Supplier Policy

We hold our partners to
the same standard as ourselves.

Working with Pallacor means more than fulfilling a contract. It means sharing a commitment to the values that shape how we operate — with our customers, with each other, and with the world around us. Those values don't stop at our front door.

The standard

No separate rulebook for outside partners.

We don't maintain one set of expectations for our employees and a looser set for the vendors and suppliers we work with. If a behavior, practice, or decision would be unacceptable from someone on our team, it's unacceptable from a partner. Full stop.

That's not a bureaucratic requirement — it's a practical one. Pallacor is trusted with sensitive loss prevention data, customer confidence, and a reputation built on integrity. Any partner who touches our business, our infrastructure, or our customers carries a piece of that responsibility. We take it seriously, and we expect our partners to as well.

This document describes what that looks like in practice. If any part of it is unclear, or if you're a prospective supplier who wants to understand our expectations before engaging, reach out at [email protected].

Our commitment

"We will never ask a supplier to do something we wouldn't do ourselves, or to accept terms we wouldn't accept."

Applies to all partners
Technology & infrastructure vendors
Professional service providers
Contractors & freelancers
Sub-processors & data handlers
Physical goods & equipment suppliers
What we expect

Six things every Pallacor partner must uphold.

These aren't negotiable based on deal size, contract length, or how long we've worked together. They apply equally to everyone.

01
Absolute integrity — no exceptions
We expect our partners to conduct business honestly and transparently. That means no bribery, no corruption, no deceptive billing, and no misrepresentation of capabilities or capacity. If something goes wrong, we expect to hear about it from you — not discover it on our own.
02
Data security treated as a core responsibility
Pallacor handles sensitive loss prevention data on behalf of retail customers. Any supplier that touches our systems, infrastructure, or customer data must maintain security practices commensurate with that sensitivity — encryption, access controls, breach notification, and documented incident response are baseline expectations, not differentiators.
03
Fair treatment of every person in the chain
We do not work with suppliers who exploit their own workers. That includes paying fair wages, providing safe working conditions, prohibiting forced or child labor, and honoring the legal rights of employees and contractors. How you treat your people reflects on us — and we take that seriously.
04
Legal compliance in every jurisdiction
Our partners are expected to comply with all applicable laws — employment law, privacy law, export controls, anti-money laundering regulations, and any sector-specific requirements that apply to their business. Ignorance of applicable law is not a defense we will accept on behalf of our supply chain.
05
Confidentiality without needing to be asked
Information you learn about Pallacor, our customers, our product, or our operations in the course of working with us is confidential. We expect our partners to handle it with discretion and judgment — not just when a contract explicitly requires it, but as a baseline professional standard.
06
A culture that includes, not excludes
We expect our suppliers to maintain workplaces free from discrimination, harassment, and exclusion. That standard applies to how they treat their own teams, how they interact with our team, and how they represent themselves to the world. We will not continue relationships with partners whose culture conflicts with this in a material way.
In practice

What this looks like when we work together.

Abstract values mean nothing without specific behaviors. Here's how our expectations translate into the day-to-day reality of working with Pallacor.

1
You'll acknowledge this policy before we begin
Before a supplier relationship is formalized, we ask all partners to confirm that they've read and understood this policy. This isn't a formality — it's the foundation of the working relationship. We find that partners who engage with it seriously are also the ones who raise issues honestly when they arise.
2
Security and data handling requirements are non-negotiable
For any supplier that accesses Pallacor systems or customer data, we require appropriate technical controls: encrypted data transmission, documented access controls, incident response plans, and the ability to notify us within 72 hours of any suspected breach. These requirements are not tiered by deal size — they apply to everyone.
3
We may ask how you operate
From time to time, we conduct supplier reviews — particularly for longer-term or higher-stakes relationships. We may ask about your employment practices, your own supplier relationships, your security posture, or your approach to legal compliance. We ask because we care, not to generate paperwork, and we'll be direct about what we're looking for.
4
Violations are handled directly — and decisively
If we become aware of a violation of this policy, we will raise it directly with the responsible party and expect a clear, honest response. Minor issues with good-faith remediation are handled as learning moments. Serious violations — particularly those involving data security, dishonesty, or harm to people — may result in immediate termination of the relationship without further negotiation.
Our side of it

What every Pallacor supplier can expect from us.

We hold ourselves to the same standard we hold you to. That means we pay on time, communicate clearly, don't ask you to cut corners, and treat every supplier relationship with the same professionalism we'd want from a partner of our own.

If we make a mistake — a delayed payment, an unclear scope, a communication breakdown — we'll own it and fix it. We don't expect perfection from our partners, but we do expect honesty and a genuine commitment to doing right by the relationship. We'll offer the same in return.

On-time payment
We pay invoices on the agreed schedule. If something delays payment, we'll tell you in advance — not after the due date.
Clear expectations upfront
We'll be specific about scope, timelines, and success criteria before work begins — not mid-engagement when it's too late to course-correct.
No midnight scope changes
We won't ask you to absorb work that falls outside what was agreed without a fair conversation about what that means for your time and pricing.
A real person to talk to
Every supplier relationship has a named Pallacor contact. If something's wrong — with us, with the relationship, or with how something was handled — you have someone to call.
Get in touch

Questions, or interested in working with us?

If you're a current or prospective supplier with questions about this policy, concerns about an existing relationship, or interest in working with Pallacor, we want to hear from you. We review every inquiry ourselves — there's no ticket queue between you and a real conversation.

Contact our supplier team Learn about Pallacor

Reach us directly at [email protected] — we aim to respond within 2 business days.