"What you buy" is a short set of questions that sets SupplierVault up for your organisation. "Your answers switch on the checks UK law and good practice expect for each area, and hide what you don't need. Nothing is locked in."
Where to find it
- Step 4 of the setup guide (Settings → "Run the setup guide", or a step on the Dashboard's "Get set up" checklist).
- Modules & forms → "Answer what you buy" (it reads "Change what you buy" once answered).
In the live service only an admin can answer these, because they change organisation-wide settings.
How to answer
Each question has three answers: Yes, No and Not sure. An answer saves as soon as you click it, and the "What this sets up" box updates straight away. You can come back and change answers at any time.
The questions and what each one does
| Question | What a Yes does |
|---|---|
| About you: "Is your turnover £36 million or more, or do you have more than 250 staff?" | Switches on the Modern slavery and ethical sourcing, Anti-bribery, fraud and tax evasion, and Financial stability packs. Organisations with turnover of £36m or more must publish a modern slavery statement. Large organisations (two of: more than 250 staff, turnover over £36m, balance sheet over £18m) can be prosecuted for failing to prevent fraud by people acting for them. |
| "Are you regulated by the FCA or PRA?" | Switches on the Material outsourcing pack. Yes or Not sure shows the "Assurance and regulatory records" section on supplier records. |
| "Do you hold ISO 27001, or must you meet your own clients' security requirements?" | Shows the "Assurance and regulatory records" section. If neither this nor the FCA question is Yes (or FCA is Not sure), that section is hidden. |
| Technology: "Do you buy software, cloud or IT services?" | Switches on the Technology and software pack and adds the Technology area. |
| "Do suppliers access your systems or hold your customer or staff data?" | Yes or Not sure shows Third-party risk for every tier. No, or unanswered, limits it to T1 and T2 suppliers. |
| "Do you have contracts charged by usage, such as cloud, telecoms or energy?" | Only No hides "Consumption & spend". Unanswered keeps it. |
| "Do any suppliers use AI with your data or in what they deliver?" | Only No hides the "AI use" section. |
| Facilities: "Do contractors work at your premises, for example cleaning, maintenance, security, catering or waste?" | Switches on the Facilities and on-site contractors pack (insurance, health and safety, trade registrations, TUPE) and adds the Facilities area. |
| People & HR: "Do you use recruitment agencies, temporary workers, contractors or umbrella companies?" | Switches on the People and HR pack (agency worker rules, IR35, the April 2026 umbrella company rules) and adds the People & HR area. |
| "Is payroll, pensions or benefits run by an outside provider?" | Also switches on the People and HR pack, which includes payroll controls. |
| Marketing: "Do you use creative, digital, PR, events or media agencies?" | Switches on the Marketing pack (ownership of the work, advertising rules, consent and media rebates) and adds the Marketing area. |
| Other: "Do you use lawyers, accountants, auditors or consultants?" | Switches on the Professional and advisory services pack. |
The "What this sets up" summary
Beside the questions you'll see what your answers have done: the areas you'll have (always including "Other"), a chip for each pack switched on, notes such as "Consumption hidden." or "AI section hidden.", and whether third-party risk covers every tier or only T1 and T2.
Good to know
- Answers win over manual pack settings. Each answer re-applies the whole set-up, so a pack whose question isn't Yes is switched off. If you want a pack your answers don't call for, switch it on in Modules & forms after answering.
- Areas are only ever added, never removed, by these questions.
- The "Carbon reduction and ESG" pack is never switched on by these questions. Switch it on yourself if you need it.
- These questions are separate from the "What you need to evidence" ticks in Settings, which control the regulatory records inside the assurance section.
- Compliance packs are included from the Professional plan. On Essentials your answers still set areas and sections, but packs stay locked.
- The questions record facts about your organisation. They aren't legal advice about what the law requires of you.
Related
Still have a question?Email hello@suppliervault.co.uk or use the contact form. Try anything safely in the live demo.