Source check current as of 2026-06-26

Compliance Playbooks

These are not contract templates; they are operating frameworks that turn risk into organizational action.

Six pre-entry gates

Turn an overseas expansion project from a growth impulse into reviewable decisions; no gate clearance, no tender, signature, or payment.

Market access: licences, certification, investment screening, sector restrictions.
Sanctions and lists: customers, suppliers, banks, beneficial owners, and end use.
Data and cyber: data flows, remote access, cloud services, user notices.
Tax structure: PE, transfer pricing, VAT/GST, profit allocation.
Supply chain: origin, human rights, carbon, critical materials.
Dispute planning: seat, governing law, injunctions, crisis communications.

Post-entry operating rhythm

Overseas compliance is not a one-off assessment; it refreshes with launch, hiring, supplier changes, and product iterations.

30 days: create the local compliance register and confirm licences, tax IDs, and employment documents.
90 days: review suppliers and distributors, train key roles.
180 days: sample audit data, tax, labour, and transaction records.
Annual: board review of major risks, regulatory changes, and crisis drills.

Third-party lifecycle controls

Agents, distributors, contractors, advisers, and joint-venture partners are the main front for anti-corruption, labour, sanctions, and reputation risks.

Onboarding: background checks, beneficial ownership, government links, and sanctions screening.
Contracting: anti-bribery, human rights, data, audit rights, termination triggers, and record-keeping clauses.
Performance: monitor unusual discounts, success fees, gifts and hospitality, invoices, and cash payments.
Exit: remediation windows, suspension, alternative supply, and dispute handling.

Supply-chain evidence pack

Traceability is not a single audit; it is evidence that can be called by order and used consistently with customs, platforms, buyers, and media.

T0-T3 entities, batches, logistics, origin, wage, and working-hour records.
Specific proof for critical materials, sensitive regions, contractor dormitories, and labour recruiters.
Use the same factual file for buyer questionnaires, customs inquiries, and media questions.
Remediation, remedy, and supplier-exit records must prove a closed management loop.

Crisis response script

When goods are detained, raids occur, labour incidents break, or media pressure spikes, contain first, verify facts, then speak; avoid absolute promises before evidence closes.

First hour: freeze facts, preserve records, appoint legal and outside counsel.
First 24 hours: build a fact sheet, stakeholder map, and single external line.
First week: produce initial remediation, evidence pack, and regulator-communication plan.
Afterwards: board review, accountability, process updates, and training.