Due diligence
Before engaging a partner, a supplier or an intermediary, their bribery risk is assessed. High-risk ones go through reinforced approval.
BLOG
ISO 37001: why tenders ask you for an anti-bribery system
Due diligence, a whistleblowing channel and clear rules on gifts: what the standard requires and what actually changes on site.
Compliance
A policy is not a system
Almost any company can draft a policy in an afternoon saying "we reject bribery". ISO 37001 exists because that, on its own, changes nothing. What the standard asks for are verifiable controls: procedures with named owners, records and audits.
The current edition is ISO 37001:2025, which replaces the 2016 one. It keeps the original focus — prevent, detect and respond to bribery — and strengthens alignment with the other management system standards.
In construction the sensitive points are always the same ones: the award, variation orders, valuations and handovers. That is where the system has to leave a trail.
Controls
What the standard requires you to implement
Compliance function
Someone with authority and independence owns the system and can report directly to the top governing body.
Gifts and hospitality
Written limits, a record of what is accepted and given, and an explicit ban on facilitation payments.
Whistleblowing channel
A way to raise a hand without retaliation, with documented investigation of every case and traceable decisions.
What the client gains by hiring a certified company
Predictable pricing. When variation orders go through a documented control, the room for a privately negotiated "adjustment" — the kind that ends up inflating the job — disappears.
Less risk by association. In public procurement, your contractor's conduct is attributed to you. A supplier with due diligence and records reduces the exposure of the whole file.
A clear route when something smells wrong. The whistleblowing channel is not a decorative mailbox: every report has to be investigated and closed with a recorded decision.
Frequently asked questions
Is ISO 37001 mandatory in Peru?+
It is not mandatory across the board, but it is frequently scored or required in contracts with public bodies and large private clients. It is worth checking the terms of each process.
Does certification mean bribery will never happen?+
No. It means there are controls designed to prevent and detect it, and that an external auditor periodically checks they work. If a case appears, the system requires it to be investigated and the root cause corrected.
Does it affect subcontractors?+
Yes. Due diligence extends to business partners, suppliers and intermediaries, and usually translates into contract clauses and an obligation to report conflicts of interest.
Need our documentation for a selection process?
We will send you the original certificates and any supporting documentation your committee asks for.
Other articles
What does it mean that your builder holds ISO 9001?
The badge does not build the house — the procedure behind it does. What the standard forces you to document and how to check a certificate is genuine.
ISO 8100-1:2019: the standard that decides whether a lift is safe
Safety gear, overspeed governor, doors and emergency lighting. What the international lift standard requires and what to check before signing a maintenance contract.
ISO 12100: how a machine's risk is assessed before it is installed
Four steps to assess risk and three to reduce it. The method that separates a considered installation from an improvised one.