Social Compliance: Ensuring Fair Working Conditions Within the Company and Throughout the Supply Chain
A certificate on the wall or a signed code of conduct may be reassuring, but it says little about how employees at your company and among your suppliers are actually faring. Social compliance combines clear social standards with a system that continuously monitors and improves progress, rather than simply checking a box once a year. The topic is also increasingly falling within the scope of HR developers, because training and awareness-raising determine what is actually put into practice in everyday life. This article explains what social compliance means, what standards and audits underpin it, and how you can embed the concept step by step.
Social Compliance: The Most Important Points at a Glance
- Social compliance is a long-term system designed to ensure fair working conditions within a company's own operations and throughout its supply chain.
- Key issues include forced labor, child labor, discrimination, and occupational safety and health, as distinct from CSR, ESG, and corporate compliance.
- Standards such as SA8000, amfori BSCI, and SMETA may sound similar in terms of their content, but they serve different purposes.
- Passing an audit says little about day-to-day practices.
- The German LkSG and the revised EU CSDDD Directive are legally binding; both are currently undergoing changes.
- Implementation is achieved step by step through collaboration among Procurement, Compliance, HR, and leadership.
What is social compliance?
Social compliance refers to the systematic adherence to and improvement of social standards, labor rights, and human rights within a company’s own operations and throughout its supply chain. The term thus covers two levels: the company’s own employees and the working conditions at business partners and suppliers.
There is no single, globally binding definition of social compliance. The guiding principles of the International Labor Organization (ILO), the UN Guiding Principles on Business and Human Rights, and the OECD Due Diligence Guidance for Responsible Business Conduct serve as a professional compass. They describe which labor and human rights companies should respect, regardless of whether a specific law requires it in individual cases. At its core, it is about treating all employees in an ethically responsible manner, both within the company itself and throughout the supply chain.
Important for practical application: Social compliance is not a one-time state, but rather an ongoing social compliance management system that integrates guidelines, risk analyses, training, audits, and corrective actions.
What topics does social compliance cover?
Social compliance focuses on forced labor, child labor, discrimination, freedom of association, occupational safety, and fair wages and working hours. Some audit programs also expand the scope to include environmental and business ethics considerations.
Environmental and corruption issues also appear in some audit programs, but they are not part of the core scope of social compliance.
Social Compliance and Related Terms: The Differences
In practice, social compliance, corporate compliance, CSR/ESG, and human rights due diligence often overlap. A clear distinction helps ensure that responsibilities are properly assigned within the company.
- Social Compliance vs. Corporate Compliance: Social compliance focuses on social and human rights-related working conditions. Corporate compliance covers adherence to all relevant internal and external rules, from antitrust law to data protection.
- Social Compliance vs. CSR/ESG: Social compliance is a subset ofcorporate social responsibility (CSR) or the social dimension of ESG (Environmental, Social, Governance). It is not synonymous with either of these concepts.
- Social Compliance vs. Human Rights Due Diligence: Social compliance refers to requirements and evidence related to social standards. Human rights due diligence goes a step further and encompasses the ongoing process of identifying, preventing, mitigating, and remedying adverse impacts.
- Audit vs. Management System: An audit assesses the current status at a specific point in time. A management system also incorporates governance, risk analysis, communication, complaint procedures, and continuous improvement.
For more on the big picture, read the article "Corporate Compliance: Regulatory Compliance as a Key to Success."
What standards and audit approaches are there?
When it comes to labor standards for suppliers, three standards are primarily used: SA8000, amfori BSCI, and SMETA. In practice, the lines between them often blur, even though they serve different purposes.
SA8000:2026 is a certifiable management system standard from Social Accountability International (SAI), currently in the version valid since January 2026. An independent audit confirms that a company has permanently embedded the SA8000 Decent Work principles into its management system and does not merely comply with them on a one-time basis.
amfori BSCI is not a certification but a due diligence and monitoring system. It is based on a code of conduct that, among other things, prohibits forced labor and child labor, actively involves suppliers, and supports continuous improvement through recurring assessments rather than one-time audits.
SMETA (Sedex Members Ethical Trade Audit) is a standardized audit methodology, currently in version SMETA 7.0. It produces comparable audit reports based on the two- or four-pillar model, which companies can share with multiple customers via the Sedex platform. Sedex itself is the platform, while SMETA is the methodology.
The selection depends on the risk profile, customer requirements, and the desired level of audit detail. The three tools cannot be interchanged at will.
What does a social compliance audit examine?
A social compliance audit, often referred to simply as a social audit, assesses on-site the actual state of working conditions at a location. It typically involves a combination of several methods: Auditors review documents such as employment contracts and time sheets, tour the site, and conduct discussions with management as well as confidential interviews with employees.
The result is a report containing findings. If actual practices deviate from the requirements, this constitutes non-compliance (a deviation from the requirements). In such cases, a Corrective Action Plan (CAP) specifies which corrective action will be taken, by when, and who is responsible for it.
There is always one important caveat: An audit provides only a snapshot. It shows the status on a single day; it does not automatically indicate whether a system functions properly over the long term.
What are the relevant legal requirements?
Two legal frameworks establish binding guidelines for social compliance: the German Supply Chain Due Diligence Act (LkSG) and the European Corporate Sustainability Due Diligence Directive (CSDDD). Voluntary standards such as SA8000 or amfori BSCI support implementation but do not replace a legal review.
Supply Chain Due Diligence Act (LkSG)
The LkSG has been in effect since 2023, initially applying to companies with 3,000 or more employees, and since 2024 to those with 1,000 or more employees. It requires risk assessments, preventive and corrective measures, and grievance procedures to ensure that social standards are implemented throughout the supply chain.
In September 2025, the Federal Cabinet approved a draft bill intended to retroactively repeal the reporting requirement. The parliamentary process is still ongoing. However, the Federal Office for Economic Affairs and Export Control (BAFA) has already stopped reviewing reports (as of 09/2026). In the long term, a separate law on international corporate responsibility is also intended to replace the LkSG and fully transpose the CSDDD into German law.
Corporate Sustainability Due Diligence Directive (CSDDD)
The revised CSDDD has been in effect since March 2026 as Directive (EU) 2026/470. It now applies directly only to companies with more than 5,000 employees and annual revenue exceeding 1.5 billion euros. Member states will transpose the requirements into national law in the coming years (as of September 2026).
The legal framework is therefore constantly evolving. Anyone looking for information can find up-to-date guidance from organizations such as the Chambers of Industry and Commerce.
Implementing Social Compliance in 7 Steps
An effective social compliance program doesn't happen overnight. These seven steps provide a practical roadmap.
- Define responsibilities and scope: You clarify the governance structure and determine which areas and supply chain stages the program covers.
- Requirements in the Code of Conduct: You clearly define expectations and communicate them internally and to business partners.
- Analyzing Risks and Impacts: They prioritize country, industry, and procurement risks rather than conducting equally in-depth reviews across the board.
- Empowering procurement, executives, and suppliers: They conduct role-based training and review procurement practices for potential conflicts of interest.
- Verify compliance using multiple methods: They combine self-reports, documents, audits, and confidential employee interviews.
- Implement and verify corrective actions: You identify the cause, assign responsibility, set a deadline, and ensure the protection of those affected, and objectively document the completion of the action.
- Measuring and refining effectiveness: They evaluate recurring findings, resolution times, and how complaints are handled, and adjust the program accordingly.
What roles does social compliance play within a company?
Social compliance involves several roles within the company: Purchasing, Compliance and Sustainability, HR and Employee Development, managers, employees, and senior management. This overview shows who is responsible for what.
The Most Common Pitfalls in Social Compliance
Despite all good intentions, the same mistakes keep recurring in social compliance in practice:
- confuse passing an audit with having a system that functions consistently
- simply have suppliers sign the Supplier Code of Conduct without verifying its implementation and corrective actions
- Do not consider price and time pressures in purchasing as risk drivers
- focus only on direct suppliers, even though risks often lie deeper in the supply chain
Social Compliance Requires Standards, Accountability, and Continuous Improvement
A credible social compliance system combines clear social standards, risk-based audits, employee participation, and genuine remedial action. Standards such as SA8000 and audits such as SMETA are tools, not the goal itself: they provide guidance and evidence. Consistent implementation in day-to-day operations is what makes the difference.
For this to succeed, expertise is needed across many areas of the company—in procurement as well as in management and human resources development. The Swiss Association for Corporate Compliance ( Haufe Akademie ) provides support in this area, drawing on over 45 years of experience. The Swiss Corporate Compliance Institute ( Compliance College ) brings together practical knowledge on compliance and related topics in courses designed for different target groups and levels of expertise—from introductory courses for new employees to advanced training for subject matter experts.
In this way, a legal obligation becomes a source of business strength that pays off: with customers, with investors, and in the competition for top talent.
Discover Compliance College now
FAQ
What is social compliance?
The term refers to a management system that enables companies to demonstrate and continuously improve decent working conditions and human rights both within their own operations and among their suppliers. A single certificate is not enough to achieve this: social compliance remains an ongoing commitment, not a one-time audit.
What is a social compliance audit?
During a social compliance audit, independent auditors visit the site to verify whether actual working conditions meet the required standards. The result is a snapshot in time, not proof of a system that functions consistently over the long term.
How do SA8000, amfori BSCI, and SMETA differ?
The difference lies in their functions: SA8000 is a certification program; amfori BSCI serves as a due diligence and monitoring system for the supply chain; and SMETA, as a pure audit methodology, provides comparable audit reports without issuing its own certificate. When used in combination, the three complement each other but do not replace one another.
Is social compliance required by law?
To some extent: The LkSG and the revised CSDDD require certain, mostly large companies to exercise due diligence in their supply chains. Smaller companies often implement social compliance on a voluntary basis, for example at the request of customers.
How can social compliance be implemented within a company?
This framework is built on clear lines of responsibility, a well-established Code of Conduct, a risk-based analysis, and multiple assessment methods. These elements demonstrate whether corrective actions are effective and allow for regular measurement of progress.
You might also be interested in
