Ethical Procurement & Certifications: A Bidder's Guide

The public sector spends tens of billions of euros a year on procurement, and the Finnish Procurement Act gives authorities broad powers to set environmental and social responsibility requirements — as suitability criteria, subject-matter requirements, award criteria, or contract terms.

Responsibility shows up at three levels in a competition. The mandatory level is statutory compliance: taxes and social security contributions paid, employer obligations met, no mandatory exclusion grounds. The competitive level is certifications and systems that meet requirements credibly and earn comparison points. The third level is contract-period obligations, which you commit to by submitting a bid.

The most important practical advice is to read the call for tenders carefully: a requirement can be absolute (certificate or equivalent evidence required) or scored (extra points for sustainability). Missing an absolute requirement means rejection, so when in doubt, ask the authority during the Q&A period.

Below are the certifications and reports most often requested in Finnish public procurement: what each proves, when it is typically required, and what equivalent evidence can replace it. None of them is automatically mandatory. The contracting authority defines the requirements in the tender documents, and it must almost always also accept other equivalent evidence (see the next section).

Read the table through the lens of your own industry: construction and property favour contractor's-obligations checks and ISO 45001, IT tenders emphasise ISO/IEC 27001, and food and textile tenders lean on ethical-trade labels and supply-chain reports.

The Contractor's Obligations Act (1233/2006) requires the client to verify its contracting partner's background before signing: tax debt information, pension insurance, occupational health care arrangements, and the applicable collective agreement, among others. Public contracting authorities require these reports practically without exception.

Vastuu Group's Luotettava Kumppani (Reliable Partner) service compiles the Act's reports into a single continuously updated document. The service is not statutory or formally mandatory, but it is so established — especially in construction and real estate — that lacking it creates extra work for both bidder and buyer. Many calls for tenders accept either the Luotettava Kumppani report or the equivalent individual certificates.

Keep the documents continuously current: certificates typically may not be older than three months, and an expired certificate attached to a bid is an avoidable and surprisingly common ground for rejection.

The certificates most commonly requested in Finnish public procurement are ISO 9001 (quality management) and ISO 14001 (environmental management). Depending on the industry, ISO 45001 (occupational health and safety), ISO 27001 (information security), and in construction the RALA qualification also appear.

The Procurement Act protects bidders from disproportionate certificate demands: when an authority requires compliance with a quality assurance or environmental management standard, it must also accept other equivalent evidence — for example a documented in-house management system meeting the standard's essential requirements. An SME does not automatically need to invest in certification, but the equivalent evidence must be compiled carefully.

A certificate's value goes beyond a single competition: it shortens bid preparation because evidence questions are settled with one attachment, and it works as-is in private-sector and international tenders. If the public sector is a strategic market, ISO 9001 typically pays for itself quickly.

In food, textile, and timber procurement, authorities increasingly use ethical trade and eco-label criteria: Fairtrade or equivalent ethical trade certification, FSC and PEFC for timber, the EU Ecolabel and Nordic Swan, and organic certifications. An authority may not demand a specific label as such — it must accept other evidence that the label's criteria are met.

Supply chain human rights and labour condition requirements are growing fast: bidders may be asked for a code of conduct, amfori BSCI audits, or equivalent evidence, especially for products from risk countries. Large companies' CSRD sustainability reporting produces documentation that also serves in bids — and SME subcontractors meet the same questions through their prime contractors.

Practical advice: collect sustainability documentation in one place — certificates, codes of conduct, audit reports, environmental declarations with validity dates — so tender-specific work shrinks to selecting attachments.

A certificate is not an end in itself. When a contracting authority requires compliance with a quality-assurance or environmental standard, the Procurement Act obliges it to also accept other equivalent evidence if the bidder shows that its measures meet the same level (Procurement Act 1397/2016, section 88). A small company can therefore describe its own quality management or environmental work instead of buying an expensive certification for a single tender.

In practice, equivalent evidence is a written description: what processes the company has, who is responsible for them, how deviations are handled, and how the work is monitored and improved. On the environmental side it can be a list of concrete measures, metrics and responsible persons. The closer the description mirrors the structure of the standard, the easier it is for the authority to confirm equivalence.

Equivalent evidence does not cover everything, though. If the bidder was demonstrably unable to obtain a certificate in time for reasons beyond its control, that too supports accepting other evidence. When in doubt, ask the contracting authority during the tender period, not afterwards: missing evidence is hard to patch once the deadline has passed.

In tenders above the EU threshold, suitability is first demonstrated with the ESPD, the European Single Procurement Document. In it the bidder declares that it meets the requirements, and the actual certificates and reports are submitted only when the authority asks for them, typically from the leading candidate before the contract is signed. In national tenders the attachments may be requested directly with the bid.

The most common ground for rejection is an expired or missing attachment. Contractor's-obligations certificates usually may not be older than three months, and a certificate must be valid at the moment the bid is submitted. Check the date and validity of every attachment before you send it.

Keep certificates, reports and management-system descriptions in one place with their validity dates, and the per-tender work shrinks to picking the right attachments. Haavi's AI extracts from the tender documents exactly what evidence the tender requires and compares it against your company's readiness before you spend a single hour on the bid.

Responsibility does not end when the bid is submitted. Public contracts increasingly carry contract-period obligations: environmental reporting, employment conditions, audit rights, and subcontractor approval. The 2026 reform of the Procurement Act further strengthened authorities' ability to address security of supply and safety throughout the contract's life.

You commit to contract terms by bidding, so read them before bidding — not at signature. Price the audit and reporting obligations in particular: regular sustainability reporting is work that easily disappears from the margin.

Breaching contract-period obligations can trigger sanctions, at worst termination, and can complicate future competitions as a discretionary exclusion ground. Size your sustainability promises so you can keep them.

Regulation is also tightening at EU level. The Corporate Sustainability Due Diligence Directive (CSDDD) and sustainability reporting (CSRD) impose supply-chain due-diligence obligations on large companies, and these flow down as requirements to subcontractors and smaller bidders. The timetables are still partly open, but the direction is clear: supply-chain responsibility will be documented in ever greater detail.

Start with the mandatory: make sure tax, pension insurance, and employer register data are in order and quickly obtainable — or subscribe to the Luotettava Kumppani service, which keeps them current automatically.

Map what certificates and reports are actually requested in your industry's calls for tenders. The last few years' competitions tell you whether to invest in ISO certification or whether a documented management system suffices as equivalent evidence.

Document and centralise: one folder holding certificates, management system descriptions, codes of conduct, environmental declarations, and audit reports with validity dates. Name an owner who renews documents before they expire — rejection over an expired certificate is the most pointless way to lose a tender.