Corporate Gift and Hospitality Policy Template 2026

A corporate gift and hospitality policy should make an ethical business gesture easy to approve, easy to refuse, and easy to audit. This 2026 template gives compliance, procurement, finance, people, and commercial teams a copy-ready starting point, while leaving legal thresholds and tax conclusions to qualified local owners.

How to use this template safely

Copy the policy sections below into your controlled policy system, replace every bracketed field, and obtain local legal, tax, employment, public-sector, healthcare, privacy, and procurement review before adoption. The values in the risk matrix are internal routing examples, not legal safe harbors. A low-value gift can still be improper because of timing, intent, frequency, recipient status, a tender, or an undisclosed conflict. The design follows a risk-based operating principle. The U.S. Department of Justice asks whether a compliance program reflects the organization’s actual risk profile, reaches daily operations, assigns responsibility, trains gatekeepers, preserves reporting, and improves from evidence. The OECD Good Practice Guidance likewise supports visible leadership, proportionate controls, training, reporting channels, discipline, due diligence, and periodic review. The UK Ministry of Justice guidance, updated January 22, 2025, frames prevention around six principles rather than a universal monetary permission. Use Giftpack’s live global corporate gifting operations hub to connect this policy to ownership, data, fulfillment, reconciliation, and measurement, and its vendor security checklist for supplier review. Use three implementation rules:

• Treat purpose, relationship, timing, recipient type, frequency, and total value as one decision.
• Separate the requester, approver, fulfiller, and reviewer when exposure is material.
• Preserve rejected, returned, redirected, and exceptional cases; a clean register is not necessarily an effective program.

A threshold routes a decision. It never converts an improper purpose into a permissible gift.

---

Giftpack Corporate Gift and Hospitality Policy Template v1.0

Version: 1.0 Release date: September 2, 2026 Policy owner: ［Chief Compliance Officer / General Counsel / named owner］ Business owner: ［function and role］ Effective date: ［date］ Next review: ［date, normally within six months］ Applies to: ［entities, employees, directors, temporary workers, agents, contractors, and controlled ventures］

1. Purpose

the organization permits reasonable, transparent gifts and hospitality only when they support a legitimate business or cultural purpose, are lawful, proportionate, infrequent, accurately recorded, and incapable of creating an obligation or appearance of improper influence. This policy governs anything of value offered, promised, given, requested, accepted, declined, returned, donated, or redirected in connection with the organization’s activities. The policy is designed to prevent bribery, favoritism, procurement distortion, hidden compensation, conflicts of interest, tax errors, privacy over-collection, and reputational harm. It is not a promise that an item below a company threshold is lawful or tax-free.

2. Scope

This policy applies when a covered person uses company funds, seeks reimbursement, acts on the organization’s behalf, uses a company-selected vendor, receives an offer because of their role, or causes value to be provided through an intermediary. It covers physical and digital gifts, meals, entertainment, travel, lodging, tickets, discounts unavailable to the public, honoraria, charitable contributions connected to a business relationship, prizes, raffles, samples, promotional items, services, loans, favors, and benefits for relatives or guests. Local supplements may impose stricter rules. The stricter applicable rule controls. Personal exchanges based solely on a genuine private relationship may be outside this policy only when no company funds, business purpose, role-based access, regulated relationship, or appearance of influence is involved and the relationship is documented if reasonably questioned.

3. Definitions

Gift means anything of value for which the recipient does not pay fair value. Hospitality means meals, events, travel, lodging, entertainment, or attendance benefits. Public official includes government personnel and any person treated as an official under applicable law, including candidates, political parties, state-owned enterprise personnel, and certain employees of public institutions where local law so provides. Healthcare recipient includes healthcare professionals, institutions, purchasing bodies, and other regulated participants. Business relationship includes a customer, prospect, supplier, distributor, agent, partner, adviser, applicant, donor, grant recipient, regulator, auditor, or competitor. Aggregate value means the fair market value of related benefits to the same recipient or connected group during the policy period, including shipping, travel, guests, and benefits routed through others. Conflict means a personal, financial, family, political, charitable, or outside interest that could affect—or reasonably appear to affect—independent judgment.

4. Ownership and duties

• The board or executive sponsor approves the policy and receives material trend reports.
• Compliance owns interpretation, high-risk review, investigations, training, and version control.
• Legal and Tax own jurisdiction-specific conclusions; Payroll owns employee reporting where applicable.
• Procurement owns supplier and tender controls. Finance owns budget authority, accounts, and reconciliation.
• Privacy and Security approve the data fields, access model, vendors, retention, and deletion path.
• Managers test business purpose and necessity. Requesters provide complete facts and never approve their own request.
• Fulfillment operators execute only an approved instruction. Internal Audit independently tests design and operation.

---

Decision rules and configurable risk matrix

Before using money, apply the absolute prohibitions. Then assess the recipient, purpose, timing, value, frequency, location, funding entity, and any linked decision. The organization must convert the sample bands below into local-currency limits after documented legal, tax, public-sector, healthcare, procurement, and cultural review. Policy routing matrix — example values for internal design only

Each business unit must set ［routine limit］, ［enhanced-review limit］, ［annual aggregate］, ［frequency cap］, and ［prohibited periods］. Limits include taxes, fees, delivery, guests, and related benefits. Splitting one event, using multiple vendors, routing through a relative, or changing the accounting description does not change the aggregate.

Public officials and public institutions

Apply the broadest reasonable public-official definition and obtain Compliance and Legal approval before any offer. Do not rely on a private-sector threshold. Confirm the official body’s own rules and document the legitimate purpose, recipient authority, item, value, timing, payer, and disposition. The U.S. DOJ compliance guidance treats interactions with governments, gifts, travel, entertainment, and donations as risk-assessment factors. In Japan, the National Public Service Ethics Regulations prohibit specified benefits from interested parties and contain defined exceptions; in Korea, consult the Anti-Corruption and Civil Rights Commission and current law before relying on any amount; in Taiwan, consult the Agency Against Corruption’s public-servant ethics materials. Recipient rules may be stricter than the giver’s policy.

Healthcare, tenders, travel, charities, and protocol gifts

Healthcare rules may regulate transfers of value, disclosure, educational items, samples, and purchasing influence. During a tender, sourcing event, license, audit, dispute, or renewal, prohibit gifts and hospitality unless Legal documents a narrow lawful exception. Company-paid travel must be necessary, modest, directly arranged, itinerary-limited, and never extended to leisure or guests without separate written analysis. Charitable support must never be directed by a decision-maker to influence business. An unavoidable protocol gift should be reported immediately, secured or donated under a documented decision, and never quietly retained.

---

Absolute prohibitions

Covered persons must not offer, give, request, accept, or arrange:

• Anything intended to influence a decision improperly, reward improper conduct, obtain confidential information, or create an obligation.
• Cash or cash equivalents, including unrestricted stored value, personal transfers, loans, cryptocurrency, wagering credits, or easily resold instruments, unless an approved employee-benefit program is governed elsewhere.
• Gifts during a tender, supplier selection, audit, investigation, license, inspection, dispute, hiring decision, or contract negotiation when the gesture could affect—or appear to affect—the outcome.
• Value to a public official, healthcare recipient, political party, candidate, charity, family member, or intermediary to evade a rule or secure an advantage.
• Lavish, sexual, illegal, unsafe, discriminatory, environmentally prohibited, or culturally exploitative items or events.
• Split purchases, false attendees, misleading descriptions, backdated approvals, hidden discounts, personal expense claims, side letters, or off-system fulfillment intended to avoid controls.
• Benefits that the recipient’s employer or public body forbids, or that the recipient refuses to declare.
• Personal-address or sensitive-recipient data collected without an approved purpose, notice, access rule, retention period, and secure deletion path. Employees must decline or return a prohibited offer. If immediate refusal would create safety, diplomatic, or cultural risk, they must surrender the item to ［policy owner］ within ［two business days］ and record the circumstances. Compliance decides whether to return, donate, display, share, or dispose of it, with evidence. No manager may retaliate against a person who asks for review, declines a benefit, reports a concern, or delays an event while facts are checked. Commercial urgency, seniority, customer importance, or a completed shipment is not a reason to bypass the policy.

---

Approval, disclosure, and exception workflow

Use the same workflow for giving and receiving. A pre-approved campaign may shorten routine routing, but it must still have a current policy version, audience, purpose, item or catalog, value method, funding source, countries, duration, owners, and evidence requirements.

1. Request. Submit the request before commitment or shipment. Identify giver and recipient organizations, individual recipient or controlled identifier, recipient class, business relationship, purpose, occasion, item, fair value, currency, frequency, previous benefits, location, date, attendees, funding entity, cost center, vendor, and delivery method.
2. Screen. The system or reviewer checks prohibited parties, public-sector and healthcare status, tender or decision periods, conflicts, country rules, recipient policy, aggregate value, frequency, product restrictions, privacy, and tax or payroll triggers.
3. Approve. Route by risk. The approver records an affirmative decision, conditions, policy version, limit, validity period, and reasoning. Silence is not approval.
4. Execute. Fulfillment receives only the minimum approved data and cannot substitute value, product class, recipient, country, or delivery path without recheck.
5. Confirm. Record acceptance, decline, nonresponse, return, donation, redirection, delivery failure, or cancellation. Capture actual rather than estimated value.
6. Reconcile. Match approval, order, supplier charge, invoice, payment, refund, tax or payroll handoff, and final disposition.
7. Review. Compliance examines exceptions, overrides, repeated recipients, missing evidence, unusual timing, concentration, approver behavior, and off-system spend. Executable implementation checklist

• Name the policy, business, legal, tax, procurement, finance, privacy, and audit owners.
• Map recipient types and regulated relationships by country and sector.
• Approve local thresholds, annual aggregates, blocked periods, and higher-risk triggers.
• Configure role separation and prevent self-approval.
• Publish the request form, evidence standard, refusal script, and urgent-review channel.
• Create the register, retention schedule, access groups, and deletion procedure.
• Test public-official, healthcare, tender, travel, family-member, charity, return, and failed-delivery cases.
• Train requesters, approvers, assistants, buyers, event teams, accounts payable, and fulfillment operators.
• Reconcile monthly and review control trends quarterly.
• Reapprove the policy at least semiannually and after material legal, business, vendor, or incident changes.

---

Copy-ready register and exception forms

The register must preserve the offer even when nothing is delivered. Use a stable event identifier and append corrections instead of overwriting history. Gift and hospitality register fields

Exception request

Exception ID: ［identifier］ Rule requiring exception: ［section and control］ Facts: ［who, what, when, where, value, frequency, relationship, decision context］ Why the standard route cannot be used: ［specific reason］ Alternatives considered: ［decline, lower value, different timing, recipient choice, donation, no hospitality］ Legal or regulatory basis: ［named owner and dated conclusion］ Risk reduction: ［conditions, attendee limits, direct booking, donation, transparency, data minimization］ Approvers: ［Compliance, Legal, Tax, Procurement, executive］ Validity: ［single event and expiry］ Final disposition and evidence: ［result］ An exception must be narrow, time-bound, nonprecedential unless the policy is formally changed, and visible in reporting. Repeated exceptions indicate a bad rule, an unaddressed business model, or control avoidance; they should trigger redesign rather than automatic renewal.

---

Monitoring, training, retention, and investigations

Training must reflect real decisions. Give employees short scenarios involving a supplier’s holiday basket, a customer dinner during renewal, a public-university attendee, a physician speaker, a family member’s address, an executive ticket, a protocol gift, and a last-minute event. Approvers need additional practice on aggregation, intent, recipient rules, local supplements, documentation, and escalation. Monitor both compliance and usability. Useful measures include pre-approval rate, rejected and returned offers, exception volume, time to decision, repeated recipients, concentration by requester or approver, missing recipient classification, post-event disclosures, off-system reimbursement, unresolved items, evidence completeness, and corrections after reconciliation. A low report count may mean weak awareness, not low risk. Retain only information that has a defined legal or control purpose. Separate contact and delivery data from policy reasoning where possible. Restrict access by role, log changes, encrypt transfers, set deletion dates, and ensure vendors delete or return data. Taiwan teams should review the current Personal Data Protection Act; other markets need their applicable regime. A register does not justify collecting private dietary, health, home-address, or family data without necessity and authority. Investigations must protect evidence, confidentiality, independence, and nonretaliation. Define triage, conflicts among investigators, preservation notices, interview authority, outcome classification, discipline, remediation, and board escalation. Test whether the organization fixes root causes: confusing rules, incentives, permissions, vendor gaps, poor training, or pressure from senior leaders. Review the policy every six months and after a material enforcement development, law change, acquisition, market entry, new recipient type, new fulfillment model, significant incident, or repeated exception. Publish a version history with the change, reason, approver, effective date, affected local supplements, and required retraining.

---

Local adoption notes for the United States, Taiwan, Japan, and Korea

United States. Separate anti-bribery analysis from tax deductibility and employee taxation. Do not turn an IRS deduction or fringe-benefit rule into permission to give. For federal personnel, consult the recipient agency’s ethics rules; the U.S. Department of Justice gifts guidance illustrates how official-position and prohibited-source restrictions operate for its employees. For healthcare and regulated recipients, obtain sector advice. Preserve purpose, fair value, timing, and approvals. Taiwan. The Agency Against Corruption publishes the Public Servant Integrity and Ethics Directions, handling processes, and an ethics-event registration form. A private company should not copy public-servant figures as a universal commercial threshold. Instead, classify official and procurement relationships, verify the recipient body’s rule, document report or return actions, and minimize personal data under the current privacy law. Japan. The National Public Service Ethics Board explains restrictions involving interested parties, while the National Public Service Ethics Act includes reporting duties for specified officials and benefits. A company policy should identify interested-party relationships before value, require recipient-rule confirmation, and document meals, travel, honoraria, and exceptions. Private-sector conduct and sector codes still require separate review. Korea. The Anti-Corruption and Civil Rights Commission administers the Improper Solicitation and Graft Act and conflict-of-interest framework. Because covered persons, exceptions, categories, and value rules can change, the policy should link to a current approved local matrix rather than hard-code a global amount. Record the recipient’s public or educational status, relationship, purpose, value, frequency, and legal review. These notes organize questions; they are not legal opinions. Where multiple regimes apply, choose the stricter documented route until qualified owners decide otherwise.

---

A practical decision tree

Use this sequence for every offer:

1. Is there improper intent, concealment, a quid pro quo, a false record, cash-like value, or an illegal or prohibited item? If yes, stop, reject, and escalate.
2. Is the recipient a public official, healthcare participant, procurement decision-maker, auditor, candidate, charity connected to a decision, or family member of one? If yes, block by default and require Compliance and Legal review.
3. Is a tender, contract, renewal, license, inspection, audit, dispute, hiring decision, or other material decision active or imminent? If yes, defer or prohibit unless a narrow written exception exists.
4. Is the purpose legitimate, transparent, necessary, proportionate, infrequent, and permitted by the recipient’s rule? If no or unknown, do not proceed.
5. Does aggregate value and frequency remain within the configured local route? If no, obtain enhanced approval; splitting is prohibited.
6. Are data, budget, tax, product, delivery, and evidence controls approved? If no, hold the event.
7. After execution, can Finance and Compliance trace approval to actual value and final disposition? If no, keep the event open and reconcile. The model intentionally returns “review required” when facts are incomplete. Speed comes from pre-approved programs with clear boundaries, not from guessing.

---

Put policy before fulfillment—and keep the evidence

A useful gifts and hospitality policy does more than publish a number. It names the relationships that change risk, blocks situations that no amount can cure, assigns decision rights, gives employees a safe refusal and escalation path, and creates a register that proves what was offered, decided, delivered, returned, and reconciled. Start with the absolute prohibitions, localize the routing matrix, test difficult scenarios, and review real event data twice a year. Once Legal, Tax, Compliance, Procurement, Privacy, and Finance have approved the rules, Giftpack can serve as an execution layer for controlled catalogs, approvals, recipient choice, fulfillment, and reporting. Giftpack does not replace the organization’s legal, tax, payroll, privacy, procurement, or employer decisions; it helps carry approved decisions through a consistent operational path with evidence.