Bilex Minerals EABilex
Knowledge Centre

Definitive due-diligence guide · Responsible Sourcing

Responsible Gold Sourcing

A practical guide to supplier checks, traceability, OECD due diligence, conflict risk, AML, and responsible purchasing decisions.

20 min read4 related articles

What this guide establishes

  • Responsible sourcing is an ongoing risk-management process, not one document.
  • Traceability records must be tested against supplier, location, payment, and transport evidence.
  • Independent testing supports due diligence but does not verify every social, legal, or financial risk.
Gold bars prepared for responsible sourcing and due-diligence review
Gold bars prepared for responsible sourcing and due-diligence review

Responsible gold sourcing means identifying and addressing the risks connected to extraction, transport, trade, processing, and payment. It is not a one-time certificate and it is not a promise that every risk has disappeared. It is a documented, risk-based process that helps a company know its suppliers, trace material, assess high-risk circumstances, respond to concerns, and explain what it has done.

01

What responsible sourcing means

Responsible sourcing is the process of identifying, preventing, mitigating, and accounting for adverse impacts connected to a company's supply chain and business relationships. In gold, risks can include serious human-rights abuse, conflict financing, corruption, money laundering, false origin, and environmental harm.

For the client, the practical issue is scope. A buyer needs a repeatable process that distinguishes a manageable concern from a risk that requires suspension or disengagement. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, set a policy, assign responsibility, collect information, assess risks, record decisions, monitor suppliers, and report proportionately. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

Policies, supplier files, risk assessments, approvals, monitoring results, corrective actions, and public reporting show how the process operates. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

Responsible sourcing does not mean avoiding every high-risk location automatically. It means applying enhanced, documented due diligence. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

A useful workflow starts by naming the decision, the person responsible for it, and the evidence that must exist before approval. The client can then separate mandatory requirements from useful supporting checks, record unresolved questions, and stop the process when a material inconsistency appears. This is more reliable than trying to reconstruct the reasoning after the transaction has advanced. Apply that discipline specifically to what responsible sourcing means so the control remains connected to the question this section addresses.

At the review point, write down what is confirmed, what remains an assumption, and what would change the decision. This short record helps legal, compliance, laboratory, logistics, and commercial advisers address the right questions without blurring their roles. It also gives the client a defensible reason to proceed, pause, renegotiate, or decline.

02

The OECD five-step framework

The OECD minerals guidance sets out five steps: establish strong management systems, identify and assess supply-chain risk, design and implement a risk response, obtain independent third-party audit at identified points, and report on due diligence.

The commercial value comes from using the information correctly. The framework gives international buyers and refiners a common structure for reviewing suppliers and explaining decisions. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, translate each step into named owners, records, approval thresholds, timelines, and escalation paths that fit the company's position in the chain. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

A reviewer should see how information moved from collection to risk decision, mitigation, audit, and reporting. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

Copying the five headings into a policy is not implementation. The company must show how controls work in actual transactions. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

Before acting, the client should identify which party supplied each fact and which independent source, record, or test can verify it. Information from a seller may be necessary, but it should not be treated as independent confirmation. Where two records conflict, the conflict should be investigated and documented rather than explained away informally. Apply that discipline specifically to the oecd five-step framework so the control remains connected to the question this section addresses.

Evidence has a useful life and a defined scope. A document may be genuine but outdated, an assay may relate to a different sample, and an approval may apply only to a named party or route. Checking validity, scope, and direct connection to the current material prevents strong-looking evidence from being used for the wrong transaction.

Wrapped doré bars recorded as part of a controlled supply-chain file
Wrapped doré bars recorded as part of a controlled supply-chain file

03

Supplier identification and verification

Supplier due diligence establishes the legal entity, beneficial owners, authorised representatives, business activity, licences, source relationships, payment details, and relevant history.

This step protects the connection between evidence and decision. A technically genuine parcel may still expose a buyer to serious risk if the supplier or payment path is unclear. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, use independent registries, official licence checks, sanctions and adverse-information screening, references, site information, and direct contact. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

Dated search results, verified documents, interview notes, ownership charts, and approval records support the supplier file. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

A company certificate confirms registration, not responsible conduct or ownership of the material. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

Timing is part of the control. Reviews, sampling, testing, official enquiries, and third-party approvals should happen early enough for the client to respond to a problem without commercial pressure. A rushed final check is less useful when funds have moved, the shipment has departed, or contractual options have already narrowed. Apply that discipline specifically to supplier identification and verification so the control remains connected to the question this section addresses.

Good communication is specific. Questions should refer to the exact lot, sample seal, report number, licence, invoice, shipment, party, and date concerned. Answers should be retained with the transaction file. This makes later reconciliation easier and reduces the risk that a verbal assurance is mistaken for formal evidence.

04

Traceability and chain of custody

Traceability links the material to suppliers, locations, production or collection records, transport, processing, and transfers. Chain of custody records who controlled the material or sample at each stage.

The point is not to add paperwork. It is to reduce avoidable uncertainty. The records help the buyer test whether quantity, origin, route, and timing make sense together. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, use lot identifiers, weight reconciliations, transport records, seals, invoices, photographs, production data, and exception reports. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

A defensible file reconciles material in, material out, losses, processing changes, and payment without unexplained gaps. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

A long document trail is not automatically reliable. Information must be checked for consistency and credibility. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

The process should also allow escalation. A routine check may be enough for familiar, low-risk material, while unfamiliar parties, unusual payment requests, inconsistent weights, complex routes, or high values justify deeper review. Escalation is not an accusation. It is a proportionate response to uncertainty. Apply that discipline specifically to traceability and chain of custody so the control remains connected to the question this section addresses.

If specialist interpretation is needed, use the appropriate qualified adviser. Laboratory staff can explain analytical scope, while authorities and legal, customs, financial, or logistics professionals address requirements within their own mandates. Coordinating those answers is more dependable than expecting one report or one organisation to validate the entire transaction.

05

Conflict-affected and high-risk areas

A conflict-affected or high-risk area may involve armed conflict, widespread violence, institutional weakness, serious abuse, corruption, or other heightened risks. Risk can also arise from a supplier, route, product, or unusual transaction structure.

For the client, the practical issue is scope. Geography is a starting point, not the only test. A low-risk label should not excuse obvious entity or transaction concerns. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, use current country information, local context, sanctions, supplier evidence, route analysis, and stakeholder information to determine enhanced steps. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

Document the sources used, date of assessment, risk factors, conclusion, reviewer, and monitoring frequency. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

Country lists change and can oversimplify local conditions. Decisions should use several credible sources. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

A useful workflow starts by naming the decision, the person responsible for it, and the evidence that must exist before approval. The client can then separate mandatory requirements from useful supporting checks, record unresolved questions, and stop the process when a material inconsistency appears. This is more reliable than trying to reconstruct the reasoning after the transaction has advanced. Apply that discipline specifically to conflict-affected and high-risk areas so the control remains connected to the question this section addresses.

At the review point, write down what is confirmed, what remains an assumption, and what would change the decision. This short record helps legal, compliance, laboratory, logistics, and commercial advisers address the right questions without blurring their roles. It also gives the client a defensible reason to proceed, pause, renegotiate, or decline.

06

AML, KYC, and payment risk

Gold's high value, durability, and portability can make the trade vulnerable to money laundering and other financial crime. KYC identifies counterparties. AML controls assess and respond to the risk that transactions may involve criminal proceeds or prohibited activity.

The commercial value comes from using the information correctly. Payment instructions, beneficial ownership, source of funds, and the relationship between payer, seller, and material need to make commercial sense. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, set risk-based onboarding, transaction monitoring, approval, recordkeeping, and escalation processes appropriate to the company and jurisdiction. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

Identity files, ownership records, payment verification, monitoring alerts, approvals, and any required reports support the financial-crime control file. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

Laboratory testing does not perform KYC or prove lawful source of funds. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

Before acting, the client should identify which party supplied each fact and which independent source, record, or test can verify it. Information from a seller may be necessary, but it should not be treated as independent confirmation. Where two records conflict, the conflict should be investigated and documented rather than explained away informally. Apply that discipline specifically to aml, kyc, and payment risk so the control remains connected to the question this section addresses.

Evidence has a useful life and a defined scope. A document may be genuine but outdated, an assay may relate to a different sample, and an approval may apply only to a named party or route. Checking validity, scope, and direct connection to the current material prevents strong-looking evidence from being used for the wrong transaction.

07

Independent testing within due diligence

Independent testing verifies composition for an identified sample. It can expose material inconsistencies, support weight and purity reconciliation, and provide evidence separate from the supplier's own claim.

This step protects the connection between evidence and decision. The result helps the buyer test whether physical material, seller description, invoice, and expected value are consistent. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, control sampling, custody, laboratory selection, reporting, and direct verification. Link the result to the due-diligence file and transaction decision. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

Intake records, sample seals, method details, reports, and reconciliation calculations show how analytical evidence was used. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

Testing cannot establish mining conditions, beneficial ownership, payment legitimacy, or export legality by itself. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

Timing is part of the control. Reviews, sampling, testing, official enquiries, and third-party approvals should happen early enough for the client to respond to a problem without commercial pressure. A rushed final check is less useful when funds have moved, the shipment has departed, or contractual options have already narrowed. Apply that discipline specifically to independent testing within due diligence so the control remains connected to the question this section addresses.

Good communication is specific. Questions should refer to the exact lot, sample seal, report number, licence, invoice, shipment, party, and date concerned. Answers should be retained with the transaction file. This makes later reconciliation easier and reduces the risk that a verbal assurance is mistaken for formal evidence.

08

Risk response and ongoing monitoring

When concerns are found, a company may continue with measurable mitigation, temporarily suspend activity, or disengage, depending on severity, leverage, and applicable rules. Zero-tolerance risks require a different response from correctable record gaps.

The point is not to add paperwork. It is to reduce avoidable uncertainty. The decision should protect people, the company, and legitimate trade without treating every issue as identical. For buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions, that distinction helps determine whether the evidence is strong enough for the next commitment or whether more verification is needed.

In practice, define escalation levels, responsible decision-makers, corrective actions, deadlines, evidence required, and monitoring after approval. The work should be proportionate to the value, variability, geography, and consequence of getting the answer wrong. Responsibilities, timing, and decision points are clearer when they are agreed before money or material moves.

Risk committee records, mitigation plans, supplier commitments, follow-up checks, and closure decisions demonstrate accountability. Records should be reviewed for consistency, not collected only to make a file look complete. Names, dates, weights, references, parties, and explanations should tell one coherent story.

Commercial pressure should not override unresolved serious abuse, sanctions, ownership, or financial-crime concerns. That boundary matters because laboratory, customs, legal, financial, and commercial decisions belong to different qualified parties. A careful client uses each piece of evidence for the question it can genuinely answer.

The process should also allow escalation. A routine check may be enough for familiar, low-risk material, while unfamiliar parties, unusual payment requests, inconsistent weights, complex routes, or high values justify deeper review. Escalation is not an accusation. It is a proportionate response to uncertainty. Apply that discipline specifically to risk response and ongoing monitoring so the control remains connected to the question this section addresses.

If specialist interpretation is needed, use the appropriate qualified adviser. Laboratory staff can explain analytical scope, while authorities and legal, customs, financial, or logistics professionals address requirements within their own mandates. Coordinating those answers is more dependable than expecting one report or one organisation to validate the entire transaction.

Frequently asked questions

Clear answers before the next step.

What Is Responsible Gold Sourcing?

Responsible gold sourcing is a risk-based process for identifying and addressing adverse impacts connected to the supply chain. Adopt a policy, assign ownership, assess suppliers and transactions, and record decisions. One certificate cannot replace ongoing due diligence. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

How the OECD Five-Step Framework Works?

The framework covers management systems, risk identification and assessment, risk response, independent audit at identified points, and reporting. Map each step to named owners and transaction records. A policy that repeats the steps without implementation is not enough. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

What Is a Conflict-Affected or High-Risk Area?

A conflict-affected or high-risk area may involve armed conflict, violence, serious abuse, corruption, institutional weakness, or other elevated risk. Use current sources and assess geography together with entity, route, and transaction factors. No single country list captures every local or changing risk. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

How to Assess a Gold Supplier?

Supplier assessment confirms the entity, beneficial owners, authority, licences, activity, source relationships, and payment path. Verify important information through independent sources and refresh it according to risk. Registration alone does not prove responsible conduct. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

What Records Support Traceability?

Traceability records may include lot IDs, production data, weights, invoices, transport documents, seals, photographs, processing records, and transfer logs. Reconcile quantities and investigate gaps rather than collecting documents without review. A complete-looking file can still contain false or inconsistent information. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

What Is a Gold Supply Chain Policy?

A supply-chain policy states the risks a company will identify, prevent, mitigate, or refuse, together with supplier expectations and escalation rules. Include the policy in onboarding, contracts, training, and monitoring. A policy has little value if commercial teams can ignore it. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

When Should a Buyer Pause a Transaction?

Pause when identity, origin, ownership, licences, payments, documents, route, or testing produce material unresolved concerns. Record the reason, information needed, reviewer, and decision deadline. Do not let urgency turn a pause into unrecorded approval. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

How Independent Testing Supports Due Diligence?

Independent testing can confirm composition for a controlled sample and expose inconsistencies between material and documents. Link the report to sample custody, weight reconciliation, and the transaction risk assessment. Testing does not establish origin, ownership, or lawful payment. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

Does responsible sourcing ban gold from high-risk areas?

The OECD approach supports risk-based due diligence and responsible engagement, with responses based on the nature and severity of identified risks. Apply enhanced checks and a documented response. Some zero-tolerance risks, sanctions, or legal rules may require disengagement. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

What is Dodd-Frank Section 1502?

Section 1502 led to US SEC disclosure requirements for certain issuers using conflict minerals, including gold, when necessary to products they manufacture or contract to manufacture. Affected companies should confirm current obligations with qualified US counsel and SEC materials. The rule does not apply identically to every gold buyer or private company. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

Is traceability the same as due diligence?

No. Traceability provides information about material movement and identity. Due diligence uses that information with broader risk assessment, response, monitoring, and reporting. Test traceability records against supplier and risk evidence. A traceable supply chain can still contain adverse impacts. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

Who is responsible for supplier due diligence?

The company entering the relationship remains responsible for its risk-based process, even when consultants, laboratories, or platforms provide information. Assign internal ownership and approval authority. Outsourcing checks does not outsource accountability. The appropriate response depends on the material, jurisdiction, parties, value, and intended use, so buyers, exporters, refiners, jewellery manufacturers, investors, compliance teams, and public institutions should confirm transaction-specific requirements before acting.

Official and primary sources

Verify requirements at the source.

From guidance to evidence

When the decision depends on the sample, use independent testing.

Use Independent Testing