Creating an anti-bribery policy for your UK startup: a practical guide

Most startup founders assume bribery only matters if you’re dealing with overseas government contracts or operating in high-risk countries. That assumption can leave your business exposed. The UK Bribery Act 2010 applies to every UK company, regardless of size or sector. An anti-bribery policy helps you demonstrate that your startup takes the law seriously and has proper procedures in place. It can also form part of a reasonable defence if something goes wrong.

Here’s how to create a straightforward policy your team will actually follow.

Why a written policy matters

Having a clear, written anti-bribery policy does three practical things:

• It sets expectations for everyone who works for or represents your startup, including employees, contractors and third-party partners.
• It shows that you’ve thought about bribery risks and taken steps to guard against them. Under the Bribery Act, a commercial organisation can be liable if an associated person bribes someone for its benefit, unless it can show it had adequate procedures in place. A policy is a core part of those procedures.
• It gives your team confidence to say no or raise concerns when something doesn’t feel right.

A verbal “we don’t do that” isn’t enough. A short policy turns good intentions into a shared standard.

What to cover in your policy

You don’t need a 20-page document. For a startup with fewer than 20 people, a two- or three-page policy covers the essentials. Include these sections:

A simple statement of what’s not acceptable

State clearly that offering, promising, giving, requesting, agreeing to receive or accepting a bribe is prohibited. Use plain examples so people recognise the behaviour you want to avoid. For instance: “You must not offer a gift, hospitality or payment to anyone with the intention of influencing a business decision or gaining an improper advantage.”

Gifts and hospitality

This is the area that catches out many startups. Most day-to-day business courtesies aren’t bribes, but the line can blur. Set clear boundaries. For example:

• A modest thank-you lunch or branded merchandise is usually fine.
• Anything over a specific value (say £50) or that could be seen as influencing a decision needs prior written approval from a director.
• Cash or cash equivalents are never acceptable.
• All gifts and hospitality above a small de minimis amount should be recorded in a simple register.

Keep it workable. The goal isn’t to ban all relationship-building, just to stop anything that could be, or look like, a bribe.

Facilitation payments

These are small payments to speed up something you’re already entitled to (like getting a permit processed). They’re illegal under the UK Bribery Act, even if they’re common practice elsewhere. Your policy should ban them outright. If a team member faces pressure to make one, they need a way to report it and not feel they’ll be in trouble for refusing.

Red flags and reporting

List common warning signs that a request or arrangement might be a bribe. Examples include:

• A third party asking for a payment into a personal account.
• Unusual commission structures with no clear business rationale.
• High-pressure demands for gifts or payments before a contract is signed.

Make it easy to report concerns. Give at least two named contacts (usually a founder or director) so no one has to report to the person they’re worried about. If your team is tiny, you can use an external service or make it clear they can also speak to a trusted advisor. Stress that good-faith reports won’t lead to retaliation, and set out how you’ll handle them (initial assessment, fact-finding, action if needed).

Third-party relationships

Your startup could be liable for bribes paid by agents, introducers, consultants or even sales channel partners. Your policy should say that you excpect anyone acting on your behalf to follow equivalent standards. If you work with overseas agents, you may need to carry out some simple due diligence. Even a short questionnaire can help.

How to bring it to life

A policy that sits in a shared folder never opened is useless. Take these steps:

1. Write it in plain English. Skip legalistic language. If a new starter can’t understand it, it won’t work.
2. Include it in onboarding. Give every new joiner a copy and talk through the key points—what’s a bribe, what to do if they see one.
3. Run a short annual refresher. For small teams, a 20-minute conversation over coffee works better than online training. Update the policy if your business changes (e.g., you start selling in a new country).
4. Keep a simple record. Log who’s seen the policy and when. If you ever need to show you had adequate procedures, that record matters.

Practical first steps

Start by drafting a short policy that fits your startup’s real-world risks. If you’e a software company selling in the UK, your risks look different from a business that regularly uses agents in multiple jurisdictions. Tailor it.

Once you have a draft, share it with a solicitor who knows your sector. They can check that it reflects current legal expectations and doesn’t miss anything specific to your operations. This is not a tick-box exercise; it’s part of building a responsible business.

At StartupDocs, we provide anti-bribery policy templates that you can adapt and edit with AI ttacked changes. But remember: a template is a starting point. You still need to make sure it matches the way your team actually works and the markets you operate in. And always get tailored advice for anything that isn’t clear.