The Event Organiser's Supplier Onboarding Playbook
The caterer arrives on the morning of your conference. You have worked with them twice before, they always deliver, and you have never had a problem. What you have never checked — because the relationship felt established and the conversation never came up — is whether their public liability insurance is still current. It lapsed three months ago.
If a delegate is hospitalised after a catering incident at your event, that lapsed insurance does not protect them, it does not protect the caterer, and it may not protect you. Under UK law, ownership of the event and liability for its patrons rests with the event organiser. The gap in your supplier's documentation becomes a gap in your risk management.
This is not a rare scenario. It is the predictable consequence of running supplier relationships on trust, history, and email threads rather than on a structured, maintained approved supplier panel.
This playbook is for event managers, operations managers, and procurement leads at event organisations and professional conference organiser (PCO) firms — particularly those delivering government and public sector events — who want a complete, repeatable process for collecting and maintaining approved supplier panel documentation. From the first application to the annual renewal, and every compliance check in between.
Why Unvetted Suppliers Are Your Biggest Event Liability
The global events industry is growing at pace. The global events industry market is projected to reach $2.5 trillion by 2035, exhibiting a compound annual growth rate of 6.8% from 2024 to 2035. In the UK specifically, 89% of event businesses said costs increased in 2025 compared to 2024, with an average increase of 12%. (Source: Meetings Industry Association, 2025)
That growth and cost pressure creates a specific risk: event organisers under budget and timeline pressure lean on familiar, informal supplier relationships rather than building structured supply chains. The result is events staffed by suppliers whose compliance documentation is unknown, outdated, or has never been checked at all.
The legal position for event organisers is unambiguous
"Ownership of the event and liability for its patrons rests with the event organiser. All those involved in an event should be suitably and adequately insured for the role they are undertaking, whether they are event organisers, volunteers, suppliers, performers or exhibitors. In the case of suppliers, event organisers should ensure that they have suitable and adequate insurance and should obtain copies of their policy and should check that it is current before contracting them or allowing them onto the event site." (Source: Bradford Council Event Planning Guidance)
This is not aspirational guidance. It reflects the general legal position under UK event law: an event organiser who permits an uninsured or inadequately insured supplier to operate at their event cannot rely on that supplier's liability to manage claims arising from their work. The organiser's own liability remains.
Councils require proof of festival organiser public liability insurance before granting event permits, and operating without proper cover can lead to fines, cancelled events, or even legal action. In 2025, compliance is under greater scrutiny, with updates to safety legislation and crowd management standards. (Source: Miller & Partner, 2025)
For government and public sector events, the compliance stakes are higher
The Procurement Act 2023 came into force on 24 February 2025, changing the rules that shape how public bodies buy goods and services. For professional conference organisers and event managers delivering government events, this has direct implications for how supplier panels must be built and maintained:
- Supplier selection must be fair, transparent, and non-discriminatory
- The criteria for admission to a supplier panel must be documented and consistently applied
- Contract awards above relevant thresholds must be published via the Find a Tender service
- Suppliers must be evaluated against objective, pre-stated criteria — not on the basis of existing relationships or informal preference
PCOs operating government event frameworks that pre-date February 2025 under the Public Contracts Regulations 2015 remain governed by PCR 2015 for those agreements. New frameworks and supplier panels created on or after 24 February 2025 fall under the Procurement Act 2023.
The operational problem: how supplier documentation actually breaks down
The document collection failure in event supplier management follows a pattern that repeats across organisations of every size:
Documents are collected once and never updated. A supplier submits their insurance certificate at the point of first engagement. Three years later, they are still on the approved list — but nobody has checked whether the certificate has been renewed. It may have lapsed. The coverage level may have changed. The policy may now exclude a specific activity that they will be carrying out at your event.
Collection is ad hoc and person-dependent. When a new supplier is brought in, the documents they provide depend on what the individual event manager asked for — which depends on what they remembered to ask, what the supplier volunteered, and whether there was time pressure on the booking. A different event manager, the same supplier, a different document set.
Documents arrive in email inboxes rather than a central system. The issue is not that suppliers never send documents. The issue is that the request is often unclear, inconsistent, or spread across multiple people. One team asks for one file. Another asks later for a different one. A third realises a required document was never requested at all. That is not a supplier problem. That is a workflow problem. (Source: Supplios, 2026)
Expiry dates are not tracked. Insurance certificates, health and safety policies, food hygiene certificates, DBS checks — every document on a supplier panel has an expiry date. Without a system that tracks those dates and triggers renewal requests, the panel slowly fills with outdated documents that nobody knows are outdated.
Panel membership is never formally revoked. Suppliers remain on informal "approved" lists long after their qualifications, insurance, or organisational structure has changed. A company that was approved as a sole trader may now be a limited company with different insurance obligations. A security firm that held SIA licensing may have let it lapse. Without a formal annual review, these changes are invisible.
The Five Documentation Categories Every Approved Supplier Panel Needs
Building an effective approved supplier panel requires collecting documentation across five distinct categories. Each category protects a different aspect of your organisation's liability and operational risk. Missing any one of them creates a gap that may only be discovered when something goes wrong.
Legal identity and business registration
Before any compliance documentation is considered, you need to confirm that the supplier is who they say they are and that they exist as a legal entity.
- Company registration number — for limited companies, verified against Companies House. Confirms the company is registered, active, and not dissolved or in administration
- Registered company name and trading name — where these differ, both must be recorded. A supplier who trades under one name but invoices under another creates payment and audit trail complications
- Registered address and principal trading address
- VAT registration number — where the supplier is VAT-registered. Verify against HMRC's online VAT number checker for suppliers you cannot otherwise verify
- Sole trader declaration — for unincorporated suppliers, a signed statement confirming they are trading as a sole trader, with their full legal name and National Insurance number
- Partnership agreement or LLP registration — where applicable
- Beneficial ownership information — for government and public sector panel suppliers, confirmation of who ultimately owns or controls the business, as required under anti-money laundering and procurement transparency obligations
Insurance documentation
Insurance is the most operationally critical category and the most frequently out of date. Every document must be validated against your minimum coverage requirements at the point of submission.
- Public liability insurance certificate — minimum £5 million indemnity for most events. For government events, public-facing large-scale conferences, and events at venues with specific requirements, £10 million or above is typically required. Bradford Council specifies a minimum of £5 million public liability insurance based on minimum industry standards and requires proof prior to the event. The certificate must show the insurer's name, the policy number, the coverage level, the coverage dates, and the activities covered
- Employers' liability insurance certificate — legally required in the UK for any supplier who employs one or more people, including part-time staff. The legal minimum coverage is £5 million, though most insurers issue £10 million as standard. Professional indemnity insurance is essential for all conference, exhibition, and event planning professionals — available with limits ranging from £50,000 to £5 million.
- Professional indemnity insurance — required for suppliers providing advisory, design, creative, or consultancy services. Essential for AV production companies, event designers, PR and communications agencies, and any supplier whose work product could give rise to a professional negligence claim
- Product liability insurance — required for suppliers who manufacture or supply physical products used at the event: catering equipment, exhibition furniture, branded merchandise, printed materials
- Equipment insurance — for suppliers bringing high-value equipment to the event site: AV rigs, camera equipment, staging, specialist machinery
For every insurance certificate: confirm the expiry date and add it to your expiry tracking system at the point of validation. An insurance certificate that expires the week before your event is effectively no certificate at all.
Health, safety, and operational compliance
- Health and safety policy — a written, signed, and dated H&S policy is a legal requirement for any employer with five or more employees under the Health and Safety at Work Act 1974. The policy must be specific to the supplier's activities — a generic template downloaded from the internet is not an adequate substitute. Check that it has been reviewed within the past 12 months and is signed by a director or senior responsible person
- Risk assessment for event-specific activities — a general H&S risk assessment is not sufficient. Require a specific risk assessment covering the supplier's activities at your event type: rigging and structural work, food preparation and service, electrical installation, crowd management, use of vehicles on site, work at height. This must be event-relevant, not a generic office risk assessment
- Method statements — for technically complex or safety-critical work (rigging, pyrotechnics, electrical installation, structural construction), a written method statement describing how the work will be carried out, by whom, and with what equipment
- DBS (Disclosure and Barring Service) checks — required for suppliers whose work involves contact with children, young people, or vulnerable adults. This includes children's entertainment suppliers, youth workshop facilitators, and suppliers working at events where children are present as participants. Standard DBS checks for most event roles; Enhanced DBS checks for roles with direct, unsupervised access to children or vulnerable adults
- Food hygiene certificates — for all catering suppliers, food stall operators, and any supplier handling food for consumption at the event. The minimum standard for most local authority licences is a Food Safety and Hygiene Level 2 certificate for food handlers. Supervisory staff should hold a Level 3 certificate. Verify the issuing body (Highfield, RSPH, City & Guilds, or equivalent awarding body) and the expiry date
- SIA (Security Industry Authority) licensing — mandatory for any supplier providing door supervisors, security guards, CCTV operators, or close protection officers. Check each individual operative's SIA licence number on the SIA's online public register — it is free and takes under 30 seconds per licence
- Electrical competency certification — NICEIC or ECA registration for electrical contractors. Verify on the respective public registers. Required for any supplier installing temporary power, lighting, or AV infrastructure
- Structural calculations and engineering sign-off — for suppliers erecting stages, grandstands, temporary structures, or large-scale installations. An engineering sign-off from a qualified structural engineer is a separate requirement from the supplier's own method statement
Compliance, ethical standards, and data protection
This category has grown significantly in importance since the introduction of GDPR in 2018 and the Modern Slavery Act 2015. For government event suppliers, these obligations are not optional.
- GDPR and data protection compliance — confirmation that the supplier is registered with the Information Commissioner's Office (ICO) where required, has a named Data Protection Officer or equivalent contact where the organisation's activities require one, and has a documented data processing agreement for any services involving personal data of event attendees (registration systems, photography, delegate management)
- Modern Slavery Act statement — required for suppliers with a turnover of £36 million or more, but increasingly requested from all panel suppliers as part of ethical procurement standards. For government event panels, this is standard practice
- Anti-bribery and corruption policy — confirmation that the supplier has an anti-bribery policy in place and that relevant staff have received training. Required for public sector supply chains under the Bribery Act 2010
- Equality and diversity policy — for government and public sector events, confirmation that the supplier operates an equal opportunities policy and, where applicable, has published an Equality Act 2010 compliance statement
- Environmental and sustainability policy — increasingly required by government clients and large corporate event organisers as part of responsible procurement. Confirm what the supplier's policy covers and whether they hold any ISO 14001 or equivalent certification
- Safeguarding policy — required for suppliers working with children or vulnerable adults, separate from and in addition to DBS checks. Should name the designated safeguarding lead and describe the procedures for reporting concerns
Financial, banking, and commercial details
- Bank account details — sort code and account number, with the account name confirmed as matching the supplier's registered trading name. A discrepancy between the payee name and the account name is a common indicator of payment fraud. Never update banking details on the basis of an emailed request without direct verbal verification
- Payment terms — the supplier's standard payment terms, so your finance team can confirm these are compatible with your own payment cycle before the first invoice arrives
- Credit terms and references — for high-value supplier relationships, a trade reference from a comparable client organisation. Particularly important for suppliers providing large upfront investments (staging, AV infrastructure, venue builds) where payment default in either direction would cause significant harm
- Signed supplier code of conduct — your organisation's standard code of conduct for suppliers, covering behaviour on site, communication standards, subcontracting obligations, and any specific requirements for government-contracted events
- Subcontracting disclosure — confirmation of whether the supplier intends to subcontract any element of the work, and if so, whether their subcontractors are also required to meet the panel documentation standards
The Approved Supplier Panel Documentation Checklist
Use this as both a supplier-facing application checklist and an internal completion tracker. All items should be validated and on file before any supplier is activated on the panel.
- Company registration number — verified on Companies House
- Registered and trading company name
- VAT registration number — verified on HMRC checker
- Registered and principal trading address
- Sole trader declaration or partnership details (if applicable)
- Beneficial ownership details (government panel suppliers)
- Public liability insurance — minimum £5m (or £10m for government events), expiry date recorded
- Employers' liability insurance — minimum £5m legal requirement, £10m industry standard, expiry date recorded
- Professional indemnity insurance — for advisory, design, and creative suppliers, expiry date recorded
- Product liability insurance — for product suppliers, expiry date recorded
- Health and safety policy — signed, dated within past 12 months
- Event-specific risk assessment — relevant to the supplier's activities at your events
- Method statement — for safety-critical or technically complex work
- DBS check confirmation — Standard or Enhanced, as applicable to the role
- Food hygiene certificates — Level 2 for food handlers, Level 3 for supervisors (catering suppliers)
- SIA licence numbers — individually verified on SIA public register (security suppliers)
- NICEIC or ECA registration — verified on public register (electrical contractors)
- Structural engineering sign-off — for staging, installations, and temporary structures
- ICO registration number — for suppliers processing personal data
- Data processing agreement — signed, for any supplier handling delegate personal data
- Modern Slavery Act statement — or signed declaration of compliance
- Anti-bribery and corruption policy — signed by director
- Equality and diversity policy
- Environmental or sustainability policy
- Safeguarding policy — for suppliers working with children or vulnerable adults
- Bank account details — account name matching trading name, verified by phone before first payment
- Signed supplier code of conduct
- Subcontracting disclosure
- Panel approval date and review date — recorded in the supplier register
This checklist maps directly to the fields in the GatherMonk approved supplier panel templates for government and policy conference organisers and government and public sector event organisers.
The Sequence: Building and Maintaining Your Approved Panel
Define supplier categories and compliance tiers before issuing applications
Not every supplier type carries the same risk profile. A graphic designer producing event signage carries fundamentally different risks from a security firm managing crowd control at a 2,000-person government conference. Before issuing a single application form, map every supplier category your organisation uses and assign each a compliance tier.
A simple three-tier structure works for most organisations:
- Tier 1 — Safety-critical and high-contact: security, catering, electrical, rigging, staging, crowd management, transport. Full documentation set required. Validation by a senior staff member before panel activation.
- Tier 2 — Operational: AV production, photography, video, printing, exhibition build, venue dressing. Standard documentation set required. Validation by the event manager or operations lead.
- Tier 3 — Low-risk support: graphic design, copywriting, digital services, merchandise supply. Reduced documentation set — insurance, bank details, signed code of conduct.
Issue the structured supplier application form
Every prospective panel supplier receives the same structured application form for their tier — not a casual email asking for "your insurance documents." The form lists every required document, specifies the minimum standard for each (coverage level for insurance, date requirement for H&S policy), includes upload fields for each item, and requires a named signatory to confirm the submission is complete and accurate.
For government and public sector panel applications, the form should also include the organisation's supplier code of conduct, a declaration of no conflicts of interest, and confirmation of compliance with the Procurement Act 2023 transparency requirements relevant to their engagement.
Missing documentation, duplicate vendor records, invalid certifications, and unverified banking information can all create problems that persist long after a supplier has been approved. In regulated industries, these risks become even more significant — a supplier not properly qualified may introduce quality issues, audit findings, regulatory non-conformities, or supply disruptions. (Source: Lean Linking, 2026) A structured application form is the first control point against all of these.
Validate every document before activating panel status
Receiving a document is not the same as validating it. For every submission, run the following checks before marking the supplier as panel-approved:
- Insurance certificates: coverage level meets or exceeds your minimum requirement; the activities listed on the certificate cover what the supplier will actually be doing at your events; the policy is in the name of the entity submitting the application (not a parent company or previous trading name); the expiry date is after your next scheduled event date
- H&S policy: signed by a director or equivalent, dated within the past 12 months, specific to the supplier's activities (not a generic template)
- Companies House: confirm the company is active and not subject to dissolution, winding-up, or administration proceedings
- SIA licences: verify each named operative's licence on the SIA public register at sia.homeoffice.gov.uk
- Bank details: confirm the account name matches the supplier's registered trading name. Call the supplier to verify new banking details before making any first payment
Every validation check should be logged with the date it was completed and the name of the staff member who completed it. This creates the audit trail that demonstrates due diligence if a compliance issue later arises.
Issue formal panel approval and record the review date
Once a supplier is validated, issue a formal panel approval letter that confirms: the supplier's name and reference number, the categories of work they are approved for, the date of approval, and the date of the next scheduled panel review. This written record matters — it is the document that establishes when the supplier was approved and on what basis, which is essential for both audit purposes and for managing any subsequent disputes about scope or qualification.
Add the supplier to the central panel register with all document expiry dates recorded. The register should show, at a glance, which documents are current, which are approaching expiry, and which have already lapsed for every supplier on the panel.
Track expiry dates with automated alerts
The panel register without expiry tracking is a snapshot that becomes less accurate every day. Build automated alerts at 90 days and 30 days before any document expires. This gives suppliers adequate notice to renew and provides a 30-day window to chase, validate, and update the panel before the document lapses.
A supplier who cannot produce a current insurance certificate within the 30-day alert window should be marked as provisional and not used until the updated certificate is received and validated. For government and public sector events, using a supplier with lapsed documentation is a procurement compliance failure, not just an operational risk.
Conduct a formal annual panel review
Every year, formally review the entire panel. Send every active supplier a renewal request — asking them to resubmit all documentation in the standard application form. The annual review is also the point at which you:
- Remove suppliers who do not respond within the specified window
- Remove suppliers who have had material performance issues during the year
- Review whether the minimum documentation standards remain appropriate and update them if the risk profile of your events has changed
- Add new supplier categories if your event portfolio has expanded
- Confirm that any new compliance requirements — updated insurance minimums, new legislation, new client requirements — are reflected in the panel standards
What a Well-Managed Approved Supplier Panel Looks Like in Practice
Scenario: Meridian Conference Services is a professional conference organiser delivering government policy conferences, parliamentary events, and large-scale public sector summits. They work with approximately 60 active suppliers across seven categories: venue, AV and technical production, catering, security, transport, photography and video, and printed materials.
Under their previous approach, supplier documentation was held in a shared drive folder organised by supplier name. Insurance certificates were collected at the start of the relationship and rarely updated. There was no central register showing which documents had expired. When a new event manager joined, they had no visibility into which suppliers were "approved" and on what basis.
During an internal audit ahead of a major government contract renewal, the audit team found that 14 of 60 active suppliers had insurance certificates that had expired — some by more than a year. Three suppliers had no insurance documentation on file at all. The audit report noted that operating an event with unverified or expired supplier insurance constituted a material risk management failure under the client's procurement standards.
After restructuring their supplier panel process, Meridian built a central panel register with expiry date tracking for every document. A structured application form was sent to all existing suppliers requiring resubmission of current documentation. New suppliers go through the same form before being activated. Automated alerts fire at 90 and 30 days before any document expiry. The annual panel review is a scheduled process every October, timed to complete before the conference season begins in January.
At the following year's audit, all 60 active supplier records were fully compliant. The government client renewed the contract. The contract renewal documentation cited the supplier panel process as evidence of operational maturity.
Common Mistakes in Supplier Panel Management for Event Organisers
Treating panel approval as a one-time event
The most common and consequential mistake. A supplier approved in 2022 with current documents at the time is not necessarily an approved supplier in 2025. Panel status is only as current as the most recently validated document. Annual renewal is not optional.
Not specifying the minimum insurance coverage level in the application form
An insurance certificate for £1 million public liability looks like a valid document until you check whether your event requires £5 million. Specify the minimum coverage level you require for each supplier tier explicitly in the application form. This prevents incorrect submissions rather than catching them at validation.
Accepting insurance certificates without checking the activities covered
A public liability certificate that excludes "work at height" is not adequate for a rigging supplier. A food liability certificate that excludes "allergen management" is not adequate for a conference caterer serving a mixed-dietary audience. Read what the certificate covers, not just the coverage level and expiry date.
Updating banking details on the basis of an emailed request
Payment fraud via fake banking detail update emails — targeting procurement and finance teams — is one of the most common forms of business fraud in the UK. The FBI's Internet Crime Complaint Center reported 859,532 suspected internet crime complaints in 2024, with losses exceeding $16 billion. Any change to supplier banking details received by email must be verified by a telephone call to the supplier's known, previously registered number before the change is recorded in the panel system.
Not verifying SIA licences individually
A security company may supply more operatives than the number whose SIA licences were checked at application stage. The SIA public register is free to check and takes under 30 seconds per licence. For events where crowd safety is a material concern — as it is at most government conferences — verify every operative's licence before they arrive on site, not just the company's general approval.
No audit trail of validation checks
A folder of supplier documents with no record of when they were checked, by whom, or against what standard is not a compliant supplier panel. The audit trail — showing the date of each check, the name of the person who completed it, and the outcome — is what demonstrates due diligence if a compliance failure later occurs.
Use the Ready-Made Template to Build Your Panel in Days, Not Months
GatherMonk's approved supplier panel templates — built specifically for government and policy conference organisers and public sector event organisers — include every documentation category above, with minimum standard requirements built into each field, tier-based application forms, expiry date capture, a validation log, and automated renewal reminders. Build your first structured supplier application in hours, and have a compliant, maintained panel operating within days.
→ See the Government & Policy PCO supplier panel template
→ See the Government & Public Sector Events supplier panel template
Frequently Asked Questions
What documents should every supplier on an event approved supplier panel provide?
At minimum, every event supplier should provide: public liability insurance certificate (minimum £5 million cover for most events, higher for large-scale or government events), employers' liability insurance certificate (£10 million is the industry standard in the UK), a signed health and safety policy, a completed health and safety risk assessment for their specific work at events, bank account details for payment, and company registration details or proof of sole trader status. Safety-critical suppliers — caterers, security firms, electrical contractors, and rigging companies — additionally require food hygiene certificates, SIA licensing, or NICEIC/ECA certification as applicable. For professional conference organisers delivering government events, a signed supplier code of conduct and a modern slavery declaration are also standard requirements.
What is an approved supplier panel and why do event organisers need one?
An approved supplier panel is a vetted list of pre-qualified suppliers who have demonstrated they meet the organiser's standards for insurance, compliance, health and safety, and financial stability. Event organisers need one because allowing unvetted suppliers onto an event site creates legal liability for injury, property damage, and compliance failures. Bradford Council's event planning guidance confirms that ownership of the event and liability for its patrons rests with the event organiser — meaning that if a supplier causes harm at your event without adequate insurance, the financial exposure can fall on your organisation. An approved panel removes this risk by ensuring every supplier is verified before they arrive on site. Event managers running multiple events per year cannot practically verify supplier compliance at individual event level — a maintained panel is the only scalable solution.
How much public liability insurance should event suppliers hold?
For most UK events, the standard minimum is £5 million public liability insurance per supplier — the level specified by Bradford Council's published event planning guidance and widely adopted by UK local authorities and venues as the minimum for issuing event permits. For government and public sector events, the requirement is commonly higher: £10 million is the typical minimum for conference suppliers working on government-organised events. Large-scale productions or events with significant public footfall may require £20 million. Always specify the minimum coverage level in your supplier application form so you can validate each certificate against it at the point of submission, not after the supplier has been engaged.
How often should approved supplier panel documents be renewed?
Most insurance certificates are issued annually and expire after 12 months — so insurance documents require annual renewal at minimum. Health and safety policies should be reviewed at least annually and updated whenever the supplier's activities change materially. DBS checks for suppliers working with children or vulnerable adults are typically renewed every three years, though some public sector clients require annual renewal. Food hygiene certificates require renewal whenever there is a relevant change in food handling activities. The safest and most operationally efficient approach is a formal annual panel review in which every supplier resubmits current documentation — catching every category of expiry in one structured process rather than tracking individual document types across different renewal cycles. Annual renewal and recurring document collection tools make this process manageable even across a panel of 50 or more suppliers.
Do Procurement Act 2023 rules apply to event supplier panels for public sector organisations?
Yes, for contracting authorities. The Procurement Act 2023 came into force on 24 February 2025 and governs how public sector bodies — including government departments, local authorities, NHS bodies, universities, and schools — procure goods and services. Public sector event organisers and professional conference organisers working for government bodies must ensure their supplier selection processes are fair, transparent, and non-discriminatory under the Act. This means approved supplier panels used by public sector organisations must have documented, objective criteria for admission, and suppliers must be evaluated consistently against those criteria. The Act also introduces new transparency requirements — procurement decisions and contract awards must be published via the Find a Tender service. Compliance and vendor risk tracking tools that maintain timestamped records of every supplier application, validation check, and panel decision provide the audit trail that public sector organisations need to demonstrate compliance with these obligations.
For event organisations and professional conference organisers building structured supplier onboarding and compliance processes, see GatherMonk for Event Organizers, GatherMonk for Conference Organizers, Compliance & Vendor Risk Tracking, Annual Renewal & Recurring Document Collection, Document & File Collection, and the Event Manager and Operations Manager resource hubs.