Supplier Code of Conduct (SCoC) and training
The code outlines our expectations for suppliers, and their employees, personnel, agents, and subcontractors.
We expect companies to embrace this commitment to integrity while conducting business with and/or on behalf of Microsoft.
At Microsoft, we have the tremendous opportunity to work with thousands of suppliers in over 100 countries across the globe. We rely on these suppliers every day to support our mission of empowering every person and organization on the planet to achieve more - and realize their full potential. Our partnership is more than building innovative technology and delivering solutions that transform the way we live - it's about our values, who we are as a company and individuals, and how we manage our businesses while working together.
We require suppliers to be aware of, attest to, train on, and always adhere to the SCoC. The SCoC and training focus on:
- Doing business ethically when it comes to anti-corruption, conflicts of interest, hiring practices, human rights, and honesty in business and corporate recording
- Demonstrating respect and inclusion - ensuring accessibility, the ability to raise workplace concerns, and share our climate and environmental commitments
- Protecting information, data, and Intellectual Property rights
- And of course, ensuring privacy rules and regulations are met for all
Thank you – to our Microsoft suppliers for your continued collaboration and hard work - helping ensure Microsoft runs on trust.
Microsoft expects suppliers to act ethically and with integrity. Suppliers demonstrate this commitment by complying with our Supplier Code of Conduct and ensuring that their eligible employees and subcontractors are trained annually on the SCoC.
Annual supplier managed training requirements:
- On an annual basis, an authorized representative from the supplier must review and acknowledge the SCoC, and complete the Microsoft SCoC training course. Confirmation of this must be attested to annually in Microsoft’s SupplierWeb platform.
- Suppliers are required to train eligible employees and subcontractors working on Microsoft matters annually on the content of the SCoC.
In addition to Supplier’s training obligations noted above, all external staff requiring access credentials to the Microsoft corporate network and/or buildings are required to complete SCoC training before they obtain their access rights. This training will be managed and provided by Microsoft.
For more information on the SCoC training requirements, review the training requirements FAQs.
The requirement to comply with the Supplier Code of Conduct is detailed online, through various Master agreements, and in our PO Terms and Conditions. Additionally, suppliers acknowledge the Supplier Code of Conduct during the Microsoft supplier setup process.
Refer to the Supplier Travel Guidelines PDF.
Suppliers and their employees, personnel, agents, and subcontractors (collectively referred to as "Suppliers") must adhere to this Supplier Code of Conduct while conducting business with or on behalf of Microsoft. Suppliers must require their subcontractors to acknowledge and implement the SCoC in their operations and across their supply chains. Suppliers must promptly inform their Microsoft contact, a member of Microsoft management, or the contacts provided at the end of this document when any situation develops that causes the supplier to operate in violation of this Code of Conduct.
All Microsoft suppliers must conduct their practices in full compliance with all applicable laws and regulations and in compliance with Microsoft requirements, whichever are stricter.
Additionally, beginning in Microsoft’s 2024 fiscal year, there is a requirement for a supplier’s authorized representative to annually (1) attest to the SCoC in SupplierWeb and (2) complete the SCoC training course. This will be implemented in a phased approach over the course of the 2024 fiscal year. Suppliers will receive email communication from Microsoft when their annual attestation is due.
All contacts can be updated in SupplierWeb. Access the contacts page in the supplier profile to make updates directly to your SCoC compliance contact. This person(s) will receive information regarding the SCoC from Microsoft.
Companies may be doing business with Microsoft in a variety of capacities. To the extent that a company is exclusively engaged with Microsoft in a Partner capacity and is not providing any procured goods or services to Microsoft, compliance with Microsoft's Partner Code of Conduct and related training requirements would be sufficient at this time. However, if a company is engaged with Microsoft in both a partner and supplier capacity, it is expected that in addition to compliance with the Partner Code, they must comply with the Microsoft Supplier Code of Conduct (SCoC).
Suppliers can find information online via the Supplier Accessibility Procurement page.
Please visit Hierarchy of Controls | NIOSH | CDC.