Supplier information
Version 1.0 · 22 October 2026 · Draft for formal adoption. Scope: MENSCH and relevant related legal entities, in accordance with contracts and applicable law.
1. Purpose
This guide describes MENSCH's expectations of suppliers, subcontractors, consultants, hosting and SaaS providers, and other partners. It is not a call for tenders and does not guarantee selection or payment.
2. Procurement principles
Suppliers are assessed on quality, expertise, total cost, reliability, deadlines, security, lawfulness, and relevant risk. Decisions must not be based on personal gain or discrimination.
3. Registration and basic data
Before engagement, legal name, registration number, address, contact, tax data, ownership information, payment account, references, and description of services may be requested. The extent of checks depends on risk and legal obligations.
4. Offers and transparency
An offer should clearly state scope, deliverables, price, currency, taxes, deadlines, assumptions, licences, third-party costs, and support terms. Hidden costs and misleading references are not acceptable.
5. Supplier ethics
Bribes, procurement manipulation, undisclosed conflict of interest, forced labour, unlawful child labour, discrimination, and harassment are prohibited. The supplier must comply with applicable laws and contractual obligations.
6. Confidentiality
An NDA may be required before access to unpublished information. MENSCH and its clients' data are not used for other purposes and are not shared without authorisation.
7. Security requirements
Suppliers with access to systems must use appropriate protection measures, least privilege, secure account management, and timely incident reporting. Additional questionnaires and evidence may be required.
8. Personal data protection
When a supplier processes personal data on behalf of MENSCH or a client, roles, instructions, sub-processors, security, international transfers, return or erasure of data, and assistance with exercising rights are defined.
9. Subcontractors
Further subcontracting that affects confidential data or key deliverables requires approval when provided for in the contract. The supplier remains responsible for its subcontractors' work within the agreed scope.
10. Intellectual property
The contract defines ownership of deliverables, transfer or licence of rights, use of open-source components, documentation, and any handover of source code. Materials must not be delivered without necessary rights.
11. Invoicing and payment
Payment is made according to the accepted contract and valid documentation. Invoices should contain required legal details and appropriate references to the service or purchase order. A change of bank account may require additional verification.
12. Changes and acceptance
Changes to scope, price, and deadlines are approved before additional work is performed. Acceptance criteria, defect remediation, and support are governed by the contract.
13. Incidents and continuity
The supplier reports without delay events that may affect security, data, availability, or delivery. Critical suppliers may be required to provide a business continuity and recovery plan.
14. Verification and audit
MENSCH may request reasonably relevant evidence of compliance under the contract, respecting confidentiality and proportionality. Identified gaps may require a corrective plan.
15. Termination and exit procedure
After cooperation ends, the supplier returns equipment, revokes access, hands over contracted materials, and deletes or returns data according to the contract and law. Confidentiality obligations may continue after termination.
16. Communication
General business contact: hi@mensch.rs. For reports of irregularities or security issues, use the same contact with a clear subject line until a separate channel is established.
17. Note on formal application
Before publication, the actual procurement procedure, approval criteria, payment terms, supplier contact, and any project-specific requirements should be defined.
Document management
Responsible party: management of the relevant legal entity. Review: at least once a year. Effective date: date of formal adoption. Contact: hi@mensch.rs.