they can upload their documents directly. The platform tracks expiry dates and sends automated reminders to suppliers when renewals are due. You receive alerts when a document expires without being renewed, giving you time to act before the supplier is deployed on a contract.
This approach transforms supplier compliance from a reactive, administrative burden into a proactive, automated process. It also creates a comprehensive audit trail that demonstrates due diligence to clients, auditors, and regulators.
How WFC Verify Manages Supplier Compliance
WFC Verify includes a dedicated supplier compliance module that handles the entire process. Suppliers are onboarded through a self-service portal where they submit their documents, insurance certificates, and compliance declarations. The platform tracks every document's expiry date and sends automated reminders at configurable intervals. Compliance dashboards give you an instant view of which suppliers are fully compliant, which have outstanding documents, and which have expired certificates.
When a client asks for evidence of your supplier compliance programme, you can generate a comprehensive report in seconds. This level of transparency is increasingly expected by large corporate clients and public sector bodies, and it is a genuine competitive differentiator for security companies that can demonstrate it.