Prequalification exists to answer a narrower question than most procurement teams treat it as: not "should we ever work with this supplier," but "is this supplier capable and eligible for this specific category or project, right now." Conflating that with onboarding — or letting a strong score in one area quietly offset a hard failure in another — is where prequalification programs tend to lose their teeth. This guide covers what a UAE prequalification process should actually assess, and how to score it without letting the wrong things cancel each other out.
What Is Supplier Prequalification?
Prequalification evaluates whether a supplier has the legal, technical, financial, quality, safety and operational capability to compete for or perform a defined category of work. Done well, it reduces the bidder pool to suppliers who meet minimum requirements before commercial evaluation even starts — which saves everyone from evaluating price proposals from suppliers who were never going to clear the bar anyway. The criteria need to be relevant to the actual category, documented, and applied consistently, or the process opens itself up to being arbitrary or effectively discriminatory.
Supplier Prequalification vs Vendor Onboarding
Prequalification answers: is this supplier capable and eligible for this category or project? Onboarding answers a different question: can this specific legal entity be approved, contracted, created in the vendor master, and paid? A supplier can be fully prequalified for one category and not another, and onboarding still needs to independently verify entity, ownership, tax, bank and approval data regardless of how strong the prequalification score was. Don't let a good prequalification score bypass mandatory onboarding controls — see our full UAE vendor onboarding checklist for what that second step actually requires.
What Should a Supplier Prequalification Questionnaire Include?
- Company identity, legal status, licensed activities, ownership, organization and operating locations.
- Relevant experience, references, technical personnel, equipment, capacity and proposed subcontracting.
- Financial strength, insurance, litigation exposure and business-continuity capability.
- Quality, HSE, labour, ethics, cybersecurity/privacy and ESG modules, added according to category risk rather than applied uniformly.
- Evidence prompts tied to each answer, a declaration/attestation, scoring weights, and defined knockout criteria.
Company Experience and Technical Capability Assessment
Ask for comparable projects with actual value, dates, scope, client references and completion evidence — not a generic project list padded with logos. Verify the qualifications, licences and experience of the key personnel actually proposed, and look for dependency on a small number of individuals who could leave the project mid-delivery. Assess equipment ownership or lease arrangements, maintenance history, production capacity, geographic coverage and surge capability, and evaluate how much of the delivery is subcontracted versus in-house so you know who's actually doing the work. Score relevance and recency of evidence — years in business alone tells you very little about current capability.
Financial Stability Assessment
Financial capability deserves its own depth of review, particularly for critical or high-value suppliers — audited statements, cash-flow indicators, liquidity, and customer concentration all matter, and requiring full audited accounts from every micro-supplier is usually disproportionate. We cover this in full in our financial stability assessment guide, including how to read liquidity ratios and interpret warning signs without over-relying on any single metric.
Quality Management Assessment
Review the supplier's quality policy, responsibilities, process controls, and inspection or test plans and acceptance criteria. Assess how non-conformance, corrective action, complaints, warranty, recall and traceability are actually handled — process documents that have never been tested against a real defect don't tell you much. ISO 9001 can support this assessment, but it's not a universal legal requirement in the UAE and doesn't replace project-specific quality evidence — verify the certificate's accredited issuer, legal entity, site and scope rather than treating the badge itself as proof.
HSE Prequalification
Apply this to contractors, field-service providers, logistics, manufacturing and any supplier whose work creates material health, safety or environmental exposure. Review HSE management, competence, risk assessments, permits, incident history, emergency arrangements and subcontractor controls, and request normalized performance data — raw incident counts without exposure context are close to meaningless. Set project-specific minimums with clear escalation for fatalities, serious incidents or enforcement history. This deserves its own dedicated treatment, which we cover fully in our HSE vendor assessment checklist.
Insurance and Regulatory Compliance
Determine required policies from the actual work involved — public liability, professional indemnity, employer or workers' cover, product liability, cyber, or marine/vehicle insurance as relevant. Verify insurer, policyholder, period, limits, territory, exclusions, deductibles, and whether subcontractors are actually covered under the same policy or need their own. Confirm sector, professional, municipality, civil-defence or product approvals applicable to the real scope of work, and keep monitoring insurance certificates through to contract completion rather than checking once at the start.
Labour and Worker-Welfare Assessment
Review work permits, lawful employment, Wage Protection System controls, working hours, wages, accommodation, transport, insurance and grievance channels. Examine recruitment fees, passport retention, forced or child-labour prevention, discrimination, and how these controls extend to subcontracted labour. For relevant UAE private-sector suppliers, request evidence matched to MoHRE's own resolutions and circulars, noting that free-zone or special regimes may fall under different authorities. For high-risk labour-intensive vendors, an interview or site visit reveals more than a policy document ever will.
ESG and Sustainability Assessment
Focus on what's actually material to the category — energy, emissions, water, waste, labour, community and governance — rather than running every supplier through the same long questionnaire regardless of relevance. ESG assessment isn't universally mandatory for UAE suppliers; it becomes relevant through listed-company reporting obligations, financing conditions, customer commitments, tender rules, or internal policy. We go deeper into this, including the UAE's national ICV program specifically, in our ESG, ICV and sustainability assessment guide.
How to Score and Categorize Suppliers
Keep eligibility knockouts separate from weighted scoring — a missing legal licence should never be offset by a high ESG or quality score elsewhere on the form. Weight criteria according to category risk, and score the evidence itself on quality, recency and relevance, not just its presence. Use defined categories such as Approved, Approved with Conditions, Development Required and Not Approved, each with a stated permitted-work scope and validity period, and require reviewer comments and moderation so one lenient or one overly strict reviewer doesn't skew outcomes. Recalibrate the model periodically using actual performance outcomes — a scoring model that's never been checked against how those suppliers actually performed is really just an assumption wearing a spreadsheet.
Automating Supplier Prequalification With AI
Vendoreye dynamically assembles questionnaires based on category, location, spend and risk, so a low-risk office supplier and a critical contractor aren't answering the same generic form. Evidence gets extracted and mapped directly to the relevant questions, with missing, expired or contradictory support flagged automatically for a reviewer rather than discovered during an audit months later. A preliminary score and rationale get generated against your published rubric — knockout decisions and exceptions stay with authorized reviewers, not the model — which makes it possible to compare suppliers consistently and build remediation plans and renewal triggers from the same data. As with any AI-assisted assessment, we'd recommend testing outputs for document errors, bias, unsupported conclusions and prompt manipulation before relying on them for consequential decisions — see our guide to building a vendor scorecard that actually predicts risk for the scoring principles behind this.